1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160 | Creating database
Check parser
Doing database check
Extracting enctypes
deleting all but des enctypes on kt-des3 in keytab
checking globbing keys rules
Starting kdc
Waiting for KDC to start, looking logfile messages.log
Have waited 2 seconds
Starting kpasswdd
Getting client initial tickets with wrong password
Getting client initial tickets
Doing krbtgt key rollover
Getting tickets
Listing tickets
Getting client initial tickets (http transport)
Testing capaths logic
Getting x-realm tickets with capaths for TEST.H5L.SE -> TEST2.H5L.SE
Getting x-realm tickets with capaths for TEST.H5L.SE -> TEST3.H5L.SE
Getting x-realm tickets with capaths for TEST.H5L.SE -> TEST4.H5L.SE
Getting x-realm tickets with capaths for TEST.H5L.SE -> SOME-REALM5.FR
Getting x-realm tickets with capaths for TEST.H5L.SE -> SOME-REALM6.US
Getting x-realm tickets with capaths for TEST.H5L.SE -> SOME-REALM7.UK
Testing capaths logic (reverse order)
Getting x-realm tickets with capaths for TEST.H5L.SE -> TEST4.H5L.SE
Getting x-realm tickets with capaths for TEST.H5L.SE -> TEST3.H5L.SE
Getting x-realm tickets with capaths for TEST.H5L.SE -> TEST2.H5L.SE
Getting x-realm tickets with capaths for TEST.H5L.SE -> SOME-REALM7.UK
Getting x-realm tickets with capaths for TEST.H5L.SE -> SOME-REALM6.US
Getting x-realm tickets with capaths for TEST.H5L.SE -> SOME-REALM5.FR
Testing forwardable/renewable flag copying in TGS-REQ
Specific enctype
Getting client initial tickets (aes256-cts-hmac-sha1-96)
Getting tickets
Getting client initial tickets
Getting tickets (aes256-cts-hmac-sha1-96)
Getting client initial tickets for cross realm case
Getting cross realm tickets (aes256-cts-hmac-sha1-96)
checking we we got back right ticket
checking if ticket is useful
Trying x-realm TGT with kvno 0 case
Getting cross realm tickets
Getting service ticket
Trying x-realm TGT with kvno 0 case with key rollover
Getting cross realm tickets
Rolling over cross realm keys
Getting service ticket
Start tracing kdc, then hit return
Trying x-realm TGT with no kvno case
Getting cross realm tickets
Getting service ticket
Trying x-realm TGT with no kvno case with key rollover
Getting cross realm tickets
Rolling over cross realm keys
Getting service ticket
Start tracing kdc, then hit return
try all permutations
Getting client initial tickets (aes256-cts-hmac-sha1-96)
Getting tickets (aes256-cts-hmac-sha1-96 -> aes256-cts-hmac-sha1-96)
Getting client initial tickets ip based name
Getting ip based name tickets
checking we we got back right ticket
checking if ticket is useful
Getting client initial tickets ip based name (alias)
Getting ip based name tickets (alias) host/ip.test.h5l.org
checking we we got back right ticket
checking if ticket is useful
Getting ip based name tickets (alias) host/10.11.12.14
checking we we got back right ticket
checking if ticket is useful
Getting server initial tickets
Listing tickets
Getting key for key that are a subset in keytab compared to kdb
initial tickets for deleted user test case
lt-kadmin: del remove@TEST.H5L.SE: Input/output error
test failed
2016-09-29T10:20:54 error message: Did not find a plugin for ccache_ops: 2
2016-09-29T10:20:54 error message: encryption type des-cbc-crc is disabled: -1765328234
2016-09-29T10:20:54 krb5_get_init_creds: loop 1
2016-09-29T10:20:54 KDC send 0 patypes
2016-09-29T10:20:54 error message: Did not find a plugin for send_to_kdc: 2
2016-09-29T10:20:54 Trying to find service kdc for realm TEST.H5L.SE flags 0
2016-09-29T10:20:54 error message: Did not find a plugin for service_locator: 2
2016-09-29T10:20:54 configuration file for realm TEST.H5L.SE found
2016-09-29T10:20:54 submissing new requests to new host
2016-09-29T10:20:54 error message: Did not find a plugin for send_to_kdc: 2
2016-09-29T10:20:54 connecting to host: udp ::1:49188 (localhost) tid: 00000001
2016-09-29T10:20:54 Queuing host in future (in 3s), its the 2 address on the same name: udp 127.0.0.1:49188 (localhost) tid: 00000002
2016-09-29T10:20:54 writing packet: udp ::1:49188 (localhost) tid: 00000001
2016-09-29T10:20:54 AS-REQ remove@TEST.H5L.SE from IPv6:::1 for krbtgt/TEST.H5L.SE@TEST.H5L.SE
2016-09-29T10:20:54 Client sent patypes: REQ-ENC-PA-REP
2016-09-29T10:20:54 Looking for PK-INIT(ietf) pa-data -- remove@TEST.H5L.SE
2016-09-29T10:20:54 Looking for PK-INIT(win2k) pa-data -- remove@TEST.H5L.SE
2016-09-29T10:20:54 Looking for ENC-TS pa-data -- remove@TEST.H5L.SE
2016-09-29T10:20:54 Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ
2016-09-29T10:20:54 sending 303 bytes to IPv6:::1
2016-09-29T10:20:54 reading packet: udp ::1:49188 (localhost) tid: 00000001
2016-09-29T10:20:54 host completed: udp ::1:49188 (localhost) tid: 00000001
2016-09-29T10:20:54 error message: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ: -1765328359
2016-09-29T10:20:54 krb5_sendto_context TEST.H5L.SE done: 0 hosts 1 packets 1 wc: 0.001588 nr: 0.000132 kh: 0.000028 tid: 00000002
2016-09-29T10:20:54 krb5_get_init_creds: loop 2
2016-09-29T10:20:54 krb5_get_init_creds: processing input
2016-09-29T10:20:54 krb5_get_init_creds: got an error
2016-09-29T10:20:54 error message: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ: -1765328359
2016-09-29T10:20:54 krb5_get_init_creds: KRB-ERROR -1765328359
2016-09-29T10:20:54 KDC send 7 patypes
2016-09-29T10:20:54 KDC send PA-DATA type: 16
2016-09-29T10:20:54 KDC send PA-DATA type: 15
2016-09-29T10:20:54 KDC send PA-DATA type: 147
2016-09-29T10:20:54 KDC send PA-DATA type: 2
2016-09-29T10:20:54 KDC send PA-DATA type: 138
2016-09-29T10:20:54 KDC send PA-DATA type: 136
2016-09-29T10:20:54 KDC send PA-DATA type: 19
2016-09-29T10:20:54 krb5_get_init_creds: using ENC-TS with enctype 18
2016-09-29T10:20:54 krb5_get_init_creds: using default_s2k_func
2016-09-29T10:20:54 error message: Did not find a plugin for send_to_kdc: 2
2016-09-29T10:20:54 Trying to find service kdc for realm TEST.H5L.SE flags 0
2016-09-29T10:20:54 error message: Did not find a plugin for service_locator: 2
2016-09-29T10:20:54 configuration file for realm TEST.H5L.SE found
2016-09-29T10:20:54 submissing new requests to new host
2016-09-29T10:20:54 error message: Did not find a plugin for send_to_kdc: 2
2016-09-29T10:20:54 connecting to host: udp ::1:49188 (localhost) tid: 00010001
2016-09-29T10:20:54 Queuing host in future (in 3s), its the 2 address on the same name: udp 127.0.0.1:49188 (localhost) tid: 00010002
2016-09-29T10:20:54 writing packet: udp ::1:49188 (localhost) tid: 00010001
2016-09-29T10:20:54 AS-REQ remove@TEST.H5L.SE from IPv6:::1 for krbtgt/TEST.H5L.SE@TEST.H5L.SE
2016-09-29T10:20:54 Client sent patypes: ENC-TS, REQ-ENC-PA-REP
2016-09-29T10:20:54 Looking for PK-INIT(ietf) pa-data -- remove@TEST.H5L.SE
2016-09-29T10:20:54 Looking for PK-INIT(win2k) pa-data -- remove@TEST.H5L.SE
2016-09-29T10:20:54 Looking for ENC-TS pa-data -- remove@TEST.H5L.SE
2016-09-29T10:20:54 ENC-TS Pre-authentication succeeded -- remove@TEST.H5L.SE using aes256-cts-hmac-sha1-96
2016-09-29T10:20:54 ENC-TS pre-authentication succeeded -- remove@TEST.H5L.SE
2016-09-29T10:20:54 error message: encryption type des-cbc-crc is disabled: -1765328234
2016-09-29T10:20:54 AS-REQ authtime: 2016-09-29T10:20:54 starttime: unset endtime: 2016-09-29T20:20:54 renew till: unset
2016-09-29T10:20:54 Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-
sha1-96
2016-09-29T10:20:54 Requested flags: forwardable
2016-09-29T10:20:54 sending 700 bytes to IPv6:::1
2016-09-29T10:20:54 reading packet: udp ::1:49188 (localhost) tid: 00010001
2016-09-29T10:20:54 host completed: udp ::1:49188 (localhost) tid: 00010001
2016-09-29T10:20:54 krb5_sendto_context TEST.H5L.SE done: 0 hosts 1 packets 1 wc: 0.001561 nr: 0.000105 kh: 0.000023 tid: 00010002
2016-09-29T10:20:54 krb5_get_init_creds: loop 3
2016-09-29T10:20:54 krb5_get_init_creds: processing input
2016-09-29T10:20:54 krb5_get_init_creds: using keyproc
2016-09-29T10:20:54 krb5_get_init_creds: using default_s2k_func
2016-09-29T10:20:54 krb5_get_init_creds: extracting ticket
2016-09-29T10:20:54 processing enc-ap-rep
2016-09-29T10:20:54 enc-ap-rep: valid
2016-09-29T10:20:54 error message: Did not find a plugin for ccache_ops: 2
2016-09-29T10:20:54 error message: open ../../tests/kdc/kdc.conf: No such file or directory: 2
2016-09-29T10:20:54 error message: failed to open ../../tests/kdc/mkey.file: No such file or directory: 2
signal killing kdc kpasswdd
FAIL check-kdc (exit status: 1)
FAIL: check-kdc-weak
====================
Creating database
lt-kadmin: kadm5_create_principal: Input/output error
lt-kadmin: adding krbtgt/SOME-REALM7.UK@SOME-REALM6.US: Input/output error
FAIL check-kdc-weak (exit status: 1)
|