Sam Hartman <[EMAIL PROTECTED]> writes: >>>>>> "Russ" == Russ Allbery <[EMAIL PROTECTED]> writes:
> Russ> Package: krb5-config Version: 1.17 Severity: normal > Russ> With MIT Kerberos 1.6, sometimes odd things happen if one > Russ> doesn't have a domain_realm mapping for the local realm in > Russ> places where things previously worked. We also don't want > Russ> to rely on DNS for the realm mapping if we can avoid it. > Russ> Perhaps when referrals are fully there, this won't be > Russ> needed, but in the meantime I think it makes sense to prompt > Russ> the user for a domain_realm mapping. > I really think this sounds like a bad idea. > Can we discuss things that break but that worked previously. Sure. http://bugs.debian.org/436512 is one example, although not entirely typical since it involves KDCs that are unreachable. http://bugs.debian.org/434105 is more typical. I've seen other failures like the last one in other situations that have come up on [EMAIL PROTECTED] It looks like a lot of applications simply fail after being upgraded to 1.6 if one doesn't add an explicit domain_realm mapping. -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
