Question about principal aliases

2017-09-04 Thread Lorenzo Marcantonio
I'm trying to make aliases work but somehow they don't. Surely I'm doing something wrong... I want to have the 'main' principal imap/server.example.com aliased as imap/imap.example.com for the obvious reason. So I did in kadmin ank -r imap/server.example.com modify --alias="imap/imap.example.com"

Re: [kitten] Checking the transited list of a kerberos ticket in a transitive cross-realm trust situation...

2017-09-04 Thread Stefan Metzmacher
Hi Martin, I don't think your comments apply to what I'm proposing. See the inline comments below. >> We should enforce a PAC always to be present, as we don't support >> trusted domains with LSA_TRUST_TYPE_MIT anyway. "We" is Samba in here. Services which don't use the PAC at all are not enforc