[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

[Launchpad Bug Tracker]

This bug was fixed in the package krb5 - 1.9.1+dfsg-1ubuntu2.1

---------------
krb5 (1.9.1+dfsg-1ubuntu2.1) oneiric-proposed; urgency=low

  * src/lib/krb5/krb/get_creds.c: cherry pick an upstream fix to allow
    clients to work against older versions of KDCs that don't support the
    "canonicalize" option.  LP: #874130.
 -- Steve Langasek <steve.langasek at ubuntu.com>   Tue, 18 Oct 2011 18:40:10 -0700

** Changed in: krb5 (Ubuntu Oneiric)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/874130

Title:
  Canonicalize fallback only works for different realm (MITKRB RT #6917)

Status in “krb5” package in Ubuntu:
  Fix Released
Status in “krb5” source package in Oneiric:
  Fix Released
Status in “krb5” source package in Precise:
  Fix Released
Status in “krb5” package in Debian:
  Fix Released

Bug description:
  SRU justification:
   krb5 1.9.1 breaks interoperability with older KDCs.  If you have a Kerberos realm with one of these older KDCs that does not implement the "canonicalize" option, oneiric's will be unusable as a Kerberos client for this realm.

  See RedHat bugzilla:
  https://bugzilla.redhat.com/show_bug.cgi?id=713518.

  Quoting:
  Certain versions of the KDC software (included for example
  in Red Hat Enterprise Linux 2.1 and 3) reject requests,
  which include KDC options the software does not recognize,
  and do not support the "canonicalize" option. When a client
  was configured to use one of these versions of the KDC
  software, the client failed to obtain credentials for
  authentication to other services. This interoperability
  regression was introduced in the update to Red Hat
  Enterprise Linux 6.1. With this update, an upstream patch
  has been provided to fix this bug.

  I have applied the patch provided on this bugzilla page, and this
  fixed the problem.

  ProblemType: Bug
  DistroRelease: Ubuntu 11.10
  Package: libkrb5-3 1.9.1+dfsg-1ubuntu1
  ProcVersionSignature: Ubuntu 3.0.0-12.20-generic-pae 3.0.4
  Uname: Linux 3.0.0-12-generic-pae i686
  NonfreeKernelModules: nvidia
  ApportVersion: 1.23-0ubuntu3
  Architecture: i386
  Date: Fri Oct 14 15:56:20 2011
  InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
  SourcePackage: krb5
  UpgradeStatus: Upgraded to oneiric on 2011-10-13 (0 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/874130/+subscriptions