>We are currently using _hostname as principals to authenticate some
>server machines. The leading underscore is used to distinguish machines
>from people. I'd say we need at least one special character for such
>things.

While _hostname is perfectly legal (AFAIK), I would personally use
rcmd.hostname, since that's the name for host principals under Kerberos 4
and you'd be maintaining compatibility with Kerberos if you ever decide
to use Kerberos more at your site.  For example, you could support
Kerberos 4 incoming telnets (even with the kaserver).

--Ken

Reply via email to