[PATCH] Don't ucase configured realm

Benjamin Coddington Benjamin.Coddington at uvm.edu
Mon Mar 8 07:59:35 MST 2010


On 3/4/10 4:38 PM, Andrew Bartlett wrote:
> On Thu, 2010-03-04 at 11:45 -0500, Benjamin Coddington wrote:
>> Hi everyone.  We are one of the few that need to preserve case in
>> kerberos realm names.  The following seems to make sense -
>> administrators ought to use the proper case when configuring a realm name.
>
> Unfortunately, far more administrators don't know the proper case.
> Active Directory forces to upper case, and creates little distinction in
> the administrators minds between lower case dns domains and upper case
> realms.  If we were to apply this patch, many existing sites would
> break, while others would have to chase down strange and unusual errors
> like 'reply from KDC does not match expections' trying to make things
> work.
>
> The solution for your use in an MIT realm (I presume) will need
> particular care.
>
> I'm sorry it's not so simple,
>
> Andrew Bartlett

Would you accept a change to add an option to respect realm case?

Ben


More information about the samba-technical mailing list