[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[PATCH] Should we avoid DNS for short names?

This patch tells Heimdal to use only config files for 'short' realm
names, not DNS.  I expect Samba4 to be configured in many weird and
wonderful ways, and this patch should reduce administrator pain and root
DNS server load.

Comments?  

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net

Index: heimdal/lib/krb5/krbhst.c
===================================================================
--- heimdal/lib/krb5/krbhst.c	(revision 10397)
+++ heimdal/lib/krb5/krbhst.c	(working copy)
@@ -634,6 +634,11 @@
 	return NULL;
     }
 
+    /* For 'realms' without a . do not even think of going to DNS */
+    if (!strchr(realm, '.')) {
+	kd->flags |= KD_CONFIG_EXISTS;
+    }
+
     if (flags & KRB5_KRBHST_FLAGS_LARGE_MSG)
 	kd->flags |= KD_LARGE_MSG;
     kd->end = kd->index = &kd->hosts;

This is a digitally signed message part