Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit0787432

Browse files
committed
For Kerberos testing, disable reverse DNS lookup
In our Kerberos test suite, there isn't much need to worry about thenormal canonicalization that Kerberos provides by looking up the reverseDNS for the IP address connected to, and in some cases it can activelycause problems (eg: a captive portal wifi where the normally notresolvable localhost address used ends up being resolved anyway, andnot to the domain we are using for testing, causing the entireregression test to fail with errors about not being able to get a TGTfor the remote realm for cross-realm trust).Therefore, disable it by adding rdns = false into the krb5.conf that'sgenerated for the test.Reviewed-By: Heikki LinnakangasDiscussion:https://postgr.es/m/Y/QD2zDkDYQA1GQt@tamriel.snowman.net
1 parentd6ac234 commit0787432

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

‎src/test/kerberos/t/001_auth.pl

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -96,6 +96,17 @@
9696
or BAIL_OUT("could not get Kerberos version");
9797
$krb5_version =$1;
9898

99+
# Build the krb5.conf to use.
100+
#
101+
# Explicitly specify the default (test) realm and the KDC for
102+
# that realm to avoid the Kerberos library trying to look up
103+
# that information in DNS, and also because we're using a
104+
# non-standard KDC port.
105+
#
106+
# Reverse DNS is explicitly disabled to avoid any issue with a
107+
# captive portal or other cases where the reverse DNS succeeds
108+
# and the Kerberos library uses that as the canonical name of
109+
# the host and then tries to acquire a cross-realm ticket.
99110
append_to_file(
100111
$krb5_conf,
101112
qq![logging]
@@ -104,6 +115,7 @@
104115
105116
[libdefaults]
106117
default_realm =$realm
118+
rdns = false
107119
108120
[realms]
109121
$realm = {

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp