referrals in 1.6

Mark Phalan Mark.Phalan at Sun.COM
Wed Feb 28 08:40:48 EST 2007


On Tue, 2007-02-27 at 11:29 -0500, Sam Hartman wrote:
> 
>     Mark> Yes, perhaps something like that. It seems to me to be non-intuitive for
>     Mark> the user to know that principals with an empty realm imply the use of
>     Mark> referrals. 
> 
> They don't.
> You can get other cases where the canonicalized realm is not the same as the initial realm.
> An empty realm simply implies that you start with the client principal kdc.
> 

Right. Perhaps simply removing '@' if there is no realm associated with
the princ results in a more readable output. Anyway its a relatively
minor nit.

-Mark

> --Sam




More information about the krbdev mailing list