Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit1beb70d

Browse files
committed
For Kerberos testing, disable reverse DNS lookup
In our Kerberos test suite, there isn't much need to worry about thenormal canonicalization that Kerberos provides by looking up the reverseDNS for the IP address connected to, and in some cases it can activelycause problems (eg: a captive portal wifi where the normally notresolvable localhost address used ends up being resolved anyway, andnot to the domain we are using for testing, causing the entireregression test to fail with errors about not being able to get a TGTfor the remote realm for cross-realm trust).Therefore, disable it by adding rdns = false into the krb5.conf that'sgenerated for the test.Reviewed-By: Heikki LinnakangasDiscussion:https://postgr.es/m/Y/QD2zDkDYQA1GQt@tamriel.snowman.net
1 parent027d29e commit1beb70d

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

‎src/test/kerberos/t/001_auth.pl

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -85,6 +85,17 @@
8585
or BAIL_OUT("could not get Kerberos version");
8686
$krb5_version =$1;
8787

88+
# Build the krb5.conf to use.
89+
#
90+
# Explicitly specify the default (test) realm and the KDC for
91+
# that realm to avoid the Kerberos library trying to look up
92+
# that information in DNS, and also because we're using a
93+
# non-standard KDC port.
94+
#
95+
# Reverse DNS is explicitly disabled to avoid any issue with a
96+
# captive portal or other cases where the reverse DNS succeeds
97+
# and the Kerberos library uses that as the canonical name of
98+
# the host and then tries to acquire a cross-realm ticket.
8899
append_to_file(
89100
$krb5_conf,
90101
qq![logging]
@@ -93,6 +104,7 @@
93104
94105
[libdefaults]
95106
default_realm =$realm
107+
rdns = false
96108
97109
[realms]
98110
$realm = {

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp