Re: Behavioural differences in Heimdal and MIT [was: Re: API differences between Heimdal and MIT]

[Buck Huppmann <buckh@pobox.com>]

On Wed, Feb 15, 2006 at 07:38:06AM -0500, Buck Huppmann wrote:
> that's ``thinking outside the box''. actually, MIT's krb5 allows you to
> use
> 
> [realm]
>     EXAMPLE.COM = {
> 	auth_to_local = DEFAULT
> 	auth_to_local = RULE:[3:$1,$2,$3,$0](rsyncer,.*,myhostname\..*,MYREALM)s/,.*//
> 	# if you #define ANAME_DB in src/lib/krb5/os/an_to_ln.c and get
> 	# it to link
> 	auth_to_local = DB:/path/to/Berkeley-DB
>     }
> (although only in the config for the default realm and [except for
> the DEFAULT rule] applies to authenticated principals from any realm,
> which i think is broken. j)

meant to reference http://krbdev.mit.edu/rt/Ticket/Display.html?id=2023