[krbdev.mit.edu #8973] git commit

Greg Hudson via RT rt at krbdev.mit.edu
Fri Jan 8 12:53:22 EST 2021


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8973 >


Revert dns_canonicalize_hostname default to true

Field testing of dns_canonicalize_hostname=fallback (ticket 8911)
revealed more disruptive edge cases than anticipated.  Many were fixed
by ticket 8930, but host-based GSS initiator names were recently
discovered to not work, and one other edge case could not be resolved
without a change to external code.

Restore the default to true for now.  Set the value to fallback in the
test suite, to continue testing the desired configuration and to avoid
restoring tests/resolve.

(cherry picked from commit 15f8c4fd7d62d07ea2759a7b6d684c000430559e)

https://github.com/krb5/krb5/commit/a38ffbd2498d35baa07658df62b25c7da220d8f1
Author: Greg Hudson <ghudson at mit.edu>
Commit: a38ffbd2498d35baa07658df62b25c7da220d8f1
Branch: krb5-1.19
 doc/admin/conf_files/krb5_conf.rst       |    2 +-
 doc/admin/princ_dns.rst                  |   26 +++++++++++++-------------
 src/kadmin/testing/proto/krb5.conf.proto |    1 +
 src/lib/krb5/krb/init_ctx.c              |    2 +-
 src/tests/dejagnu/config/default.exp     |    1 +
 src/util/k5test.py                       |    1 +
 6 files changed, 18 insertions(+), 15 deletions(-)



More information about the krb5-bugs mailing list