Skip Menu |
 

From: kaduk@MIT.EDU
Subject: git commit

Make registry hostrealm module highest precedence

Testing reveals that there are a number of machines in the wild
which retain old krb5.ini files across domain configuration changes,
and it is difficult to determine which machines are potentially
affected by incorrect stale configuration data.

To enable domain administrators to easily ensure that the correct
default realm is set, allow the registry hostrealm module to take
precedence over the profile.

Note that the registry hostrealm module can still be disabled
in the hostrealm interface configuration statment in the
[plugins] section of the profile.

https://github.com/krb5/krb5/commit/287b8eae295a3ab496b04b327840e92c235efd1a
Author: Ben Kaduk <kaduk@mit.edu>
Commit: 287b8eae295a3ab496b04b327840e92c235efd1a
Branch: master
src/lib/krb5/os/hostrealm.c | 8 ++++----
1 files changed, 4 insertions(+), 4 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Make registry hostrealm module highest precedence

Testing reveals that there are a number of machines in the wild
which retain old krb5.ini files across domain configuration changes,
and it is difficult to determine which machines are potentially
affected by incorrect stale configuration data.

To enable domain administrators to easily ensure that the correct
default realm is set, allow the registry hostrealm module to take
precedence over the profile.

Note that the registry hostrealm module can still be disabled
in the hostrealm interface configuration statment in the
[plugins] section of the profile.

(cherry picked from commit 287b8eae295a3ab496b04b327840e92c235efd1a)

https://github.com/krb5/krb5/commit/9f4c5ddf62717c3be2499214d5fc61bcb6e8d7ff
Author: Ben Kaduk <kaduk@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: 9f4c5ddf62717c3be2499214d5fc61bcb6e8d7ff
Branch: krb5-1.13
src/lib/krb5/os/hostrealm.c | 8 ++++----
1 files changed, 4 insertions(+), 4 deletions(-)