[PATCH] Don't ucase configured realm

Benjamin Coddington Benjamin.Coddington at uvm.edu
Thu Mar 11 14:34:57 MST 2010


On 3/9/10 2:31 AM, Andrew Bartlett wrote:
> On Tue, 2010-03-09 at 08:10 +0100, Matthias Dieter Wallnöfer wrote:
>> It's not only this. Sometimes we divide correctly between DNS domainname
>> (szRealm_lower) and realm (szRealm_upper) but not always (e.g. we could
>> take an upcased DNS domainame as the realm). It is a huge task to review
>> and check all occurences of those calls. Plus, since you keep the realm
>> case-sensitive that means you are not really standard-AD compatible.
>
> Matthias,
>
> The problem here is that Benjamin isn't using Samba in an AD realm, he
> is using it in a MIT realm (presumably at uvm.edu), that was not
> configured per the normal practice.
>
> As such, he needs Samba, when it operates as a Kerberos host in his MIT
> realm, to respect the lower case realm he has been forced into.
>
> It's not an unreasonable request, and in Samba3 it may even be quite
> practical.  The care we need to take in Samba3 is not to make the usual
> case (MIT realms constructed per the usual rules, and AD domains) harder
> to set up.
>
> In Samba4, we have the double-challenge that we are the AD DC, and so we
> have an even higher burden to always return the correct case to our
> clients.
>
> Andrew Bartlett

Thanks Andrew.  Here's another attempt which will not break the usual 
case.  This adds a "realm preserve case" option for Samba3.  I'm unclear 
if I should include documentation changes as well.  If they should be 
done, let me know.

Benjamin Coddington
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: rpc.patch
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100311/23bc3055/attachment.ksh>


More information about the samba-technical mailing list