1 2008-01-14 Love Hörnquist Åstrand <lha@it.su.se>
3 * kdc: Test the PKCS11 provider built-in to libhx509.
5 2007-12-14 Love Hörnquist Åstrand <lha@it.su.se>
7 * ldap/init.ldif: Add space to make valid ldiff file, from Buchan
10 * ldap/slapd-init.in: Another place where schemas are installed,
13 2007-12-05 Love Hörnquist Åstrand <lha@it.su.se>
15 * kdc/check-kadmin.in: Check that admin-less principal works.
17 2007-12-04 Love Hörnquist Åstrand <lha@it.su.se>
19 * gss/check-ntlm.in: test kdigest digest-probe command.
21 2007-12-03 Love Hörnquist Åstrand <lha@it.su.se>
23 * gss/check-basic.in: Test GSS_C_NO_NAME too.
25 2007-10-24 Love Hörnquist Åstrand <lha@it.su.se>
27 * kdc/check-kdc.in: Try multiple enctypes.
29 2007-08-17 Love Hörnquist Åstrand <lha@it.su.se>
31 * java/Makefile.am: EXTRA_DIST += jaas.conf
33 2007-08-13 Love Hörnquist Åstrand <lha@it.su.se>
35 * java/Makefile.am: Add java source code.
37 2007-08-09 Love Hörnquist Åstrand <lha@it.su.se>
39 * kdc/check-iprop.in: Don't run this test in AFS since AFS is
42 * kdc/wait-kdc.sh: Catch bind ../../tests/kdc/signal: Operation
45 2007-08-08 Love Hörnquist Åstrand <lha@it.su.se>
47 * kdc/check-iprop.in: use wait-kdc.sh for all diffrent places we
48 start ipropd-{master,slave}.
50 * all-tests: empty messages.log
52 * kdc/check-iprop.in: Use wait-kdc.sh to wait for
53 ipropd-{master,slave}.
55 * kdc/wait-kdc.sh: look futher back in the logfile.
57 * kdc/wait-kdc.sh: Make wait-kdc.sh able to wait on other things.
59 * kdc/check-iprop.in: Checking master going backward, create
62 2007-08-07 Love Hörnquist Åstrand <lha@it.su.se>
64 * java/have-java.sh: GNU GCC Java doesn't support Kerberos
66 2007-08-01 Love Hörnquist Åstrand <lha@it.su.se>
68 * kdc/check-iprop.in: wait longer for iprop, dump messages.log on
71 * kdc/Makefile.am: Clean after iprop tests.
73 * kdc/check-iprop.in: more iprop tests.
75 2007-07-31 Love Hörnquist Åstrand <lha@it.su.se>
77 * kdc/Makefile.am: Add check-iprop and related files.
79 * kdc/krb5.conf.in: Add stuff for iprop.
81 * kdc/check-iprop.in: Test for iprop.
83 * kdc/iprop-acl: ACL file for iprop.
85 2007-07-28 Love Hörnquist Åstrand <lha@it.su.se>
87 * kdc/donotexists.txt: missing file.
89 2007-07-26 Love Hörnquist Åstrand <lha@it.su.se>
91 * kdc/Makefile.am: EXTRA_DIST += donotexists.txt
93 2007-07-22 Love Hörnquist Åstrand <lha@it.su.se>
95 * kdc/check-kdc.in: Test renewing.
97 2007-07-21 Love Hörnquist Åstrand <lha@it.su.se>
99 * kdc/Makefile.am: Test for simple salt types.
101 * kdc/krb5.conf.keys.in: Configuration file for testing keys.
103 * kdc/check-keys.in: Test some simple salt types.
105 2007-07-17 Love Hörnquist Åstrand <lha@it.su.se>
107 * java/Makefile.am: EXTRA_DIST += have_java.sh
109 * java/check-kinit.in: Make failing to compile a java program a
112 * java/check-kinit.in: Disable test if we use socket wrapper.
114 2007-07-16 Love Hörnquist Åstrand <lha@it.su.se>
116 * kdc/check-kadmin.in: Give more hints of what went wrong.
118 2007-07-14 Love Hörnquist Åstrand <lha@it.su.se>
120 * kdc/Makefile.am: add check-kadmin.in
122 2007-07-12 Love Hörnquist Åstrand <lha@it.su.se>
124 * ldap/slapd.conf: add samba.schema.
126 * ldap/slapd-init.in: Add samba schema.
128 * ldap/init.ldif: Samba entry to do testing with.
130 2007-07-11 Love Hörnquist Åstrand <lha@it.su.se>
132 * java/check-kinit.in: Only print when there is an error.
134 * java/krb5.conf.in: Move the AES enctypes first.
136 2007-07-10 Love Hörnquist Åstrand <lha@it.su.se>
138 * kdc/check-kadmin.in: Send kill outout to /dev/null.
140 * kdc/krb5.conf.in: Add bits needed for kadmind server test.
142 * kdc/Makefile.am: Add check-kadmin.
144 * kdc/check-kadmin.in: Simple test for server based kadmin.
146 * kdc/heimdal.acl: ACL file for check-admin test.
148 2007-07-05 Love Hörnquist Åstrand <lha@it.su.se>
150 * Makefile.am: Add java.
152 * java: simple java kinit test
154 2007-06-26 Love Hörnquist Åstrand <lha@it.su.se>
156 * ldap/check-ldap.in: Add one more principal and list the
159 * kdc/check-pkinit.in: Fix hxtool issue-certificate --req.
161 * kdc/check-referral.in: Spelling.
163 2007-06-22 Love Hörnquist Åstrand <lha@it.su.se>
165 * gss/check-context.in: disable dns canon on test, break on some
168 2007-06-19 Love Hörnquist Åstrand <lha@it.su.se>
170 * can/test_can.in: readline seems strange, try diffrent way to
173 2007-06-18 Love Hörnquist Åstrand <lha@it.su.se>
175 * can/test_can.in: spoon feed kadmin diffrently
177 2007-06-11 Love Hörnquist Åstrand <lha@it.su.se>
179 * kdc/check-kdc.in: Also test rename user to anther realm.
181 * kdc/check-kdc.in: Test renaming a user.
183 * can/test_can.in: Tell use what the messages.log told us.
185 * kdc/check-referral.in: Add some more as-req canon tests, add
186 disable tgs-req tests.
188 2007-06-09 Love Hörnquist Åstrand <lha@it.su.se>
190 * can/check-can.in: Check is there is a working db backend here.
192 2007-06-08 Love Hörnquist Åstrand <lha@it.su.se>
194 * can/Makefile.am: Clean up more cruft.
196 2007-06-07 Love Hörnquist Åstrand <lha@it.su.se>
198 * can/Makefile.am: More files we want in the dist.
200 * can/test_can.in: Simplify error reporting.
202 * can/test_can.in: Catch error from kadmin.
204 * can/mit-pkinit-20070607.*: mit pkinit-9 request
206 * can/check-can.in: Add mit-pkinit test.
208 * can/Makefile.am: Create specific configurtion files for some
211 * can/test_can.in: Pick up the right generated
212 krb5.conf (spelling).
214 * can: Add Apple Tiger 10.4/MIT Kerberos 1.4
216 * can/test_can.in: Don't need to start a kdc for this test.
218 * can: pre-canned requests from older versions and other implementations
220 * Makefile.am: SUBDIRS += can
222 2007-06-04 Love Hörnquist Åstrand <lha@it.su.se>
224 * kdc/check-uu.in: Use stdout from uu_server.
226 2007-05-31 Love Hörnquist Åstrand <lha@it.su.se>
228 * kdc/check-pkinit.in: Try pkinit in w2k mode, also add tests for
231 * kdc/Makefile.am: generate a krb5-pkinit-win.conf
233 * kdc/krb5-pkinit.conf.in: W2K tests.
235 2007-05-30 Love Hörnquist Åstrand <lha@it.su.se>
237 * kdc/Makefile.am: remove more files
239 2007-05-10 Love Hörnquist Åstrand <lha@it.su.se>
241 * kdc/check-pkinit.in: try principal subject in DB
243 2007-05-08 Love Hörnquist Åstrand <lha@it.su.se>
245 * gss/check-basic.in: test using test_kcred
247 * gss/check-ntlm.in: One more test.
249 * ldap/check-ldap.in: check in /usr/lib/openldap too for slapd and
252 2007-05-07 Love Hörnquist Åstrand <lha@it.su.se>
254 * db/add-modify-delete.in: Remove comment.
256 * db/add-modify-delete.in: try replay
258 * db/Makefile.am: clean more files.
260 * db/add-modify-delete.in: try iprop-log commands.
262 2007-04-27 Love Hörnquist Åstrand <lha@it.su.se>
264 * db/krb5.conf.in: Add longer example.
266 2007-04-23 Love Hörnquist Åstrand <lha@it.su.se>
268 * db: basic tests for dbinfo
270 2007-04-22 Love Hörnquist Åstrand <lha@it.su.se>
272 * gss/Makefile.am: Add check-ntlm.
274 * gss/check-ntlm.in: test ntlm client credentials code.
276 2007-04-21 Love Hörnquist Åstrand <lha@it.su.se>
278 * db/loaddump-db.in: make kstash quiet
280 2007-04-18 Love Hörnquist Åstrand <lha@it.su.se>
282 * gss/check-basic.in: more gss_acquire_cred tests
284 2007-04-17 Love Hörnquist Åstrand <lha@it.su.se>
286 * gss/Makefile.am: add check-basic
288 * gss/check-basic.in: basic tests that might require a KDC.
290 2007-04-16 Love Hörnquist Åstrand <lha@it.su.se>
292 * kdc/Makefile.am: CLEANFILES += sdigest-init
294 2007-04-11 Love Hörnquist Åstrand <lha@it.su.se>
296 * ldap/slapd-init.in: Add Id tag
298 2007-02-22 Love Hörnquist Åstrand <lha@it.su.se>
300 * kdc/check-kdc.in: test new kadmin add_enctype functionallity
302 2007-02-17 Love Hörnquist Åstrand <lha@it.su.se>
304 * Makefile.am: add ldap
306 * kdc/check-referral.in: add check-referral
308 * kdc/Makefile.am: add check-referral
310 2007-02-15 Love Hörnquist Åstrand <lha@it.su.se>
312 * tests/ldap: simple ldap test, inspried by samba ldb ldap test
314 2007-02-03 Love Hörnquist Åstrand <lha@it.su.se>
316 * kdc/check-digest.in: Test ms-chap-v2 (client response, server
317 response, session key)
319 2007-02-02 Love Hörnquist Åstrand <lha@it.su.se>
321 * kdc/krb5.conf.in: allow ms-chap-v2
323 2007-02-01 Love Hörnquist Åstrand <lha@it.su.se>
325 * kdc/check-digest.in: Negative check too.
327 2007-01-18 Love Hörnquist Åstrand <lha@it.su.se>
329 * kdc/check-uu.in: save log, wait longer
331 2007-01-15 Love Hörnquist Åstrand <lha@it.su.se>
333 * kdc/check-pkinit.in: tell me about certifiate that we have
336 2007-01-11 Love Hörnquist Åstrand <lha@it.su.se>
338 * no random, no RSA/DH tests
340 * plugin/Makefile.am: remove files created by tests
342 * gss/Makefile.am: remove files created by tests
344 * gss/Makefile.am: add ntlm-user-file.txt
346 2007-01-10 Love Hörnquist Åstrand <lha@it.su.se>
348 * kdc/ap-req.c: --verify-pac no means verify existance of PAC in
349 ticket, the signature checking is done by the kerberos library.
351 * kdc/check-digest.in: display messages.log and help that that
352 tells us what went wrong.
354 * plugin/windc.c: Update to validate function signature change.
356 * Makefile.am: Only traverse into plugin if there is shared
359 2007-01-09 Love Hörnquist Åstrand <lha@it.su.se>
361 * kdc/check-pkinit.in: Prefix key with FILE:
363 2007-01-04 Love Hörnquist Åstrand <lha@it.su.se>
365 * plugin/Makefile.am: EXTRA_DIST += krb5.conf.in
367 * plugin/check-pac.in: test explicit requested pac and explicit
368 negative requested pac.
370 * kdc/ap-req.c: Make it possible to turn off PAC check, its
373 * plugin/windc.c: Add client_access.
375 * plugin/check-pac.in: Verify PAC on server end too.
377 * kdc/ap-req.c: Add verification of PAC.
379 * kdc/Makefile.am: Add test for pkinit with locally generated
382 * kdc/check-pkinit.in: Generate a ca, kdc cert and client cert and
385 * kdc/pki-mapping: add other foo@TEST
387 * kdc/krb5-pkinit.conf.in: pkinit specific krb5.conf
389 2007-01-03 Love Hörnquist Åstrand <lha@it.su.se>
391 * plugin/check-pac.in: test tgs-req
393 * plugin/windc.c: log that the function is called.
395 * kdc/check-digest.in: Test security layer in ntlm.
397 * plugin: test WinDC PAC functionallity
399 * Makefile.am: Include plugin in tests
401 2006-12-28 Love Hörnquist Åstrand <lha@it.su.se>
403 * kdc/ntlm-user-file.txt: Correct DOMAIN name
405 2006-12-26 Love Hörnquist Åstrand <lha@it.su.se>
407 * kdc/krb5.conf.in: Add digests acls (all)
409 2006-12-19 Love Hörnquist Åstrand <lha@it.su.se>
411 * gss/check-spnego.in: test wrapunwrap
413 * gss/check-spnego.in: Test get and verify MIC.
415 * gss/check-context.in: don't need to set GSSAPI_SPNEGO_NAME any
418 2006-12-18 Love Hörnquist Åstrand <lha@it.su.se>
420 * gss/check-context.in: Define GSSAPI_SPNEGO_NAME and re-add
423 * gss/check-context.in: add trap, remove allow-digest, pretty
426 * gss/check-gssmask.in: catch EXIT traps
428 * gss/check-spnego.in: test more combination of spnego contexts
430 * gss/Makefile.am: add check-spnego
432 * gss/check-spnego.in: check spnego combinations.
434 2006-12-16 Love Hörnquist Åstrand <lha@it.su.se>
436 * kdc/check-digest.in: test more combinations of names
438 2006-12-15 Love Hörnquist Åstrand <lha@it.su.se>
440 * kdc/ntlm-user-file.txt: ntlm username and password file
442 * kdc/check-digest.in: Check that ntlm works.
444 2006-12-12 Love Hörnquist Åstrand <lha@it.su.se>
446 * kdc/check-digest.in: prefix digest commands with digest-
448 2006-11-29 Love Hörnquist Åstrand <lha@it.su.se>
450 * kdc/check-kdc.in: Don't (afs) unlog using kdestroy
452 2006-11-25 Love Hörnquist Åstrand <lha@it.su.se>
454 * kdc/Makefile.am: Add LIB_roken and (implictly by that libvers
455 for print_version) to LDADD
457 2006-11-23 Love Hörnquist Åstrand <lha@it.su.se>
459 * kdc/check-kdc.in: check that the getarg -- option works for
462 * kdc/check-kdc.in: Test proxy cert.
464 2006-11-19 Love Hörnquist Åstrand <lha@it.su.se>
466 * kdc/krb5.conf.in: revert the enable-pkinit change, and make it
467 consistant with all other other enable- options
469 2006-11-15 Love Hörnquist Åstrand <lha@it.su.se>
471 * gss/check-context.in: Add dce-style context building test.
473 * gss/check-context.in: test more combination of context building
475 2006-11-13 Love Hörnquist Åstrand <lha@it.su.se>
477 * Use TEST{,2}.H5L.SE for testing
479 2006-11-08 Love Hörnquist Åstrand <lha@it.su.se>
481 * kdc/Makefile.am: Use EGREP.
483 * kdc/check-kdc.in: Use EGREP.
485 2006-10-23 Love Hörnquist Åstrand <lha@it.su.se>
487 * kdc/check-kdc.in: run eval on the testfailed variable so we run
490 2006-10-22 Love Hörnquist Åstrand <lha@it.su.se>
492 * db/Makefile.am: make have-db being built in the "make all"
495 * kdc/check-kdc.in: tell more what the kdc though about the
498 2006-10-21 Love Hörnquist Åstrand <lha@it.su.se>
500 * db/add-modify-delete.in: Use EGREP.
502 * db/Makefile.am: add EGREP to do_subst
504 2006-10-20 Love Hörnquist Åstrand <lha@it.su.se>
506 * gss/Makefile.am: Clean temporary files
508 * db/Makefile.am: clean have-db
510 * kdc/Makefile.am: Add pki-mapping to dist file.
512 * kdc/Makefile.am: more files
514 * db/Makefile.am: more files
516 2006-10-19 Love Hörnquist Åstrand <lha@it.su.se>
518 * gss/check-context.in: give path to have-db
520 * gss/check-gssmask.in: give path to have-db
522 * kdc/check-kdc.in: give path to have-db
524 * kdc/check-digest.in: give path to have-db
526 * gss/check-gssmask.in: If there is no useful db support compile
529 * gss/check-context.in: Add commeted out digest check.
531 * kdc/check-digest.in: If there is no useful db support compile
534 * kdc/check-kdc.in: If there is no useful db support compile in,
537 * db/loaddump-db.in: If there is no useful db support compile in,
540 * db/have-db.in: Check if the kdc have any useful builtin
543 * kdc/check-kdc.in: Fix awk statement, put RE on the right side.
545 2006-10-17 Love Hörnquist Åstrand <lha@it.su.se>
547 * gss/check-gssmask.in: remove dup exit
549 * gss/check-context.in: More name tests.
551 * gss/check-context.in: test with and without dns-canon
553 2006-10-14 Love Hörnquist Åstrand <lha@it.su.se>
555 * kdc/check-kdc.in: Be more explit about what test failed.
557 2006-10-13 Love Hörnquist Åstrand <lha@it.su.se>
559 * gss/check-context.in: et KRB5CCNAME in global enviorment
561 2006-10-12 Love Hörnquist Åstrand <lha@it.su.se>
563 * gss/Makefile.am: Check if the gss context tester test_context
566 * gss/check-context.in: Check if the gss context tester
567 test_context works ok.
569 2006-10-10 Love Hörnquist Åstrand <lha@it.su.se>
571 * gss/check-gssmask.in: use wait-kdc.sh script
573 * kdc/check-kdc.in: use wait-kdc.sh script
575 * kdc/check-digest.in: use wait-kdc.sh script
577 * Heimdal uses TESTS_ENVIRONMENT before every binary being tested
578 directly from the Makefile. This now uses the same for the
579 scripts, so we can run them under valgrind. From Andrew Bartlet
581 2006-10-07 Love Hörnquist Åstrand <lha@it.su.se>
583 * gss/Makefile.am: splits script tests and binary tests
585 * db/Makefile.am: Add tests script depenencies
587 * kdc/Makefile.am: Split script tests and binary tests
589 2006-10-04 Love Hörnquist Åstrand <lha@it.su.se>
591 * kdc/check-kdc.in: Test pkinit encKey case.
593 2006-09-22 Love Hörnquist Åstrand <lha@it.su.se>
595 * gss/check-gssmask.in: Catch failures from gssmaestro.
597 2006-09-20 Love Hörnquist Åstrand <lha@it.su.se>
599 * gss/check-gssmask.in: Add a third client
601 2006-09-19 Love Hörnquist Åstrand <lha@it.su.se>
603 * gss/check-gssmask.in: test for gssmask + gssmaestro.
605 * gss/krb5.conf.in: Add krb5.conf for krb5.conf
607 2006-09-18 Love Hörnquist Åstrand <lha@it.su.se>
609 * gss/check-gss.in: Add (c)
611 * kdc/check-kdc.in: Test constrained delegation impersonation.
613 2006-09-16 Love Hörnquist Åstrand <lha@it.su.se>
615 * kdc/check-kdc.in: Change the password on krbtgt a couple of
616 times to have a non boring kvno.
618 2006-08-24 Love Hörnquist Åstrand <lha@it.su.se>
620 * kdc/check-digest.in: Use the server as the server and set
621 diffrent password for the user and service.
623 * kdc/check-digest.in: Set allow digest flag on the server.
625 * kdc/Makefile.am: Build and run check-digest test.
627 * kdc/check-digest.in: Remove channel bindings from CHAP tests,
628 there is no such thing for CHAP.
630 * kdc/check-kdc.in: Test aes only krbtgt and des3 only service.
632 2006-08-21 Love Hörnquist Åstrand <lha@it.su.se>
634 * kdc/check-kdc.in: Remove empty lines for picky awks
636 2006-07-06 Love Hörnquist Åstrand <lha@it.su.se>
638 * kdc/check-kdc.in: Check for cross realm case where remove user
639 doesn't exists in the database, this is ok assuming the cross
640 realm isn't local. In the general case this isn't true.
642 2006-06-22 Love Hörnquist Åstrand <lha@it.su.se>
644 * kdc/check-kdc.in: run kadmin check
646 2006-06-07 Love Hörnquist Åstrand <lha@it.su.se>
648 * kdc/check-kdc.in: test that delegated cred works too
650 * kdc/check-kdc.in: Test delegation
652 2006-06-06 Love Hörnquist Åstrand <lha@it.su.se>
654 * kdc/check-kdc.in: Add impersonation tests.
656 2006-06-01 Love Hörnquist Åstrand <lha@it.su.se>
658 * kdc/check-kdc.in: Less verbose, spelling.
660 * kdc/check-kdc.in: test cross realm and deleted user
662 2006-05-12 Love Hörnquist Åstrand <lha@it.su.se>
664 * kdc/check-kdc.in: Check password protected pk-init keyfile.
666 2006-04-30 Love Hörnquist Åstrand <lha@it.su.se>
668 * kdc/check-kdc.in: Don't try pkinit if there is no rsa
670 2006-04-29 Love Hörnquist Åstrand <lha@it.su.se>
672 * kdc/pki-mapping: change pki-mapping
674 * kdc/Makefile.am: clean the server.keytab
676 * kdc/check-kdc.in: Add test for pk-init
678 * kdc/krb5.conf.in: Add pkinit glue
680 2006-04-28 Love Hörnquist Åstrand <lha@it.su.se>
682 * kdc/pki-mapping: Add pk-init mapping file
684 2006-04-27 Love Hörnquist Åstrand <lha@it.su.se>
686 * kdc/check-kdc.in: Sprinkle more ap-req now that the credential
687 is removed from the cache using kdestroy --credential=
689 * kdc/ap-req.c: check that AP_OPTS_MUTUAL_REQUIRED matches, check
692 * kdc/Makefile.am: Build as-req.
694 * kdc/check-kdc.in: Sprinkel some as-req
696 * kdc/ap-req.c: simple test program checking that as ap-req/as-rep
699 2006-04-25 Love Hörnquist Åstrand <lha@it.su.se>
701 * {,kdc/,db/}.cvsignore: ignore Makefile.in
703 * kdc/check-kdc.in: Try to detect another KDC running.
705 * kdc/check-kdc.in: more tests regarding doing AS-REQ and TGS-REQ
707 * kdc/krb5.conf.in: krb5.conf template
709 * kdc/check-kdc.in: check that the keytab have the right kvno
711 * db/add-modify-delete.in: create a server too
713 * kdc/check-kdc.in: check kdc too
715 * db/Makefile.am: Add add-modify-delete
717 * db/add-modify-delete.in: basic kadmin tests
719 * Makefile.am: SUBDIRS += kdc
721 * kdc/check-kdc.in: Test framework for getting and checking
722 tickets, start kdc on localhost:8888.
724 * kdc/Makefile.am: Test framework for getting and checking
727 * db/krb5.conf.in: log all message to local file
729 * db/Makefile.am: clean messages file
731 2006-01-17 Love Hörnquist Åstrand <lha@it.su.se>
733 * db/krb5.conf.in: Set [libdefaults] default_realm = EXAMPLE.ORG.
735 2005-11-30 Love Hörnquist Åstrand <lha@it.su.se>
737 * db/loaddump-db.in: Specifify explicitly that the database is in
738 the current directory.
740 2005-08-11 Love Hörnquist Åstrand <lha@it.su.se>
742 * test loading and dumping of the database