[PATCHES] Avoid system krb5.conf in selftest

Uri Simchoni uri at samba.org
Mon Oct 26 21:49:06 UTC 2015



On 10/26/2015 11:42 PM, Michael Adam wrote:
> On 2015-10-26 at 23:17 +0200, Uri Simchoni wrote:
>> Hi,
>>
>> Following patches fix "make test" on my FC22 box. The recurring theme was
>> that this box has a krb5.conf that is deemed invalid by the Heimdal libs
>> embedded in samba. Tests that need krb5.conf take care to divert the test
>> program from the system krb5.conf to the testenv version. Tests that do not
>> need krb5.conf sometimes omit this, causing the test to read the system
>> krb5.conf (while creating a context) and choke.
> Is it complaining with EINVAL ?
Yes (printing "Invalid parameter")
> I have been starting to chase an issue sounding very similar
> today (with Anoop).
> Maybe you have just solved the thing for us... :-)
> Was it failing also for the ad_dc_ntvfs env?
Yes, that's the first failure, then there were some more.
> What kind of krb5.conf do you use?
includedir /etc/krb5.conf.d/
#/etc/krb5.conf.d is empty...

[logging]
  default = FILE:/var/log/krb5libs.log
  kdc = FILE:/var/log/krb5kdc.log
  admin_server = FILE:/var/log/kadmind.log

[libdefaults]
  dns_lookup_realm = false
  ticket_lifetime = 24h
  renew_lifetime = 7d
  forwardable = true
  rdns = false
# default_realm = EXAMPLE.COM
  default_ccache_name = KEYRING:persistent:%{uid}

[realms]
# EXAMPLE.COM = {
#  kdc = kerberos.example.com
#  admin_server = kerberos.example.com
# }

[domain_realm]
# .example.com = EXAMPLE.COM
# example.com = EXAMPLE.COM

>> I haven't checked whether it's an MIT thing or an invalid config - IMHO it
>> doesn't matter - a test should read the system krb5.conf at all.
>>
>> The patches don't necessarily eliminate ALL references to the system
>> krb5.conf, just the ones that fail tests.
>>
>> Review and push appreciated.
> I will take a closer look and comment and/or push.
>
> Cheers - Michael
Thanks,
Uri



More information about the samba-technical mailing list