question about princ type assignment in krb5_ldap_get_principal()

[Luke Howard]

>I think this is too rigid.  What if someone has a non-krb host object
>entry for foo.bar.com and wants to mix in host/foo.bar.com service princ
>attributes?  What if I have more than one user principal I want to
>associate with a posixAccount user object?

For the latter, try namedObject, which we are using in RFC2307bis:

http://www.ietf.org/internet-drafts/draft-furuseth-ldap-untypedobject-02.txt

-- Luke

--