Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

agent/auth/kerberos: add disable_fast_negotiation #9892

Merged
merged 4 commits into from
Sep 4, 2020

Conversation

jasonodonnell
Copy link
Contributor

A documented parameter disable_fast_negotiation wasn't being configured on the Kerberos auth-method, resulting in the boolean always being false. This adds proper support to override the value.

Fixes #9567

@jasonodonnell jasonodonnell changed the title Agent kerberos bug agent/auth/kerberos: add disable_fast_negotiation Sep 4, 2020
@kalafut kalafut added this to the 1.5.4 milestone Sep 4, 2020
Copy link
Contributor

@calvn calvn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One small comment, otherwise LGTM!

@calvn
Copy link
Contributor

calvn commented Sep 4, 2020

I was looking at the docs on https://www.vaultproject.io/docs/agent/autoauth/methods/kerberos, and it seems that the params are missing indicators on the type and whether the param is optional. Might be a good opportunity to add them in as well, e.g. disable_fast_negotiation (bool: optional) - ....

@jasonodonnell
Copy link
Contributor Author

@calvn I'll follow up with a PR to fix the documentation. Good catch!

@jasonodonnell jasonodonnell merged commit 6b4f430 into master Sep 4, 2020
@jasonodonnell jasonodonnell deleted the agent-kerberos-bug branch September 4, 2020 20:46
jasonodonnell added a commit that referenced this pull request Sep 4, 2020
* agent/auth/kerberos: add disable_fast_negotiation

* simplify test

* Update command/agent/auth/kerberos/kerberos_test.go

Co-authored-by: Calvin Leung Huang <[email protected]>

* simplify tests

Co-authored-by: Calvin Leung Huang <[email protected]>
jasonodonnell added a commit that referenced this pull request Sep 4, 2020
* agent/auth/kerberos: add disable_fast_negotiation

* simplify test

* Update command/agent/auth/kerberos/kerberos_test.go

Co-authored-by: Calvin Leung Huang <[email protected]>

* simplify tests

Co-authored-by: Calvin Leung Huang <[email protected]>

Co-authored-by: Calvin Leung Huang <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Agent ignores kerberos disable_fast_negotiation
3 participants