From a48d498a571f2f3b0b4a63f81b8caa6d1f1b71e4 Mon Sep 17 00:00:00 2001 From: Luke Howard Date: Fri, 11 Sep 2009 12:16:08 +0000 Subject: update testing notes git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/s4u@22725 dc483132-0cff-0310-8789-dd5450dbe970 --- src/tests/gssapi/t_s4u.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/tests/gssapi/t_s4u.c b/src/tests/gssapi/t_s4u.c index 38f6203..264e60a 100644 --- a/src/tests/gssapi/t_s4u.c +++ b/src/tests/gssapi/t_s4u.c @@ -43,6 +43,9 @@ * need to use the canonical name (FOO$), which will cause principal * comparison errors in gss_accept_sec_context(). * - Add a SPN of host/foo.domain + * - Configure the computer account to support constrained delegation with + * protocol transition (Trust this computer for delegation to specified + * services only / Use any authentication protocol) * - Add host/foo.domain to the keytab (possibly easiest to do this * with ktadd) * @@ -50,8 +53,8 @@ * * Usage eg: * - * kinit -f host/mithost.win.mit.edu@WIN.MIT.EDU - * t_s4u delegtest@WIN.MIT.EDU HOST@WIN-EQ7E4AA2WR8.win.mit.edu krb5.keytab + * kinit -k -t test.keytab -f 'host/test.win.mit.edu@WIN.MIT.EDU' + * ./t_s4u delegtest@WIN.MIT.EDU HOST/WIN-EQ7E4AA2WR8.win.mit.edu@WIN.MIT.EDU test.keytab */ static gss_OID_desc spnego_mech = { 6, "\053\006\001\005\005\002" }; -- cgit v1.1