[comp.protocols.kerberos] How do you map Kerberos names into account names?

hilary@SNLL-ARPAGW.LLNL.GOV (Hilary Jones) (07/21/90)

Due to our fine sense of planning, and a few other problems as well, users
have been assigned different names according to which computer they are
running on.  Consequently we can't define a Kerberos name that will satisfy
everybody.  Does anyone have any advice on how to map Kerberos names into
account names on VMS and Unix systems?  I don't want to register people
under two names -- that would be too easy!  Besides, it defeats one of
the main reasons for having Kerberos in the first place.

abraham@hpindda.HP.COM (Abraham Lui) (07/26/90)

I don't understand... Isn't the three part name field of kerberos designed
just for that purpose? For example:

            Joe.machine1.company
            Joe.machine2.company

Abraham