From 4d40ea7107dde3905ccdfcf4ab9fad55a6d8f3ad Mon Sep 17 00:00:00 2001 From: Francis Dupont Date: Fri, 1 Oct 2021 23:57:10 +0200 Subject: [PATCH] [#2056] Added a short item to dev guide --- doc/devel/unit-tests.dox | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/doc/devel/unit-tests.dox b/doc/devel/unit-tests.dox index f49bb49934..ab2254e6fa 100644 --- a/doc/devel/unit-tests.dox +++ b/doc/devel/unit-tests.dox @@ -354,6 +354,16 @@ local all postgres trust Use HELP for help. cqlsh> @endverbatim\n +@section unitTestsKerberos Kerberos Configuration for Unit Tests + +The GSS-TSIG hook library uses the GSS-API with Kerberos. If there are +no doubt about the Kerberos configuration for using the hook in production, +for unit tests some problems were reported on some systems. + +GSS-TSIG hook unit tests use a setup inherited from bind9 with old crypto +settings which are not allowed by default Kerberos system configuration. +A simple workaround is to set the KRB5_CONFIG environment variable. + @section writingShellScriptsAndTests Writing shell scripts and tests Shell tests are `shellcheck`ed. But there are other writing practices that are