RT/krbdev.mit.edu: Ticket #6831 kadmin should use krb5int_locate

RT/krbdev.mit.edu: Ticket #6831 kadmin should use krb5int_locate_server, honor SRV records

Signed in as guest.
[Logout]

[Home]

[Search]

[Configuration]

[Display]

[History]

[Basics]

[Dates]

[People]

[Links]

[Jumbo]

The Basics

Id
6831

Status
open

Worked
0 min

Priority
0/0

Queue
krb5

Keyword Selections

Component
Version_reported
Version_Fixed
Target_Version
Tags	enhancement

Relationships

Depends on:

Depended on by:

Parents:

Children:

Refers to:

Referred to by:

Dates

Created:	Thu Dec 2 19:40:28 2010
Starts:	Not set
Started:	Not set
Last Contact:	Not set
Due:	Not set
Updated:	Thu Dec 2 19:40:28 2010 by ghudson

People

Owner
Nobody
Requestors
ghudson@mit.edu
Cc

AdminCc

More about Greg Hudson

Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:

438: login.c uses wrong criteria to set KRB_ENVIRON (new)
575: SRVTAB and ANY keytab types (open)
785: srvtab resolution function is different from file one (new)
576: krb524d should prefer requesting address (new)
6200: Eliminate use of "unsafe" functions (open)
6641: Typed-in master passwords should use enctypes in K/M entry (new)
6782: Master KDC lookup can use SRV lookups despite profile KDC configuration (new)
6803: Config variable for default ccache directory (open)
6831: kadmin should use krb5int_locate_server, honor SRV records (open)
7004: get_creds should restore authdata for non-referral fallback (new)
7024: PAC resigning should support buffer resizing (open)
7044: gss_init_sec_context misbehaves on mismatched credentials (new)
7045: SPNEGO can't display mechanism errors (new)
7062: PKINIT pa_pk_as_req_draft9 encoding issues (open)
7071: PKINIT trusted_ca encoding issues (open)
7083: SPNEGO doesn't implement gss_inquire_cred_by_mech (open)
7090: krb5_gss_get_name_attribute minor cleanup issue (open)
7108: Move build system to top level (new)
7171: Multiple GSSAPI krb5 mechanism variants cause repeated operations (new)
7191: KDC should use encrypted-timestamp key for reply key (new)
7232: Confusing error message for key version mismatch (new)
7434: KDC always offers encrypted timestamp or challenge (open)
7526: "Invalid argument" error for nonexistent KDC hostname (new)
7549: KDC name type return issues (new)
7555: Fix is_referral flag in KDC TGS code (open)

History

Display mode: [Brief headers] [Full headers]

Thu Dec 2 19:40:28 2010

ghudson - Ticket created

Subject: kadmin should use krb5int_locate_server, honor SRV records

Currently libkadm5 uses its own address resolution code in client_init.c
(and also alt_prof.c), and will not honor KDC location plugins or use SRV
records.  It should use krb5int_locate_server, which already has support
for looking up the admin server (used by krb5_change_password).

Download (untitled) 287b