[19868] in Kerberos_V5_Development
Re: Lines with "=" in krb5.conf
daemon@ATHENA.MIT.EDU (Weijun Wang)
Tue Jan 15 19:44:40 2019
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
From: Weijun Wang <weijun.wang@oracle.com>
In-Reply-To: <20190115145324.GZ24472@tbd.cz.oracle.com>
Date: Wed, 16 Jan 2019 08:43:51 +0800
Message-Id: <7061C641-DEB0-4278-8B42-2064525B997B@oracle.com>
To: Alexandr Nedvedicky <alexandr.nedvedicky@oracle.com>
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
> On Jan 15, 2019, at 10:53 PM, Alexandr Nedvedicky <alexandr.nedvedicky@oracle.com> wrote:
>
> Hello Max,
>
> let's take it off-line. I assume your kerberos is running on Solaris, right?
No. According to the bug report at https://bugs.openjdk.java.net/browse/JDK-8216173, platform is Linux.
Thanks,
Max
> if it is the case, then we should take it off-list.
>
> Send me a direct email to company address.
>
> thanks and
> regard
> ssasha
>
>
> On Tue, Jan 15, 2019 at 10:12:47PM +0800, Weijun Wang wrote:
>> Hi All,
>>
>> We (Java SE at Oracle) received a bug report that Java cannot deal with krb5.conf containing the following lines:
>>
>> [realms]
>> ATHENA.MIT.EDU = {
>> auth_to_local = {
>> RULE:[2:$1](johndoe)s/^.*$/guest/
>> RULE:[2:$1;$2](^.*;admin$)s/;admin$//
>> RULE:[2:$2](^.*;root)s/^.*$/root/
>> DEFAULT
>> }
>> }
>>
>> Is this legal? I tried it with the latest MIT krb5 and saw a "krb5kdc: Improper format of Kerberos configuration file while initializing krb5" error.
>>
>> Or does any other krb5 vendor support this format?
>>
>> Thanks,
>> Max
>>
>>
>> _______________________________________________
>> krbdev mailing list krbdev@mit.edu
>> https://mailman.mit.edu/mailman/listinfo/krbdev
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
