Lines with "=" in krb5.conf

[Weijun Wang]

> On Jan 15, 2019, at 10:53 PM, Alexandr Nedvedicky <alexandr.nedvedicky at oracle.com> wrote:
> 
> Hello Max,
> 
> let's take it off-line. I assume your kerberos  is running on Solaris, right?

No. According to the bug report at https://bugs.openjdk.java.net/browse/JDK-8216173, platform is Linux.

Thanks,
Max

> if it is the case, then we should take it off-list.
> 
> Send me a direct email to company address.
> 
> thanks and
> regard
> ssasha
> 
> 
> On Tue, Jan 15, 2019 at 10:12:47PM +0800, Weijun Wang wrote:
>> Hi All,
>> 
>> We (Java SE at Oracle) received a bug report that Java cannot deal with krb5.conf containing the following lines:
>> 
>>         [realms] 
>>              ATHENA.MIT.EDU = { 
>>                  auth_to_local = { 
>>                      RULE:[2:$1](johndoe)s/^.*$/guest/ 
>>                      RULE:[2:$1;$2](^.*;admin$)s/;admin$// 
>>                      RULE:[2:$2](^.*;root)s/^.*$/root/ 
>>                      DEFAULT 
>>                      } 
>>                  }
>> 
>> Is this legal? I tried it with the latest MIT krb5 and saw a "krb5kdc: Improper format of Kerberos configuration file while initializing krb5" error.
>> 
>> Or does any other krb5 vendor support this format?
>> 
>> Thanks,
>> Max
>> 
>> 
>> _______________________________________________
>> krbdev mailing list             krbdev at mit.edu
>> https://mailman.mit.edu/mailman/listinfo/krbdev