From 53081446ed28c29840d5a2d332f046f924a95099 Mon Sep 17 00:00:00 2001 From: Kurt Zeilenga Date: Mon, 13 Oct 2003 03:18:17 +0000 Subject: [PATCH] Rework Kerberos principals (ITS#2695) --- doc/guide/admin/sasl.sdf | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/doc/guide/admin/sasl.sdf b/doc/guide/admin/sasl.sdf index 20b55a8247..76b6cec9bb 100644 --- a/doc/guide/admin/sasl.sdf +++ b/doc/guide/admin/sasl.sdf @@ -192,18 +192,17 @@ command option. For the purposes of authentication and authorization, {{slapd}}(8) associates a non-mapped authentication request DN of the form: -> uid=,cn=,cn=gssapi,cn=auth +> uid=,cn=,cn=gssapi,cn=auth -Continuing our example, a user -with the Kerberos principal {{EX:kurt@EXAMPLE.COM}} would have -the associated DN: +Continuing our example, a user with the Kerberos principal +{{EX:kurt@EXAMPLE.COM}} would have the associated DN: > uid=kurt,cn=example.com,cn=gssapi,cn=auth -and the principal {{EX:ursula@FOREIGN.REALM}} would have the +and the principal {{EX:ursula/admin@FOREIGN.REALM}} would have the associated DN: -> uid=ursula,cn=foreign.realm,cn=gssapi,cn=auth +> uid=ursula/admin,cn=foreign.realm,cn=gssapi,cn=auth H3: DIGEST-MD5 -- 2.39.5