]> git.ipfire.org Git - thirdparty/krb5.git/commitdiff
Disable canonicalization in ccselect tests
authorGreg Hudson <ghudson@mit.edu>
Wed, 4 Jul 2018 16:11:45 +0000 (16:11 +0000)
committerGreg Hudson <ghudson@mit.edu>
Mon, 29 Oct 2018 06:40:26 +0000 (02:40 -0400)
DNS canonicalization can interfere with the fallback tests by changing
"localhost" to have multiple components, or (less likely) changing the
parent domain of foo.krbtest.com or foo.krbtest2.com.

(cherry picked from commit b5457d8fb719a583b89e1ace186301a144e2c4c9)

src/tests/gssapi/t_ccselect.py

index 6be6b4ec06c16af9f8d04ed073e7cc7e6d9ff728..65d1297a7a3c381344e819118e50df4db2439b2e 100755 (executable)
 
 from k5test import *
 
-# Create two independent realms (no cross-realm TGTs).
-r1 = K5Realm(create_user=False)
-r2 = K5Realm(create_user=False, realm='KRBTEST2.COM', portbase=62000,
-             testdir=os.path.join(r1.testdir, 'r2'))
+# Create two independent realms (no cross-realm TGTs).  For the
+# fallback realm tests we need to control the precise server hostname,
+# so turn off DNS canonicalization.
+conf = {'libdefaults': {'dns_canonicalize_hostname': 'false'}}
+r1 = K5Realm(create_user=False, krb5_conf=conf)
+r2 = K5Realm(create_user=False, krb5_conf=conf, realm='KRBTEST2.COM',
+             portbase=62000, testdir=os.path.join(r1.testdir, 'r2'))
 
 host1 = 'p:' + r1.host_princ
 host2 = 'p:' + r2.host_princ