Skip Menu |
 

From: ghudson@mit.edu
Subject: git commit

Add krb5_expand_hostname() API

Add a new public libkrb5 function expand_hostname(). It follows the
same contract as the Heimdal function, except that the caller should
use krb5_free_string() instead of krb5_xfree() to free the result.

As a small side effect, we no longer remove trailing dots from the
hostname in krb5_sname_to_principal() when invoked with type
KRB5_NT_UNKNOWN. Adjust a test case in t_sn2princ.py accordingly.

https://github.com/krb5/krb5/commit/faf9ad33e9e6b7ffaac02fcd249e60e2224f5ec7
Author: Greg Hudson <ghudson@mit.edu>
Commit: faf9ad33e9e6b7ffaac02fcd249e60e2224f5ec7
Branch: master
doc/appdev/refs/api/index.rst | 1 +
src/include/krb5/krb5.hin | 17 +++++++++++++++++
src/lib/krb5/libkrb5.exports | 1 +
src/lib/krb5/os/sn2princ.c | 30 ++++++++++++++----------------
src/lib/krb5_32.def | 1 +
src/tests/t_sn2princ.py | 9 ++++-----
6 files changed, 38 insertions(+), 21 deletions(-)
From: ghudson@mit.edu
Subject: git commit

Use krb5_expand_hostname() when creating KDB

In kdb5_util's add_admin_princs(), use krb5_expand_hostname() instead
of custom canonicalization code to canonicalize the hostname. There
are some minor behavior differences:

* Canonicalization will no longer use AI_ADDRCONFIG.
* Canonicalization will use reverse DNS if configuration permits.
* Canonicalization will be affected by the dns_canonicalize_hostname
and rdns profile variables.
* If name lookup fails, the original hostname will be used.
* A trailing dot will be removed from the name lookup result, if
present.

https://github.com/krb5/krb5/commit/7715f51f3978abe78acc824efbb18b3f35751426
Author: Greg Hudson <ghudson@mit.edu>
Commit: 7715f51f3978abe78acc824efbb18b3f35751426
Branch: master
src/kadmin/dbutil/kadm5_create.c | 43 ++++++-------------------------------
1 files changed, 7 insertions(+), 36 deletions(-)
From: ghudson@mit.edu
Subject: git commit

Use krb5_expand_hostname() to get admin service

In libkadm5's kadm5_get_admin_service_name(), use
krb5_expand_hostname() instead of custom canonicalization code to
canonicalize the hostname. There are some minor behavior differences;
in addition to the changes listed in the previous commit, the old code
did not downcase the result of the getaddrinfo() lookup, while the new
code does.

https://github.com/krb5/krb5/commit/7b2cb7ed41e48e0fc28f106438f628f30ef86764
Author: Greg Hudson <ghudson@mit.edu>
Commit: 7b2cb7ed41e48e0fc28f106438f628f30ef86764
Branch: master
src/lib/kadm5/alt_prof.c | 22 +++++++---------------
1 files changed, 7 insertions(+), 15 deletions(-)