diff options
author | Greg Hudson <ghudson@mit.edu> | 2020-12-21 10:25:58 -0500 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2021-01-08 12:27:00 -0500 |
commit | a38ffbd2498d35baa07658df62b25c7da220d8f1 (patch) | |
tree | e7467cea9dc61786eb87d149a1c275f611da063f /src/util | |
parent | 196be3c474881dcaf76332375c1dffbd3a9140f6 (diff) | |
download | krb5-a38ffbd2498d35baa07658df62b25c7da220d8f1.zip krb5-a38ffbd2498d35baa07658df62b25c7da220d8f1.tar.gz krb5-a38ffbd2498d35baa07658df62b25c7da220d8f1.tar.bz2 |
Revert dns_canonicalize_hostname default to true
Field testing of dns_canonicalize_hostname=fallback (ticket 8911)
revealed more disruptive edge cases than anticipated. Many were fixed
by ticket 8930, but host-based GSS initiator names were recently
discovered to not work, and one other edge case could not be resolved
without a change to external code.
Restore the default to true for now. Set the value to fallback in the
test suite, to continue testing the desired configuration and to avoid
restoring tests/resolve.
(cherry picked from commit 15f8c4fd7d62d07ea2759a7b6d684c000430559e)
ticket: 8973
version_fixed: 1.19
Diffstat (limited to 'src/util')
-rw-r--r-- | src/util/k5test.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/util/k5test.py b/src/util/k5test.py index 10f6b0a..6afe4b9 100644 --- a/src/util/k5test.py +++ b/src/util/k5test.py @@ -1240,6 +1240,7 @@ _default_krb5_conf = { 'libdefaults': { 'default_realm': '$realm', 'dns_lookup_kdc': 'false', + 'dns_canonicalize_hostname': 'fallback', 'qualify_shortname': '', 'plugin_base_dir': '$plugins'}, 'realms': {'$realm': { |