Package: libkrb53
Version: 1.3.6-2
Severity: wishlist
Tags: patch
Hello,
I've been hit by a bad surprise with ssh-krb5 using libkrb53 on an
otherwise heimdal installation. Heimdal does allow for leading
whitespace before the '#' sign introducing a comment in /etc/krb5.conf,
and MIT kerberos doesn't.
So I put some whitespace into my krb5.conf. Later I installed ssh-krb5,
which use MIT heimdal libraries and failed silently to authenticate via
gssapi because of this, and it took me time and effort to understand
what was going on. The fact that the particular debug message wasn't
working properly in ssh-krb5 didn't help.
So, I propose for comment leading whitespace to be allowed with MIT
Kerberos as well as Heimdal, and attach a patch which does this.
--
Jeremie Koenig <[EMAIL PROTECTED]>
diff -ru krb5-1.3.6.old/src/util/profile/prof_parse.c
krb5-1.3.6/src/util/profile/prof_parse.c
--- krb5-1.3.6.old/src/util/profile/prof_parse.c 2003-12-16
02:02:42.000000000 +0100
+++ krb5-1.3.6/src/util/profile/prof_parse.c 2005-06-17 00:57:33.000000000
+0200
@@ -89,10 +89,10 @@
if (*line == 0)
return 0;
- if (line[0] == ';' || line[0] == '#')
- return 0;
- strip_line(line);
cp = skip_over_blanks(line);
+ if (cp[0] == ';' || cp[0] == '#')
+ return 0;
+ strip_line(cp);
ch = *cp;
if (ch == 0)
return 0;
