oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
28,968 Commits 2 Branches 2 Tags
3b828e23e7c31e3b62d44ba2f3a3929194872a84
Commit Graph

853 Commits

Author SHA1 Message Date
Love Hornquist Astrand
baf748fb8e catch better slave message now that iprop is more verbose 2012-10-01 09:36:11 -07:00
Nicolas Williams
20b5e2a2c6 Make check-authz run when objdir != srcdir 2012-06-14 11:53:55 -05:00
Viktor Dukhovni
1b3f1b57b4 Don't forget to sleep in 3DES del_enctype test. 
On NetBSD /bin/sh with vfork() is noticeably faster than /bin/bash,
and in particular the reader manages to read the the database before
slave replication completes.
 2012-05-28 16:13:14 +01:00
Nicolas Williams
0cee6d1d70 Update KDB in tests/kdc so check-hdb-mitdb passes 2012-05-03 14:24:19 -05:00
Roland C. Dowdeswell
2c5ec44d39 Look for auth_to_local in the default realm's realm section... 
...rather than the authenticated principal's realm section.  We do
this both to maintain compatibility with MIT and because it makes
more sense.  We should likely also fix the auth_to_local_names as
cursory inspection reveals that it has the same incompatibility.
 2012-04-19 23:43:12 +01:00
Nicolas Williams
839ab87c10 Regression test iprop of key rollover and del_enctype 2012-03-15 18:57:35 -05:00
Nicolas Williams
ca6a22276e Test that we copy forwardable/renewable flags from TGT in TGS-REQ 2012-03-14 23:58:40 -05:00
Jelmer Vernooij
2b365b2327 Rename kcc to heimtools. 
This should prevent naming clashes with other utilities named 'kcc'.

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
 2012-03-06 00:06:26 -08:00
Love Hörnquist Åstrand
a8c51aa594 add basic sqlite tests (from Nico) 2012-02-29 08:32:57 -08:00
Love Hörnquist Åstrand
bf37778dbd make ipropd_slave tell its status in a status file 
The ipropd_slave will log its status to /var/heimdal/ipropd-slave-status
if its connecting, up to date, or disconnected.

