]> git.ipfire.org Git - thirdparty/openvpn.git/commit
t_client.sh: Add support for Kerberos/ksu
authorDavid Sommerseth <davids@openvpn.net>
Sat, 17 Sep 2016 10:50:33 +0000 (13:50 +0300)
committerGert Doering <gert@greenie.muc.de>
Sat, 17 Sep 2016 11:18:43 +0000 (13:18 +0200)
commitf1b66b21f2f5c0ef74903048f84d69023ef21b8e
tree9275d04393e07cfeefbf812964abe8352cd41b7a
parent8e13e38aef5028e2227eb2d5e0a7e35ba6ff028e
t_client.sh: Add support for Kerberos/ksu

If the t_client.rc have PREFER_KSU=1 configured, t_client.sh
will check if you have a valid Kerberos ticket and if so it will
do all execution via ksu instead of sudo.

If PREFER_KSU is not set or a Kerberos ticket is not found, it
will fallback to the configured RUN_SUDO approach.

When using ksu it needs the full path to the program being executed,
so there is also additional code to find the full path of true and kill.

[ v2 - Remove $* from RUN_SUDO for ksu config.  Old cruft which survived
       last review before patch submission.
     - Improve known state declaration of PREFER_KSU ]

[ v3 - Kick out bashism - '&>' redirect ]

This commit also includes commits f0892e6590cb247ef1012b0fe89f80eee2d56cc4
and f40f10ea9607934faeb2b8cd84aefff0e0790189 (via merge conflicts)

Signed-off-by: David Sommerseth <davids@openvpn.net>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1474109433-4710-1-git-send-email-davids@openvpn.net>
URL: http://www.mail-archive.com/search?l=mid&q=1474109433-4710-1-git-send-email-davids@openvpn.net
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit 6b25b99fe4b8bdf5cdba4a0fb247df40277d0525)
tests/t_client.sh.in