Preliminary discussion: DB alias entries
Greg Hudson
ghudson at MIT.EDU
Thu Mar 12 16:05:29 EDT 2009
On Thu, 2009-03-05 at 13:44 +1100, Luke Howard wrote:
> Which reminds me, the following usage of
> strcaescmp() in krb5_ldap_get_principal() is somewhat dubious:
Since that loop is iterating over a list of values returned by a
case-sensitive match (the concern is that the principal name might
contain a wildcard), I think this can just be changed to strcmp.
> /* a wild-card in a principal name can return a list
> of kerberos principals.
> * Make sure that the correct principal is returned.
> * NOTE: a principalname k* in ldap server will
> return all the principals starting with a k
> */
> for (i=0; values[i] != NULL; ++i) {
> if (strcasecmp(values[i], user) == 0) {
> *nentries = 1;
> break;
> }
> }
More information about the krbdev
mailing list