Uploaded image for project: 'C Driver'
  1. C Driver
  2. CDRIVER-2536

Cannot auth with MIT Kerberos if rdns=false is in krb5.conf

    XMLWordPrintableJSON

Details

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Minor - P4 Minor - P4
    • None
    • None
    • auth
    • None

    Description

      On Ubuntu with Cyrus SASL and MIT Kerberos, if I put the following in /etc/krb5.conf:

      [libdefaults]
          rdns = false
      

      ... then the C Driver cannot authenticate to our Kerberos test server. This seems true whether I use the server's hostname or IP address in the URI, and whether I set CANONICALIZE_HOST_NAME to true or false. Is this expected, or is there a bug in _mongoc_sasl_get_canonicalized_name?

      Attachments

        Activity

          People

            Unassigned Unassigned
            jesse@mongodb.com A. Jesse Jiryu Davis
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: