[OpenAFS-devel] Kerberos v5 Principal Names containing dots in the first component

Jeffrey Altman jaltman@secure-endpoints.com
Sun, 26 Aug 2007 17:38:04 -0400


Simon Wilkinson wrote:
> This has just bitten us, too.
> 
> The discussion on this list seems to have petered out - was any
> conclusion reached offline about the best way to proceed?

No one has submitted a patch that implements what I proposed
would be acceptable.  In the meantime, if you are aware of the
risks and build your own binaries, delete the code that enforces
the restriction.

Jeffrey Altman