Re: Fwd: Testing 3 Kerberos realms from same server

2017-05-03 Thread David A. Kovacic
Many thanks for the pointers regarding this. We are successfully running cross-realm tests in at least the perl environment. I do not believe that python has a mechanism to allow the same but will investigate further on that as time permits. On 5/1/17 7:37 PM, Russ Allbery wrote: > "David A. K

Re: Fwd: Testing 3 Kerberos realms from same server

2017-05-01 Thread Russ Allbery
"David A. Kovacic" writes: > Unfortunately we are not using kadmin and do not have the ability to set > the "-r" flag in this case. We are trying to create test programs in > perl and python that test the KDC functionality so that when we upgrade > we can test development, test, and production s

Re: Fwd: Testing 3 Kerberos realms from same server

2017-05-01 Thread David A. Kovacic
Unfortunately we are not using kadmin and do not have the ability to set the "-r" flag in this case. We are trying to create test programs in perl and python that test the KDC functionality so that when we upgrade we can test development, test, and production servers all from the same machine rath

Re: Fwd: Testing 3 Kerberos realms from same server

2017-05-01 Thread Greg Hudson
On 05/01/2017 04:10 PM, David A. Kovacic wrote: > The perl programs use Authen::Krb5::Admin and the python program uses > python-kadmin to try the tests - both of which use the Kerberos > libraries to implement the "init with keytab" routine to produce an > admin object with which we can manipulate