components/krb5/patches/063-disable-rev-dns-lookup.patch
changeset 6978 14cbeb78966a
parent 6599 1d033832c5e7
equal deleted inserted replaced
6977:d12ba5c9b5db 6978:14cbeb78966a
     2 # This patch disables reverse DNS IP address look-ups that MIT does by default.
     2 # This patch disables reverse DNS IP address look-ups that MIT does by default.
     3 # Solaris krb has never done reverse look-ups so this makes MIT krb behave like
     3 # Solaris krb has never done reverse look-ups so this makes MIT krb behave like
     4 # Solaris in this regard.  MIT will not take this change upstream.
     4 # Solaris in this regard.  MIT will not take this change upstream.
     5 # Patch source: in-house
     5 # Patch source: in-house
     6 #
     6 #
     7 diff --git a/src/lib/krb5/os/sn2princ.c b/src/lib/krb5/os/sn2princ.c
       
     8 --- a/src/lib/krb5/os/sn2princ.c
     7 --- a/src/lib/krb5/os/sn2princ.c
     9 +++ b/src/lib/krb5/os/sn2princ.c
     8 +++ b/src/lib/krb5/os/sn2princ.c
    10 @@ -36,7 +36,7 @@
     9 @@ -36,7 +36,7 @@
    11  #endif
    10  #endif
    12  
    11  
    14 -#define DEFAULT_RDNS_LOOKUP 1
    13 -#define DEFAULT_RDNS_LOOKUP 1
    15 +#define DEFAULT_RDNS_LOOKUP 0
    14 +#define DEFAULT_RDNS_LOOKUP 0
    16  #endif
    15  #endif
    17  
    16  
    18  /*
    17  /*
    19 diff --git a/src/man/krb5.conf.man b/src/man/krb5.conf.man
       
    20 --- a/src/man/krb5.conf.man
    18 --- a/src/man/krb5.conf.man
    21 +++ b/src/man/krb5.conf.man
    19 +++ b/src/man/krb5.conf.man
    22 @@ -473,7 +473,7 @@ default, if allowed by the KDC.  The default value is false.
    20 @@ -473,7 +473,7 @@ default, if allowed by the KDC.  The default value is false.
    23  If this flag is true, reverse name lookup will be used in addition
    21  If this flag is true, reverse name lookup will be used in addition
    24  to forward name lookup to canonicalizing hostnames for use in
    22  to forward name lookup to canonicalizing hostnames for use in
    26 -to false, this flag has no effect.  The default value is true.
    24 -to false, this flag has no effect.  The default value is true.
    27 +to false, this flag has no effect.  The default value is false.
    25 +to false, this flag has no effect.  The default value is false.
    28  .TP
    26  .TP
    29  .B \fBrealm_try_domains\fP
    27  .B \fBrealm_try_domains\fP
    30  Indicate whether a host\(aqs domain components should be used to
    28  Indicate whether a host\(aqs domain components should be used to
    31 diff --git a/src/tests/t_sn2princ.py b/src/tests/t_sn2princ.py
       
    32 --- a/src/tests/t_sn2princ.py
    29 --- a/src/tests/t_sn2princ.py
    33 +++ b/src/tests/t_sn2princ.py
    30 +++ b/src/tests/t_sn2princ.py
    34 @@ -6,10 +6,12 @@ offline = (len(args) > 0 and args[0] != "no")
    31 @@ -6,10 +6,12 @@ offline = (len(args) > 0 and args[0] != "no")
    35  conf = {'domain_realm': {'kerberos.org': 'R1',
    32  conf = {'domain_realm': {'kerberos.org': 'R1',
    36                           'example.com': 'R2',
    33                           'example.com': 'R2',