[24728] in Kerberos
Re: get only username from REMOTE_USER variable
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Tue Sep 27 09:05:35 2005
Message-ID: <433941F8.6060402@nyc.rr.com>
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Date: Tue, 27 Sep 2005 12:57:03 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
mnikhil@gmail.com wrote:
> Hi
>
> Firstly, My Sincere thanks to all of you for making available such a
> wonderful module available to Apache on sourceforge.
>
> My problem is nothing except that to make modifications to REMOTE_USER
> variable in the kerberos itself.
> I mean when I am visiting a kerberos enabled webpage, after succesful
> authentication the REMOTE_USER variable is being set as
> "<user>@<mydomainname>"
> I guess here the <domainname>, obviously it takes from domain_realm,
> set in the /etc/krb5.conf page.
> So, I want to make changes something that could make REMOTE_USER
> variable just the "user" and not the "<user>@<mydomainname>".
>
> Response would be much appreciated.
>
> Regards,
> Nikhil
>
You could make a change to do so but it would be unwise. What you
refer to as <mydomainname> is really <REALM-OF-USER>. Since Kerberos
supports authentication from multiple realms, it is necessary to
include the full principal name in REMOTE_USER to distinguish the
source of the authentication.
Jeffrey Altman
--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
