[Bug 1095757] Re: Please update krb5 to new upstream release >=1.10.2

[Sam Hartman]

FYI, the git repository has been reorganized  now that upstream has
moved to git.

See experimental branch of
git://git.debian.org/git/pkg-k5-afs/debian-krb5-2013.git

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/1095757

Title:
  Please update krb5 to new upstream release >=1.10.2

Status in “krb5” package in Ubuntu:
  Triaged
Status in “krb5” package in Debian:
  Fix Committed

Bug description:
  There is a bug within eglibc [1] and [2] which breaks kerberos
  authentication functionality for ssh-servers behind NAT gateways as
  glibc does a rDNS cannonicalization of hostnames even if you specify
  "rdns=false" in krb5.conf.

  There is a workaround implemented in MIT krb5 v. 1.10.2. [3].
  The current maintenance release is 1.10.3.

  As the bug is still not fixed in eglibc, krb5 should be updated to at
  least 1.10.3 to fix this issue.

  [1] https://bugzilla.redhat.com/show_bug.cgi?id=714823
  [2] https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1057526
  [3] http://krbdev.mit.edu/rt/Ticket/Display.html?id=7124

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1095757/+subscriptions