mirror of
https://github.com/xcat2/xcat-core.git
synced 2026-10-15 08:12:02 +00:00
9c515a596d
credentials.pm:138-143 signs nothing unless the callback port named in the request is below 1024, because only root can bind one -- a high port would let any user on a node collect the cluster's keys. The suite asserted the closed-port half of that and not this one. The new scenario puts a listener up on a high port and asks to be called back there, so a callback arriving is one xcatd chose to make rather than one the client failed to answer.