[27726] in CVS-changelog-for-Kerberos-V5

home help back first fref pref prev next nref lref last post

krb5 commit: Disable the gssrpc expired-cred test

daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed May 1 17:19:02 2013

Date: Wed, 1 May 2013 17:18:56 -0400
From: Greg Hudson <ghudson@mit.edu>
Message-Id: <201305012118.r41LIuFJ019396@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu

https://github.com/krb5/krb5/commit/5df34938ad875db43a584f12e181b8ae9705ff44
commit 5df34938ad875db43a584f12e181b8ae9705ff44
Author: Greg Hudson <ghudson@mit.edu>
Date:   Wed May 1 15:52:40 2013 -0400

    Disable the gssrpc expired-cred test
    
    The "expired" test in expire.exp tries to authenticate to the server
    process with an expired TGT (obtained using kinit -l -1m).  Using an
    expired TGT to get an expired service cred no longer works after
    #6948.  We could use kinit -S to get an expired service cred, but
    krb5_get_credentials won't return expired service cred from the cache
    (even before #6948).  We could use time offsets to simulate clock skew
    between the client and server process, but that would be difficult
    because the test programs don't have access to the krb5_context
    objects used by the client or server process.  Since we don't have a
    simple workaround, disable the test.

 src/lib/rpc/unit-test/rpc_test.0/expire.exp |    5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/lib/rpc/unit-test/rpc_test.0/expire.exp b/src/lib/rpc/unit-test/rpc_test.0/expire.exp
index ab37965..e19cca0 100644
--- a/src/lib/rpc/unit-test/rpc_test.0/expire.exp
+++ b/src/lib/rpc/unit-test/rpc_test.0/expire.exp
@@ -19,8 +19,9 @@ proc expired {} {
     flush_server
 }
 
-#if { [info exists server_pid] && ($server_pid >= 0) } { expired }
-if { $server_started } {expired } 
+# This test doesn't work after #6948, because the client won't try to
+# authenticate using an expired TGT.
+#if { $server_started } {expired }
 
 proc overlap {} {
     global spawn_id
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5

home help back first fref pref prev next nref lref last post