1888903 - Address book does not work with alias of LDAP server, using Kerberos

Status: NEW

(Thunderbird :: Address Book, defect)

Description

[admlynx]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0

Steps to reproduce:

1. Create LDAP address book, using real server name (ex.: 'dc1.corp.local')
2. Use Kerberos authentication method
   It working fine!
3. Create CNAME on DNS (ex.: 'ldap.corp.local')
4. Change server name in address book to 'ldap.corp.local'

Actual results:

The list of addresses is empty.
Also it doesn't work if I create a DNS record of type A and by domain name (ex.: 'corp.local').

Expected results:

This should work the same as with basic authentication.
I try another LDAP-client and it working fine with any aliases of server and by domain name with using GSSAPI.

Comment 1

[Magnus Melin [:mkmelin]]

But it works fine for you without the aliasing?

Comment 2

[admlynx]

(In reply to Magnus Melin [:mkmelin] from comment #1)

But it works fine for you without the aliasing?

Yes. When I use real hostname of the domain controller, it works fine. And uses basic authentication with alias of DC hostname works fine too. The problem occurs when using Kerberos authentication.

Comment 3

[admlynx]

I think this is rather related with implementation of Kerberos authentication. I've heard that Kerberos in AD doesn't work well with aliases. But? for ex. LdapAdmin working well, when I use alias of DC and GSSAPI. This is necessary to use any of running DC for the address book.