[11155] in Kerberos-V5-bugs
[krbdev.mit.edu #6562] kinit not working if kdc is configured with
daemon@ATHENA.MIT.EDU (Xu@krbdev.MIT.EDU, Qiang (FXSGSC) )
Mon Sep 14 13:22:37 2009
X-Barracuda-Envelope-From: nobody@krbdev.mit.edu
Mail-Followup-To: rt@krbdev.mit.edu
mail-copies-to: never
From: Xu@krbdev.MIT.EDU, Qiang (FXSGSC) " via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6562@krbdev.mit.edu>
Message-ID: <rt-6562-31696.17.5774024619202@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6562'":;"'AdminCc of krbdev.mit.edu Ticket #6562'":;@MIT.EDU
Date: Sat, 12 Sep 2009 20:45:34 +0000 (UTC)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Hi, all:
I am writing to report a bug in 1.7 release.
In /etc/krb5.conf, if kdc is configured with numerical IPv6 address, Kerberos client will not be able to locate this kdc, and kinit will fail.
Here is an example:
=============================================
/* The content of /etc/krb5.conf with IPv6 address */
[realms]
XCIPV6.COM = {
kdc = [3ffe:2000:0:1::100]:88
default_domain = xcipv6.com
}
/* Kerberos authentication result */
qxu@durian(pts/3):/etc[112]$ kinit XCTEST100@XCIPV6.COM
kinit(v5): Cannot resolve network address for KDC in realm XCIPV6.COM while getting initial credentials
=============================================
In my eyes, if numerical IPv4 address is supported for kdc entry in /etc/krb5.conf, so should be for numerical IPv6 address.
Investigation shows the defect is in the function "krb5_locate_srv_conf_1()" in the file "krb5-1.7/src/lib/krb5/os/locate_kdc.c", and a fix has been made out. Anyone would like to review?
P.S. How to send the fix to you guys? Email Attachment?
Thanks,
Xu Qiang
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
