[28433] in Kerberos
Re: SSO from Windows to Solaris using Kerberos: A How-To
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Wed Sep 19 11:56:11 2007
Message-ID: <46F14687.60501@anl.gov>
Date: Wed, 19 Sep 2007 10:55:51 -0500
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: Edward Irvine <eirvine@tpg.com.au>, kerberos@mit.edu
In-Reply-To: <20070919003444.GA19897@sun.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Will Fiveash wrote:
> On Sun, Sep 02, 2007 at 07:21:52PM +1000, Edward Irvine wrote:
>> Hi Folks,
>>
>> I eventually gave up trying to coax the default sshd on Solaris 10 to
>> play nice with GSSAPI - the show-stopper was that it failed with
>> usernames > 8 characters.
>
> I use Solaris 10 ssh/sshd doing GSS-API auth via the Kerberos GSS mech
> all the time. What you may be running into is that Solaris has a
> limitation that Unix usernames be no more than 8 characters (see man
> passwd.4). This is not a limitation of Solaris sshd.
>
Me too.
We have many users that have names > 8. None of them login at a console
bit I have a test account with an 11 character user name. I even tried
it with dtlogin, and it works.
Are you sure that is a restriction?
Is it just an out-dated man page?
Is this a restriction of the local /etc/passwrd file?
The 11 char test account was in NIS, and is now in LDAP.
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
