OpenAFS Master Repository branch, openafs-stable-1_4_x, updated. openafs-stable-1_4_12-127-gf42d593
Gerrit Code Review
gerrit@openafs.org
Wed, 31 Aug 2011 10:21:22 -0700 (PDT)
The following commit has been merged in the openafs-stable-1_4_x branch:
commit f42d59338d6f9df04c48e4b4fa08456b38ca4e4d
Author: Andrew Deason <adeason@sinenomine.net>
Date: Fri Jul 30 15:32:53 2010 -0500
ptserver: Do not use cell for entry name len check
Do not use the local cell name when determining if a new entry name is
too long. This check assumes that foreign cells will use our local
cell name (assumed to be our local Kerberos realm) in a certain way,
and prevents creating users that will make those names too long.
This is undesirable for several reasons. One is that the local realm
name may not be the same as the local cell name (and we may have many
local realms). Another is that we cannot reliably predict how foreign
cells will construct foreign pt entry names, so preventing entry
creation based on that may prevent names that will never cause any
problems. This check also assumes that our names will be used as
foreign entries in other cells, which may not be the case.
So, remove the check based on the local cell name, and remove the
pr_realmNameLen variable while we are at it, since this is all it is
used for.
Thanks to Jeffrey Altman for discussion, and for bringing this up in
the first place.
Reviewed-on: http://gerrit.openafs.org/2488
Tested-by: Derrick Brashear <shadow@dementia.org>
Reviewed-by: Derrick Brashear <shadow@dementia.org>
(cherry picked from 5e946d5b6672d4dea7dd1c3ee669245b3d2ced92)
Change-Id: I20cf2c2c2e31df0e765881e35fb04f22e934172a
Reviewed-on: http://gerrit.openafs.org/5325
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Derrick Brashear <shadow@dementix.org>
src/ptserver/ptserver.c | 2 --
src/ptserver/ptutils.c | 14 +++++---------
src/ptserver/ubik.c | 1 -
3 files changed, 5 insertions(+), 12 deletions(-)
--
OpenAFS Master Repository