[krbdev.mit.edu #8606] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Aug 22 14:23:03 EDT 2017


Fix bugs in kdcpolicy commit

Commit d0969f6a8170344031ef58fd2a161190f1edfb96 added tests using
"klist ccachname -e", which does not work with a POSIX-conformant
getopt() implementation such as the one in Solaris.  Fix
t_kdcpolicy.py to use "klist -e ccachename" instead.

The tests could fail if the clock second rolled over between kinit and
kvno.  Divide service ticket maximum lifetimes by 2 in the test module
to correctly exercise TGS policy restrictions and ensure that service
tickets are not constrained by the TGT end time.

Also use the correct trace macro when a kdcpolicy module declines to
initialize (my mistake when revising the commit, noted by rharwood).

https://github.com/krb5/krb5/commit/09acbd91efc6df54e1572285ffc94c6acb3a9113
Author: Greg Hudson <ghudson at mit.edu>
Commit: 09acbd91efc6df54e1572285ffc94c6acb3a9113
Branch: master
 src/kdc/policy.c                  |    2 +-
 src/plugins/kdcpolicy/test/main.c |   10 +++++-----
 src/tests/t_kdcpolicy.py          |   13 +++++++++----
 3 files changed, 15 insertions(+), 10 deletions(-)



More information about the krb5-bugs mailing list