Only does implicit matching for first component, reported by Harry Coin

This commit is contained in:
Love Hornquist Astrand
2011-10-14 00:33:57 +02:00
parent d6474982e5
commit 1b88a3b6c7

View File

@@ -204,8 +204,8 @@ match_local_principals(krb5_context context,
*
* The user may have a ~/.k5login file listing principals that are
* allowed to login as that user. If that file does not exist, all
* principals with a first component identical to the username, and a
* realm considered local, are allowed access.
* principals with a only one component that is identical to the
* username, and a realm considered local, are allowed access.
*
* The .k5login file must contain one principal per line, be owned by
* user and not be writable by group or other (but must be readable by