3 # Copyright (c) 2006 - 2008 Kungliga Tekniska Högskolan
4 # (Royal Institute of Technology, Stockholm, Sweden).
7 # Redistribution and use in source and binary forms, with or without
8 # modification, are permitted provided that the following conditions
11 # 1. Redistributions of source code must retain the above copyright
12 # notice, this list of conditions and the following disclaimer.
14 # 2. Redistributions in binary form must reproduce the above copyright
15 # notice, this list of conditions and the following disclaimer in the
16 # documentation and/or other materials provided with the distribution.
18 # 3. Neither the name of the Institute nor the names of its contributors
19 # may be used to endorse or promote products derived from this software
20 # without specific prior written permission.
22 # THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
23 # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24 # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 # ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
26 # FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 # OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 # HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 top_builddir
="@top_builddir@"
35 env_setup
="@env_setup@"
40 # If there is no useful db support compiled in, disable test
43 testfailed
="echo test failed; cat messages.log; exit \$ec"
45 # If there is no useful db support compiled in, disable test
54 kadmin
="${kadmin} -l -r $R"
55 kdc
="${kdc} --addresses=localhost -P $port"
56 kpasswdd
="${kpasswdd} --addresses=localhost -p $pwport"
58 server
=host
/datan.
test.h5l.se
59 cache
="FILE:${objdir}/cache.krb5"
60 keytabfile
=${objdir}/server.keytab
61 keytab
="FILE:${keytabfile}"
63 kinit
="${kinit} -c $cache ${afs_no_afslog}"
64 klist
="${klist} -c $cache"
65 kgetcred
="${kgetcred} -c $cache"
66 kdestroy
="${kdestroy} -c $cache ${afs_no_unlog}"
68 KRB5_CONFIG
="${objdir}/krb5.conf"
78 echo "Creating database for $R"
79 ${kadmin} <<EOF || exit 1
80 init --realm-max-ticket-life=1day --realm-max-renewable-life=1month ${R}
81 add -p foo --use-defaults foo@${R}
82 add -p kaka --use-defaults ${server}@${R}
83 ext -k ${keytab} ${server}@${R}
84 init --realm-max-ticket-life=1day --realm-max-renewable-life=1month ${R2}
85 add -p foo --use-defaults bar@${R2}
90 echo foo
> ${objdir}/foopassword
92 echo Starting kdc
; > messages.log
93 env
${HEIM_MALLOC_DEBUG} ${kdc} --detach --testing ||
94 { echo "kdc failed to start"; cat messages.log
; exit 1; }
97 echo Starting kpasswdd
98 env
${HEIM_MALLOC_DEBUG} ${kpasswdd} --detach ||
99 { echo "kpasswdd failed to start"; exit 1; }
100 kpasswddpid
=`getpid kpasswdd`
103 echo signal killing kdc and kpasswdd
104 kill -9 ${kdcpid} ${kpasswddpid} 2>/dev
/null
105 trap '' EXIT INT TERM
109 trap cleanup EXIT INT TERM
113 echo "Getting client initial tickets"; > messages.log
114 ${kinit} --password-file=${objdir}/foopassword foo@
$R || \
115 { ec
=1 ; eval "${testfailed}"; }
116 echo "Getting tickets"; > messages.log
117 ${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
118 echo "Listing tickets"; > messages.log
119 ${klist} > /dev/null || { ec=1 ; eval "${testfailed}"; }
120 ${test_ap_req} ${server}@${R} ${keytab} ${cache} || \
121 { ec
=1 ; eval "${testfailed}"; }
128 echo "Changing password"
139 ${rkpty} cpw.tmp env ${kpasswd} foo@${R} || \
140 { ec
=$?
; eval "${testfailed}"; }
144 echo ${pw} > ${objdir}/barpassword
147 echo "Getting client initial tickets for ${R}"; > messages.log
148 ${kinit} --password-file=${objdir}/barpassword foo@
$R || \
149 { ec
=1 ; eval "${testfailed}"; }
150 echo "Getting tickets"; > messages.log
151 ${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
152 echo "Listing tickets"; > messages.log
153 ${klist} > /dev/null || { ec=1 ; eval "${testfailed}"; }
154 ${test_ap_req} ${server}@${R} ${keytab} ${cache} || \
155 { ec
=1 ; eval "${testfailed}"; }
159 echo "checking ${R2}"
171 ${rkpty} cpw.tmp ..
/..
/kpasswd
/kpasswd bar@
${R2} || \
172 { ec
=$?
; eval "${testfailed}"; }
177 echo "Getting client initial tickets for ${R2}"; > messages.log
178 ${kinit} --password-file=${objdir}/barpassword bar@${R2} || \
179 { ec
=1 ; eval "${testfailed}"; }
183 echo "killing kdc (${kdcpid} ${kpasswddpid})"
184 sh
${leaks_kill} kdc
$kdcpid ||
exit 1
185 sh
${leaks_kill} kpasswdd
$kpasswddpid ||
exit 1