[19523] in Kerberos_V5_Development
Re: Question about aname_do_match behavior on invalid patten
daemon@ATHENA.MIT.EDU (Eric Diven)
Tue Jan 24 11:20:25 2017
MIME-Version: 1.0
In-Reply-To: <CAAWz=6CFr6CpDAQ563KZkKRRBeBKpun3q+Lrj53r3M+u7N2arA@mail.gmail.com>
From: Eric Diven <ebd2.github@gmail.com>
Date: Tue, 24 Jan 2017 11:19:21 -0500
Message-ID: <CAAWz=6B5Q-tUptuHTvnkh9TBGsX0G49jkjL6_Nxdf_n3vcvWzw@mail.gmail.com>
To: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Incidentally, this is consistent with aname_replacer(); do_replacement()
returns KRB5_LNAME_NOTRANS when regcomp() returns a non-zero result as
well. I suppose I have the same question about the behavior there as well.
Thanks,
Eric
On Mon, Jan 23, 2017 at 6:15 PM, Eric Diven <ebd2.github@gmail.com> wrote:
> I'm porting the localauth_rule code to java for the Presto database
> project, and I was curious about the design decision behind
> aname_do_match's behavior when a rule contains an invalid pattern.
>
> When regcomp returns a non-zero result, aname_do_match returns
> KRB5_LNAME_NOTRANS. This seems like odd behavior for what appears to be an
> error in the krb5.conf file. Can somebody please explain the rationale
> behind this?
>
> The code I've written follows the behavior in Kerberos 5 1.15, but I'd
> like to be sure I understand what I'm porting so I don't do something wrong.
>
> I have searched the bug tracker and the mailing list archives, and I
> haven't found any references to aname_do_match.
>
> Thanks,
>
> Eric
>
> My code (in draft form) here: https://github.com/ebd2/presto/pull/3
>
>
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
