multiple users directories depending on UPN

Cantor, Scott cantor.2 at osu.edu
Thu May 8 11:51:02 EDT 2014


On 5/8/14, 11:34 AM, "Douglas E Engert" <deengert at gmail.com> wrote:
>
>If the UPN is an actual Kerberos Principal name for the realm
>university2.org the JAAS Kerberos login could be used as it will look up
>the KDCs for the realm. Since university.org is AD, the JAAS Kerberos
>login should also work.

Yes, good point. I was assuming LDAP from the OP, but one should use
Kerberos anyway when it's available (LDAP is not an authentication
protocol), and that does solve the problem nicely.

-- Scott




More information about the users mailing list