Add test for pk-init
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17354 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -152,14 +152,31 @@ ${kdestroy}
|
|||||||
#echo "try all permutations (only aes)"
|
#echo "try all permutations (only aes)"
|
||||||
#for a in $enctypes; do
|
#for a in $enctypes; do
|
||||||
# echo "Getting client initial tickets ($a)"
|
# echo "Getting client initial tickets ($a)"
|
||||||
# ${kinit} --enctype=$a --password-file=${objdir}/foopassword foo@$R || exitcode=1
|
# ${kinit} --enctype=$a --password-file=${objdir}/foopassword foo@${R} || exitcode=1
|
||||||
# for b in $enctypes; do
|
# for b in $enctypes; do
|
||||||
# echo "Getting tickets ($a -> $b)"
|
# echo "Getting tickets ($a -> $b)"
|
||||||
# ${kgetcred} -e $b ${server}@${R} || exitcode=1
|
# ${kgetcred} -e $b ${server}@${R} || exitcode=1
|
||||||
|
# ./ap-req ${server}@${R} ${keytab} ${cache} || exitcode=1
|
||||||
|
# ${kdestroy} --credential=${server}@${R}
|
||||||
# done
|
# done
|
||||||
# ${kdestroy}
|
# ${kdestroy}
|
||||||
#done
|
#done
|
||||||
|
|
||||||
|
# If we support pkinit, lets try that
|
||||||
|
if ${kinit} --help 2>&1 | grep "CA certificates" > /dev/null ; then
|
||||||
|
echo "Trying pk-init (princiapl in certificate)"
|
||||||
|
base="${srcdir}/../../lib/hx509/data"
|
||||||
|
${kinit} -C FILE:${base}/pkinit.crt,${base}/pkinit.key bar@${R} || exitcode=1
|
||||||
|
${kgetcred} ${server}@${R} || exitcode=1
|
||||||
|
${kdestroy}
|
||||||
|
echo "Trying pk-init (princiapl in pki-mapping)"
|
||||||
|
${kinit} -C FILE:${base}/pkinit.crt,${base}/pkinit.key foo@${R} || exitcode=1
|
||||||
|
${kgetcred} ${server}@${R} || exitcode=1
|
||||||
|
${kdestroy}
|
||||||
|
else
|
||||||
|
echo no pkinit
|
||||||
|
fi
|
||||||
|
|
||||||
echo "killing kdc (${kdcpid})"
|
echo "killing kdc (${kdcpid})"
|
||||||
kill $kdcpid || exit 1
|
kill $kdcpid || exit 1
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user