[Bug 2063] RFE: export principal which was used for .k5login

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2063

Karl Kornel <akkornel at stanford.edu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |akkornel at stanford.edu

--- Comment #2 from Karl Kornel <akkornel at stanford.edu> ---
Created attachment 2580
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2580&action=edit
Patch from openssh-portable tree at commit e7bf3a5eda

I've also got a patch for this.  This patch was made from the current
openssh-portable tree, as of commit e7bf3a5eda.

This patch introduces a new option, GSSAPISetEnv.  By default, the
option is disabled.  If the option is enabled, then the environment
variable SSH_GSSAPI_DISPLAYNAME will be set when the user authenticates
using GSSAPI.  The environment variable is also made available to the
PAM environment, if PAM is enabled.

In my case, I went for the GSSAPI display name because I saw it was
being used in debug messages (gss-serv-krb5.c lines 104-105).  I also
saw the display name being made available in gsasl
(http://www.gnu.org/software/gsasl/manual/html_node/Properties.html,
talking about the GSASL_GSSAPI_DISPLAY_NAME property).

-- 
You are receiving this mail because:
You are watching the assignee of the bug.