mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-19 17:08:52 -04:00
1d4fbe2511
Four named instances in the "nsupdate" system test have GSS-TSIG support
enabled. All of them currently use "tkey-gssapi-keytab". Configure two
of them with "tkey-gssapi-credential" to test that option.
As "tkey-gssapi-keytab" and "tkey-gssapi-credential" both provide the
same functionality, no test modifications are required. The difference
between the two options is that the value of "tkey-gssapi-keytab" is an
explicit path to the keytab file to acquire credentials from, while the
value of "tkey-gssapi-credential" is the name of the principal whose
credentials should be used; those credentials are looked up in the
keytab file expected by the Kerberos library, i.e. /etc/krb5.keytab by
default. The path to the default keytab file can be overridden using by
setting the KRB5_KTNAME environment variable. Utilize that variable to
use existing keytab files with the "tkey-gssapi-credential" option.
The KRB5_KTNAME environment variable should not interfere with the
"tkey-gssapi-keytab" option. Nevertheless, rename one of the keytab
files used with "tkey-gssapi-keytab" to something else than the contents
of the KRB5_KTNAME environment variable in order to make sure that both
"tkey-gssapi-keytab" and "tkey-gssapi-credential" are actually tested.
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| bindkeys.pl | ||
| branchsync.sh | ||
| check-ans-prereq.sh | ||
| check-categories.sh | ||
| check-changes | ||
| check-cocci | ||
| check-includes.pl | ||
| check-instincludes.sh | ||
| check-line-length.sh | ||
| check-make-install.in | ||
| check-pullups.pl | ||
| check-sources.pl | ||
| check-win32util-configure | ||
| checklibs.sh | ||
| commit-arm.sh | ||
| COPYRIGHT | ||
| COPYRIGHT.BRIEF | ||
| COPYRIGHT.BSDI | ||
| COPYRIGHT.NAI | ||
| COPYRIGHT.NOM | ||
| COPYRIGHT.PORTION | ||
| COPYRIGHT.TOP | ||
| copyrights | ||
| git-replay-merge.sh | ||
| kit.sh | ||
| mandoc2docbook.pl | ||
| mdnbuildtest.sh | ||
| memleak.pl | ||
| merge_copyrights | ||
| mksymtbl.pl | ||
| models.c | ||
| nanny.pl | ||
| new-func | ||
| nt-kit | ||
| pairwise-testing.sh | ||
| parse_tsan.py | ||
| run-clang-tidy | ||
| spacewhack.pl | ||
| suppressions.txt | ||
| tabify-changes | ||
| update-drafts.pl | ||
| update_branches | ||
| update_copyrights | ||
| xc | ||