[27806] in Kerberos
RE: WHy is this common syntax failing?
daemon@ATHENA.MIT.EDU (Owen Carter)
Mon May 21 11:46:48 2007
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Mon, 21 May 2007 17:45:52 +0200
Message-ID: <CC63530A87EC114093FA76A2BCDD94B30181401F@mira-mail.mirabeau.nl>
In-Reply-To: <701864A3-5305-4650-8AE3-3512C9449743@mit.edu>
From: "Owen Carter" <ocarter@mirabeau.nl>
To: "Ken Raeburn" <raeburn@mit.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Thank you Ken!
That makes a LOT more sense.. After I sent the mail I had worked out
that a single (standalone) rule worked.. But I didn't make the final
leap to realise I could then have multiple rules in the same [realms]
block.
That's solved my immediate problem, many, many thanks :-)
Met vreiendelijk groet; Owen.
-----Original Message-----
From: Ken Raeburn [mailto:raeburn@MIT.EDU]
Sent: maandag 21 mei 2007 16:49
To: Owen Carter
Cc: kerberos@MIT.EDU
Subject: Re: WHy is this common syntax failing?
On May 21, 2007, at 10:41, Owen Carter wrote:
> [realms]
> MIRABEAU.NL = {
> kdc = SERV1.mirabeau.nl
> admin_server = SERV1.mirabeau.nl
> auth_to_local = {
> RULE:[2:$1](johndoe)s/^.*$/guest/
> RULE:[2:$1;$2](^.*;admin$)s/;admin$//
> RULE:[2:$2](^.*;root)s/^.*$/root/
> DEFAULT
> }
> }
>
> When I did that, Kerberos stops working.
The documentation is wrong. You need to use something like:
[realms]
MIRABEAU.NL = {
auth_to_local = RULE:blahblahblah
auth_to_local = RULE:stuffheretoo
auth_to_local = DEFAULT
}
> (as a footnote; the error message could be much, much more
> specific.. I mean, it doesn't even give a line number of where the
> error is found in the file, let alone a true reason WHY it believes
> the format is invalid.)
Yes, that would be a good improvement too....
Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
