On Tue, 30 Jul 2019, J. Bruce Fields wrote: > On Tue, Jul 30, 2019 at 05:54:28PM -0400, J. Bruce Fields wrote: > > How does it fail when principals are longer? Does it error out, or > > treat two principals as equal if they agree in the first 1024 bytes? > > I guess it's being compared against a string passed from gss-proxy? We > could also check for limits there. I'm using cr_principal (servicetype@hostname) since it's set by both gssproxy and rpc.svcgssd. cr_raw_principal (servicetype/hostname@REALM) is only set by gssproxy. -Scott > > --b.
