SSH using Kerberos in 2 AD domains
Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: SSH using Kerberos in 2 AD domains
The text of this message seems to have been eaten by the mailing list software (perhaps it was sent as an attachment?); I have it from the moderation queue. For historical reasons, auth_to_local rules are read from the default realm, not the realm of the principal being authorized. So you need to