Skip Menu |
 

Date: Fri, 28 Sep 2012 14:21:38 -0500
Subject: Some apps use hostname:port hostbased svc princs
From: Nico Williams <nico@cryptonector.com>
To: krb5-bugs@mit.edu
Some apps, such as MSFT SQL Server, use service principal names that
look like host-based, but with a :port in the hostname component.
To: rt@krbdev.MIT.EDU
Subject: Re: [krbdev.mit.edu #7389] Some apps use hostname:port hostbased svc princs
From: Tom Yu <tlyu@MIT.EDU>
Date: Fri, 28 Sep 2012 15:59:18 -0400
RT-Send-Cc:
"Nico Williams via RT" <rt-comment@krbdev.mit.edu> writes:

Show quoted text
> Some apps, such as MSFT SQL Server, use service principal names that
> look like host-based, but with a :port in the hostname component.

I think you meant to mention that they trigger KRB5_ERR_NUMERIC_REALM
in krb5_get_host_realm() and such, because they look like IPv6
addresses.
Date: Fri, 28 Sep 2012 15:53:32 -0500
Subject: Re: [krbdev.mit.edu #7389] Some apps use hostname:port hostbased svc princs
From: Nico Williams <nico@cryptonector.com>
To: rt-comment@krbdev.mit.edu, rt@krbdev.mit.edu
RT-Send-Cc:
On Fri, Sep 28, 2012 at 2:59 PM, Tom Yu via RT
<rt-comment@krbdev.mit.edu> wrote:
Show quoted text
> "Nico Williams via RT" <rt-comment@krbdev.mit.edu> writes:
>
>> Some apps, such as MSFT SQL Server, use service principal names that
>> look like host-based, but with a :port in the hostname component.
>
> I think you meant to mention that they trigger KRB5_ERR_NUMERIC_REALM
> in krb5_get_host_realm() and such, because they look like IPv6
> addresses.

I'd meant to add that, yes.
Date: Fri, 28 Sep 2012 15:53:32 -0500
Subject: Re: [krbdev.mit.edu #7389] Some apps use hostname:port hostbased svc princs
From: Nico Williams <nico@cryptonector.com>
To: rt-comment@krbdev.mit.edu, rt@krbdev.mit.edu
RT-Send-Cc:
On Fri, Sep 28, 2012 at 2:59 PM, Tom Yu via RT
<rt-comment@krbdev.mit.edu> wrote:
Show quoted text
> "Nico Williams via RT" <rt-comment@krbdev.mit.edu> writes:
>
>> Some apps, such as MSFT SQL Server, use service principal names that
>> look like host-based, but with a :port in the hostname component.
>
> I think you meant to mention that they trigger KRB5_ERR_NUMERIC_REALM
> in krb5_get_host_realm() and such, because they look like IPv6
> addresses.

I'd meant to add that, yes.