aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLuke Howard <lukeh@padl.com>2009-09-11 12:16:08 +0000
committerLuke Howard <lukeh@padl.com>2009-09-11 12:16:08 +0000
commita48d498a571f2f3b0b4a63f81b8caa6d1f1b71e4 (patch)
tree451246ab83e3bbf1fff397a4bef343081d35c9de
parent12ba11b327ce14c4847f1b717796f6d95078dc25 (diff)
downloadkrb5-a48d498a571f2f3b0b4a63f81b8caa6d1f1b71e4.zip
krb5-a48d498a571f2f3b0b4a63f81b8caa6d1f1b71e4.tar.gz
krb5-a48d498a571f2f3b0b4a63f81b8caa6d1f1b71e4.tar.bz2
update testing notes
git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/s4u@22725 dc483132-0cff-0310-8789-dd5450dbe970
-rw-r--r--src/tests/gssapi/t_s4u.c7
1 files changed, 5 insertions, 2 deletions
diff --git a/src/tests/gssapi/t_s4u.c b/src/tests/gssapi/t_s4u.c
index 38f6203..264e60a 100644
--- a/src/tests/gssapi/t_s4u.c
+++ b/src/tests/gssapi/t_s4u.c
@@ -43,6 +43,9 @@
* need to use the canonical name (FOO$), which will cause principal
* comparison errors in gss_accept_sec_context().
* - Add a SPN of host/foo.domain
+ * - Configure the computer account to support constrained delegation with
+ * protocol transition (Trust this computer for delegation to specified
+ * services only / Use any authentication protocol)
* - Add host/foo.domain to the keytab (possibly easiest to do this
* with ktadd)
*
@@ -50,8 +53,8 @@
*
* Usage eg:
*
- * kinit -f host/mithost.win.mit.edu@WIN.MIT.EDU
- * t_s4u delegtest@WIN.MIT.EDU HOST@WIN-EQ7E4AA2WR8.win.mit.edu krb5.keytab
+ * kinit -k -t test.keytab -f 'host/test.win.mit.edu@WIN.MIT.EDU'
+ * ./t_s4u delegtest@WIN.MIT.EDU HOST/WIN-EQ7E4AA2WR8.win.mit.edu@WIN.MIT.EDU test.keytab
*/
static gss_OID_desc spnego_mech = { 6, "\053\006\001\005\005\002" };