[PATCH] Fix regression in samba-tool domain exportkeytab

Andrew Bartlett abartlet at samba.org
Mon Apr 18 18:43:29 UTC 2016


On Mon, 2016-04-18 at 11:45 +0200, Ralph Boehme wrote:
> On Sun, Apr 17, 2016 at 07:26:05PM +0200, Ralph Boehme wrote:
> > Hi!
> > 
> > Stumbled across that samba-tool domain exportkeytab --principal
> > doesn't work anymore in master. Turns out that exporting all keys
> > is
> > broken as well, only one enctype per principal is preserved in the
> > keytab.
> 
> after a private conversation with Andreas, we agreed that, while
> we're
> at it, we should look at smb_krb5_kt_add_entry() and why it deletes
> entries in this case where it's probably supposed to preserver them.
> 
> Also, I'm going to fix the incomplete test for the expportkeytab
> --principal=<SPN> test in
> testprogs/blackbox/test_export_keytab_mit.sh.

Thanks.  I was going to ask why we hadn't picked this up in make test.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba






More information about the samba-technical mailing list