3489110db0
fixup rule for krb5-hdb-mitdb.conf
2011-11-19 10:57:51 -08:00
124eccf014
Make this work with kvno 0 and no kvno
2011-11-15 21:53:34 -06:00
38f726d8b4
Fix bug in key rollover code in TGS, make check-kdc test what we can
...
We can't test the key rollover support in the TGS in the x-realm
path using just Heimdal because the krb5_get_creds() path will try a
referral, which will produce a cross-realm TGT that has the
enc_part.kvno set. But we can test this for the plain TGT case.
2011-11-15 21:53:34 -06:00
349609ed20
Initial test of x-realm TGT w/ kvno 0 and key rollover
...
NOTE: The test runs and succeeds, but the client seems to be getting
a new x-realm TGT after we set the kvno to 0 or remove the
kvno from the tickets. This means we're not really testing
the TGS paths! So this test is not yet ready.
2011-11-15 21:53:34 -06:00
0ae0dcba85
database is in srcdir
2011-11-13 10:01:41 -08:00
0e852b330f
Make sure we always allow weak enctypes in MIT HDB test
...
Also, we still try to create the version key in the MIT HDB, so we
might as well update the test DB to have the version key already
there. (But really, we should just never write to the MIT HDB.)
2011-11-09 00:59:51 -06:00
5835c81e6c
make the test tell what they do, disable LOCALDOMAIN tests
2011-10-31 09:06:10 -07:00
f06e684ece
recover lost check-kdc.in
2011-10-28 20:03:20 -07:00
1a1bd736c0
merge support for FAST in as-req codepath
2011-10-28 19:25:48 -07:00
612e5c2a12
Test name canon rules via GSS and put kdc tests last
...
Put kdc last in tests/Makefile.am. There's two tests in tests/kdc
that have been failing for a long time, and that causes the
remaining tests to not be run. By putting kdc last those tests do
run.
2011-10-22 14:54:27 -05:00
9c8ceada75
Fix test bug, add test of DNS resolver searchlist name canon rule
2011-10-22 14:54:26 -05:00
8fde93e3fb
Initial name canon rules tests (just kgetcred)
2011-10-22 14:54:26 -05:00
fed3050bc0
use ` instead of $( to please legacy solaris /bin/sh
2011-10-19 11:36:18 +02:00
c3936f72c3
Test for hdb-mitdb, including an MIT KDB file.
2011-09-26 17:08:33 -05:00
f1df66341e
quote to make solaris sh apply, patch from Tom Payeire
2011-09-26 17:50:45 +02:00
f910d2174b
Disable java gssapi tests because of 7077640 and 7077646
2011-09-25 20:24:26 +02:00
d64eb50f72
filter out kvno
2011-09-25 16:44:49 +02:00
f6dbc98081
drop ndbm since no longer have write support
2011-09-23 13:18:40 +02:00
6272abb227
sleep some extra time before killing java pid so it will have a chance
...
write it's stdout to disk
2011-09-19 11:10:51 +02:00
885e53c51a
acceptor glue
2011-08-10 17:25:25 -07:00
86243ab19f
more java (server) tests
2011-08-10 17:23:35 -07:00
a48768fc26
sprinkle more comments
2011-07-24 22:33:49 -07:00
407fcf35fc
update client_access
2011-07-24 20:24:39 -07:00
03e73522a3
better status message
2011-07-24 20:24:38 -07:00
2991ed7e77
check for FAST
2011-07-24 20:24:37 -07:00
13eeb30a1d
Create a request structure
2011-07-24 20:24:37 -07:00
17d5f8d19e
make AS work with FAST
2011-07-24 20:24:36 -07:00
4f3d3723f4
fail if kinit failes
2011-07-24 20:24:36 -07:00
8fccb51d49
Merge pull request #12 from nicowilliams/krb5_admin_patches_2nd
...
Krb5 admin patches 2nd
This has all the patches needed for krb5_admind to build and pass most tests, that includes:
- more kadm5 API compatibility (including very basic profile functionality)
- multi-kvno support (useful for key rollovers) (a test for this is included in tests/db/check-kdc)
Unfinished:
- password history (currently uses key history, needs to be separated and use digests)
- policies (only default policy allowed)
- mit kdb changes not tested yet
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 15:41:36 -07:00
75987ebbae
update to match plugin abi
2011-07-23 11:59:06 -07:00
1edc2cee45
Test multi-kvno support in kadmin and KDC (part 1).
2011-07-22 16:07:10 -05:00
7aaba443bc
add NTMakefile and windows directories
2011-07-17 12:16:59 -07:00
e73a5a9c54
remove stray klist
2011-06-19 11:39:39 -07:00
b019c085bd
handle leaks excluded
2011-05-22 14:26:59 -07:00
12c3c12160
pass in client name
2011-05-22 13:01:00 -07:00
9a5019156c
remove debug and don't check targetname since it doesn't really matter
2011-05-21 13:27:57 -07:00
5564106268
use client-amel
2011-05-21 13:25:51 -07:00
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
05a432aaed
let try to exclude __CFInitialize
2011-05-20 08:42:29 -07:00
fda076962d
check prefixed keytab too
2011-04-09 18:28:15 -07:00
d91e772a0e
adopt syntax
2010-11-28 10:46:26 -08:00
37abbc7d77
test attrs-for-mech
2010-11-26 00:10:26 -08:00
2b1bc08d24
setup env_setup
2010-11-26 00:10:17 -08:00
5f342b59b8
add gsstool
2010-11-26 00:09:48 -08:00
2bffe97647
better error messages
2010-11-25 11:21:41 -08:00
55e96fabf2
switch kswitch to kcc
2010-11-25 09:29:29 -08:00
e186ea15b1
use kcc for klist
2010-11-24 19:43:40 -08:00
61bfc2997b
Fix testing when compiled with --disable-afs-support
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-09-17 12:21:39 -07:00
dfd107c709
Test principal name with aliases in them
2010-06-09 22:21:12 -07:00
37762d631c
Don't use invalid base64 encoded string, just use plain password instead
2010-06-04 14:40:31 -07:00
Love Hornquist Astrand