[SERVER-66117] Disable qualify_shortname in mock libkrb5 configuration Created: 02/May/22 Updated: 29/Oct/23 Resolved: 06/May/22 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | None |
| Affects Version/s: | 5.0.7 |
| Fix Version/s: | 5.0.9 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Spencer Jackson | Assignee: | Spencer Jackson |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||
| Backwards Compatibility: | Fully Compatible | ||||||||||||
| Operating System: | ALL | ||||||||||||
| Sprint: | Security 2022-05-16 | ||||||||||||
| Participants: | |||||||||||||
| Linked BF Score: | 64 | ||||||||||||
| Description |
|
libkrb5 1.18 and above may now concatenate the DNS search path to single path hostnames during canonicalization. We should disable this in our mock configuration, because we want to maintain tight control over hostname selection. To do this, we should set qualify_shortname to the empty string. |
| Comments |
| Comment by Githook User [ 03/May/22 ] |
|
Author: {'name': 'Spencer Jackson', 'email': 'spencer.jackson@mongodb.com', 'username': 'spencerjackson'}Message: |