[27779] in Kerberos

home help back first fref pref prev next nref lref last post

Re: @ character in username

daemon@ATHENA.MIT.EDU (Markus Moeller)
Tue May 15 15:28:06 2007

To: kerberos@mit.edu
From: "Markus Moeller" <huaraz@moeller.plus.com>
Date: Tue, 15 May 2007 20:27:03 +0100
Message-ID: <f2d1iv$f2g$1@sea.gmane.org>
X-Complaints-To: usenet@sea.gmane.org
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Try to use kinit user\\@mailaddress.com.

I use a modified kinit(deals with @ and set the principal type to 
enterprise) to use email addresses stored in AD under the userprincipalname. 
You get

 ./mkinit huaraz@moeller.plus.com
Password for huaraz\@moeller.plus.com@WINDOWS2003.HOME:
markus@OpenSuse:~/mysources/kinit_email> klist -e
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: huaraz\@moeller.plus.com@WINDOWS2003.HOME

Valid starting     Expires            Service principal
05/15/07 20:21:09  05/16/07 06:21:04 
krbtgt/WINDOWS2003.HOME@WINDOWS2003.HOME
        renew until 05/16/07 20:21:09, Etype (skey, tkt): ArcFour with 
HMAC/md5, ArcFour with HMAC/md5


Regards
Markus


"Arati Desai" <artipdesai@yahoo.com> wrote in message 
news:396126.1881.qm@web61011.mail.yahoo.com...
> Hi All,
>
> My user name contains '@' character as I need to host multiple domains on 
> a single box.
> I have created a user's principal as username\@domain@REALM. First @' 
> character is escaped with a '\' while creating principal and generating a 
> ticket.
> But I am getting 'Invalid user' error when I try to login with this user 
> while the kerb5 authentication succeeds for normal users. (I am using 
> heimdal at the service's end for authentication, while the KDC is from 
> MIT.)
>
> Is '@' character supported in user name? If so, is there any special 
> precaution to be taken while using such user names?
>
> Thanks,
> Arati
>
>
>
> ____________________________________________________________________________________Get 
> the Yahoo! toolbar and be alerted to new email wherever you're surfing.
> http://new.toolbar.yahoo.com/toolbar/features/mail/index.php
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 



________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post