Preliminary discussion: DB alias entries

Greg Hudson ghudson at MIT.EDU
Thu Mar 12 16:05:29 EDT 2009


On Thu, 2009-03-05 at 13:44 +1100, Luke Howard wrote:
> Which reminds me, the following usage of  
> strcaescmp() in krb5_ldap_get_principal() is somewhat dubious:

Since that loop is iterating over a list of values returned by a
case-sensitive match (the concern is that the principal name might
contain a wildcard), I think this can just be changed to strcmp.

>                  /* a wild-card in a principal name can return a list  
> of kerberos principals.
>                   * Make sure that the correct principal is returned.
>                   * NOTE: a principalname k* in ldap server will  
> return all the principals starting with a k
>                   */
>                  for (i=0; values[i] != NULL; ++i) {
>                      if (strcasecmp(values[i], user) == 0) {
>                          *nentries = 1;
>                          break;
>                      }
>                  }





More information about the krbdev mailing list