On Tue, Jul 30, 2019 at 05:54:28PM -0400, J. Bruce Fields wrote: > How does it fail when principals are longer? Does it error out, or > treat two principals as equal if they agree in the first 1024 bytes? I guess it's being compared against a string passed from gss-proxy? We could also check for limits there. --b.