On Wed, 23 Nov 2011 14:05:36 +0100
sean finney <[email protected]> wrote:

> On Wed, Nov 23, 2011 at 07:44:04AM -0500, Jeff Layton wrote:
> > Most KDCs are case-sensitive (the notable exception being AD), but DNS
> > is case-insensitive. To prevent admins from having to put in all
> > possible case combinations of a principal, lowercase the hostname prior
> > to trying to get a principal.
> 
> you'll have to excuse my ignorance if i'm missing something, but what
> happens if the pricincpal *is* uppercase on the KDC?
> 
>       sean

It depends on whether the KDC is case-sensitive. AD is generally not,
so this should work fine there. On a non-AD KDC (e.g. MIT or Heimdal)
it will probably fail.

The idea here is to ensure that we don't have admins adding every
possible case-combination of an SPN in order to handle every possible
case-combination of a hostname.

-- 
Jeff Layton <[email protected]>
--
To unsubscribe from this list: send the line "unsubscribe linux-cifs" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to