From 10271fe8d559cf4600c5087ed999769f6d37b68e Mon Sep 17 00:00:00 2001 From: Nicolas Williams Date: Thu, 13 Nov 2025 23:50:12 -0600 Subject: [PATCH] klist: Show ticket session key enctype too --- kuser/klist.c | 7 ++++++- tests/kdc/check-delegation.in | 6 +++--- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/kuser/klist.c b/kuser/klist.c index f0a438218..4685a059b 100644 --- a/kuser/klist.c +++ b/kuser/klist.c @@ -341,7 +341,12 @@ print_cred_verbose(krb5_context context, krb5_creds *cred) } else { Ticket t; size_t len; - char *s; + char *s = NULL; + + ret = krb5_enctype_to_string(context, cred->session.keytype, &s); + printf(N_("Ticket session etype: %s (%d)\n", ""), + ret == 0 ? s : "unknown-enctype", cred->session.keytype); + free(s); decode_Ticket(cred->ticket.data, cred->ticket.length, &t, &len); ret = krb5_enctype_to_string(context, t.enc_part.etype, &s); diff --git a/tests/kdc/check-delegation.in b/tests/kdc/check-delegation.in index de35f6d53..945cd28da 100644 --- a/tests/kdc/check-delegation.in +++ b/tests/kdc/check-delegation.in @@ -124,11 +124,11 @@ ${kgetcred} host/server.test4.h5l.se@${R4} || { ec=1 ; eval "${testfailed}"; } echo "check result" -${klist} -v | awk '/Server:.*host.server.test3/{c=8}{if(c-->0){print}}' | grep 'Ticket flags:.*ok-as-delegate' > /dev/null || \ +${klist} -v | awk '/Server:.*host.server.test3/{c=9}{if(c-->0){print}}' | grep 'Ticket flags:.*ok-as-delegate' > /dev/null || \ { ec=1 ; echo "server.test3 failed"; eval "${testfailed}"; } -${klist} -v | awk '/Server:.*host.noserver.test3/{c=8}{if(c-->0){print}}' | grep 'Ticket flags:.*ok-as-delegate' 2> /dev/null && \ +${klist} -v | awk '/Server:.*host.noserver.test3/{c=9}{if(c-->0){print}}' | grep 'Ticket flags:.*ok-as-delegate' 2> /dev/null && \ { ec=1 ; echo "noserver.test3 failed"; eval "${testfailed}"; } -${klist} -v | awk '/Server:.*host.server.test4/{c=8}{if(c-->0){print}}' | grep 'Ticket flags:.*ok-as-delegate' 2> /dev/null && \ +${klist} -v | awk '/Server:.*host.server.test4/{c=9}{if(c-->0){print}}' | grep 'Ticket flags:.*ok-as-delegate' 2> /dev/null && \ { ec=1 ; echo "server.test4 failed" ; eval "${testfailed}"; } ${kdestroy}