From: Andreas Schneider Date: Wed, 9 Oct 2019 14:59:59 +0000 (+0200) Subject: testprogs: Add test for kinit with canonicalization X-Git-Tag: talloc-2.3.1~369 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=93c2b446755bd89c7ace8c6ee0445a361f8e17ca;p=thirdparty%2Fsamba.git testprogs: Add test for kinit with canonicalization Pair-Programmed-With: Isaac Boukris Signed-off-by: Andreas Schneider Signed-off-by: Isaac Boukris Reviewed-by: Stefan Metzmacher --- diff --git a/selftest/knownfail.d/kinit_mit b/selftest/knownfail.d/kinit_mit new file mode 100644 index 00000000000..ef1a3d5aa91 --- /dev/null +++ b/selftest/knownfail.d/kinit_mit @@ -0,0 +1 @@ +^samba4.blackbox.kinit.kinit.with.canonicalize diff --git a/testprogs/blackbox/test_kinit_mit.sh b/testprogs/blackbox/test_kinit_mit.sh index 57d0f74d28d..d28caecd603 100755 --- a/testprogs/blackbox/test_kinit_mit.sh +++ b/testprogs/blackbox/test_kinit_mit.sh @@ -130,6 +130,19 @@ testit "set user password with kerberos ccache" $VALGRIND $PYTHON $samba_tool us testit "enable user with kerberos cache" $VALGRIND $PYTHON $samba_enableaccount nettestuser -H ldap://$SERVER -k yes $@ || failed=`expr $failed + 1` +########################################################### +### Test kinit with canonicalization +########################################################### + +# This is currently not working due to an upstream bug in MIT Kerberos. The +# test will ensure that we get notified when we can turn on canonicalization +# in ads_krb5_chg_password(). +# https://bugzilla.samba.org/show_bug.cgi?id=14155 +upperusername=$(echo $USERNAME | tr '[a-z]' '[A-Z]') +testit "kinit with canonicalize" $samba_texpect $PREFIX/tmpkinitscript $samba_kinit -C $upperusername@$REALM -S kadmin/changepw@$REALM || failed=`expr $failed + 1` + +$samba_kdestroy + ########################################################### ### Test kinit with user credentials ###########################################################