[20342] in Kerberos_V5_Development
Re: Calling init_sec_context() without config file and default realm
daemon@ATHENA.MIT.EDU (Greg Hudson)
Sat Dec 25 17:08:43 2021
To: Isaac Boukris <iboukris@gmail.com>,
"krbdev@mit.edu Dev List"
<krbdev@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <6ff14d4a-a762-8141-45ae-e2935db91baf@mit.edu>
Date: Sat, 25 Dec 2021 17:07:45 -0500
MIME-Version: 1.0
In-Reply-To: <CAC-fF8SDptH0pMzPSjK_HXJv8JNeu23pih4bz-K_NVkMhXb-cg@mail.gmail.com>
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 12/24/21 12:27 PM, Isaac Boukris wrote:
> I'm wondering if this is something we can fix in the library to allow
> working without config-file, or how to get around it, perhaps using a
> different gss name-type for the target would help, need to check, but
> anyway I think it is worth raising.
If this code path is the only problem, I think we can smooth it out.
krb5_cc_select() didn't initially use krb5_get_fallback_host_realm()
(before commit 234b64bd6139d5b75dadd5abbd5bef5a162e298a), so we should
be able to continue without the realm after a KRB5_CONFIG_NODEFREALM error.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
