[3518] in Kerberos

home help back first fref pref prev next nref lref last post

The Case of the Realm Name in 5.4.1

daemon@ATHENA.MIT.EDU (Doug Engert)
Thu Jul 7 14:38:54 1994

Date: Thu, 07 Jul 94 09:31:17 CDT
From: "Doug Engert" <DEEngert@anl.gov>
To: <KERBEROS@MIT.EDU>
Cc: <AUTH-PILOT@ES.NET>

Are Kerberos 5.4.1 realm names in upper case, lower case or case
insensitive?

RFC1510 section 7.1 talks about realm names, and for domain name
style names gives an example:

   domain:   host.subdomain.domain (example)

Then goes on to use E40.MIT.EDU and MIT.EDU as examples also.
Domain names are case insensitive, and are normally written as
lower case, and the RFC does not say anything about the case of
the realm name.

lib/krb5/os/hst_realm.c says:

    * If the hostname contains a domain, but no translation is
      found, * the hostname's domain is converted to upper-case
      and returned.

and this is what it does. hst_realm.c does a strcasecmp against
the krb.realms file, and returns without translation the
"trans_realm" field from that file. This implies that the realm
name in the krb.realms and everywhere else should be in upper
case.

But lib/krb5/krb/parse.c which parses a name into a principal
does not convert to upper case, as Joe Ramus pointed out in his
test with kinit.

So what should it be? Upper case? Or do all the routines which
read realm names need to convert the case internally?

           Douglas E. Engert
           Systems Programming
           Argonne National Laboratory
           9700 South Cass Avenue
           Argonne, Illinois  60439
           (708) 252-5444

           Internet: DEEngert@anl.gov

home help back first fref pref prev next nref lref last post