Name parse fixes

[mech_eap.orig] / README

diff --git a/README b/README
index 7b4d867..44b6e5b 100644 (file)
--- a/README
+++ b/README
@@ -50,7 +50,7 @@ readable; they weren't in my installation.
 
 Edit $prefix/etc/raddb/users to add your test user and password:
 
-    bob@PROJECT-MOONSHOT.ORG Cleartext-Password := secret 
+    bob@PROJECT-MOONSHOT.ORG Cleartext-Password := secret
 
 Add an entry for your acceptor to $prefix/etc/raddb/clients.conf:
 
@@ -112,7 +112,8 @@ appropriately (<host> is the name of the host running the server,
 not the RADIUS server).
 
 % gss-client -port 5555 -spnego -mech "{1 3 6 1 4 1 5322 22 1 18}" \
-  -user <user> -pass <pass> <host> host@<host> "Testing GSS EAP"
+  -user <user>@<realm> -pass <pass> <host> host@<host> \
+  "Testing GSS EAP"
 % gss-server -port 5555 -export host@<host>
 
 Note: for SASL you will be prompted for a username and password.
@@ -131,3 +132,7 @@ To test fast reauthentication support, add the following to
 This will store a Kerberos ticket for a GSS-EAP authenticated user
 in a credentials cache, which can then be used for re-authentication
 to the same acceptor. You must have a valid keytab configured.
+
+You can also set a default realm in [appdefaults]; the Kerberos
+default realm is never used by mech_eap (or at least, that is the
+intention), so if unspecified you must always qualify names.