New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

dns_canonicalize_hostname is not always a boolean value #518

Open

flowerysong opened this issue May 9, 2023 · 0 comments

flowerysong commented May 9, 2023

MIT Kerberos 1.18 added support for dns_canonicalize_hostname = fallback, which initially acts like dns_canonicalize_hostname = false, then retries the request with a canonicalized hostname if it fails due to an unknown service principal. (See https://web.mit.edu/kerberos/krb5-devel/doc/admin/princ_dns.html#service-principal-canonicalization)

gokrb5/config/krb5conf.go

Lines 172 to 177 in 855dbc7

    
           case "dns_canonicalize_hostname": 
        
           	v, err := parseBoolean(p[1]) 
        
           	if err != nil { 
        
           		return InvalidErrorf("libdefaults section line (%s): %v", line, err) 
        
           	} 
        
           	l.DNSCanonicalizeHostname = v

only parses this as a boolean, which fails when it encounters this value (e.g. in the default krb5.conf for Fedora.)

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment