1#!/bin/sh 2# 3# Copyright (c) 2006 - 2008 Kungliga Tekniska Högskolan 4# (Royal Institute of Technology, Stockholm, Sweden). 5# All rights reserved. 6# 7# Redistribution and use in source and binary forms, with or without 8# modification, are permitted provided that the following conditions 9# are met: 10# 11# 1. Redistributions of source code must retain the above copyright 12# notice, this list of conditions and the following disclaimer. 13# 14# 2. Redistributions in binary form must reproduce the above copyright 15# notice, this list of conditions and the following disclaimer in the 16# documentation and/or other materials provided with the distribution. 17# 18# 3. Neither the name of the Institute nor the names of its contributors 19# may be used to endorse or promote products derived from this software 20# without specific prior written permission. 21# 22# THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 23# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 24# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25# ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 26# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32# SUCH DAMAGE. 33 34env_setup="@env_setup@" 35objdir="@objdir@" 36 37. ${env_setup} 38 39KRB5_CONFIG="${objdir}/krb5-cc.conf" 40export KRB5_CONFIG 41 42unset KRB5CCNAME 43 44testfailed="echo test failed; exit 1" 45 46# If there is no useful db support compile in, disable test 47${have_db} || exit 77 48 49R=TEST.H5L.SE 50 51port=@port@ 52pwport=@pwport@ 53 54kinit="${kinit} --password-file=${objdir}/foopassword ${afs_no_afslog}" 55kdestroy="${kdestroy} ${afs_no_unlog}" 56kadmin="${kadmin} -l -r $R" 57kdc="${kdc} --addresses=localhost -P $port" 58 59server=host/datan.test.h5l.se 60cache="FILE:${objdir}/cache.krb5" 61keytabfile=${objdir}/server.keytab 62keytab="FILE:${keytabfile}" 63 64rm -f ${keytabfile} 65rm -f current-db* 66rm -f out-* 67rm -f mkey.file* 68 69> messages.log 70 71cp "${objdir}/krb5.conf" "${objdir}/krb5-cc.conf" 72 73echo Creating database 74${kadmin} \ 75 init \ 76 --realm-max-ticket-life=1day \ 77 --realm-max-renewable-life=1month \ 78 ${R} || exit 1 79 80${kadmin} add -p foo --use-defaults foo@${R} || exit 1 81${kadmin} add -p foo --use-defaults bar@${R} || exit 1 82${kadmin} add -p kaka --use-defaults ${server}@${R} || exit 1 83${kadmin} ext -k ${keytab} ${server}@${R} || exit 1 84 85echo "Doing database check" 86${kadmin} check ${R} || exit 1 87 88echo foo > ${objdir}/foopassword 89 90echo Starting kdc 91env \ 92MallocStackLoggingNoCompact=1 \ 93MallocErrorAbort=1 \ 94MallocLogFile=${objdir}/malloc-log \ 95${kdc} & 96kdcpid=$! 97 98sh ${wait_kdc} 99if [ "$?" != 0 ] ; then 100 kill -9 ${kdcpid} 101 exit 1 102fi 103 104trap "kill -9 ${kdcpid}; echo signal killing kdc; exit 1;" EXIT 105 106ec=0 107 108(cat ${objdir}/krb5.conf ; \ 109 echo '' ; \ 110 echo '[libdefaults]' ; \ 111 echo " default_cc_type = SCC" ; \ 112 echo '' ) \ 113 > ${objdir}/krb5-cc.conf 114 115${kswitch} -p foo@${R} 2>/dev/null && ${kdestroy} 116${kswitch} -p foo@${R} 2>/dev/null && ${kdestroy} 117${kswitch} -p bar@${R} 2>/dev/null && ${kdestroy} 118${kswitch} -p bar@${R} 2>/dev/null && ${kdestroy} 119 120echo "getting default tickets"; > messages.log 121${kinit} foo@${R} || { ec=1 ; eval "${testfailed}"; } 122${kswitch} -p foo@${R} || { ec=1 ; eval "${testfailed}"; } 123${klist} -l | grep foo@ >/dev/null || { ec=1 ; eval "${testfailed}"; } 124${kdestroy} 125 126echo "getting both tickets"; > messages.log 127${kinit} -c SCC:1 foo@${R} || { ec=1 ; eval "${testfailed}"; } 128${kinit} -c SCC:2 bar@${R} || { ec=1 ; eval "${testfailed}"; } 129echo "switch foo" 130${kswitch} -p foo@${R} || { ec=1 ; eval "${testfailed}"; } 131${klist} | head -2 | grep foo@ >/dev/null || { ec=1 ; eval "${testfailed}"; } 132${klist} -l | grep foo@ >/dev/null || { ec=1 ; eval "${testfailed}"; } 133${klist} -l | grep bar@ >/dev/null || { ec=1 ; eval "${testfailed}"; } 134echo "switch bar" 135${kswitch} -p bar@${R} || { ec=1 ; eval "${testfailed}"; } 136${klist} | head -2 | grep bar@ >/dev/null || { ec=1 ; eval "${testfailed}"; } 137${klist} -l | grep foo@ >/dev/null || { ec=1 ; eval "${testfailed}"; } 138${klist} -l | grep bar@ >/dev/null || { ec=1 ; eval "${testfailed}"; } 139echo "delete bar" 140${kdestroy} 141echo "check that bar is gone" 142${klist} -l | grep bar@ >/dev/null && { ec=1 ; eval "${testfailed}"; } 143echo "check that foo is still there" 144${klist} -l | grep foo@ >/dev/null || { ec=1 ; eval "${testfailed}"; } 145${kswitch} -p foo@${R} || { ec=1 ; eval "${testfailed}"; } 146echo "delete foo" 147${kdestroy} || { ec=1 ; eval "${testfailed}"; } 148echo "check that foo is gone" 149${klist} -l | grep foo@ >/dev/null && { ec=1 ; eval "${testfailed}"; } 150echo "check that bar is gone" 151${klist} -l | grep bar@ >/dev/null && { ec=1 ; eval "${testfailed}"; } 152 153 154echo "killing kdc (${kdcpid})" 155sh ${leaks_kill} kdc $kdcpid || exit 1 156 157trap "" EXIT 158 159exit $ec 160