Ticket History #6017: KDC virtual address support

# Mon Jul 07 16:01:41 2008 lxs (Alexandra Ellwood) - Ticket created

Subject:

KDC virtual address support

Download JV-5473970_loopback.patch
text/plain 1.4KiB

=== Kerberos/KerberosFramework/Kerberos5/Sources/lib/krb5/os/localaddr.c
==================================================================
--- Kerberos/KerberosFramework/Kerberos5/Sources/lib/krb5/os/localaddr.c (revision 559)
+++ Kerberos/KerberosFramework/Kerberos5/Sources/lib/krb5/os/localaddr.c (local)
@@ -415,6 +415,23 @@

#ifdef HAVE_IFADDRS_H

+static int
+is_loopback_address(struct sockaddr *sa)
+{
+ switch (sa->sa_family) {
+ case AF_INET: {
+ struct sockaddr_in *s4 = (struct sockaddr_in *)sa;
+ return s4->sin_addr.s_addr == htonl(INADDR_LOOPBACK);
+ }
+ case AF_INET6: {
+ struct sockaddr_in6 *s6 = (struct sockaddr_in6 *)sa;
+ return IN6_IS_ADDR_LOOPBACK(&s6->sin6_addr);
+ }
+ default:
+ return 0;
+ }
+}
+
int
foreach_localaddr (/*@null@*/ void *data,
int (*pass1fn) (/*@null@*/ void *, struct sockaddr *) /*@*/,
@@ -436,7 +453,7 @@
#endif
if ((ifp->ifa_flags & IFF_UP) == 0)
continue;
- if (ifp->ifa_flags & IFF_LOOPBACK) {
+ if (is_loopback_address(ifp->ifa_addr)) {
/* Pretend it's not up, so the second pass will skip
it. */
ifp->ifa_flags &= ~IFF_UP;
@@ -459,7 +476,7 @@
for (ifp2 = ifp_head; ifp2 && ifp2 != ifp; ifp2 = ifp2->ifa_next) {
if ((ifp2->ifa_flags & IFF_UP) == 0)
continue;
- if (ifp2->ifa_flags & IFF_LOOPBACK)
+ if (is_loopback_address(ifp2->ifa_addr))
continue;
if (addr_eq (ifp->ifa_addr, ifp2->ifa_addr)) {
match = 1;

# Fri Jul 11 20:55:26 2008 raeburn (Ken Raeburn) - Status changed from 'new' to 'resolved'

# Fri Jul 11 20:55:26 2008 raeburn (Ken Raeburn) - Correspondence added

From:	raeburn@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 393B

Use all local addresses except loopback addresses, even if a non-loopback
address appears on a loopback interface. This might happen if that's how
your VPN code makes your local address visible.

Use a variant of Apple's patch, extended to handle the other variations of
local address determination.
Commit By: raeburn

Revision: 20513
Changed Files:
U trunk/src/lib/krb5/os/localaddr.c

# Fri Jan 30 23:08:19 2009 tlyu (Taylor Yu) - Version_Fixed 1.7 added