[PATCHES] Avoid system krb5.conf in selftest

Michael Adam obnox at samba.org
Tue Oct 27 01:04:30 UTC 2015


Pushed to autobuild. Thanks!

Michael

On 2015-10-26 at 23:49 +0200, Uri Simchoni wrote:
> 
> 
> On 10/26/2015 11:42 PM, Michael Adam wrote:
> >On 2015-10-26 at 23:17 +0200, Uri Simchoni wrote:
> >>Hi,
> >>
> >>Following patches fix "make test" on my FC22 box. The recurring theme was
> >>that this box has a krb5.conf that is deemed invalid by the Heimdal libs
> >>embedded in samba. Tests that need krb5.conf take care to divert the test
> >>program from the system krb5.conf to the testenv version. Tests that do not
> >>need krb5.conf sometimes omit this, causing the test to read the system
> >>krb5.conf (while creating a context) and choke.
> >Is it complaining with EINVAL ?
> Yes (printing "Invalid parameter")
> >I have been starting to chase an issue sounding very similar
> >today (with Anoop).
> >Maybe you have just solved the thing for us... :-)
> >Was it failing also for the ad_dc_ntvfs env?
> Yes, that's the first failure, then there were some more.
> >What kind of krb5.conf do you use?
> includedir /etc/krb5.conf.d/
> #/etc/krb5.conf.d is empty...
> 
> [logging]
>  default = FILE:/var/log/krb5libs.log
>  kdc = FILE:/var/log/krb5kdc.log
>  admin_server = FILE:/var/log/kadmind.log
> 
> [libdefaults]
>  dns_lookup_realm = false
>  ticket_lifetime = 24h
>  renew_lifetime = 7d
>  forwardable = true
>  rdns = false
> # default_realm = EXAMPLE.COM
>  default_ccache_name = KEYRING:persistent:%{uid}
> 
> [realms]
> # EXAMPLE.COM = {
> #  kdc = kerberos.example.com
> #  admin_server = kerberos.example.com
> # }
> 
> [domain_realm]
> # .example.com = EXAMPLE.COM
> # example.com = EXAMPLE.COM
> 
> >>I haven't checked whether it's an MIT thing or an invalid config - IMHO it
> >>doesn't matter - a test should read the system krb5.conf at all.
> >>
> >>The patches don't necessarily eliminate ALL references to the system
> >>krb5.conf, just the ones that fail tests.
> >>
> >>Review and push appreciated.
> >I will take a closer look and comment and/or push.
> >
> >Cheers - Michael
> Thanks,
> Uri
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20151027/f70af976/signature.sig>


More information about the samba-technical mailing list