Bug#410314: aklog regression in behavior with Kerberos 1.6

[Russ Allbery]

Sam Hartman [EMAIL PROTECTED] writes:

 package: openafs-krb5
 Version: 1.4.2-3

 Kerberos in experimental will return null realm names for
 krb5_get_realm_of_host when no domain_realm mapping exists.  That's fine
 but aklog assumes that it knows the realm.  You actually want to try
 afs/cell@ (null realm) because if your kdc has referrals this is good.
 But if your kerberos supports this behavior and if you get a null realm
 you want to fall back to cell as realm or to first component of db
 server removed from db server as realm.

You already know this, but for anyone else reading the bug, a patch for
this will be in 1.4.3.

-- 
Russ Allbery ([EMAIL PROTECTED])   http://www.eyrie.org/~eagle/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#410314: aklog regression in behavior with Kerberos 1.6

[Sam Hartman]

package: openafs-krb5
Version: 1.4.2-3

Kerberos in experimental will return null realm names for
krb5_get_realm_of_host when no domain_realm mapping exists.  That's
fine but aklog assumes that it knows the realm.  You actually want to
try afs/cell@ (null realm) because if your kdc has referrals this is
good.  But if your kerberos supports this behavior and if you get a
null realm you want to fall back to cell as realm or to first
component of db server removed from db server as realm.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]