Re: aname_to_locaname vs gssapi svc/host.domain.org@REALM
Nico Williams <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <CAK3OfOjFMCzfpLyKu9gyJdP7YF8e-cBGO9f43OogDfJ_5=YEYg@mail.gmail.com> |
On Wed, Oct 12, 2011 at 4:17 PM, Harry Coin <[email protected]> wrote: > I think that about sums it up. What's the answer? As far as *Heimdal* is concerned there's room for making krb5_aname2lname() more configurable. And as far as GSS and raw krb5 APIs, perhaps we need to make aname2lname-type functions parametrizable with respect to the application's mapping requirements. Ditto kuserok-type functions. As for NFS, well, presumably we're talking about CITI's NFS stack, and you should probably go talk to them :/ Nico --