Re: choosing principal names

5 okt 2011 kl. 17:41 skrev Booker Bense:

> //////@FOO.REALM

Its not just a string, its something more

its a sequence of strings

PrincipalName ::= SEQUENCE {
	name-type[0]		NAME-TYPE,
	name-string[1]		SEQUENCE OF GeneralString
}

each name string can contain any character that is a valid GeneralString (think about it as ascii, its more complicated)

The delimiter character between these strings are /

The parser and unparser handle quoting of these, so these strings are not the same.

foo\/bar 	  { "foo/bar" }
foo/bar     { "foo", "bar" }

But you are correct that ///// is a valid principal.

I think there should be very little kerberos programmers, there should be more gss programmers.

Love