[PATCH] Don't ucase configured realm

Andrew Bartlett abartlet at samba.org
Thu Mar 4 14:38:49 MST 2010


On Thu, 2010-03-04 at 11:45 -0500, Benjamin Coddington wrote:
> Hi everyone.  We are one of the few that need to preserve case in 
> kerberos realm names.  The following seems to make sense - 
> administrators ought to use the proper case when configuring a realm name.

Unfortunately, far more administrators don't know the proper case.
Active Directory forces to upper case, and creates little distinction in
the administrators minds between lower case dns domains and upper case
realms.  If we were to apply this patch, many existing sites would
break, while others would have to chase down strange and unusual errors
like 'reply from KDC does not match expections' trying to make things
work. 

The solution for your use in an MIT realm (I presume) will need
particular care.  

I'm sorry it's not so simple,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100305/f19ca1ee/attachment.pgp>


More information about the samba-technical mailing list