>>>>> "Edward" == Edward Irvine at home <[EMAIL PROTECTED]> writes:
Edward> Hi,
Edward> We are using the stock solaris 10 sshd daemon and a W2K3 KDC.
Edward> Everything works fine except for one of our users who has a ten
Edward> character username. The user with a long username fails to login
from
Edward> a number of clients, such as another solaris 10 computer, and a
Edward> SecureCRT terminal emulator on windows.
Edward> When we switch sshd from stock solaris to an OpenSSH version that
I've compiled and linked with MIT-Kerberos 1.5, the client can log in.
Edward> Has anyone seen anything like this? If anyone is interested I can
post output from debug sessions.
Sounds like solaris is limiting the length of usernames in
krb5_kuserok (called internally from their gssapi library). That's
fixed in MIT Kerberos 1.5.
________________________________________________
Kerberos mailing list [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
