[438] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Principals do not compare

daemon@ATHENA.MIT.EDU (Dennis Glatting)
Tue Mar 8 15:25:23 1994

Date: Tue, 8 Mar 94 09:00:35 -0800
From: Dennis Glatting <war04!dennisg@ocsg.com>
To: krb5-bugs@MIT.EDU
Cc: k-dev@ocsg.com
Reply-To: dpg@ocsg.com


I believe I have discovered a bug in Beta-3.

In beta-3 the function krb5_sname_to_principal() has been changed.   
In beta-2 it accepted a boolean 'conicalize' which, if set,  
krb5_sname_to_principal() would conicalize the host portion of the  
principal.  In beta-3 the boolean has been changed to an integer  
'type'.  There are two valid values for 'type': KRB5_NT_UNKNOWN and  
KRB5_NT_SRV_HST.  At the end of krb5_sname_to_principal() the  
principal's type is assigned the value of 'type':
	krb5_princ_type(*ret_princ) = type;

I discovered that the function krb5_principal_compare() does not  
include principal types in the comparison.  Shouldn't it?


-dpg


home help back first fref pref prev next nref lref last post