| From: | ghudson@mit.edu |
| Subject: | git commit |
Qualify short hostnames when not using DNS
When DNS forward canonicalization is turned off or fails, qualify
single-component hostnames with the first DNS search domain. Add the
qualify_shortname relation to override this suffix.
For one of the tests we need to disable qualification, which is
accomplished with an empty value. Adjust k5test.py to correctly emit
empty values when writing profiles.
https://github.com/krb5/krb5/commit/996353767fe8afa7f67a3b5b465e4d70e18bad7c
Author: Greg Hudson <ghudson@mit.edu>
Commit: 996353767fe8afa7f67a3b5b465e4d70e18bad7c
Branch: master
doc/admin/conf_files/krb5_conf.rst | 9 +++++++
src/include/k5-int.h | 1 +
src/lib/krb5/os/dnsglue.c | 23 +++++++++++++++++++
src/lib/krb5/os/os-proto.h | 2 +
src/lib/krb5/os/sn2princ.c | 43 +++++++++++++++++++++++++++++++++++-
src/tests/gssapi/t_ccselect.py | 5 ++-
src/tests/t_sn2princ.py | 12 ++++++---
src/util/k5test.py | 34 +++++++++++++++-------------
8 files changed, 106 insertions(+), 23 deletions(-)