test explicit requested pac and explicit negative requested pac.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19688 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -47,7 +47,7 @@ R=TEST.H5L.SE
|
|||||||
|
|
||||||
port=8888
|
port=8888
|
||||||
|
|
||||||
kadmin="${TESTS_ENVIRONMENT} ../../kadmin/kadmin -l -r $R"
|
kadmin="${TESTS_ENVIRONMENT} ../../kadmin/kadmin -l -r ${R}"
|
||||||
kdc="${TESTS_ENVIRONMENT} ../../kdc/kdc --addresses=localhost -P $port"
|
kdc="${TESTS_ENVIRONMENT} ../../kdc/kdc --addresses=localhost -P $port"
|
||||||
|
|
||||||
server=host/datan.test.h5l.se
|
server=host/datan.test.h5l.se
|
||||||
@@ -100,16 +100,36 @@ trap "kill ${kdcpid}; echo signal killing kdc; exit 1;" EXIT
|
|||||||
ec=0
|
ec=0
|
||||||
|
|
||||||
echo "Getting client initial tickets"; > messages.log
|
echo "Getting client initial tickets"; > messages.log
|
||||||
${kinit} --password-file=${objdir}/foopassword foo@$R || \
|
${kinit} --password-file=${objdir}/foopassword foo@${R} || \
|
||||||
{ ec=1 ; eval "${testfailed}"; }
|
{ ec=1 ; eval "${testfailed}"; }
|
||||||
echo "Getting tickets" ; > messages.log
|
echo "Getting tickets" ; > messages.log
|
||||||
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
|
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
|
||||||
|
|
||||||
echo "Verify PAC on server"; > messages.log
|
echo "Verify PAC on server"; > messages.log
|
||||||
../kdc/ap-req --verify-pac ${server}@${R} ${keytab} ${cache} || \
|
../kdc/ap-req --verify-pac ${server}@${R} ${keytab} ${cache} || \
|
||||||
{ ec=1 ; eval "${testfailed}"; }
|
{ ec=1 ; eval "${testfailed}"; }
|
||||||
${kdestroy}
|
${kdestroy}
|
||||||
|
|
||||||
|
echo "Getting client initial tickets (pag)"; > messages.log
|
||||||
|
${kinit} --request-pac --password-file=${objdir}/foopassword foo@${R} || \
|
||||||
|
{ ec=1 ; eval "${testfailed}"; }
|
||||||
|
echo "Getting tickets" ; > messages.log
|
||||||
|
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
|
||||||
|
echo "Verify PAC on server (pag)"; > messages.log
|
||||||
|
../kdc/ap-req --verify-pac ${server}@${R} ${keytab} ${cache} || \
|
||||||
|
{ ec=1 ; eval "${testfailed}"; }
|
||||||
|
${kdestroy}
|
||||||
|
|
||||||
|
echo "Getting client initial tickets (no pag)"; > messages.log
|
||||||
|
${kinit} --no-request-pac --password-file=${objdir}/foopassword foo@${R} || \
|
||||||
|
{ ec=1 ; eval "${testfailed}"; }
|
||||||
|
echo "Getting tickets" ; > messages.log
|
||||||
|
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
|
||||||
|
echo "Verify PAC on server (no pag)"; > messages.log
|
||||||
|
../kdc/ap-req --verify-pac ${server}@${R} ${keytab} ${cache} 2> /dev/null && \
|
||||||
|
{ ec=1 ; eval "${testfailed}"; }
|
||||||
|
${kdestroy}
|
||||||
|
|
||||||
|
|
||||||
echo "killing kdc (${kdcpid})"
|
echo "killing kdc (${kdcpid})"
|
||||||
kill $kdcpid || exit 1
|
kill $kdcpid || exit 1
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user