Sun 02 Oct 2005 05:31:07 PM UTC, comment #9:
Hi Derek,
I submit to bugzilla new version patch. Main goal this version - add simple use regression tests for `gserver'.
1. I add to sanity.sh test `gserver'. This test create "Kerberos 5 sand-box EXAMPLE.COM", and don't needed to Kerberos 5 infrastrukture. May be Your able start this test on yours personal computer;
2. Compile gserver/client for Solaris 9/10;
3. Repair detected bugs.
TODO:
This patch not ideal, but ideal solution need to improve other part of CVS. This need to discussion:
a. Regress test need local user `client'. Because gserver authentication start without root definition, gserver_authenticate_connection() can't use CVSROOT/passwd for user maping. May be add command line option for point of CVSROOT/passwd?
b. May be add documentation for gserver? Informationly I may
add it, but languge :(.
c. Windows ports don't have gserver. Do you need add SSPI to CVS? This medium work - 6-12 weeks.
d. Root command worked without any protection. May be start encryption/indegrity check immediate after authentification by option `-x' and `-a'?
For additional information see patchs for ChangeLog files.
Sorry for my best English.
|