Lines with "=" in krb5.conf

[Alexandr Nedvedicky]

Hello Max,

let's take it off-line. I assume your kerberos  is running on Solaris, right?
if it is the case, then we should take it off-list.

Send me a direct email to company address.

thanks and
regard
ssasha


On Tue, Jan 15, 2019 at 10:12:47PM +0800, Weijun Wang wrote:
> Hi All,
> 
> We (Java SE at Oracle) received a bug report that Java cannot deal with krb5.conf containing the following lines:
> 
>          [realms] 
>               ATHENA.MIT.EDU = { 
>                   auth_to_local = { 
>                       RULE:[2:$1](johndoe)s/^.*$/guest/ 
>                       RULE:[2:$1;$2](^.*;admin$)s/;admin$// 
>                       RULE:[2:$2](^.*;root)s/^.*$/root/ 
>                       DEFAULT 
>                       } 
>                   }
> 
> Is this legal? I tried it with the latest MIT krb5 and saw a "krb5kdc: Improper format of Kerberos configuration file while initializing krb5" error.
> 
> Or does any other krb5 vendor support this format?
> 
> Thanks,
> Max
> 
> 
> _______________________________________________
> krbdev mailing list             krbdev at mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev