[krbdev.mit.edu #8606] git commit
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Tue Aug 22 14:23:03 EDT 2017
Fix bugs in kdcpolicy commit
Commit d0969f6a8170344031ef58fd2a161190f1edfb96 added tests using
"klist ccachname -e", which does not work with a POSIX-conformant
getopt() implementation such as the one in Solaris. Fix
t_kdcpolicy.py to use "klist -e ccachename" instead.
The tests could fail if the clock second rolled over between kinit and
kvno. Divide service ticket maximum lifetimes by 2 in the test module
to correctly exercise TGS policy restrictions and ensure that service
tickets are not constrained by the TGT end time.
Also use the correct trace macro when a kdcpolicy module declines to
initialize (my mistake when revising the commit, noted by rharwood).
https://github.com/krb5/krb5/commit/09acbd91efc6df54e1572285ffc94c6acb3a9113
Author: Greg Hudson <ghudson at mit.edu>
Commit: 09acbd91efc6df54e1572285ffc94c6acb3a9113
Branch: master
src/kdc/policy.c | 2 +-
src/plugins/kdcpolicy/test/main.c | 10 +++++-----
src/tests/t_kdcpolicy.py | 13 +++++++++----
3 files changed, 15 insertions(+), 10 deletions(-)
More information about the krb5-bugs
mailing list