[28948] in CVS-changelog-for-Kerberos-V5
krb5 commit: Make registry hostrealm module highest precedence
daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Wed Jun 24 17:11:55 2015
Date: Wed, 24 Jun 2015 17:11:35 -0400
From: Benjamin Kaduk <kaduk@mit.edu>
Message-Id: <201506242111.t5OLBZIk007288@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/287b8eae295a3ab496b04b327840e92c235efd1a
commit 287b8eae295a3ab496b04b327840e92c235efd1a
Author: Ben Kaduk <kaduk@mit.edu>
Date: Tue Jun 23 10:38:19 2015 -0400
Make registry hostrealm module highest precedence
Testing reveals that there are a number of machines in the wild
which retain old krb5.ini files across domain configuration changes,
and it is difficult to determine which machines are potentially
affected by incorrect stale configuration data.
To enable domain administrators to easily ensure that the correct
default realm is set, allow the registry hostrealm module to take
precedence over the profile.
Note that the registry hostrealm module can still be disabled
in the hostrealm interface configuration statment in the
[plugins] section of the profile.
ticket: 8209 (new)
subject: stale krb5.ini files still cause default realm WIN.MIT.EDU
tags: pullup
target_version: 1.13.3
src/lib/krb5/os/hostrealm.c | 8 ++++----
1 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/lib/krb5/os/hostrealm.c b/src/lib/krb5/os/hostrealm.c
index 9c84749..78d6c5d 100644
--- a/src/lib/krb5/os/hostrealm.c
+++ b/src/lib/krb5/os/hostrealm.c
@@ -75,14 +75,14 @@ get_modules(krb5_context context, krb5_plugin_initvt_fn **modules_out)
*modules_out = NULL;
/* Register built-in modules. */
- ret = k5_plugin_register(context, intf, "profile",
- hostrealm_profile_initvt);
- if (ret)
- return ret;
ret = k5_plugin_register(context, intf, "registry",
hostrealm_registry_initvt);
if (ret)
return ret;
+ ret = k5_plugin_register(context, intf, "profile",
+ hostrealm_profile_initvt);
+ if (ret)
+ return ret;
ret = k5_plugin_register(context, intf, "dns", hostrealm_dns_initvt);
if (ret)
return ret;
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
