Received-SPF: pass (mit.edu: domain of qiang.xu@fujixerox.com designates 210.149.48.20 as permitted sender) receiver=mit.edu; client_ip=210.149.48.20; envelope-from=qiang.xu@fujixerox.com; 
From: "Xu, Qiang (FXSGSC)" <Qiang.Xu@fujixerox.com>
To: "krb5-bugs@mit.edu" <krb5-bugs@mit.edu>
Date: Sat, 12 Sep 2009 17:23:30 +0800
Subject: kinit not working if kdc is configured with numerical IPv6 address
Thread-Topic: kinit not working if kdc is configured with numerical IPv6 address
Thread-Index: Acozi4GimdDy6++LRkm8XL29lsYkHQ==
Message-ID: <D8C9BC7FFCF8154FB7141EB8DB609C172F0C105ACE@SGPAPHQ-EXSCC01.dc01.fujixerox.net>
Accept-Language: en-US
Content-Language: en-US
Acceptlanguage: en-US
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: list
Sender: krb5-bugs-incoming-bounces@PCH.mit.edu
Errors-To: krb5-bugs-incoming-bounces@PCH.mit.edu
Content-Length: 1049

Hi, all: 

I am writing to report a bug in 1.7 release. 

In /etc/krb5.conf, if kdc is configured with numerical IPv6 address, Kerberos client will not be able to locate this kdc, and kinit will fail.

Here is an example: 
=============================================
/* The content of /etc/krb5.conf with IPv6 address */ 
[realms]  
XCIPV6.COM = {
  kdc = [3ffe:2000:0:1::100]:88
  default_domain = xcipv6.com
 }

/* Kerberos authentication result */
qxu@durian(pts/3):/etc[112]$ kinit XCTEST100@XCIPV6.COM
kinit(v5): Cannot resolve network address for KDC in realm XCIPV6.COM while getting initial credentials 
=============================================
In my eyes, if numerical IPv4 address is supported for kdc entry in /etc/krb5.conf, so should be for numerical IPv6 address.

Investigation shows the defect is in the function "krb5_locate_srv_conf_1()" in the file "krb5-1.7/src/lib/krb5/os/locate_kdc.c", and a fix has been made out. Anyone would like to review?

P.S. How to send the fix to you guys? Email Attachment?

Thanks,
Xu Qiang