freeipa/ipaclient
Martin Babinsky 566c86a782 disable hostname canonicalization by Kerberos library
By default, Kerberos client library attempts to canonicalize service
hostname in TGS requests. This can fail e.g. if hosts file on the client
machine references short names before FQDNs. In this case the short name
is used in TGS_REQ which KDC fails to resolve.

Since we do not (yet) support referencing hosts by their short names it
is safe to just disable this behavior in krb5.conf and use supplied
FQDNs.

https://fedorahosted.org/freeipa/ticket/6584

Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
2017-01-11 16:18:24 +01:00
..
install disable hostname canonicalization by Kerberos library 2017-01-11 16:18:24 +01:00
plugins ipaclient.plugins: Use api_version from internally called commands 2016-12-14 11:50:35 +01:00
remote_plugins ipaclient: schema cache: Handle malformed server info data gracefully 2017-01-09 09:13:36 +01:00
__init__.py Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
frontend.py frontent: Add summary class property to CommandOverride 2016-08-17 14:16:04 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Wheel bundles fixes 2016-11-30 16:44:38 +01:00