<feed xmlns='http://www.w3.org/2005/Atom'>
<title>gss-proxy.git/proxy/tests, branch review</title>
<subtitle>Work on gss-proxy before it lands upstream</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/'/>
<entry>
<title>Really use gss-proxy in tests</title>
<updated>2015-03-24T15:46:37+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2014-12-08T18:00:57+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=785889ad666a67525cbd73d1b098dd53b4cdfc18'/>
<id>785889ad666a67525cbd73d1b098dd53b4cdfc18</id>
<content type='text'>
This is embarrassing, but due to the fact we were passing in client
evnironment variables we were not actually testing the GSS-Proxy, just
regular GSSAPI as the client started so quickly that the socket was
not available yet and it simply fell back to regular GSSAPI.

This commit allows some time for the GSS-Proxy to actually start and
prevents the client from falling back by not telling it where client
credentials are.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is embarrassing, but due to the fact we were passing in client
evnironment variables we were not actually testing the GSS-Proxy, just
regular GSSAPI as the client started so quickly that the socket was
not available yet and it simply fell back to regular GSSAPI.

This commit allows some time for the GSS-Proxy to actually start and
prevents the client from falling back by not telling it where client
credentials are.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Use different env vars bases for gssapi tests</title>
<updated>2015-03-24T15:46:35+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2014-12-08T17:52:52+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=d52acd008b3ffc592d7b6a2aaf97f181a6a23a81'/>
<id>d52acd008b3ffc592d7b6a2aaf97f181a6a23a81</id>
<content type='text'>
Restrict what environment variables are available by default.
gssapienv in particular should not bleed in KRB5_KTNAME.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Restrict what environment variables are available by default.
gssapienv in particular should not bleed in KRB5_KTNAME.
</pre>
</div>
</content>
</entry>
<entry>
<title>Prevent a backtrace when a subprocess is not found</title>
<updated>2015-03-24T15:46:34+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2014-12-08T17:51:27+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=abfa63e92a870bd35fd7c2ac362f509d2d432f2f'/>
<id>abfa63e92a870bd35fd7c2ac362f509d2d432f2f</id>
<content type='text'>
Trap OSError is the kill does not find the subprocess.
This may happen if the subprocess fails early and terminates on its own.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Trap OSError is the kill does not find the subprocess.
This may happen if the subprocess fails early and terminates on its own.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Do not open logfile multiple times</title>
<updated>2015-03-24T15:46:33+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2014-12-08T17:50:39+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=2a5bc7196b88e3b66d18f20aedb50568315f1374'/>
<id>2a5bc7196b88e3b66d18f20aedb50568315f1374</id>
<content type='text'>
Instead reuse it across the whole test by passing it down

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Instead reuse it across the whole test by passing it down

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>BUILD: Fix building rpms</title>
<updated>2015-01-15T18:22:45+00:00</updated>
<author>
<name>Lukas Slebodnik</name>
<email>lslebodn@redhat.com</email>
</author>
<published>2014-11-15T16:26:33+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=8d268e846228f3b2e3bcae59b2c7123affb7610f'/>
<id>8d268e846228f3b2e3bcae59b2c7123affb7610f</id>
<content type='text'>
make rpms failed becuase header file t_utils.h was not included in tarball

t_accept.c:3:21: fatal error: t_utils.h: No such file or directory
 #include "t_utils.h"
                     ^
compilation terminated.
Makefile:445: recipe for target 't_accept.o' failed
make[3]: *** [t_accept.o] Error 1

Signed-off-by: Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
make rpms failed becuase header file t_utils.h was not included in tarball

t_accept.c:3:21: fatal error: t_utils.h: No such file or directory
 #include "t_utils.h"
                     ^
compilation terminated.
Makefile:445: recipe for target 't_accept.o' failed
make[3]: *** [t_accept.o] Error 1

Signed-off-by: Lukas Slebodnik &lt;lslebodn@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Add a test framework for gss-proxy</title>
<updated>2014-09-15T11:09:56+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2014-08-14T21:48:02+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=57a9447610eb29c72f606a59d10c211c8d7f41e6'/>
<id>57a9447610eb29c72f606a59d10c211c8d7f41e6</id>
<content type='text'>
This sets up a kdc using socket_wrapper and nss_wrapper from the cwrap
project, and uses a dirty hack to force gssapi to load the current
proxymech interposer library.

