"gd" == Garrett D'Amore <[EMAIL PROTECTED]> writes:
gd> Kerberos assumes a period separates a domain(cell) from a
gd> principal(account). Don't use them.
no, an `at' sign--@--separates the name and instance from the cell
(the name and cell/realm together with a instance (possibly null)
forms a principal).
gd> When I ran into this problem in our cell 2 years ago, I renamed
gd> all the bad accounts to "-admin" instead of ".admin". Fortunately,
gd> there were only a small number (5 or so) of them at the time.
periods work fine at separating normal principals, e.g., foo@cell from
admin principals, e.g., foo.admin@cell---both for afs and for
kerberos.
michael
