aboutsummaryrefslogtreecommitdiff
path: root/src/kadmin
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2020-12-21 10:25:58 -0500
committerGreg Hudson <ghudson@mit.edu>2021-01-06 21:22:31 -0500
commit15f8c4fd7d62d07ea2759a7b6d684c000430559e (patch)
tree9104f28c919d4df3030b452c49f4d1529729c0a9 /src/kadmin
parentdde43ffc6d0d19ff3fa080d86d4cddfcc152e421 (diff)
downloadkrb5-15f8c4fd7d62d07ea2759a7b6d684c000430559e.zip
krb5-15f8c4fd7d62d07ea2759a7b6d684c000430559e.tar.gz
krb5-15f8c4fd7d62d07ea2759a7b6d684c000430559e.tar.bz2
Revert dns_canonicalize_hostname default to true
Field testing of dns_canonicalize_hostname=fallback (ticket 8911) revealed more disruptive edge cases than anticipated. Many were fixed by ticket 8930, but host-based GSS initiator names were recently discovered to not work, and one other edge case could not be resolved without a change to external code. Restore the default to true for now. Set the value to fallback in the test suite, to continue testing the desired configuration and to avoid restoring tests/resolve. ticket: 8973 (new) tags: pullup target_version: 1.19
Diffstat (limited to 'src/kadmin')
-rw-r--r--src/kadmin/testing/proto/krb5.conf.proto1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/kadmin/testing/proto/krb5.conf.proto b/src/kadmin/testing/proto/krb5.conf.proto
index c0af716..a1c5711 100644
--- a/src/kadmin/testing/proto/krb5.conf.proto
+++ b/src/kadmin/testing/proto/krb5.conf.proto
@@ -2,6 +2,7 @@
default_realm = __REALM__
default_keytab_name = FILE:__K5ROOT__/keytab
dns_fallback = no
+ dns_canonicalize_hostname = fallback
qualify_shortname = ""
plugin_base_dir = __PLUGIN_DIR__
allow_weak_crypto = true