It provisions a service and a user key then runs the interpostest binary
in this artifical environment.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
Reviewed-by: Guenther Deschner &lt;gdeschner@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This sets up a kdc using socket_wrapper and nss_wrapper from the cwrap
project, and uses a dirty hack to force gssapi to load the current
proxymech interposer library.

It provisions a service and a user key then runs the interpostest binary
in this artifical environment.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
Reviewed-by: Guenther Deschner &lt;gdeschner@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Coverity fixes.</title>
<updated>2013-06-27T16:07:23+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>simo@redhat.com</email>
</author>
<published>2013-06-25T20:07:42+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=f66a585e042fbb2f313c1cbde329088fac86cea6'/>
<id>f66a585e042fbb2f313c1cbde329088fac86cea6</id>
<content type='text'>
Fix a 4 coverity issues, ranging from memory leaks, to uninitialized
variables, to potential NULL derefernce.
Also a TOCTOU report that is in one of the accessory test scripts.
The bug itself is not reallya TOCTOU, but the check done in the script is
unecessary, so I just removed it.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
Reviewed-by: Günther Deschner &lt;gdeschner@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fix a 4 coverity issues, ranging from memory leaks, to uninitialized
variables, to potential NULL derefernce.
Also a TOCTOU report that is in one of the accessory test scripts.
The bug itself is not reallya TOCTOU, but the check done in the script is
unecessary, so I just removed it.

Signed-off-by: Simo Sorce &lt;simo@redhat.com&gt;
Reviewed-by: Günther Deschner &lt;gdeschner@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Disable gss_export_name_composite() for now.</title>
<updated>2013-05-16T10:11:42+00:00</updated>
<author>
<name>Günther Deschner</name>
<email>gdeschner@redhat.com</email>
</author>
<published>2013-05-16T10:06:19+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=94d395f36e996f19d7e10a54c734f8bc0dc21da1'/>
<id>94d395f36e996f19d7e10a54c734f8bc0dc21da1</id>
<content type='text'>
We first need to fix our tests and implementation.

Temporary workaround for:
https://fedorahosted.org/gss-proxy/ticket/81

Signed-off-by: Günther Deschner &lt;gdeschner@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We first need to fix our tests and implementation.

Temporary workaround for:
https://fedorahosted.org/gss-proxy/ticket/81

Signed-off-by: Günther Deschner &lt;gdeschner@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Add dlopen script to check for unresolved symbols.</title>
<updated>2013-05-15T15:18:51+00:00</updated>
<author>
<name>Günther Deschner</name>
<email>gdeschner@redhat.com</email>
</author>
<published>2013-05-15T09:22:34+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=a4a2761bbc644e400d1154544e0918f0f9a1caff'/>
<id>a4a2761bbc644e400d1154544e0918f0f9a1caff</id>
<content type='text'>
Vendors can call "make test_proxymech" from their specfile to make sure
proxymech.so can be properly loaded by the GSSAPI.

Signed-off-by: Günther Deschner &lt;gdeschner@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Vendors can call "make test_proxymech" from their specfile to make sure
proxymech.so can be properly loaded by the GSSAPI.

Signed-off-by: Günther Deschner &lt;gdeschner@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Add --all option to interposetest</title>
<updated>2013-04-23T19:01:51+00:00</updated>
<author>
<name>Günther Deschner</name>
<email>gdeschner@redhat.com</email>
</author>
<published>2013-03-22T19:18:56+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=40c60f6b1d7d38290cddaaffd7bc34849721014c'/>
<id>40c60f6b1d7d38290cddaaffd7bc34849721014c</id>
<content type='text'>
test all possible proxy mode combinations only when --all is given.

Signed-off-by: Günther Deschner &lt;gdeschner@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
test all possible proxy mode combinations only when --all is given.

Signed-off-by: Günther Deschner &lt;gdeschner@redhat.com&gt;
Reviewed-by: Simo Sorce &lt;simo@redhat.com&gt;
</pre>
</div>
</content>
</entry>
</feed>
