From: Kurt Zeilenga Date: Mon, 13 Oct 2003 03:18:17 +0000 (+0000) Subject: Rework Kerberos principals (ITS#2695) X-Git-Tag: OPENLDAP_REL_ENG_2_1_MP~582 X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=53081446ed28c29840d5a2d332f046f924a95099;p=openldap Rework Kerberos principals (ITS#2695) --- diff --git a/doc/guide/admin/sasl.sdf b/doc/guide/admin/sasl.sdf index 20b55a8247..76b6cec9bb 100644 --- a/doc/guide/admin/sasl.sdf +++ b/doc/guide/admin/sasl.sdf @@ -192,18 +192,17 @@ command option. For the purposes of authentication and authorization, {{slapd}}(8) associates a non-mapped authentication request DN of the form: -> uid=,cn=,cn=gssapi,cn=auth +> uid=,cn=,cn=gssapi,cn=auth -Continuing our example, a user -with the Kerberos principal {{EX:kurt@EXAMPLE.COM}} would have -the associated DN: +Continuing our example, a user with the Kerberos principal +{{EX:kurt@EXAMPLE.COM}} would have the associated DN: > uid=kurt,cn=example.com,cn=gssapi,cn=auth -and the principal {{EX:ursula@FOREIGN.REALM}} would have the +and the principal {{EX:ursula/admin@FOREIGN.REALM}} would have the associated DN: -> uid=ursula,cn=foreign.realm,cn=gssapi,cn=auth +> uid=ursula/admin,cn=foreign.realm,cn=gssapi,cn=auth H3: DIGEST-MD5