[PATCHES] Avoid system krb5.conf in selftest
Michael Adam
obnox at samba.org
Tue Oct 27 01:04:30 UTC 2015
Pushed to autobuild. Thanks!
Michael
On 2015-10-26 at 23:49 +0200, Uri Simchoni wrote:
>
>
> On 10/26/2015 11:42 PM, Michael Adam wrote:
> >On 2015-10-26 at 23:17 +0200, Uri Simchoni wrote:
> >>Hi,
> >>
> >>Following patches fix "make test" on my FC22 box. The recurring theme was
> >>that this box has a krb5.conf that is deemed invalid by the Heimdal libs
> >>embedded in samba. Tests that need krb5.conf take care to divert the test
> >>program from the system krb5.conf to the testenv version. Tests that do not
> >>need krb5.conf sometimes omit this, causing the test to read the system
> >>krb5.conf (while creating a context) and choke.
> >Is it complaining with EINVAL ?
> Yes (printing "Invalid parameter")
> >I have been starting to chase an issue sounding very similar
> >today (with Anoop).
> >Maybe you have just solved the thing for us... :-)
> >Was it failing also for the ad_dc_ntvfs env?
> Yes, that's the first failure, then there were some more.
> >What kind of krb5.conf do you use?
> includedir /etc/krb5.conf.d/
> #/etc/krb5.conf.d is empty...
>
> [logging]
> default = FILE:/var/log/krb5libs.log
> kdc = FILE:/var/log/krb5kdc.log
> admin_server = FILE:/var/log/kadmind.log
>
> [libdefaults]
> dns_lookup_realm = false
> ticket_lifetime = 24h
> renew_lifetime = 7d
> forwardable = true
> rdns = false
> # default_realm = EXAMPLE.COM
> default_ccache_name = KEYRING:persistent:%{uid}
>
> [realms]
> # EXAMPLE.COM = {
> # kdc = kerberos.example.com
> # admin_server = kerberos.example.com
> # }
>
> [domain_realm]
> # .example.com = EXAMPLE.COM
> # example.com = EXAMPLE.COM
>
> >>I haven't checked whether it's an MIT thing or an invalid config - IMHO it
> >>doesn't matter - a test should read the system krb5.conf at all.
> >>
> >>The patches don't necessarily eliminate ALL references to the system
> >>krb5.conf, just the ones that fail tests.
> >>
> >>Review and push appreciated.
> >I will take a closer look and comment and/or push.
> >
> >Cheers - Michael
> Thanks,
> Uri
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20151027/f70af976/signature.sig>
More information about the samba-technical
mailing list