Look for auth_to_local in the default realm's realm section...
...rather than the authenticated principal's realm section. We do this both to maintain compatibility with MIT and because it makes more sense. We should likely also fix the auth_to_local_names as cursory inspection reveals that it has the same incompatibility.
This commit is contained in:
@@ -79,8 +79,8 @@ check_localname mapped1@${R2} 0 m1 || exit 1
|
||||
check_localname mapped2@${R2} 0 m2 || exit 1
|
||||
check_localname mapped1@${R3} 0 mapped1 || exit 1
|
||||
check_localname mapped2@${R3} 0 mapped2 || exit 1
|
||||
check_localname notmapped1@${R} 1 || exit 1
|
||||
check_localname notmapped1@${R2} 1 || exit 1
|
||||
check_localname notmapped1@${R} 0 notmapped1 || exit 1
|
||||
check_localname notmapped1@${R2} 0 notmapped1 || exit 1
|
||||
check_localname notmapped1@${R3} 0 notmapped1 || exit 1
|
||||
|
||||
echo "Checking 1-component principal names in non-default realm"
|
||||
|
Reference in New Issue
Block a user