First time I'm trying out the _passwd_ keyword (in v3, not 2.x), having trouble keeping the username as just the kerberos principal.

Let's say my krb5 realm is K.PSU.EDU. Either of the following two config entries

   passwd kerberos ([...@]+)   [email protected]   K.PSU.EDU
   passwd kerberos ([...@]+)   $1   K.PSU.EDU   [using the default realm
   in krb5.conf]

will work if someone enters their account name as "foo" in the _login_ input field. (USER="foo", REALM="K.PSU.EDU")

I'd like to add another config line so that if someone entered "[email protected]" into the login field, it would be equivalent to the above keywords, setting the User to "foo". My attempts:

   passwd kerberos ([...@]+)@K.PSU.EDU   [email protected]  K.PSU.EDU
   passwd kerberos ([...@]+)@(K\.PSU\.EDU)   [email protected]   K.PSU.EDU

etc., are all the same. Whatever string is entered into the login field, becomes the USER: "[email protected]" (for that input). The realm is set correctly, and the kerberos ticket is the desired one. Even

   passwd kerberos ([...@]+)@bar   [email protected]   K.PSU.EDU

gets the user set to "f...@bar" (for that input). Seems to be acting like the mysql option (using the "email address"), where I'd prefer that it just used the principal (and /instance if set?).

Is this the intended behavior?

-Phil
------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensign option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to