kerby icon indicating copy to clipboard operation
kerby copied to clipboard

GSS names are not user names

Open nicowilliams opened this issue 4 years ago • 0 comments

Calling the client principal name a "username" is problematic. When I started looking at this I immediately feared there might be post-processing of the name to truncate any @REALM portions.

The API should provide access to the displayed and exported name forms for the initiator and acceptor names, and possibly a wrapper for the gss_name_t values themselves so that name attributes can be accessed.

nicowilliams avatar Feb 10 '20 17:02 nicowilliams