Your message dated Tue, 27 Dec 2011 07:14:42 -0500 (EST)
with message-id <[email protected]>
and subject line works as designed
has caused the Debian Bug report #646021,
regarding krb5-user: kinit ignores appdefaults section in krb5.conf
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
646021: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=646021
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: krb5-user
Version: 1.8.3+dfsg-4squeeze1
Severity: normal
Tags: upstream
kinit seems to completely ignore the appdefaults section in krb5.conf
None of the following configurations have any effect on the behavior of kinit:
--------------8<-----------------
[appdefaults]
forwardable = true
kinit = {
forwardable = true
}
EXAMPLE.REALM.EDU = {
forwardable = true
}
kinit = {
EXAMPLE.REALM.EDU = {
forwardable = true
}
}
--------------8<-----------------
Only the options under the libdefault section in krb5.conf change kinit's
behavior.
Presently there seems to be no way to make kinit get e.g. forwardable tickets
by default for only a specific realm or change its default behavior without
affecting all programs that use krb5.conf.
I advise adding caveats to kinit(1) or krb5.conf(5) while this bug persists.
-- System Information:
Debian Release: 6.0.2
APT prefers stable
APT policy: (990, 'stable'), (302, 'testing'), (300, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages krb5-user depends on:
ii krb5-config 2.2 Configuration files for Kerberos V
ii libc6 2.11.2-10 Embedded GNU C Library: Shared lib
ii libcomerr2 1.41.12-4stable1 common error description library
ii libgssapi-krb5-2 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries - k
ii libgssrpc4 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries - G
ii libk5crypto3 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries - C
ii libkadm5clnt-mit7 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries - A
ii libkeyutils1 1.4-1 Linux Key Management Utilities (li
ii libkrb5-3 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries
ii libkrb5support0 1.8.3+dfsg-4squeeze1 MIT Kerberos runtime libraries - S
ii libss2 1.41.12-4stable1 command-line interface parsing lib
krb5-user recommends no packages.
krb5-user suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
tags 646021 sid
thanks
As discussed in the bug kinit reads libdefaults.
The user never provided an explanation for why kinit is expected to read
appdefaults.
--- End Message ---
