Ubuntu
krb5 package

  1. Bug #571572
  2. Comment #22

Comment 22 for bug 571572

Revision history for this message
William (kc-cobradevil) wrote :

Precise

option rdns not set
requesting sharepointsite.testdomain with firefox with the following option set in about:config
network.negotiate-auth.trusted-uris "https://, http://"
klist
==========================================================================================================
Default principal: <email address hidden>

Valid starting Expires Service principal
27/02/2013 09:09 27/02/2013 19:09 <email address hidden>
        renew until 28/02/2013 09:09
27/02/2013 09:10 27/02/2013 19:09 HTTP/searchsite.testdomain@
        renew until 28/02/2013 09:09
27/02/2013 09:10 27/02/2013 19:09 <email address hidden>
        renew until 28/02/2013 09:09
==========================================================================================================

option rdns=false
klist
==========================================================================================================
Default principal: <email address hidden>

Valid starting Expires Service principal
27/02/2013 09:18 27/02/2013 19:18 <email address hidden>
        renew until 28/02/2013 09:18
27/02/2013 09:19 27/02/2013 19:18 HTTP/searchsite.testdomain@
        renew until 28/02/2013 09:18
27/02/2013 09:19 27/02/2013 19:18 <email address hidden>
        renew until 28/02/2013 09:18
==========================================================================================================
no sso
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

Rebuilding kerberos for precise
apt-get build-dep libkrb5-3
apt-get source libkrb5-3
edit src/lib/krb5/os/sn2princ.c
            //hints.ai_flags = AI_CANONNAME | AI_ADDRCONFIG;
            hints.ai_flags = AI_CANONNAME;

rebuild:
fakeroot debian/rules binary
dpkg -i ../libkrb5-3.........deb

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
retest precise

option rdns not set
requesting sharepointsite.testdomain with firefox with the following option set in about:config
network.negotiate-auth.trusted-uris "https://, http://"
klist
==========================================================================================================
Default principal: <email address hidden>

Valid starting Expires Service principal
27/02/2013 09:30 27/02/2013 19:30 <email address hidden>
        renew until 28/02/2013 09:30
27/02/2013 09:30 27/02/2013 19:30 HTTP/searchsite.testdomain@
        renew until 28/02/2013 09:30
27/02/2013 09:30 27/02/2013 19:30 <email address hidden>
        renew until 28/02/2013 09:30
==========================================================================================================

option rdns=false
klist
==========================================================================================================
Default principal: <email address hidden>

Valid starting Expires Service principal
27/02/2013 09:34 27/02/2013 19:35 <email address hidden>
        renew until 28/02/2013 09:34
27/02/2013 09:35 27/02/2013 19:35 HTTP/sharepointsite.testdomain@
        renew until 28/02/2013 09:34
27/02/2013 09:35 27/02/2013 19:35 <email address hidden>
        renew until 28/02/2013 09:34
==========================================================================================================
sso works