| From: | ghudson@mit.edu |
| Subject: | git commit |
Allow numeric addresses as service hostnames
Since krb5 1.3, krb5_get_host_realm (and therefore
krb5_sname_to_principal) has refused hostnames which appear to be
numeric addresses--with the exception of 1.6, which was ignoring
errors from clean_hostname. In specialized environments, it may be
desirable to use IP addresses in service principal names, and there's
no compelling reason for us to get in the way of that.
Move the numeric address check out of k5_clean_hostname into a new
helper function, and simply skip the domain-based mechanisms if it
returns true. Factor out the [domain_realm] search into a second new
helper function to make it easier to skip.
https://github.com/krb5/krb5/commit/0f93db1b5bd0c2aac98945b8a8f1564ede632de0
Author: Greg Hudson <ghudson@mit.edu>
Commit: 0f93db1b5bd0c2aac98945b8a8f1564ede632de0
Branch: master
src/lib/krb5/os/hst_realm.c | 113 +++++++++++++++++++++++++------------------
1 files changed, 66 insertions(+), 47 deletions(-)