Hello Russ,

I have tried UPN, it works the following option

kinit -E [email protected]

you see "-E     treats the principal name as an enterprise name."

How can I do the same thing in webauth ?

Thanks !
--
Yang




On Fri, Oct 12, 2012 at 9:18 PM, Russ Allbery
<[email protected]>wrote:

> YANG ChengFu <[email protected]> writes:
>
> > thanks for your information,our Kerberos REALM is EXAMPLE.ORG, but
> > userPrincipalName is [email protected] , it is possible to
> > use userPrincipalName as authentication Identity?
>
> I don't know -- it depends on the behavior of your KDC.  If Active
> Directory allows you to kinit with that as the principal name, then yes.
> I *think* you can kinit as UPN, but I'm not positive; most of my personal
> familiarity is with UNIX KDCs.
>
> --
> Russ Allbery <[email protected]>
> Technical Lead, ITS Infrastructure Delivery Group, Stanford University
>


Reply via email to