[krbdev.mit.edu #5450] gsstest complaint: can't inquire for name with default acceptor credentials

Ken Raeburn via RT rt-comment at krbdev.mit.edu
Tue Feb 27 16:05:33 EST 2007


Split out from ticket 5445:

TEST: acquiring *default* accepting credentials (simple)
Status:  gss_inquire_cred Acc() == (GSS_S_DEFECTIVE_CREDENTIAL)
          gss_display_status(0x000a0000,GSS_S_GSS_CODE) =
            "Invalid credential was supplied"
RESULT  NOT ok (rc=1)

It looks like acquiring the default acceptor credentials doesn't
produce an error, but calling gss_inquire_cred on the result to get a
name out does, because internally it tries to import an empty name.
(Acquiring the acceptor credentials by name was a previous test, and
worked fine.)

TEST: acquiring *default* accepting credentials (query)
Status:  gss_inquire_cred Acc() == (GSS_S_DEFECTIVE_CREDENTIAL)
          gss_display_status(0x000a0000,GSS_S_GSS_CODE) =
            "Invalid credential was supplied"
RESULT  NOT ok (rc=1)

The "query" version of this test looks at the name in the acquired
credentials, plays some games with exporting and importing and
canonicalizing the name, then tries to acquire credentials using the
resulting name.



More information about the krb5-bugs mailing list