From: Jonathan Kamens <jik@mit.edu>
Date: Thu, 2 Dec 1993 22:01:44 +0000 (+0000)
Subject: Better description of the unauthenticated Sun RPC test
X-Git-Tag: krb5-1.0-beta3~106
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=8049863275328d35191a207fbb0f9257f61eb918;p=krb5.git

Better description of the unauthenticated Sun RPC test

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@3079 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/doc/kadm5/api-unit-test.tex b/doc/kadm5/api-unit-test.tex
index 71831cfce..71d6c28da 100644
--- a/doc/kadm5/api-unit-test.tex
+++ b/doc/kadm5/api-unit-test.tex
@@ -87,10 +87,13 @@ Furthermore, in addition to the tests labelled below, a test should be
 implemented to verify that a client can't perform operations on the
 server through the client API library when it's linked against
 standard Sun RPC instead of OpenV*Secure's authenticated Sun RPC.
-Since the tests below already verify that all of the API functions
-will fail if called before ovsec_kadm_init, this test can consist of
-nothing more than verifying that it's not possible to initialize a
-connection to the server using standard Sun RPC.
+This will require a client with a modified version of ovsec_kadm_init
+which doesn't call auth_gssapi_create.  This client should call this
+modified ovsec_kadm_init and then call some other admin API function,
+specifying arguments to both functions that would work if the
+authenciated Sun RPC had been used, but shouldn't if authentication
+wasn't used.  The test should verify that the API function call after
+the init doesn't succeed.
 
 \section{ovsec_kadm_init}