[Bug 571572] Re: krb5 prefers the reverse pointer no matter what for locating service tickets.
Tom Yu
tlyu at mit.edu
Fri Jun 22 17:04:40 UTC 2012
Our fix in #6922 appears to itself have a bug; we believe that
http://krbdev.mit.edu/rt/Ticket/Display.html?id=7124 resolves it. If you
need a back port, http://krbdev.mit.edu/rt/Ticket/Display.html?id=7164
is for krb5-1.9.x, and
http://krbdev.mit.edu/rt/Ticket/Display.html?id=7184 is for krb5-1.8.x.
(given that the initial report was against 1.8.1)
** Bug watch added: krbdev.mit.edu/rt/ #7124
http://krbdev.mit.edu/rt/Ticket/Display.html?id=7124
** Bug watch added: krbdev.mit.edu/rt/ #7164
http://krbdev.mit.edu/rt/Ticket/Display.html?id=7164
** Bug watch added: krbdev.mit.edu/rt/ #7184
http://krbdev.mit.edu/rt/Ticket/Display.html?id=7184
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/571572
Title:
krb5 prefers the reverse pointer no matter what for locating service
tickets.
Status in “krb5” package in Ubuntu:
Confirmed
Bug description:
I'm trying to upgrade workstations to lucid an fails to access our
kerberos enabled websites. It reveals that the krb5 implementation in
lucid now tries to resolve the "reverse dns" and aquire a tikket for
<service>/<reverse dns> instead of <service>/<what the user typed in
the first place>.
The latter behavior is what the MS environment does and is what Ubuntu
has done (i think) until Lucid. A diff of the sourcecode from hardy
revealse that we now hint the getaddrinfo with AI_CANONNAME which it
didnt before.
Applying below patch enables the old behaviour.
--- krb5-1.8.1+dfsg/src/lib/krb5/os/sn2princ.c.orig 2010-04-29 09:04:11.401567914 +0200
+++ krb5-1.8.1+dfsg/src/lib/krb5/os/sn2princ.c 2010-04-29 09:04:21.762191834 +0200
@@ -112,7 +112,7 @@
memset(&hints, 0, sizeof(hints));
hints.ai_family = AF_INET;
- hints.ai_flags = AI_CANONNAME;
+// hints.ai_flags = AI_CANONNAME;
try_getaddrinfo_again:
err = getaddrinfo(hostname, 0, &hints, &ai);
if (err) {
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/571572/+subscriptions
More information about the foundations-bugs
mailing list