| | server | | | ( 3 seconds ) | GSS-TSIG TKEY exchange to |
| | | | | finish before it timeouts |
+----------------------+----------+---------+---------------------+--------------------------------+
- | ignore-bad-direction | global | true / | false | ignore invalid MIC / bad |
+ | ignore-bad-direction | global | true / | false | ignore invalid MIC / bad |
| | | false | | direction verify failures. |
+----------------------+----------+---------+---------------------+--------------------------------+
| user-context | global / | string | empty | the user-provided data in JSON |
for the global-level parameter.
- ``ignore-bad-direction`` governs a workaround for Microsoft server bug.
- When set explicitly to true DNS update responses sent when prerequisites
- fail with the request signature are accepted as verified.
+ When set explicitly to true sent DNS update responses are accepted as
+ verified even when prerequisites fail with the request signature.
- ``user-context`` is an optional parameter (see :ref:`user-context`
for a general description of user contexts in Kea).
/// @brief Checks ignore bad direction default value.
TEST(GssTsigCfgTest, IgnoreBadDirectionDefault) {
// Constructor default is false.
- GssTsigCfg cfg;
- ASSERT_FALSE(cfg.getIgnoreBadDirection());
- ASSERT_FALSE(GssApiSecCtx::ignore_bad_direction_);
- ConstElementPtr json = Element::createMap();
- ASSERT_NO_THROW(cfg.configure(json));
- EXPECT_FALSE(cfg.getIgnoreBadDirection());
- EXPECT_FALSE(GssApiSecCtx::ignore_bad_direction_);
+ GssTsigCfg cfg;
+ xASSERT_FALSE(cfg.getIgnoreBadDirection());
+ ASSERT_FALSE(GssApiSecCtx::ignore_bad_direction_);
+ ConstElementPtr json = Element::createMap();
+ ASSERT_NO_THROW(cfg.configure(json));
+ EXPECT_FALSE(cfg.getIgnoreBadDirection());
+ EXPECT_FALSE(GssApiSecCtx::ignore_bad_direction_);
}
/// @brief Check TKEY protocol default value.