directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alex Karasulu" <>
Subject Re: [ApacheDS] [Kerberos] Where are the full integration tests for Kerberos backed by the DIT
Date Mon, 15 Oct 2007 02:05:42 GMT
On 10/12/07, Enrique Rodriguez <> wrote:
> On 10/11/07, Alex Karasulu <> wrote:
> >
> > Do you have any integration tests for Kerberos where it's backed by the
> DIT?
> > As I refactor I wanted
> > to make sure I don't break the store integration in the Kerberos server.
> The short answer is no.  The longer answer is that we discussed this
> and the problem is that we only have the JAAS Kerberos client
> available for full ITests tests and, since it is fixed to use port 88
> (requires external config to override), we can't use it for tests
> since that requires a root bind.  So, I launched into the Kerberos
> client component initiative.  That is pretty well along, and it is
> great for ITests, but it is not stable enough to use, just yet, in the
> trunk.

That's fine let's use it for ITests then.  Why start adding PKINIT support
before this is done?
As a result we are refactoring code and possibly breaking the other
protocols.  Are you willing
to either add the unit tests and/or keep testing the server in the big bang


View raw message