Search Mailing List Archives


Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

REMOTE_USER and map_username

Russ Allbery eagle at windlord.stanford.edu
Fri Oct 12 18:18:47 PDT 2012


YANG ChengFu <youngseph at gmail.com> writes:

> thanks for your information,our Kerberos REALM is EXAMPLE.ORG, but
> userPrincipalName is firstname.lastname at example.com , it is possible to
> use userPrincipalName as authentication Identity?

I don't know -- it depends on the behavior of your KDC.  If Active
Directory allows you to kinit with that as the principal name, then yes.
I *think* you can kinit as UPN, but I'm not positive; most of my personal
familiarity is with UNIX KDCs.

-- 
Russ Allbery <eagle at windlord.stanford.edu>
Technical Lead, ITS Infrastructure Delivery Group, Stanford University


More information about the webauth-info mailing list