Message-ID: <6F3DE283-AA87-4B8C-8C27-CC4CB39A2944@mit.edu>
From: Ken Raeburn <raeburn@MIT.EDU>
To: rt@krbdev.mit.edu
In-Reply-To: <rt-5947-27463.2.43848854270233@krbdev.mit.edu>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Subject: Re: [krbdev.mit.edu #5947] FFM.EXAMPLE.ORG -> M.EXAMPLE.ORG broken
MIME-Version: 1.0 (Apple Message framework v928.1)
Date: Wed, 16 Jul 2008 12:10:33 -0400
References: <rt-5947-27463.2.43848854270233@krbdev.mit.edu>
RT-Send-Cc: 
Content-Length: 1168

On Jul 16, 2008, at 03:47, Volker.Lendecke@SerNet.DE via RT wrote:
> Sorry to reply by EMail, I don't see a way to comment on the
> bug inside the trouble ticket system.

It used to be allowed, but we got too much spam through the web  
forms.  Unless/until we find a way around that, this is how it's going  
to stay. :(

> Thanks for looking at the bug. Are you saying that my patch
> breaks other setups?

Yes, it appears that way.

> At my customer's site it does work, also for subrealms which
> have different lengths in the subrealm part of EXAMPLE.COM.

My tests that got wrong results were (and you can check them with the  
t_walk_rtree program in lib/krb5/krb, which you'll have to build  
explicitly if you haven't used "make check"):

from A.EXAMPLE.COM to EXAMPLE.COM or vice versa (with patch, went up  
to COM and back down)

from EXAMPLE.COM to EXAMPLE.COM (should've returned a specific error,  
instead went up to COM and back down)

Tom Yu has put together some code to replace part of the walk_rtree  
string processing, perhaps his version will be clearer, as well as  
correct. :-)  I haven't had a chance to try plugging it in yet though.

Ken