An approach for testing the krb5 KDC, fixes for UPN support

Stefan (metze) Metzmacher metze at
Tue Jan 6 15:11:42 MST 2015

Am 06.01.2015 um 01:38 schrieb Andrew Bartlett:
> G'Day,
> Just a heads-up that I'm looking at how to test the Samba KDC, more than
> just by the side-effects it shows in the krb5 libraries.  
> I realise this has serious portability constraints to the MIT codebase,
> but I think this is still worthwhile as a tool for verification. 
> I'm doing this because I need a basis to then implement good tests
> around the correct behaviour with regards to the canonicalize flag and
> enterprise principal names, for fixing our enterprise UPN support,
> raised here:
> The fixes I have for UPN support are here:

Looks good!

I'll work on proper support for additional uPNSuffixes and msDS-SPNSuffixes
values in the next weeks.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the samba-technical mailing list