Ticket History #7127: Can't change password without default

# Tue May 08 13:13:20 2012 "Kevin Wasserman" <krwasserman@hotmail.com> - Ticket created

From:	"Kevin Wasserman" <krwasserman@hotmail.com>
To:	<krb5-bugs@mit.edu>
Subject:	Can't change password without default_realm
Date:	Tue, 8 May 2012 11:34:11 -0400

Download (untitled) / with headers
text/plain 723B

Download (untitled) / with headers
text/html 1.3KiB

>kpasswd krwasserman@SUCHDAMAGE.ORG

kpasswd: Configuration file does not specify default realm getting initial ticke

t

>

The following code from build_in_tkt_name() in get_in_tkt.c fails:

if (in_tkt_service) {

/* this is ugly, because so are the data structures involved. I'm

in the library, so I'm going to manipulate the data structures

directly, otherwise, it will be worse. */

if ((ret = krb5_parse_name(context, in_tkt_service, server)))

-> return ret;

Since itâ��s about to stomp the server realm with the client realm,

it seems gratuitous to require that there is a default realm to

construct the server principal.

Kevin Wasserman

Painless Security, LLC

# Tue May 08 13:17:22 2012 ghudson@mit.edu (Greg Hudson) - Comments added

Download (untitled) / with headers
text/plain 265B

Also mentioned by Stef Walter on krbdev:

http://mailman.mit.edu/pipermail/krbdev/2012-April/010790.html

I'm evaluating which solution comes out to be more elegant (adding an
ignore-realm flag to krb5_parse_name_flags or preprocessing the
in_tkt_service string).

# Thu May 10 13:34:03 2012 ghudson@mit.edu (Greg Hudson) - Given to ghudson@mit.edu (Greg Hudson)

# Thu May 10 13:34:03 2012 ghudson@mit.edu (Greg Hudson) - Target_Version 1.10.2 added

# Thu May 10 13:34:03 2012 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'

# Thu May 10 13:34:03 2012 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Thu May 10 13:34:03 2012 ghudson@mit.edu (Greg Hudson) - Correspondence added

From:	ghudson@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 361B

Make password change work without default realm

This fix is not very general or clean, but is suitable for backporting
because it is minimally invasive. A more comprehensive fix will
follow.

https://github.com/krb5/krb5/commit/b9ff95a51ef11742abc9687a70b6d8324eda6803
Commit By: ghudson
Revision: 25860
Changed Files:
U trunk/src/lib/krb5/krb/get_in_tkt.c

# Tue May 15 18:27:14 2012 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'

# Tue May 15 18:27:15 2012 tlyu (Taylor Yu) - Version_Fixed 1.10.2 added

# Tue May 15 18:27:15 2012 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 556B

Make password change work without default realm

This fix is not very general or clean, but is suitable for backporting
because it is minimally invasive. A more comprehensive fix will
follow.

(cherry picked from commit b9ff95a51ef11742abc9687a70b6d8324eda6803)

https://github.com/krb5/krb5/commit/3d4f8431d5d34e0ffaaeee0bfe55c552de3ebdfe
Author: Greg Hudson <ghudson@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: 3d4f8431d5d34e0ffaaeee0bfe55c552de3ebdfe
src/lib/krb5/krb/get_in_tkt.c | 5 +++++
1 files changed, 5 insertions(+), 0 deletions(-)

# Wed Dec 16 18:02:58 2015 tlyu (Taylor Yu) - CustomField pullup deleted

Ticket History #7127: Can't change password without default_realm