Subject: use of enterprise name type

From: "Kevin Coffman" <[email-masked]>
Date: Mon, 21 May 2007 14:25:45 -0400

rfc4120, section 6.2 defines a name-type of NT-ENTERPRISE with the
comment that it "may be mapped to principal name".  It continues to
state that the principal name-type SHOULD be used for users.

My interpretation of this is that if an implementation sends a name
with name-type NT-ENTERPRISE, it should conform to the form
represented by NT-PRINCIPAL.  Is that the correct interpretation?

If so, if a name of the form "[email-masked]" (with a realm
component of REALM.COM) is presented, should that map to principal
"joecool" or "[email-masked]" in the realm REALM.COM?

Thanks,
K.C.