[Comment] [krbdev.mit.edu #9117] profile write operation interactions with multiple files
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <rt-4.4.3-2-1528742-1712945098-1035.9117-8-0@kerborg-prod-app-1.mit.edu> |
http://kerborg-prod-app-1.mit.edu/rt/Ticket/Display.html?id=9117 This is a comment. It is not sent to the Requestor(s): >If I got it right, the FreeRDP use case is to export a modified >version of the tree where the list of KDC addresses for a given realm >is replaced by another address. I believe the reason why they use such >an approach is because of the "*" marker limitation for relations in >subsections[2]. Even if the "*" finalization marker was supported for subsection relations, I believe that only works across files specified in the search path. E.g., a KRB5_CONFIG file that specified "/etc/krb5-1.conf:/etc/krb5-2.conf", it would work finalize a section in krb5-1.conf. But files included using the "include" directive don't count as separate files for this purpose. Sadly this makes finalization much less useful. --Ken