[PATCH] Don't ucase configured realm
Matthias Dieter Wallnöfer
mdw at samba.org
Mon Mar 8 09:55:50 MST 2010
Hi Benjamin,
SAMBA 3 might accept such a change - we at the SAMBA 4 side for sure not
(it would require such an amount of work to change this - nearly
undoable). And as Andrew Bartlett stated here: also the "real AD"
upcases always the realm.
Greets,
Matthias
Benjamin Coddington wrote:
> On 3/4/10 4:38 PM, Andrew Bartlett wrote:
>> On Thu, 2010-03-04 at
>> 11:45 -0500, Benjamin Coddington wrote:
>>> Hi everyone. We are one of the few that need to preserve case in
>>> kerberos realm names. The following seems to make sense -
>>> administrators ought to use the proper case when configuring a realm
>>> name.
>>
>> Unfortunately, far more administrators don't know the proper case.
>> Active Directory forces to upper case, and creates little distinction in
>> the administrators minds between lower case dns domains and upper case
>> realms. If we were to apply this patch, many existing sites would
>> break, while others would have to chase down strange and unusual errors
>> like 'reply from KDC does not match expections' trying to make things
>> work.
>>
>> The solution for your use in an MIT realm (I presume) will need
>> particular care.
>>
>> I'm sorry it's not so simple,
>>
>> Andrew Bartlett
>
> Would you accept a change to add an option to respect realm case?
>
> Ben
>
More information about the samba-technical
mailing list