oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Build a service without aes, build context and see that we still got

Browse Source 
an aes session key thanks to EtypeList.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23382 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-07-24 20:03:13 +00:00
parent d260d2aca0
commit 8f92cc94b4
1 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
tests/gss/check-context.in
View File

@@ -80,10 +80,20 @@ ${kadmin} add -p p1 --use-defaults host/lucid.test.h5l.se@${R} || exit 1
${kadmin} ext -k ${keytab} host/lucid.test.h5l.se@${R} || exit 1 ${kadmin} ext -k ${keytab} host/lucid.test.h5l.se@${R} || exit 1
${kadmin} add -p p1 --use-defaults host/lucid@${R} || exit 1 ${kadmin} add -p p1 --use-defaults host/lucid@${R} || exit 1
${kadmin} ext -k ${keytab} host/lucid@${R} || exit 1 ${kadmin} ext -k ${keytab} host/lucid@${R} || exit 1
${kadmin} add -p kaka --use-defaults digest/${R}@${R} || exit 1 ${kadmin} add -p kaka --use-defaults digest/${R}@${R} || exit 1
${kadmin} add -p u1 --use-defaults user1@${R} || exit 1 ${kadmin} add -p u1 --use-defaults user1@${R} || exit 1
# Create a server principal with no AES
${kadmin} add -p p1 --use-defaults host/no-aes.test.h5l.se@${R} || exit 1
${kadmin} get host/no-aes.test.h5l.se@${R} > tempfile || exit 1
${kadmin} del_enctype host/no-aes.test.h5l.se@${R} \
aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 || exit 1
${kadmin} ext -k ${keytab} host/no-aes.test.h5l.se@${R} || exit 1
echo "E: ${enctype_sans_aes}"
echo "Doing database check" echo "Doing database check"
${kadmin} check ${R} || exit 1 ${kadmin} check ${R} || exit 1
@@ -216,6 +226,19 @@ rm ${keytabfile}.new
# { exitcode=1 ; echo "test failed"; } # { exitcode=1 ; echo "test failed"; }
# this will break when oneone invents a cooler enctype then aes256-cts-hmac-sha1-96
coolenctype="aes256-cts-hmac-sha1-96"
echo "Getting client initial tickets"
${kinit} --password-file=${objdir}/foopassword user1@${R} || \
{ echo "kinit failed"; exitcode=1; }
echo "Building context on cred w/o aes, but still aes session key"
${context} --mech-type=${mech} \
--session-enctype=${coolenctype} \
--name-type=hostbased-service host@no-aes.test.h5l.se || \
{ exitcode=1 ; echo "test failed"; }
trap "" EXIT trap "" EXIT
echo "killing kdc (${kdcpid})" echo "killing kdc (${kdcpid})"