krb5-sync 0.7

It turns out that if you pass an unqualified principal without an instance into the kname_parse function of MIT Kerberos's libkrb4 compatibility library, it just leaves the instance set to whatever junk was originally in the buffer. That was the reason why propagation to our AFS kaserver environment wasn't working in pre-prod, because I started using our production AFS kaserver administrator instead of a custom one I'd created for testing.

I also rediffed a clean patch for MIT Kerberos 1.4.4 and fixed a few other minor issues. This code is going into production on Saturday.

You can get the latest version from the krb5-sync distribution page.

Posted: 2007-08-07 17:33 — Why no comments?

Last spun 2022-02-06 from thread modified 2013-01-04