]> git.ipfire.org Git - thirdparty/krb5.git/commit
Correctly import "service@" GSS host-based name 1057/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 30 Mar 2020 19:26:02 +0000 (15:26 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 31 Mar 2020 23:29:54 +0000 (19:29 -0400)
commita2f047af0400ba8080dc26033fae2b17534501e2
tree47cd986e7c64b680ad7978f365ad9baaf2c8a014
parentdd5d6e5e39be6cf7fe9d54a79e824f8cb7301177
Correctly import "service@" GSS host-based name

The intended way to specify only a service in a GSS host-based name is
to omit the "@" separator.  Some applications include the separator
but no hostname, and this happened to yield wildcard hostname behavior
prior to commit 996353767fe8afa7f67a3b5b465e4d70e18bad7c when
shortname qualification was added.  To restore this behavior, check in
parse_hostbased() that at least one character is present after the "@"
separator before copying the hostname.  Add a test case to t_gssapi.py.

ticket: 8892
tags: pullup
target_version: 1.18-next
src/lib/gssapi/krb5/import_name.c
src/tests/gssapi/t_gssapi.py