[15588] in Kerberos_V5_Development
Re: config file verification tool
daemon@ATHENA.MIT.EDU (Zhanna Tsitkova)
Fri Mar 12 10:50:49 2010
Message-Id: <702ED787-B156-4868-88A8-829C4348B430@mit.edu>
From: Zhanna Tsitkova <tsitkova@mit.edu>
To: Mark Phalan <Mark.Phalan@Sun.COM>
In-Reply-To: <4B90EA38.7010605@Sun.COM>
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Fri, 12 Mar 2010 10:50:42 -0500
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
I am afraid it would add both the undesirable complexity to the code
and the additional overhead during the run-time.
The main purpose of this validator tool is to avoid both of these
complications.
Thanks,
Zhanna
On Mar 5, 2010, at 6:25 AM, Mark Phalan wrote:
> On 02/24/10 02:44 PM, Zhanna Tsitkova wrote:
>> Hello, A new kerberos configuration file validation tool is now
>> checked-in under src/util/confvalidator/validator.py.
>>
>> First, the configuration file is parsed (confparser.py) and validated
>> against formating errors (such as mismatching brackets) Then the list
>> of the allowed configuration attributes is compiled from k5-int.h (
>> based on KRB5_CONF_xxx macros in 1.8 ) and rules.yml ("Attributes:"
>> section) Finally, the kerberos configuration file is validated
>> against this list of the allowed strings. If the error, or something
>> that validator does not understand, is found then the warning is
>> issued in the tree-like form indicating the layer where the problem
>> has occurred.
>>
>> Your comments/feedback will be very much appreciated.
>
> Sounds great. It would be nice if some of this functionality could be
> included in libkrb5 itself so that a more detailed error message could
> be generated on a krb5.conf parse error.
> Any plans to do that?
>
> Thanks,
>
> -M
> _______________________________________________
> krbdev mailing list krbdev@mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev
Zhanna Tsitkova
tsitkova@mit.edu
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
