Hi All Well it did work. My token must have expired or something.
Cool, thanks alot Russ. Your the man. Is there any plan to make this default in future version 1.6 or something, when kerberos 4 is all gone ? /Mikkel On Wed, 2007-08-01 at 12:42 +0200, Mikkel Kruse Johnsen wrote: > Hi Russ > > Just patched with attacted patch. But I don't work. > > Is that the only place. To me it seems that the name is spilt and it > checks if the first char is '.' (a dot). It should not spilt the name. > > /Mikkel > > On Wed, 2007-08-01 at 03:20 -0700, Russ Allbery wrote: > > > Mikkel Kruse Johnsen <[EMAIL PROTECTED]> writes: > > > > > All of this is checked. If I do the same with a user not containing a > > > dot "[EMAIL PROTECTED]" then it works. So it is because there is a dot in > > > my > > > name. > > > > You're being bitten by the code that tries to convert Kerberos v5 > > principal names to the Kerberos v4 convention used by AFS. > > > > /* > > * If the first part of the name_string contains a dot, punt since > > * then we can't see the diffrence between the kerberos 5 > > * principals foo.root and foo/root later in the fileserver. > > */ > > if (strchr(decr_part.cname.name_string.val[0], '.') != NULL) > > goto bad_ticket; > > > > (rxkad/ticket5.c). I'm afraid you might be out of luck, at least with the > > current version of AFS, unless you patch this code and remove this check > > in your file servers. > > > > Mikkel Kruse Johnsen > Linet > Ørholmgade 6 st tv > 2200 København N > > Tlf: +45 2128 7793 > email: [EMAIL PROTECTED] > www: http://www.linet.dk > !DSPAM:46b0644f39889962115043! Mikkel Kruse Johnsen Linet Ørholmgade 6 st tv 2200 København N Tlf: +45 2128 7793 email: [EMAIL PROTECTED] www: http://www.linet.dk