The master will now also confirm to slaves that are are in fact up to date
if they just restart, before there was no confirmation, the slave just didn't
get any deltas.
 2012-02-15 20:59:54 -08:00
Nicolas Williams
47f60928bc Some more [capaths] testing 2012-02-07 14:02:24 -06:00
Love Hornquist Astrand
07a88f4b5a use no-store 2012-01-10 22:54:16 +01:00
Love Hornquist Astrand
a372712fd0 test tgs-req too 2012-01-10 22:54:16 +01:00
Love Hornquist Astrand
fb26e41d06 to utf8 2011-12-14 08:46:05 -08:00
Nicolas Williams
e00b43a94b Address code review comments (k5login/foo in EXTRA_DIST) 2011-12-10 14:06:15 -06:00
Nicolas Williams
abd065be02 Add a test for krb5_kuserok() 2011-12-08 13:34:02 -06:00
Love Hörnquist Åstrand
b8c710a130 some more status 2011-12-03 13:36:39 -08:00
Love Hörnquist Åstrand
0e6bd29e44 use right directory 2011-12-03 13:36:32 -08:00
Nicolas Williams
89bae59b49 Fix error clobbering bug and code review comments 2011-12-02 01:04:22 -06:00
Nicolas Williams
da14596f0e Add a test for aname2lname 2011-12-02 01:03:31 -06:00
Love Hörnquist Åstrand
fa304162db test rsa mode too 2011-11-23 09:43:56 -08:00
Love Hörnquist Åstrand
b69246d766 use pre-generated certs/keys 2011-11-22 19:11:26 -08:00
Love Hörnquist Åstrand
a8e4c393ee use pre-generated certs/keys 2011-11-22 19:11:16 -08:00
Love Hörnquist Åstrand
c376e869a0 kdc-tester4.json is in objdir 2011-11-22 19:01:56 -08:00
Love Hörnquist Åstrand
8242b14eb9 add kdc-tester3.json 2011-11-22 18:59:38 -08:00
Nicolas Williams
0dd9982cb7 Forgot tests/kdc/kdc-tester4.json.in 2011-11-22 20:45:19 -06:00
Love Hörnquist Åstrand
2e37f67e6f handle new syntax for ccache's 2011-11-22 17:57:49 -08:00
Love Hörnquist Åstrand
f53199ba53 pretty printing 2011-11-22 17:56:25 -08:00
Nicolas Williams
35f4032381 Add PKINIT support in kdc-tester and check-tester 2011-11-22 18:48:41 -06:00
Nicolas Williams
b02365d714 Forgot to add kdc-tester3.json 2011-11-22 17:47:29 -06:00
Nicolas Williams
d630567f70 Add performance measurements for FAST (with host key and user keys, not password) 2011-11-22 17:05:06 -06:00
Love Hornquist Astrand
791c70eaa2 reopen logfile every request 2011-11-22 11:41:40 -08:00
Love Hornquist Astrand
8b351e5eb2 keep file open when we care about performance (which we do now) 2011-11-22 11:10:41 -08:00
Love Hornquist Astrand
72e88209f8 support keytab testing (and use it) 2011-11-22 11:00:51 -08:00
Love Hörnquist Åstrand
3f1d903a85 add kinit test to kdc-tester 2011-11-21 20:34:36 -08:00
Love Hornquist Astrand
3489110db0 fixup rule for krb5-hdb-mitdb.conf 2011-11-19 10:57:51 -08:00
Nicolas Williams
124eccf014 Make this work with kvno 0 and no kvno 2011-11-15 21:53:34 -06:00
Nicolas Williams
38f726d8b4 Fix bug in key rollover code in TGS, make check-kdc test what we can 
We can't test the key rollover support in the TGS in the x-realm
    path using just Heimdal because the krb5_get_creds() path will try a
    referral, which will produce a cross-realm TGT that has the
    enc_part.kvno set.  But we can test this for the plain TGT case.
 2011-11-15 21:53:34 -06:00
Nicolas Williams
349609ed20 Initial test of x-realm TGT w/ kvno 0 and key rollover 
NOTE: The test runs and succeeds, but the client seems to be getting
	  a new x-realm TGT after we set the kvno to 0 or remove the
	  kvno from the tickets.  This means we're not really testing
	  the TGS paths!  So this test is not yet ready.
 2011-11-15 21:53:34 -06:00
Love Hörnquist Åstrand
0ae0dcba85 database is in srcdir 2011-11-13 10:01:41 -08:00
Nicolas Williams
0e852b330f Make sure we always allow weak enctypes in MIT HDB test 
Also, we still try to create the version key in the MIT HDB, so we
    might as well update the test DB to have the version key already
    there.  (But really, we should just never write to the MIT HDB.)
 2011-11-09 00:59:51 -06:00
Love Hornquist Astrand
5835c81e6c make the test tell what they do, disable LOCALDOMAIN tests 2011-10-31 09:06:10 -07:00
Love Hörnquist Åstrand
f06e684ece recover lost check-kdc.in 2011-10-28 20:03:20 -07:00
Love Hörnquist Åstrand
1a1bd736c0 merge support for FAST in as-req codepath 2011-10-28 19:25:48 -07:00
Nicolas Williams
612e5c2a12 Test name canon rules via GSS and put kdc tests last 
Put kdc last in tests/Makefile.am.  There's two tests in tests/kdc
    that have been failing for a long time, and that causes the
    remaining tests to not be run.  By putting kdc last those tests do
    run.
 2011-10-22 14:54:27 -05:00
Nicolas Williams
9c8ceada75 Fix test bug, add test of DNS resolver searchlist name canon rule 2011-10-22 14:54:26 -05:00
Nicolas Williams
8fde93e3fb Initial name canon rules tests (just kgetcred) 2011-10-22 14:54:26 -05:00
Love Hornquist Astrand
fed3050bc0 use ` instead of $( to please legacy solaris /bin/sh 2011-10-19 11:36:18 +02:00
Nicolas Williams
c3936f72c3 Test for hdb-mitdb, including an MIT KDB file. 2011-09-26 17:08:33 -05:00
Love Hornquist Astrand
f1df66341e quote to make solaris sh apply, patch from Tom Payeire 2011-09-26 17:50:45 +02:00