Only does implicit matching for first component, reported by Harry Coin
This commit is contained in:
@@ -204,8 +204,8 @@ match_local_principals(krb5_context context,
|
|||||||
*
|
*
|
||||||
* The user may have a ~/.k5login file listing principals that are
|
* The user may have a ~/.k5login file listing principals that are
|
||||||
* allowed to login as that user. If that file does not exist, all
|
* allowed to login as that user. If that file does not exist, all
|
||||||
* principals with a first component identical to the username, and a
|
* principals with a only one component that is identical to the
|
||||||
* realm considered local, are allowed access.
|
* username, and a realm considered local, are allowed access.
|
||||||
*
|
*
|
||||||
* The .k5login file must contain one principal per line, be owned by
|
* The .k5login file must contain one principal per line, be owned by
|
||||||
* user and not be writable by group or other (but must be readable by
|
* user and not be writable by group or other (but must be readable by
|
||||||
|
Reference in New Issue
Block a user