Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 83505 invoked from network); 15 Nov 2005 10:22:12 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 15 Nov 2005 10:22:12 -0000 Received: (qmail 17203 invoked by uid 500); 15 Nov 2005 10:22:01 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 17152 invoked by uid 500); 15 Nov 2005 10:22:00 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 17140 invoked by uid 99); 15 Nov 2005 10:22:00 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 15 Nov 2005 02:22:00 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of enriquer9@gmail.com designates 64.233.162.193 as permitted sender) Received: from [64.233.162.193] (HELO zproxy.gmail.com) (64.233.162.193) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 15 Nov 2005 02:21:51 -0800 Received: by zproxy.gmail.com with SMTP id z31so1126005nzd for ; Tue, 15 Nov 2005 02:21:38 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:reply-to:organization:user-agent:x-accept-language:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding:from; b=EwJoJD6QxZpr+KGZXMKzui3bo2+sKHWZJ2s7rap/BHmiu/QjAYS5VqG0hUitFy0yzso+DD7dTY5xqYdDWql+j4FvL7Lows91Bsqa6Fw6w5zJxMoeJtYMy4ZG3awl3ta3fqUaUgDmPQEtO1PuBA49feYgEnZdsy7lFROHwpr48lo= Received: by 10.64.208.4 with SMTP id f4mr6524476qbg; Tue, 15 Nov 2005 02:21:38 -0800 (PST) Received: from ?192.168.0.2? ( [66.30.206.209]) by mx.gmail.com with ESMTP id e13sm3398693qbe.2005.11.15.02.21.38; Tue, 15 Nov 2005 02:21:38 -0800 (PST) Message-ID: <4379B6AD.8090408@apache.org> Date: Tue, 15 Nov 2005 05:21:33 -0500 Reply-To: erodriguez@apache.org Organization: Apache Software Foundation User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Apache Directory Developers List Subject: Re: [kerberos] SamSubsystem does not initialize userContext and userBaseRdn anymore. References: <4379657A.9050703@bellsouth.net> In-Reply-To: <4379657A.9050703@bellsouth.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit From: Enrique Rodriguez X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Alex Karasulu wrote: > Enrique, > > Looks like with the refactorings the userContext and userBaseRdn don't > get set anymore. Either that or they were being set external. Do you > remember if the KDC actually set these values before? I doubt any refactoring touched this. Likely they were set externally, especially since we don't have any SamVerifier implementations at the ASF. The primary implementation is the OATH HOTP verifier. One thing to note, starting with 0.9.3 Kerberos (and DNS and Changepw) we support catalogs for multi-realm and multi-zone lookups. The SAM subsystem, by virtue of being initialized with a ctx, needs to get updated. Enrique