You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, the include and includedir directives of krb5.conf are not parsed. They are not even considered.
They are indeed a canonical directive of krb5.conf:
The krb5.conf file can include other files using either of the following directives at the beginning of a line:
include FILENAME
includedir DIRNAME
FILENAME or DIRNAME should be an absolute path. The named file or directory must exist and be readable. Including a directory includes all files within the directory whose names consist solely of alphanumeric characters, dashes, or underscores. Included profile files are syntactically independent of their parents, so each included file must begin with a section header.
Because of this, this library entirely fails to work properly on e.g. RHEL/EL Linux distributions which have been joined to a domain via sssd, as SSSD makes use of nested includedir directives to manage Kerberos.
I suspect you could simply do a "pre-pass" parse, searching only for lines that have an include or includedir directive, and replacing those lines in-place with the referenced file(s') contents.
The text was updated successfully, but these errors were encountered:
reguero
added a commit
to reguero/gokrb5
that referenced
this issue
Apr 13, 2023
Currently, the
include
andincludedir
directives of krb5.conf are not parsed. They are not even considered.They are indeed a canonical directive of krb5.conf:
Because of this, this library entirely fails to work properly on e.g. RHEL/EL Linux distributions which have been joined to a domain via sssd, as SSSD makes use of nested includedir directives to manage Kerberos.
I suspect you could simply do a "pre-pass" parse, searching only for lines that have an
include
orincludedir
directive, and replacing those lines in-place with the referenced file(s') contents.The text was updated successfully, but these errors were encountered: