3756. [bug] GSSAPI Kerberos realm checking was broken in

                        check_config leading to spurious messages being
                        logged.  [RT #35443]

diff --git a/CHANGES b/CHANGES
index d430d79aceaa7c2cdceeb45e0309887535cca559..376033be505c12f146da36e44a835223e74cfc57 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+3756.  [bug]           GSSAPI Kerberos realm checking was broken in
+                       check_config leading to spurious messages being
+                       logged.  [RT #35443]
+
        --- 9.10.0b1 released ---
 
 3755.  [func]          Add stats counters for known EDNS options + others.

diff --git a/lib/dns/gssapictx.c b/lib/dns/gssapictx.c
index d4209d378a76e32947111216464c48b3fca71d27..915e6609a41f9e32832edc2d6a55ae2cb09f82a4 100644 (file)
--- a/lib/dns/gssapictx.c
+++ b/lib/dns/gssapictx.c
@@ -233,7 +233,7 @@ check_config(const char *gss_name) {
                krb5_free_context(krb5_ctx);
                return;
        }
-       p = strchr(gss_name, '/');
+       p = strchr(gss_name, '@');
        if (p == NULL) {
                gss_log(ISC_LOG_ERROR, "badly formatted "
                        "tkey-gssapi-credentials (%s)", gss_name);