[PATCH] Fix regression in samba-tool domain exportkeytab

Ralph Boehme slow at samba.org
Mon Apr 18 09:45:10 UTC 2016


On Sun, Apr 17, 2016 at 07:26:05PM +0200, Ralph Boehme wrote:
> Hi!
> 
> Stumbled across that samba-tool domain exportkeytab --principal
> doesn't work anymore in master. Turns out that exporting all keys is
> broken as well, only one enctype per principal is preserved in the
> keytab.

after a private conversation with Andreas, we agreed that, while we're
at it, we should look at smb_krb5_kt_add_entry() and why it deletes
entries in this case where it's probably supposed to preserver them.

Also, I'm going to fix the incomplete test for the expportkeytab
--principal=<SPN> test in testprogs/blackbox/test_export_keytab_mit.sh.

Cheerio!
-slow



More information about the samba-technical mailing list