[19522] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Question about aname_do_match behavior on invalid patten

daemon@ATHENA.MIT.EDU (Eric Diven)
Mon Jan 23 18:15:30 2017

MIME-Version: 1.0
From: Eric Diven <ebd2.github@gmail.com>
Date: Mon, 23 Jan 2017 18:15:19 -0500
Message-ID: <CAAWz=6CFr6CpDAQ563KZkKRRBeBKpun3q+Lrj53r3M+u7N2arA@mail.gmail.com>
To: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

I'm porting the localauth_rule code to java for the Presto database
project, and I was curious about the design decision behind
aname_do_match's behavior when a rule contains an invalid pattern.

When regcomp returns a non-zero result, aname_do_match returns
KRB5_LNAME_NOTRANS. This seems like odd behavior for what appears to be an
error in the krb5.conf file. Can somebody please explain the rationale
behind this?

The code I've written follows the behavior in Kerberos 5 1.15, but I'd like
to be sure I understand what I'm porting so I don't do something wrong.

I have searched the bug tracker and the mailing list archives, and I
haven't found any references to aname_do_match.

Thanks,

Eric

My code (in draft form) here: https://github.com/ebd2/presto/pull/3
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post