[27778] in Kerberos

home help back first fref pref prev next nref lref last post

Re: @ character in username

daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue May 15 15:04:49 2007

From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <0A5DA8B2-95AC-47BB-BDE7-8B3C5C7C05A9@stanford.edu> (Booker
	C. Bense's message of "Tue, 15 May 2007 10:21:12 -0700")
Date: Tue, 15 May 2007 12:04:28 -0700
Message-ID: <877ir9rjr7.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Booker C Bense <bbense@stanford.edu> writes:

> Kerberos code has changed a lot since 1993, but I suspect there are
> still bugs lurking in dealing with these kinds of things. If there is
> anything you can do to avoid using these kinds of principals I would
> highly recommend doing so.

Hm, we're likely to start deploying users of this type in a separate realm
for our guest authentication project.  Does anyone have more recent
experience specifically with the K5 code?  It looked to me from reading
the code that it should work fine provided that the @ was always escaped
whenever it was entered in text form.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post