directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From David Jencks <>
Subject Re: [ApacheDS] [Kerberos] Where are the full integration tests for Kerberos backed by the DIT
Date Fri, 12 Oct 2007 18:53:07 GMT

On Oct 12, 2007, at 9:39 AM, Enrique Rodriguez wrote:

> On 10/11/07, Alex Karasulu <> wrote:
>> Do you have any integration tests for Kerberos where it's backed  
>> by the DIT?
>> As I refactor I wanted
>> to make sure I don't break the store integration in the Kerberos  
>> server.
> The short answer is no.  The longer answer is that we discussed this
> and the problem is that we only have the JAAS Kerberos client
> available for full ITests tests and, since it is fixed to use port 88
> (requires external config to override), we can't use it for tests
> since that requires a root bind.  So, I launched into the Kerberos
> client component initiative.  That is pretty well along, and it is
> great for ITests, but it is not stable enough to use, just yet, in the
> trunk.
> If you really want to test, you can use the SaslGssapiITest in
> server-unit.  This is commented out for the aforementioned root bind
> issue with the Kerberos LoginModule.  Also, of course, it is testing
> LDAP GSSAPI but it does first use Kerberos, so you could use it in a
> pinch.

Due to the shifting sands of dependencies I moved this test to  
protocol-kerberos and it now seems to be running as a regular non- 
itest.  Running with mvn clean install it's the first failure I get  
after alex's changes last night.

david jencks

> Enrique

View raw message