[PATCHES] Avoid system krb5.conf in selftest

Anoop C S anoopcs at redhat.com
Tue Oct 27 06:11:41 UTC 2015


On Mon, 2015-10-26 at 23:49 +0200, Uri Simchoni wrote:
> 
> On 10/26/2015 11:42 PM, Michael Adam wrote:
> > On 2015-10-26 at 23:17 +0200, Uri Simchoni wrote:
> > > Hi,
> > > 
> > > Following patches fix "make test" on my FC22 box. The recurring
> > > theme was
> > > that this box has a krb5.conf that is deemed invalid by the
> > > Heimdal libs
> > > embedded in samba. Tests that need krb5.conf take care to divert
> > > the test
> > > program from the system krb5.conf to the testenv version. Tests
> > > that do not
> > > need krb5.conf sometimes omit this, causing the test to read the
> > > system
> > > krb5.conf (while creating a context) and choke.
> > Is it complaining with EINVAL ?
> Yes (printing "Invalid parameter")

Exactly the same error I was facing on f22 and was discussing with
Michael.

> > I have been starting to chase an issue sounding very similar
> > today (with Anoop).
> > Maybe you have just solved the thing for us... :-)

Yes. This patch solves the issue, I verified.

Thanks,
--Anoop C S.

> > Was it failing also for the ad_dc_ntvfs env?
> Yes, that's the first failure, then there were some more.
> > What kind of krb5.conf do you use?
> includedir /etc/krb5.conf.d/
> #/etc/krb5.conf.d is empty...
> 
> [logging]
>   default = FILE:/var/log/krb5libs.log
>   kdc = FILE:/var/log/krb5kdc.log
>   admin_server = FILE:/var/log/kadmind.log
> 
> [libdefaults]
>   dns_lookup_realm = false
>   ticket_lifetime = 24h
>   renew_lifetime = 7d
>   forwardable = true
>   rdns = false
> # default_realm = EXAMPLE.COM
>   default_ccache_name = KEYRING:persistent:%{uid}
> 
> [realms]
> # EXAMPLE.COM = {
> #  kdc = kerberos.example.com
> #  admin_server = kerberos.example.com
> # }
> 
> [domain_realm]
> # .example.com = EXAMPLE.COM
> # example.com = EXAMPLE.COM
> 
> > > I haven't checked whether it's an MIT thing or an invalid config 
> > > - IMHO it
> > > doesn't matter - a test should read the system krb5.conf at all.
> > > 
> > > The patches don't necessarily eliminate ALL references to the
> > > system
> > > krb5.conf, just the ones that fail tests.
> > > 
> > > Review and push appreciated.
> > I will take a closer look and comment and/or push.
> > 
> > Cheers - Michael
> Thanks,
> Uri
> 



More information about the samba-technical mailing list