4.23.2 Using Kerberos database

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

That's a section of <http://www.pdc.kth.se/heimdal/heimdal.html> that  
isn't filled out.

I would assume that it's intended to describe how to put the PKI cert  
name <--> Kerberos Principal mapping into the database itself instead  
of in the cert's.  That's allowed by the RFC, but perhaps not often  
done by people who *can* put them in the cert's.

Should I conclude that the code to support that mode is likely to  
have bugs, or more politely, to be incomplete?
------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu