testprogs/blackbox/test_trust_user_account.sh

   1 #!/bin/sh
   2
   3 if [ $# -lt 1 ]; then
   4         cat <<EOF
   5 Usage: test_trust_user_account.sh PREFIX OUR_REALM OUR_FLAT REMOTE_REALM REMOTE_FLAT
   6 EOF
   7         exit 1
   8 fi
   9
  10 PREFIX="$1"
  11 OUR_REALM="$2"
  12 OUR_FLAT="$3"
  13 REMOTE_REALM="$4"
  14 REMOTE_FLAT="$5"
  15 shift 5
  16
  17 . $(dirname $0)/subunit.sh
  18
  19 samba_tool="$BINDIR/samba-tool"
  20 samba4bindir="$BINDIR"
  21 samba4srcdir="$SRCDIR/source4"
  22 samba4kinit_binary="kinit -k"
  23 if test -x $BINDIR/samba4kinit; then
  24         samba4kinit_binary="$BINDIR/samba4kinit --use-keytab"
  25 fi
  26
  27 KEYTAB="$PREFIX/tmptda.keytab"
  28
  29 KRB5_TRACE=/dev/stderr
  30 export KRB5_TRACE
  31
  32 testit "retrieve keytab for TDA of $REMOTE_REALM" $PYTHON $samba_tool domain exportkeytab $KEYTAB $CONFIGURATION --principal "$REMOTE_FLAT\$@$OUR_REALM" || failed=$(expr $failed + 1)
  33
  34 KRB5CCNAME="$PREFIX/tmptda.ccache"
  35 samba4kinit="$samba4kinit_binary -c $KRB5CCNAME"
  36 export KRB5CCNAME
  37
  38 rm -f $KRB5CCNAME
  39
  40 EXPECTED_SALT="${OUR_REALM}krbtgt${REMOTE_FLAT}"
  41 #
  42 # Note the \$ is for the end of line in grep
  43 #
  44 # There must be no trailing '$' in the SALT string itself,
  45 # it's removed from the sAMAccountName value (which includes the trailing '$')
  46 # before construting the salt!
  47 #
  48 # Otherwise this would be:
  49 # "^virtualKerberosSalt: ${EXPECTED_SALT}\\\$\$"
  50 #
  51 EXPECTED_GREP="^virtualKerberosSalt: ${EXPECTED_SALT}\$"
  52 testit_grep "get virtualKerberosSalt for TDA of $REMOTE_FLAT\$" "$EXPECTED_GREP" $PYTHON $samba_tool user getpassword "$REMOTE_FLAT\$" $CONFIGURATION --attributes=virtualKerberosSalt || failed=$(expr $failed + 1)
  53
  54 testit "kinit with keytab for TDA of $REMOTE_REALM" $samba4kinit -t $KEYTAB "$REMOTE_FLAT\$@$OUR_REALM" || failed=$(expr $failed + 1)
  55
  56 rm -f $KRB5CCNAME $KEYTAB
  57
  58 exit $failed