An approach for testing the krb5 KDC, fixes for UPN support

Stefan (metze) Metzmacher metze at samba.org
Tue Jan 6 15:11:42 MST 2015


Am 06.01.2015 um 01:38 schrieb Andrew Bartlett:
> G'Day,
> 
> Just a heads-up that I'm looking at how to test the Samba KDC, more than
> just by the side-effects it shows in the krb5 libraries.  
> 
> I realise this has serious portability constraints to the MIT codebase,
> but I think this is still worthwhile as a tool for verification. 
> 
> https://git.samba.org/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/krb5-tests
> 
> I'm doing this because I need a basis to then implement good tests
> around the correct behaviour with regards to the canonicalize flag and
> enterprise principal names, for fixing our enterprise UPN support,
> raised here:
> 
> https://lists.samba.org/archive/samba/2013-October/176422.html
> 
> The fixes I have for UPN support are here:
> https://git.samba.org/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/krb5-upn

Looks good!

I'll work on proper support for additional uPNSuffixes and msDS-SPNSuffixes
values in the next weeks.

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20150106/e14cb992/attachment.pgp>


More information about the samba-technical mailing list