[PATCH] Don't ucase configured realm

Matthias Dieter Wallnöfer mdw at samba.org
Mon Mar 8 09:55:50 MST 2010


Hi Benjamin,

SAMBA 3 might accept such a change - we at the SAMBA 4 side for sure not 
(it would require such an amount of work to change this - nearly 
undoable). And as Andrew Bartlett stated here: also the "real AD" 
upcases always the realm.

Greets,
Matthias

Benjamin Coddington wrote:
> On 3/4/10 4:38 PM, Andrew Bartlett wrote:
>> On Thu, 2010-03-04 at
>> 11:45 -0500, Benjamin Coddington wrote:
>>> Hi everyone.  We are one of the few that need to preserve case in
>>> kerberos realm names.  The following seems to make sense -
>>> administrators ought to use the proper case when configuring a realm 
>>> name.
>>
>> Unfortunately, far more administrators don't know the proper case.
>> Active Directory forces to upper case, and creates little distinction in
>> the administrators minds between lower case dns domains and upper case
>> realms.  If we were to apply this patch, many existing sites would
>> break, while others would have to chase down strange and unusual errors
>> like 'reply from KDC does not match expections' trying to make things
>> work.
>>
>> The solution for your use in an MIT realm (I presume) will need
>> particular care.
>>
>> I'm sorry it's not so simple,
>>
>> Andrew Bartlett
>
> Would you accept a change to add an option to respect realm case?
>
> Ben
>



More information about the samba-technical mailing list