regression due to referral realm

Mark Phalan Mark.Phalan at Sun.COM
Wed Feb 11 08:35:20 EST 2009


On Wed, 2009-02-11 at 08:19 -0500, Sam Hartman wrote:
> >>>>> "Mark" == Mark Phalan <Mark.Phalan at Sun.COM> writes:
> 
>     Mark> On Tue, 2009-02-10 at 17:35 -0500, Sam Hartman wrote:
>     >> >>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at sun.com>
>     >> writes:
>     >> 
>     Nicolas> On Tue, Feb 10, 2009 at 03:16:30PM -0500, Sam Hartman
>     Nicolas> wrote:
>     >> >> I have to agree with Tom here.
>     >> 
>     Nicolas> Meaning what, specifically?  That you think MIT should
>     Nicolas> not accept a patch that does anything other than replace
>     Nicolas> the null realm name with the default realm name?
>     >>  That MIT should assume that if you have a keytab you have a
>     >> default realm name.
>     >> 
>     >> I think that the proposed patch may be fine.  I certainly am
>     >> not objecting to it.
> 
> 
>     Mark> I've posted the patch here for people to look at:
> 
> Perhaps someone (Will?) could commit?

I've only tested the above code with Solaris Kerberos. I'll test it with
the latest MIT trunk and clean up the patch if necessary. I'll talk to
Will about getting it committed.

> 
>     Mark> http://cr.opensolaris.org/~mbp/referral_kt.patch
> 
>     Mark> I could modify it so that it would look for an entry with
>     Mark> the default realm name before falling-back to looking for an
>     Mark> entry with any realm if thats what MIT would like?
> 
> I'm not asking for that.  I would not object to it.

Thanks.

-M




More information about the krbdev mailing list