]> git.ipfire.org Git - thirdparty/krb5.git/commit
Restrict test KDB to local principals 1024/head
authorIsaac Boukris <iboukris@gmail.com>
Sun, 12 Jan 2020 17:57:10 +0000 (18:57 +0100)
committerGreg Hudson <ghudson@mit.edu>
Mon, 13 Jan 2020 20:36:40 +0000 (15:36 -0500)
commit8c4bbfa21fe539fc8644e77814bf05ad00574750
treefc0e5442d550c4be3d8ba0a3c71ba6e559aa0cd8
parentdeb64d5eca602c7147b4253e51976c45f58b465f
Restrict test KDB to local principals

Ignoring the lookup realm for principal matching could cause the test
KDB module to successfully look up entries (with the correct key data)
for principals that a real KDB wouldn't have, such as krbtgt/B@A
within realm C.  Add a realm check to test_get_principal(), allowing
only local principal names or incoming cross-TGS names.

[ghudson@mit.edu: changed error code; rewrote commit message]
src/plugins/kdb/test/kdb_test.c
src/tests/gssapi/t_s4u.py