From 1b88a3b6c72c0d265c50cd28e0dd9a1bbbce6c9f Mon Sep 17 00:00:00 2001 From: Love Hornquist Astrand Date: Fri, 14 Oct 2011 00:33:57 +0200 Subject: [PATCH] Only does implicit matching for first component, reported by Harry Coin --- lib/krb5/kuserok.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/krb5/kuserok.c b/lib/krb5/kuserok.c index 2fe4e490a..b21ab9b3a 100644 --- a/lib/krb5/kuserok.c +++ b/lib/krb5/kuserok.c @@ -204,8 +204,8 @@ match_local_principals(krb5_context context, * * The user may have a ~/.k5login file listing principals that are * allowed to login as that user. If that file does not exist, all - * principals with a first component identical to the username, and a - * realm considered local, are allowed access. + * principals with a only one component that is identical to the + * username, and a realm considered local, are allowed access. * * The .k5login file must contain one principal per line, be owned by * user and not be writable by group or other (but must be readable by