Nicolas Williams
38f726d8b4
Fix bug in key rollover code in TGS, make check-kdc test what we can
...
We can't test the key rollover support in the TGS in the x-realm
path using just Heimdal because the krb5_get_creds() path will try a
referral, which will produce a cross-realm TGT that has the
enc_part.kvno set. But we can test this for the plain TGT case.
2011-11-15 21:53:34 -06:00
Nicolas Williams
349609ed20
Initial test of x-realm TGT w/ kvno 0 and key rollover
...
NOTE: The test runs and succeeds, but the client seems to be getting
a new x-realm TGT after we set the kvno to 0 or remove the
kvno from the tickets. This means we're not really testing
the TGS paths! So this test is not yet ready.
2011-11-15 21:53:34 -06:00
Love Hörnquist Åstrand
0ae0dcba85
database is in srcdir
2011-11-13 10:01:41 -08:00
Nicolas Williams
0e852b330f
Make sure we always allow weak enctypes in MIT HDB test
...
Also, we still try to create the version key in the MIT HDB, so we
might as well update the test DB to have the version key already
there. (But really, we should just never write to the MIT HDB.)
2011-11-09 00:59:51 -06:00
Love Hornquist Astrand
5835c81e6c
make the test tell what they do, disable LOCALDOMAIN tests
2011-10-31 09:06:10 -07:00
Love Hörnquist Åstrand
f06e684ece
recover lost check-kdc.in
2011-10-28 20:03:20 -07:00
Love Hörnquist Åstrand
1a1bd736c0
merge support for FAST in as-req codepath
2011-10-28 19:25:48 -07:00
Nicolas Williams
612e5c2a12
Test name canon rules via GSS and put kdc tests last
...
Put kdc last in tests/Makefile.am. There's two tests in tests/kdc
that have been failing for a long time, and that causes the
remaining tests to not be run. By putting kdc last those tests do
run.
2011-10-22 14:54:27 -05:00
Nicolas Williams
9c8ceada75
Fix test bug, add test of DNS resolver searchlist name canon rule
2011-10-22 14:54:26 -05:00
Nicolas Williams
8fde93e3fb
Initial name canon rules tests (just kgetcred)
2011-10-22 14:54:26 -05:00
Love Hornquist Astrand
fed3050bc0
use ` instead of $( to please legacy solaris /bin/sh
2011-10-19 11:36:18 +02:00
Nicolas Williams
c3936f72c3
Test for hdb-mitdb, including an MIT KDB file.
2011-09-26 17:08:33 -05:00
Love Hornquist Astrand
f1df66341e
quote to make solaris sh apply, patch from Tom Payeire
2011-09-26 17:50:45 +02:00
Love Hornquist Astrand
f910d2174b
Disable java gssapi tests because of 7077640 and 7077646
2011-09-25 20:24:26 +02:00
Love Hornquist Astrand
d64eb50f72
filter out kvno
2011-09-25 16:44:49 +02:00
Love Hornquist Astrand
f6dbc98081
drop ndbm since no longer have write support
2011-09-23 13:18:40 +02:00
Love Hornquist Astrand
6272abb227
sleep some extra time before killing java pid so it will have a chance
...
write it's stdout to disk
2011-09-19 11:10:51 +02:00
Love Hornquist Astrand
885e53c51a
acceptor glue
2011-08-10 17:25:25 -07:00
Love Hornquist Astrand
86243ab19f
more java (server) tests
2011-08-10 17:23:35 -07:00
Love Hörnquist Åstrand
a48768fc26
sprinkle more comments
2011-07-24 22:33:49 -07:00
Love Hörnquist Åstrand
407fcf35fc
update client_access
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
03e73522a3
better status message
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
2991ed7e77
check for FAST
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
13eeb30a1d
Create a request structure
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
17d5f8d19e
make AS work with FAST
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
4f3d3723f4
fail if kinit failes
2011-07-24 20:24:36 -07:00
Love Hörnquist Åstrand
8fccb51d49
Merge pull request #12 from nicowilliams/krb5_admin_patches_2nd
...
Krb5 admin patches 2nd
This has all the patches needed for krb5_admind to build and pass most tests, that includes:
- more kadm5 API compatibility (including very basic profile functionality)
- multi-kvno support (useful for key rollovers) (a test for this is included in tests/db/check-kdc)
Unfinished:
- password history (currently uses key history, needs to be separated and use digests)
- policies (only default policy allowed)
- mit kdb changes not tested yet
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 15:41:36 -07:00
Love Hörnquist Åstrand
75987ebbae
update to match plugin abi
2011-07-23 11:59:06 -07:00
Nicolas Williams
1edc2cee45
Test multi-kvno support in kadmin and KDC (part 1).
2011-07-22 16:07:10 -05:00
Love Hörnquist Åstrand
7aaba443bc
add NTMakefile and windows directories
2011-07-17 12:16:59 -07:00
Love Hörnquist Åstrand
e73a5a9c54
remove stray klist
2011-06-19 11:39:39 -07:00
Love Hörnquist Åstrand
b019c085bd
handle leaks excluded
2011-05-22 14:26:59 -07:00
Love Hornquist Astrand
12c3c12160
pass in client name
2011-05-22 13:01:00 -07:00
Love Hornquist Astrand
9a5019156c
remove debug and don't check targetname since it doesn't really matter
2011-05-21 13:27:57 -07:00
Love Hornquist Astrand
5564106268
use client-amel
2011-05-21 13:25:51 -07:00
Love Hornquist Astrand
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
Love Hornquist Astrand
05a432aaed
let try to exclude __CFInitialize
2011-05-20 08:42:29 -07:00
Love Hornquist Astrand
fda076962d
check prefixed keytab too
2011-04-09 18:28:15 -07:00
Love Hornquist Astrand
d91e772a0e
adopt syntax
2010-11-28 10:46:26 -08:00
Love Hornquist Astrand
37abbc7d77
test attrs-for-mech
2010-11-26 00:10:26 -08:00
Love Hornquist Astrand
2b1bc08d24
setup env_setup
2010-11-26 00:10:17 -08:00
Love Hornquist Astrand
5f342b59b8
add gsstool
2010-11-26 00:09:48 -08:00
Love Hornquist Astrand
2bffe97647
better error messages
2010-11-25 11:21:41 -08:00
Love Hornquist Astrand
55e96fabf2
switch kswitch to kcc
2010-11-25 09:29:29 -08:00
Love Hornquist Astrand
e186ea15b1
use kcc for klist
2010-11-24 19:43:40 -08:00
Anton Lundin
61bfc2997b
Fix testing when compiled with --disable-afs-support
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-09-17 12:21:39 -07:00
Love Hornquist Astrand
dfd107c709
Test principal name with aliases in them
2010-06-09 22:21:12 -07:00
Love Hornquist Astrand
37762d631c
Don't use invalid base64 encoded string, just use plain password instead
2010-06-04 14:40:31 -07:00
Love Hornquist Astrand
abd5fdab5a
Patch from Eray Asian to avoid PK-INIT when its not supported
2010-06-03 14:16:48 -07:00
Love Hornquist Astrand
f73a7b94d0
test kadmind get -o
2010-06-03 11:44:14 -07:00
