[krbdev.mit.edu #7603] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Apr 11 22:16:28 EDT 2013


Allow numeric addresses as service hostnames

Since krb5 1.3, krb5_get_host_realm (and therefore
krb5_sname_to_principal) has refused hostnames which appear to be
numeric addresses--with the exception of 1.6, which was ignoring
errors from clean_hostname.  In specialized environments, it may be
desirable to use IP addresses in service principal names, and there's
no compelling reason for us to get in the way of that.

Move the numeric address check out of k5_clean_hostname into a new
helper function, and simply skip the domain-based mechanisms if it
returns true.  Factor out the [domain_realm] search into a second new
helper function to make it easier to skip.

https://github.com/krb5/krb5/commit/0f93db1b5bd0c2aac98945b8a8f1564ede632de0
Author: Greg Hudson <ghudson at mit.edu>
Commit: 0f93db1b5bd0c2aac98945b8a8f1564ede632de0
Branch: master
 src/lib/krb5/os/hst_realm.c |  113 +++++++++++++++++++++++++------------------
 1 files changed, 66 insertions(+), 47 deletions(-)



More information about the krb5-bugs mailing list