[15521] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

config file verification tool

daemon@ATHENA.MIT.EDU (Zhanna Tsitkova)
Wed Feb 24 08:44:55 2010

From: Zhanna Tsitkova <tsitkova@mit.edu>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Date: Wed, 24 Feb 2010 08:44:47 -0500
Message-ID: <8DD7AD829AB61E499A433D6E558110A31B653C94@EXPO7.exchange.mit.edu>
In-Reply-To: <EB749F47-DB23-4EB4-949B-074561004929@mit.edu>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Hello,
A new kerberos configuration file validation tool is now checked-in under src/util/confvalidator/validator.py.

First, the configuration file is parsed (confparser.py) and validated against formating errors (such as mismatching brackets)
Then the list of the allowed configuration attributes is compiled from k5-int.h ( based on KRB5_CONF_xxx macros in 1.8 ) and rules.yml ("Attributes:" section)
Finally, the kerberos configuration file is validated against this list of the allowed strings.
If the error, or something that validator does not understand, is found then the warning is issued in the tree-like form indicating the layer where the problem has occurred.

Your comments/feedback will be very much appreciated.

Thanks,
Zhanna



_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post