f9e6d882fd
* Add IPv6 support to changepw.c
* fix two problems in kadm5_get_principal mask handling
* Ignore improperly encoded signedpath AD elements
* handle NT_SRV_INST in service principal referrals
* dereference options while checking
KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT
* Fix the kpasswd fallback from the ccache principal name
* Document the ticket_lifetime libdefaults setting
* Change KRB5_AUTHDATA_SIGNTICKET from 142 to 512
OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=13
55 lines
2.4 KiB
Plaintext
55 lines
2.4 KiB
Plaintext
Index: krb5-1.8-alpha1/src/lib/krb5/os/hostaddr.c
|
|
===================================================================
|
|
--- krb5-1.8-alpha1.orig/src/lib/krb5/os/hostaddr.c
|
|
+++ krb5-1.8-alpha1/src/lib/krb5/os/hostaddr.c
|
|
@@ -44,7 +44,7 @@ krb5_os_hostaddr(krb5_context context, c
|
|
return KRB5_ERR_BAD_HOSTNAME;
|
|
|
|
memset (&hints, 0, sizeof (hints));
|
|
- hints.ai_flags = AI_NUMERICHOST;
|
|
+ hints.ai_flags = AI_NUMERICHOST | AI_ADDRCONFIG;
|
|
/* We don't care what kind at this point, really, but without
|
|
this, we can get back multiple sockaddrs per address, for
|
|
SOCK_DGRAM, SOCK_STREAM, and SOCK_RAW. I haven't checked if
|
|
Index: krb5-1.8-alpha1/src/lib/krb5/os/hst_realm.c
|
|
===================================================================
|
|
--- krb5-1.8-alpha1.orig/src/lib/krb5/os/hst_realm.c
|
|
+++ krb5-1.8-alpha1/src/lib/krb5/os/hst_realm.c
|
|
@@ -103,7 +103,7 @@ get_fq_hostname(char *buf, size_t bufsiz
|
|
int err;
|
|
|
|
memset (&hints, 0, sizeof (hints));
|
|
- hints.ai_flags = AI_CANONNAME;
|
|
+ hints.ai_flags = AI_CANONNAME | AI_ADDRCONFIG;
|
|
err = getaddrinfo (name, 0, &hints, &ai);
|
|
if (err)
|
|
return krb5int_translate_gai_error (err);
|
|
Index: krb5-1.8-alpha1/src/lib/krb5/os/locate_kdc.c
|
|
===================================================================
|
|
--- krb5-1.8-alpha1.orig/src/lib/krb5/os/locate_kdc.c
|
|
+++ krb5-1.8-alpha1/src/lib/krb5/os/locate_kdc.c
|
|
@@ -259,8 +259,9 @@ krb5int_add_host_to_list (struct addrlis
|
|
memset(&hint, 0, sizeof(hint));
|
|
hint.ai_family = family;
|
|
hint.ai_socktype = socktype;
|
|
+ hint.ai_flags = AI_ADDRCONFIG;
|
|
#ifdef AI_NUMERICSERV
|
|
- hint.ai_flags = AI_NUMERICSERV;
|
|
+ hint.ai_flags |= AI_NUMERICSERV;
|
|
#endif
|
|
result = snprintf(portbuf, sizeof(portbuf), "%d", ntohs(port));
|
|
if (SNPRINTF_OVERFLOW(result, sizeof(portbuf)))
|
|
Index: krb5-1.8-alpha1/src/lib/krb5/os/sn2princ.c
|
|
===================================================================
|
|
--- krb5-1.8-alpha1.orig/src/lib/krb5/os/sn2princ.c
|
|
+++ krb5-1.8-alpha1/src/lib/krb5/os/sn2princ.c
|
|
@@ -108,7 +108,7 @@ krb5_sname_to_principal(krb5_context con
|
|
|
|
memset(&hints, 0, sizeof(hints));
|
|
hints.ai_family = AF_INET;
|
|
- hints.ai_flags = AI_CANONNAME;
|
|
+ hints.ai_flags = AI_CANONNAME|AI_ADDRCONFIG;
|
|
try_getaddrinfo_again:
|
|
err = getaddrinfo(hostname, 0, &hints, &ai);
|
|
if (err) {
|