[PATCHES] Avoid system krb5.conf in selftest
Uri Simchoni
uri at samba.org
Mon Oct 26 21:49:06 UTC 2015
On 10/26/2015 11:42 PM, Michael Adam wrote:
> On 2015-10-26 at 23:17 +0200, Uri Simchoni wrote:
>> Hi,
>>
>> Following patches fix "make test" on my FC22 box. The recurring theme was
>> that this box has a krb5.conf that is deemed invalid by the Heimdal libs
>> embedded in samba. Tests that need krb5.conf take care to divert the test
>> program from the system krb5.conf to the testenv version. Tests that do not
>> need krb5.conf sometimes omit this, causing the test to read the system
>> krb5.conf (while creating a context) and choke.
> Is it complaining with EINVAL ?
Yes (printing "Invalid parameter")
> I have been starting to chase an issue sounding very similar
> today (with Anoop).
> Maybe you have just solved the thing for us... :-)
> Was it failing also for the ad_dc_ntvfs env?
Yes, that's the first failure, then there were some more.
> What kind of krb5.conf do you use?
includedir /etc/krb5.conf.d/
#/etc/krb5.conf.d is empty...
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
# default_realm = EXAMPLE.COM
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
# EXAMPLE.COM = {
# kdc = kerberos.example.com
# admin_server = kerberos.example.com
# }
[domain_realm]
# .example.com = EXAMPLE.COM
# example.com = EXAMPLE.COM
>> I haven't checked whether it's an MIT thing or an invalid config - IMHO it
>> doesn't matter - a test should read the system krb5.conf at all.
>>
>> The patches don't necessarily eliminate ALL references to the system
>> krb5.conf, just the ones that fail tests.
>>
>> Review and push appreciated.
> I will take a closer look and comment and/or push.
>
> Cheers - Michael
Thanks,
Uri
More information about the samba-technical
mailing list