Fixed issues found when testing the auth.policy mechanism_info changes
for the Krb5 and the Pwd mechanisms using a linux client.
This commit is contained in:
@@ -184,7 +184,7 @@ The following is an example auth.policy file:
|
||||
<auth_source>
|
||||
<realm>CorpTree</realm>
|
||||
<mechanism>Krb5Authenticate</mechanism>
|
||||
<mechanism_info>SVC_PRINCIPAL=host/tokenserver.company.novell.com@KRB_REALM</mechanism_info>
|
||||
<mechanism_info>SVC_PRINCIPAL=host/tokenserver.company.novell.com</mechanism_info>
|
||||
</auth_source>
|
||||
<auth_source>
|
||||
<realm>CorpTree</realm>
|
||||
@@ -211,10 +211,10 @@ Note the following about the sample auth.policy file:
|
||||
configuration requirements of the specified mechanism.
|
||||
|
||||
- The name of the Krb5 Authentication mechanism is "Krb5Authenticate". This mechanism
|
||||
defaults the service principal name to host/hostname@KERBEROS_REALM. You can use a
|
||||
different service principal name by setting the SVC_PRINCIPAL setting equal to it
|
||||
under the mechanism_info key. Notice that mechanism info settings for this mechanism
|
||||
are separated using a semicolon and no-white space is allowed.
|
||||
defaults the service principal name to host/hostname. You can use a different
|
||||
service principal name by setting the SVC_PRINCIPAL setting equal to it under the
|
||||
mechanism_info key. Notice that mechanism info settings for this mechanism are
|
||||
separated using a semicolon and no-white space is allowed.
|
||||
|
||||
- The name of the username/password authentication mechanism is "PwdAuthenticate" and
|
||||
it does not require any information to be included under the mechanism_info key. You
|
||||
|
||||
Reference in New Issue
Block a user