diff options
| author | Ben Kaduk <kaduk@mit.edu> | 2013-08-12 13:47:42 -0400 |
|---|---|---|
| committer | Ben Kaduk <kaduk@mit.edu> | 2013-08-12 15:28:07 -0400 |
| commit | 8f5ce824012f2caab6770df464f096c38dc4cb2e (patch) | |
| tree | 80c2374cf7b3a2a3d0ef0c173ba9eb41c5f69cd4 /src/config-files | |
| parent | 37eb601a1294244b179cb0e6e6cfb4a16709ccfa (diff) | |
| download | krb5-8f5ce824012f2caab6770df464f096c38dc4cb2e.tar.gz krb5-8f5ce824012f2caab6770df464f096c38dc4cb2e.tar.xz krb5-8f5ce824012f2caab6770df464f096c38dc4cb2e.zip | |
Remove redundant domain_realm mappings
This fixes a long-standing documentation bug where we claimed that
a domain_realm mapping for a host name would not affect entries
under that domain name. The code has always had the behavior where
a host name mapping implies the corresponding domain name mapping,
since the 1.0 release.
While here, replace media-lab with csail in example files, as the
media lab realm is no longer in use. Also strip port 88 from KDC
specifications, and drop the harmful default_{tgs,tkt}_enctypes
lines from src/util/profile/krb5.conf.
Further cleanup on these files to remove defunct realms may be in order.
ticket: 7690 (new)
tags: pullup
target_version: 1.11.4
Diffstat (limited to 'src/config-files')
| -rw-r--r-- | src/config-files/krb5.conf | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/src/config-files/krb5.conf b/src/config-files/krb5.conf index 210348fa18..62fbbd6006 100644 --- a/src/config-files/krb5.conf +++ b/src/config-files/krb5.conf @@ -16,10 +16,8 @@ } [domain_realm] - .mit.edu = ATHENA.MIT.EDU mit.edu = ATHENA.MIT.EDU - .media.mit.edu = MEDIA-LAB.MIT.EDU - media.mit.edu = MEDIA-LAB.MIT.EDU + csail.mit.edu = CSAIL.MIT.EDU .ucsc.edu = CATS.UCSC.EDU [logging] |