Hm.. this won't be a good solution, as to avoid the problem I want to
avoid, it would have to be installed on every machine that runs the cosign
filter.
other suggestions?
Liam
On Thu, Feb 12, 2015 at 5:05 PM, Liam Hoekenga <li...@umich.edu> wrote:
> We have heard whispers that our users would like to be able to the realm
> when they log in to our cosign server (e.g. "usern...@example.edu"
> instead of "username")... because it's more consistent with logging into
> other services.
>
> That's well and good.. but then the username in REMOTE_USER has @REALM in
> it, and in the history of our implementation, only friend accounts have @
> in them. If we do start allowing both "username" and "
> usern...@example.edu", I'd like to present only "username" to the
> consuming systems.
>
> I found mention of a deprecated piece of mod_auth_kerb - mod_map_user (
> http://modauthkerb.cvs.sourceforge.net/viewvc/modauthkerb/mod_map_user/),
> which seems like it would do what I want, but I don't think it's running at
> the right phase to interact with cosign.
>
> Has anyone used this module, or have suggestions as to how to accomplish
> this?
>
> Liam
>
------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Cosign-discuss mailing list
Cosign-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
