Test delegation
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17633 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
		| @@ -49,6 +49,7 @@ server=host/datan.example.org | ||||
| server2=host/computer.example.com | ||||
| cache="FILE:${objdir}/cache.krb5" | ||||
| ocache="FILE:${objdir}/ocache.krb5" | ||||
| o2cache="FILE:${objdir}/o2cache.krb5" | ||||
| keytabfile=${objdir}/server.keytab | ||||
| keytab="FILE:${keytabfile}" | ||||
| ps="proxy-service@${R}" | ||||
| @@ -87,6 +88,8 @@ ${kadmin} add -p bar --use-defaults bar@${R} || exit 1 | ||||
| ${kadmin} add -p foo --use-defaults remove@${R} || exit 1 | ||||
| ${kadmin} add -p kaka --use-defaults ${server}@${R} || exit 1 | ||||
| ${kadmin} add -p foo --use-defaults ${ps} || exit 1 | ||||
| ${kadmin} modify --attributes=+trusted-for-delegation ${ps} || exit 1 | ||||
| ${kadmin} modify --constrained-delegation=${server} ${ps} || exit 1 | ||||
| ${kadmin} ext -k ${keytab} ${server}@${R} || exit 1 | ||||
| ${kadmin} ext -k ${keytab} ${ps} || exit 1 | ||||
|  | ||||
| @@ -231,13 +234,16 @@ else | ||||
| fi | ||||
|  | ||||
| echo "tickets for impersonate test case" | ||||
| ${kinit} --password-file=${objdir}/foopassword ${ps} || exitcode=1 | ||||
| ${kinit} --forwardable --password-file=${objdir}/foopassword ${ps} || exitcode=1 | ||||
| ${kgetcred_imp} --impersonate=bar@${R} ${ps} || exitcode=1 | ||||
| ./ap-req ${ps} ${keytab} ${ocache} || exitcode=1 | ||||
| ${kgetcred_imp} --impersonate=bar@${R} foo@${R} 2>/dev/null && exitcode=1 | ||||
| echo test constrained delegation | ||||
| ${kgetcred_imp} --forward --impersonate=bar@${R} ${ps} || exitcode=1 | ||||
| ${kgetcred} --out-cache=${o2cache} --delegation-credential-cache=${ocache} ${server}@${R} || exitcode=1 | ||||
| ${kgetcred} --out-cache=${o2cache} --delegation-credential-cache=${ocache} bar@${R} 2>/dev/null && exitcode=1 | ||||
| ${kdestroy} | ||||
|  | ||||
|  | ||||
| echo "killing kdc (${kdcpid})" | ||||
| kill $kdcpid || exit 1 | ||||
|  | ||||
|   | ||||
		Reference in New Issue
	
	Block a user
	 Love Hörnquist Åstrand
					Love Hörnquist Åstrand