Skip Menu |
 

To: krb5-bugs@MIT.EDU
Subject: Do something reasonable if "kinit -t" without "-k"
From: Tom Yu <tlyu@MIT.EDU>
Date: Fri, 20 Jul 2012 16:27:10 -0400
It's possible to run "kinit -t keytabfile" without specifying the "-k"
option. This can cause surprising behavior. Possibly kinit should
warn, exit with an error, or behave as if "-t" implied "-k".
Similar logic applies to the recently added kinit -i.
From: kaduk@MIT.EDU
Subject: SVN Commit

Make kinit smarter about using keytabs

Previously, we would happily accept -i or -t name and do nothing
with it, if -k was not given. If the user is passing -i or -t, they
clearly want to use a keytab, so do so (but print a warning).

While here, enforce that only one of -t and -i is given.

https://github.com/krb5/krb5/commit/cfd85f4130e015bf823a745438e87641f9ead49e
Author: Ben Kaduk <kaduk@mit.edu>
Commit: cfd85f4130e015bf823a745438e87641f9ead49e
Branch: master
src/clients/kinit/kinit.c | 11 +++++++++++
1 files changed, 11 insertions(+), 0 deletions(-)
From: kaduk@MIT.EDU
Subject: SVN Commit

Tests for kinit's detection of a keytab request

We must check that 'kinit -t keytab' and 'kinit -i' successfully
produce tickets, and have the specified warning output.

https://github.com/krb5/krb5/commit/76259be582f1e0d07c2a8993741e4893c7fd6f74
Author: Ben Kaduk <kaduk@mit.edu>
Commit: 76259be582f1e0d07c2a8993741e4893c7fd6f74
Branch: master
src/tests/t_keytab.py | 12 ++++++++++++
1 files changed, 12 insertions(+), 0 deletions(-)
From: tlyu@mit.edu
Subject: SVN Commit

Make kinit smarter about using keytabs

Previously, we would happily accept -i or -t name and do nothing
with it, if -k was not given. If the user is passing -i or -t, they
clearly want to use a keytab, so do so (but print a warning).

While here, enforce that only one of -t and -i is given.

(cherry picked from commit cfd85f4130e015bf823a745438e87641f9ead49e)

https://github.com/krb5/krb5/commit/aff7056302e756da95408690cb8a083479af5056
Author: Ben Kaduk <kaduk@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: aff7056302e756da95408690cb8a083479af5056
Branch: krb5-1.11
src/clients/kinit/kinit.c | 11 +++++++++++
1 files changed, 11 insertions(+), 0 deletions(-)
From: tlyu@mit.edu
Subject: SVN Commit

Tests for kinit's detection of a keytab request

We must check that 'kinit -t keytab' and 'kinit -i' successfully
produce tickets, and have the specified warning output.

(cherry picked from commit 76259be582f1e0d07c2a8993741e4893c7fd6f74)

https://github.com/krb5/krb5/commit/35a5dd9ef11cc9c0bd52bcc856af556ac29790a7
Author: Ben Kaduk <kaduk@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: 35a5dd9ef11cc9c0bd52bcc856af556ac29790a7
Branch: krb5-1.11
src/tests/t_keytab.py | 12 ++++++++++++
1 files changed, 12 insertions(+), 0 deletions(-)