nfs client 'nobody no matter what' clarification was Re: k5userok .c / doc mismatch

Harry Coin <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.heimdal.general
Message-ID <[email protected]>
On 10/13/2011 5:35 PM, Love Hörnquist Åstrand wrote:
> 13 okt 2011 kl. 21:23 skrev Harry Coin:
>
>> Perhaps I may be forgiven causing fuss about why princicpal XYZ/box.domain.org gets oddly mapped to 'nobody' though local account 'XYZ' exists.
> Documentation is wrong, I updated it.
>
> https://github.com/heimdal/heimdal/commit/1b88a3b6c72c0d265c50cd28e0dd9a1bbbce6c9f
>
> Love
>
>
Thanks.   Just to make sure I understand this clearly:

1: Is it the case that the example principal 
'alnumstring/[email protected]' will never be associated 
by heimdal (kuserok and friends) to any local account whatsoever, no 
matter the principal type, unless the local user is of the sort that has 
a default directory (e.g. not /nonexistent), and that directory has a 
.k5login file or k5login.d/, and that principal is among those in 
that(those) file(s)?

and second,

2: Asked to deduce a local user from a principal name as in example 1, 
heimdal will fail such requests always even if user alnumstring exists 
on the local system whose hostname is nfsclient and whose domain is 
domain.com and the default realm is DOMAIN.COM?

Harry
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.