[16598] in Kerberos-V5-bugs
[krbdev.mit.edu #8930] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Fri Aug 7 18:49:19 2020
From: "Greg Hudson via RT" <rt-comment@krbdev.mit.edu>
In-Reply-To:
Message-ID: <rt-4.4.4-110080-1596840547-1371.8930-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #8930":;
Date: Fri, 07 Aug 2020 18:49:07 -0400
MIME-Version: 1.0
Reply-To: rt-comment@krbdev.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Fri Aug 07 18:49:07 2020: Request 8930 was acted upon.
Transaction: Ticket created by ghudson@mit.edu
Queue: krb5
Subject: git commit
Owner: ghudson@mit.edu
Requestors:
Status: new
Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8930 >
Expand dns_canonicalize_host=fallback support
In krb5_sname_to_principal(), when using fallback, defer realm lookup
and any kind of hostname canonicalization until use. Add a
lightweight iterator k5_canonprinc() to yield the one or two possible
candidates for a principal. In the iterator, don't yield the same
hostname part twice.
Add fallback processing to the stepwise TGS state machine, and remove
it from krb5_get_credentials(). Add fallback processing to
k5_get_proxy_cred_from_kdc().
Add fallback processing to krb5_init_creds_set_keytab(), and use the
principal we find in the keytab as the request client principal.
Defer restart_init_creds_loop() to the first step call so that server
principal is built using the correct realm.
Add fallback processing to krb5_rd_req().
https://github.com/krb5/krb5/commit/3fcc365a6f049730b3f47168f7112c03997c5c0b
Author: Greg Hudson <ghudson@mit.edu>
Commit: 3fcc365a6f049730b3f47168f7112c03997c5c0b
Branch: master
src/include/k5-trace.h | 4 +-
src/kprop/kprop_util.c | 26 ++---
src/lib/krb5/krb/deps | 41 ++++----
src/lib/krb5/krb/get_creds.c | 151 ++++++++++++---------------
src/lib/krb5/krb/get_in_tkt.c | 7 +-
src/lib/krb5/krb/gic_keytab.c | 29 +++++-
src/lib/krb5/krb/init_creds_ctx.h | 1 +
src/lib/krb5/krb/rd_req_dec.c | 36 ++++++-
src/lib/krb5/krb/s4u_creds.c | 62 ++++++++---
src/lib/krb5/os/os-proto.h | 30 +++++
src/lib/krb5/os/sn2princ.c | 213 +++++++++++++++++++++++++-----------
src/tests/icred.c | 39 +++++--
src/tests/t_sn2princ.py | 55 +++++++---
13 files changed, 459 insertions(+), 235 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
