[krbdev.mit.edu #8286] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Wed Dec 2 14:58:12 EST 2015


Fix compatibility with pre-1.11 iprop dump files

Ticket #7223 added new policy fields and a new dump format version to
marshal them, but did not add a new iprop dump format version.  As a
result, slave KDCs running 1.11 or later cannot receive full resyncs
from master KDCs running 1.10 or earlier.  (Reported by John
Devitofranceschi.)

Retroactively add support for pre-1.11 policy entries by making
process_r1_11_policy() read the first ten fields, check whether the
next whitespace character is a newline, and then read the rest if it
is not.

(back ported from commit 3c9ab5220bcc3f57641f6f4b6942b17aadb6613d)

https://github.com/krb5/krb5/commit/6f1b25097969b4685263639a5214d440ce233793
Author: Greg Hudson <ghudson at mit.edu>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 6f1b25097969b4685263639a5214d440ce233793
Branch: krb5-1.13
 src/kadmin/dbutil/dump.c |   58 +++++++++++++++++++++++++++++++---------------
 src/tests/t_dump.py      |   12 +++++++--
 2 files changed, 48 insertions(+), 22 deletions(-)



More information about the krb5-bugs mailing list