Skip Menu |

From krb5-bugs-incoming-bounces@PCH.MIT.EDU Mon Aug 20 17:02:03 2007
Received: from (PCH.MIT.EDU []) by (8.12.9) with ESMTP
id l7KL23HW025149; Mon, 20 Aug 2007 17:02:03 -0400 (EDT)
Received: from ( [])
by (8.13.6/8.12.8) with ESMTP id l7KL1wlw031447;
Mon, 20 Aug 2007 17:01:58 -0400
by (8.13.6/8.12.8) with ESMTP id l7KJNtlu019395
for <>; Mon, 20 Aug 2007 15:23:55 -0400
Received: from (M24-004-BARRACUDA-3.MIT.EDU [])
by (8.13.6/8.9.2) with ESMTP id
for <>; Mon, 20 Aug 2007 15:23:53 -0400 (EDT)
Received: from ( [])
by (Spam Firewall) with ESMTP id 34D857A5682
for <>; Mon, 20 Aug 2007 14:03:13 -0400 (EDT)
Received: from mdw by with local (Exim 4.63)
(envelope-from <>)
id 1INBX6-0002w3-Gq; Mon, 20 Aug 2007 13:59:20 -0400
Subject: bug in kadmin listprincs
X-send-pr-version: 3.99
Message-Id: <>
Date: Mon, 20 Aug 2007 13:59:20 -0400
X-Spam-Score: 0.55
X-Spam-Flag: NO
X-Scanned-By: MIMEDefang 2.42
X-Mailman-Approved-At: Mon, 20 Aug 2007 17:01:45 -0400
X-Mailman-Version: 2.1.6
Precedence: list
Sender: krb5-bugs-incoming-bounces@PCH.MIT.EDU
Errors-To: krb5-bugs-incoming-bounces@PCH.MIT.EDU

Show quoted text
>Submitter-Id: net
University of Michigan
Show quoted text
>Confidential: no
>Synopsis: listprincs *z is broken
>Severity: non-critical
>Priority: low
>Category: krb5-admin
>Class: sw-bug
>Release: 1.6.2
dell gx1p running umce linux, krb5 1.6.2+patches
System: Linux 2.4.26-generic #1 SMP Sat Jun 19 04:03:39 EDT 2004 i686 unknown unknown GNU/Linux
Architecture: i686

Show quoted text
The command
listprincs *z
causes the routine "glob_to_regexp()" in lib/kadm5/srv/svr_iters.c
to be called which converts the given glob expression into a
regular expression. If no realm is specified, then this logic
tacks on "@*", resulting in "^.*z@*$". This results in matching
z followed by 0 or more @ signs at the end of the principal name.
Unless the local realm name happens to end in z, this likely
won't match anything.
Show quoted text
construct or use a kerberos database that does not contain
a lower-case 'z' in the realm name. Add one or more principals
that contain 'z' in the principal name.
listprincs *z@*
will list those principals, but
listprincs *z
will fail to find them.
Show quoted text
Run-time workaround, for listprinc patterns that don't already specify
the realm, and do not end in *, finish out the regular expression with @*.
Compile-time fix, apply the patch in
Subject: SVN Commit

Fix from Marcus Watts for glob-to-regexp conversion bug.
Tweaked test case to exercise the bug.
Commit By: raeburn

Revision: 21285
Changed Files:
U trunk/src/lib/kadm5/srv/svr_iters.c
U trunk/src/tests/dejagnu/krb-standalone/kadmin.exp