libkrb5-dev version 1.10-beta1 has broken RDNS support

[Nathan Rosenblum]

The libkrb5-dev package provided for Precise is missing a critical bugfix in 1.10.2+ maintenance versions of MIT's Kerberos distribution which allows reverse DNS service principal name canonicalization to be disabled. The upstream ticket is here:

http://krbdev.mit.edu/rt/Ticket/Display.html?id=7124

In prior versions of libkrb5-dev, including the one currently available for Precise, the libkrb5.conf option `rdns=false` will have no effect.

[Taylor Yu (tlyu)]

This is probably the same as bug 571572.

Technically the upstream patch is a workaround for a glibc bug. This is probably deserving of an SRU for Precise.

[Robie Basak (racb)]

Thank you for taking the time to report this bug and helping to make Ubuntu better.

Which versions in Ubuntu are affected, please? Also, please see https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/571572/comments/17

Right now I'm not clear on what needs to be patched where, with the details of the interaction with libc and how this varies between releases, to actually upload anything. If somebody could clarify the situation with specific required minimal patches in Ubuntu and a correct fix in Trusty if required (or confirmation that Trusty is not affected), and there is consensus that this is accurate, then we can get this done. Details in the comment I linked above, and https://wiki.ubuntu.com/StableReleaseUpdates#Procedure. Without a detailed technical clarification of the situation covering Ubuntu releases, this bug will languish.

I'm marking this bug as a duplicate of bug 571572 as I assume that it's the same issue. If this is wrong, please explain and I can undo the duplicate mark. Otherwise, please continue discussion in the other bug. Thanks!

[Nathan Rosenblum (nater-n)]

Sorry about the delayed response. I'll answer your questions in the other bug.