Use the server as the server and set diffrent password for the user and service.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17929 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -55,6 +55,8 @@ klist="../../kuser/klist -c $cache"
|
|||||||
kdigest="../../kuser/kdigest --ccache=$cache"
|
kdigest="../../kuser/kdigest --ccache=$cache"
|
||||||
|
|
||||||
username=foo
|
username=foo
|
||||||
|
userpassword=digestpassword
|
||||||
|
|
||||||
password=foobarbaz
|
password=foobarbaz
|
||||||
|
|
||||||
KRB5_CONFIG="${objdir}/krb5.conf"
|
KRB5_CONFIG="${objdir}/krb5.conf"
|
||||||
@@ -72,8 +74,8 @@ ${kadmin} \
|
|||||||
--realm-max-renewable-life=1month \
|
--realm-max-renewable-life=1month \
|
||||||
${R} || exit 1
|
${R} || exit 1
|
||||||
|
|
||||||
${kadmin} add -p $password --use-defaults ${username}@${R} || exit 1
|
${kadmin} add -p $userpassword --use-defaults ${username}@${R} || exit 1
|
||||||
${kadmin} add -p kaka --use-defaults ${server}@${R} || exit 1
|
${kadmin} add -p $password --use-defaults ${server}@${R} || exit 1
|
||||||
${kadmin} add -p kaka --use-defaults digest/${R}@${R} || exit 1
|
${kadmin} add -p kaka --use-defaults digest/${R}@${R} || exit 1
|
||||||
${kadmin} modify --attributes=+allow-digest ${server}@${R} || exit 1
|
${kadmin} modify --attributes=+allow-digest ${server}@${R} || exit 1
|
||||||
${kadmin} ext -k ${keytab} ${server}@${R} || exit 1
|
${kadmin} ext -k ${keytab} ${server}@${R} || exit 1
|
||||||
@@ -96,7 +98,7 @@ fi
|
|||||||
exitcode=0
|
exitcode=0
|
||||||
|
|
||||||
echo "Getting digest server tickets"
|
echo "Getting digest server tickets"
|
||||||
${kinit} --password-file=${objdir}/foopassword ${username}@$R || exitcode=1
|
${kinit} --password-file=${objdir}/foopassword ${server}@$R || exitcode=1
|
||||||
${kdigest} server-init \
|
${kdigest} server-init \
|
||||||
--kerberos-realm=${R} \
|
--kerberos-realm=${R} \
|
||||||
--type=CHAP > /dev/null || exitcode=1
|
--type=CHAP > /dev/null || exitcode=1
|
||||||
@@ -120,7 +122,7 @@ opaque=`grep opaque= sdigest-reply | cut -f2- -d=`
|
|||||||
${kdigest} client-request \
|
${kdigest} client-request \
|
||||||
--type=CHAP \
|
--type=CHAP \
|
||||||
--username="$username" \
|
--username="$username" \
|
||||||
--password="$password" \
|
--password="$userpassword" \
|
||||||
--opaque="$opaque" \
|
--opaque="$opaque" \
|
||||||
--server-identifier="$identifier" \
|
--server-identifier="$identifier" \
|
||||||
--server-nonce="$snonce" \
|
--server-nonce="$snonce" \
|
||||||
|
Reference in New Issue
Block a user