kadm5.acl 1.2 to 1.3

Sam Hartman hartmans at MIT.EDU
Wed Feb 16 14:20:48 EST 2005

>>>>> "Tim" == Tim Colles <timc at inf.ed.ac.uk> writes:

    Tim> Hit an interesting subtle difference with the use of *N in
    Tim> the kadm5.acl file to refer to a previous wildcarded
    Tim> component when moving from MIT Kerberos version 1.2.8 to
    Tim> version 1.3.4. On the old version *1 for example would refer
    Tim> to the first wildcarded component on the same line whereas in
    Tim> the new version it appears to refer to the first wildcarded
    Tim> component in the file! This as you can imagine caused an ACL
    Tim> line to break mysteriously. It could be fixed by shifting
    Tim> that ACL line to the first line in the file or by changing *1
    Tim> to *2 (in our case) to step over an irrelevant wildcard from
    Tim> an earlier line.

This was not an intended change.  
Can you please open a bug by sending
a bug report to krb5-bugs at mit.edu?

More information about the krbdev mailing list