[krbdev.mit.edu #5947] FFM.EXAMPLE.ORG -> M.EXAMPLE.ORG broken

[Ken Raeburn via RT]

On Jul 16, 2008, at 03:47, Volker.Lendecke at SerNet.DE via RT wrote:
> Sorry to reply by EMail, I don't see a way to comment on the
> bug inside the trouble ticket system.

It used to be allowed, but we got too much spam through the web  
forms.  Unless/until we find a way around that, this is how it's going  
to stay. :(

> Thanks for looking at the bug. Are you saying that my patch
> breaks other setups?

Yes, it appears that way.

> At my customer's site it does work, also for subrealms which
> have different lengths in the subrealm part of EXAMPLE.COM.

My tests that got wrong results were (and you can check them with the  
t_walk_rtree program in lib/krb5/krb, which you'll have to build  
explicitly if you haven't used "make check"):

from A.EXAMPLE.COM to EXAMPLE.COM or vice versa (with patch, went up  
to COM and back down)

from EXAMPLE.COM to EXAMPLE.COM (should've returned a specific error,  
instead went up to COM and back down)

Tom Yu has put together some code to replace part of the walk_rtree  
string processing, perhaps his version will be clearer, as well as  
correct. :-)  I haven't had a chance to try plugging it in yet though.

Ken