YANG ChengFu <[email protected]> writes: > thanks for your information,our Kerberos REALM is EXAMPLE.ORG, but > userPrincipalName is [email protected] , it is possible to > use userPrincipalName as authentication Identity?
I don't know -- it depends on the behavior of your KDC. If Active Directory allows you to kinit with that as the principal name, then yes. I *think* you can kinit as UPN, but I'm not positive; most of my personal familiarity is with UNIX KDCs. -- Russ Allbery <[email protected]> Technical Lead, ITS Infrastructure Delivery Group, Stanford University
