[19691] in Kerberos_V5_Development
Re: principal aliases?
daemon@ATHENA.MIT.EDU (Chris Hecker)
Tue Nov 21 19:56:57 2017
MIME-Version: 1.0
In-Reply-To: <20171122005303.GV82825@kduck.kaduk.org>
From: Chris Hecker <checker@d6.com>
Date: Tue, 21 Nov 2017 16:56:31 -0800
Message-ID: <CAOdMLc0PiZjT67EdCX+X4LMg67awG=hygjJJt7fkg1GCMWxTdQ@mail.gmail.com>
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
No, I meant, how does the KDC actually query for them since it doesn't
appear to be in the code anywhere I can find? I haven't set it up to test
yet, but I'm trying to see how it could possibly work when it's not in the
ldap queries...hopefully I'm missing something.
Chris
On Tue, Nov 21, 2017 at 4:53 PM, Benjamin Kaduk <kaduk@mit.edu> wrote:
> On Tue, Nov 21, 2017 at 04:43:58PM -0800, Chris Hecker wrote:
> > Oh, really? That's cool, I couldn't find krbPrincipalAliases (case
> > insensitive) in the entire 1.15.2 source code except for the schema and
> > ldif files...how does that work? I don't mind creating them myself, no
> > problem.
>
> The only documentation I know of is at the end of
> http://web.mit.edu/kerberos/krb5-latest/doc/admin/conf_ldap.html .
> There's probably other references in the list archives, though it's
> unclear exactly how helpful they would be.
>
> -Ben
>
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
