krb5 commit: Disable the gssrpc expired-cred test

Greg Hudson ghudson at MIT.EDU
Wed May 1 17:18:56 EDT 2013


https://github.com/krb5/krb5/commit/5df34938ad875db43a584f12e181b8ae9705ff44
commit 5df34938ad875db43a584f12e181b8ae9705ff44
Author: Greg Hudson <ghudson at mit.edu>
Date:   Wed May 1 15:52:40 2013 -0400

    Disable the gssrpc expired-cred test
    
    The "expired" test in expire.exp tries to authenticate to the server
    process with an expired TGT (obtained using kinit -l -1m).  Using an
    expired TGT to get an expired service cred no longer works after
    #6948.  We could use kinit -S to get an expired service cred, but
    krb5_get_credentials won't return expired service cred from the cache
    (even before #6948).  We could use time offsets to simulate clock skew
    between the client and server process, but that would be difficult
    because the test programs don't have access to the krb5_context
    objects used by the client or server process.  Since we don't have a
    simple workaround, disable the test.

 src/lib/rpc/unit-test/rpc_test.0/expire.exp |    5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/lib/rpc/unit-test/rpc_test.0/expire.exp b/src/lib/rpc/unit-test/rpc_test.0/expire.exp
index ab37965..e19cca0 100644
--- a/src/lib/rpc/unit-test/rpc_test.0/expire.exp
+++ b/src/lib/rpc/unit-test/rpc_test.0/expire.exp
@@ -19,8 +19,9 @@ proc expired {} {
     flush_server
 }
 
-#if { [info exists server_pid] && ($server_pid >= 0) } { expired }
-if { $server_started } {expired } 
+# This test doesn't work after #6948, because the client won't try to
+# authenticate using an expired TGT.
+#if { $server_started } {expired }
 
 proc overlap {} {
     global spawn_id


More information about the cvs-krb5 mailing list