Re: Using a stub krb5.conf with "include"
Ken Hornstein via Kerberos <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.general |
|---|---|
| Message-ID | <[email protected]> |
>The profile library has the concept of marking a section or subsection >as "final", preventing further amendments to that section. But that >concept does not apply to individual relations (although it was >erroneously documented as applying to them prior to 1.17.1). When I looked at the finalization support, I found that it had two unexpected features: 1) The finalization support only works across files; in other words, if you have KRB5_CONFIG=/etc/file1:/etc/file2, a finalized section in file1 suppresses the same section in file2. But it doesn't work if it's all within file1. 2) An include statement in a krb5.conf file does NOT count as a new file for the purposes of finalization. If I am wrong about these things, I'd sure love a correction. Honestly, I can't see a reason why a finalized section in a file just doesn't suppress further sections, even within the same file. --Ken ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos