oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Test delegation

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17633 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-06-07 06:02:54 +00:00
parent e00b4f01bc
commit ca4cd801f8
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
tests/kdc/check-kdc.in
View File

@@ -49,6 +49,7 @@ server=host/datan.example.org
server2=host/computer.example.com server2=host/computer.example.com
cache="FILE:${objdir}/cache.krb5" cache="FILE:${objdir}/cache.krb5"
ocache="FILE:${objdir}/ocache.krb5" ocache="FILE:${objdir}/ocache.krb5"
o2cache="FILE:${objdir}/o2cache.krb5"
keytabfile=${objdir}/server.keytab keytabfile=${objdir}/server.keytab
keytab="FILE:${keytabfile}" keytab="FILE:${keytabfile}"
ps="proxy-service@${R}" ps="proxy-service@${R}"
@@ -87,6 +88,8 @@ ${kadmin} add -p bar --use-defaults bar@${R} || exit 1
${kadmin} add -p foo --use-defaults remove@${R} || exit 1 ${kadmin} add -p foo --use-defaults remove@${R} || exit 1
${kadmin} add -p kaka --use-defaults ${server}@${R} || exit 1 ${kadmin} add -p kaka --use-defaults ${server}@${R} || exit 1
${kadmin} add -p foo --use-defaults ${ps} || exit 1 ${kadmin} add -p foo --use-defaults ${ps} || exit 1
${kadmin} modify --attributes=+trusted-for-delegation ${ps} || exit 1
${kadmin} modify --constrained-delegation=${server} ${ps} || exit 1
${kadmin} ext -k ${keytab} ${server}@${R} || exit 1 ${kadmin} ext -k ${keytab} ${server}@${R} || exit 1
${kadmin} ext -k ${keytab} ${ps} || exit 1 ${kadmin} ext -k ${keytab} ${ps} || exit 1
@@ -231,13 +234,16 @@ else
fi fi
echo "tickets for impersonate test case" echo "tickets for impersonate test case"
${kinit} --password-file=${objdir}/foopassword ${ps} || exitcode=1 ${kinit} --forwardable --password-file=${objdir}/foopassword ${ps} || exitcode=1
${kgetcred_imp} --impersonate=bar@${R} ${ps} || exitcode=1 ${kgetcred_imp} --impersonate=bar@${R} ${ps} || exitcode=1
./ap-req ${ps} ${keytab} ${ocache} || exitcode=1 ./ap-req ${ps} ${keytab} ${ocache} || exitcode=1
${kgetcred_imp} --impersonate=bar@${R} foo@${R} 2>/dev/null && exitcode=1 ${kgetcred_imp} --impersonate=bar@${R} foo@${R} 2>/dev/null && exitcode=1
echo test constrained delegation
${kgetcred_imp} --forward --impersonate=bar@${R} ${ps} || exitcode=1
${kgetcred} --out-cache=${o2cache} --delegation-credential-cache=${ocache} ${server}@${R} || exitcode=1
${kgetcred} --out-cache=${o2cache} --delegation-credential-cache=${ocache} bar@${R} 2>/dev/null && exitcode=1
${kdestroy} ${kdestroy}
echo "killing kdc (${kdcpid})" echo "killing kdc (${kdcpid})"
kill $kdcpid || exit 1 kill $kdcpid || exit 1