sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-28 01:58:17 +03:00
Code

r10398: Don't do DNS lookups on short names (no .).

Browse Source 
Andrew Bartlett
(This used to be commit 77aca9619d24a8e118f53bcd1a1e54b8437812a8)
This commit is contained in:
Andrew Bartlett 2005-09-21 22:55:39 +00:00 committed by Gerald (Jerry) Carter
parent e0febb258a
commit 3b7f8ddd9a
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
source4/auth/kerberos/kerberos-notes.txt
View File

@ -365,4 +365,12 @@ by providing specific, english text-string error messages instead of
just error code translations.
Short name rules
----------------
Samba is highly likely to be misconfigured, in many weird and
interesting ways. As such, we have a patch for Heimdal that avoids
DNS lookups on names without a . in them. This should avoid some
delay and root server load.

5
source4/heimdal/lib/krb5/krbhst.c
View File

@ -634,6 +634,11 @@ common_init(krb5_context context,
return NULL;
}
/* For 'realms' without a . do not even think of going to DNS */
if (!strchr(realm, '.')) {
kd->flags |= KD_CONFIG_EXISTS;
}
if (flags & KRB5_KRBHST_FLAGS_LARGE_MSG)
kd->flags |= KD_LARGE_MSG;
kd->end = kd->index = &kd->hosts;