spnego: Also use mechglue names

This commit is contained in:
Nicolas Williams
2020-04-24 19:04:50 -05:00
parent 511b5e4e97
commit 1a8855e6c4
14 changed files with 114 additions and 118 deletions

View File

@@ -217,6 +217,7 @@ for mech in krb5 krb5iov spnego spnegoiov; do
echo "${mech} no-mutual ${iov}" ; > messages.log
${context} --mech-type=${mech} \
--wrapunwrap ${iov} \
--localname=mapped_user1 \
--name-type=hostbased-service host@lucid.test.h5l.se || \
{ eval "$testfailed"; }

View File

@@ -4,10 +4,17 @@ include @srcdirabs@/include-krb5.conf
default_keytab_name = @objdir@/server.keytab
enable-kx509 = yes
kx509_store = PEM-FILE:/tmp/cert_%{euid}.pem
default_realm = TEST.H5L.SE
kuserok = SYSTEM-K5LOGIN:@srcdir@/../kdc/k5login
kuserok = USER-K5LOGIN
kuserok = SIMPLE
[realms]
TEST.H5L.SE = {
kdc = localhost:@port@
auth_to_local_names = {
user1 = mapped_user1
}
}
[kdc]

View File

@@ -73,6 +73,7 @@ mapped1@TEST2.H5L.SE m1
mapped1@TEST3.H5L.SE mapped1
mapped2@TEST2.H5L.SE m2
mapped2@TEST3.H5L.SE mapped2
user1@@TEST.H5L.SE mapped_user1
z008213d189aac2b junk
z07644c5c50f29d5 junk
z094067ad439189c junk

View File

@@ -0,0 +1 @@
user1@TEST.H5L.SE