[28436] in Kerberos
Re: SSO from Windows to Solaris using Kerberos: A How-To
daemon@ATHENA.MIT.EDU (Will Fiveash)
Wed Sep 19 15:49:11 2007
Date: Wed, 19 Sep 2007 14:32:24 -0500
From: Will Fiveash <William.Fiveash@sun.com>
To: "Douglas E. Engert" <deengert@anl.gov>
Message-ID: <20070919193224.GB19897@sun.com>
Mail-Followup-To: "Douglas E. Engert" <deengert@anl.gov>,
Edward Irvine <eirvine@tpg.com.au>, kerberos@mit.edu
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <46F14687.60501@anl.gov>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Wed, Sep 19, 2007 at 10:55:51AM -0500, Douglas E. Engert wrote:
>
>
> Will Fiveash wrote:
> > On Sun, Sep 02, 2007 at 07:21:52PM +1000, Edward Irvine wrote:
> >> Hi Folks,
> >>
> >> I eventually gave up trying to coax the default sshd on Solaris 10 to
> >> play nice with GSSAPI - the show-stopper was that it failed with
> >> usernames > 8 characters.
> >
> > I use Solaris 10 ssh/sshd doing GSS-API auth via the Kerberos GSS mech
> > all the time. What you may be running into is that Solaris has a
> > limitation that Unix usernames be no more than 8 characters (see man
> > passwd.4). This is not a limitation of Solaris sshd.
> >
>
> Me too.
>
> We have many users that have names > 8. None of them login at a console
> bit I have a test account with an 11 character user name. I even tried
> it with dtlogin, and it works.
>
> Are you sure that is a restriction?
> Is it just an out-dated man page?
> Is this a restriction of the local /etc/passwrd file?
It's a restriction of /etc/passwd which is why I made the man passwd.4
reference. So depending on the /etc/pam.conf config this could have
been the problem for the originator of this thread.
> The 11 char test account was in NIS, and is now in LDAP.
I'm don't know the specifics of those other account authorities but I
can believe they don't have an 8 char limit like /etc/passwd. I'm also
sure that limitation exists in Solaris for backwards compat/stability
reasons.
--
Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
