]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Test "tkey-gssapi-credential" conditionally
authorMichał Kępień <michal@isc.org>
Mon, 26 Apr 2021 05:16:38 +0000 (07:16 +0200)
committerMichał Kępień <michal@isc.org>
Mon, 26 Apr 2021 07:27:31 +0000 (09:27 +0200)
If "tkey-gssapi-credential" is set in the configuration and GSSAPI
support is not available, named will refuse to start.  As the test
system framework does not support starting named instances
conditionally, ensure that "tkey-gssapi-credential" is only present in
named.conf if GSSAPI support is available.

(cherry picked from commit 6feac68b5050e445b2e46b364ab7a0490e57ae52)

bin/tests/system/nsupdate/ns10/named.conf.in
bin/tests/system/nsupdate/ns9/named.conf.in
bin/tests/system/nsupdate/setup.sh

index 0e2fb067826ea95bd9b9d3a63e809304d05855c9..28fa5b5a295e92bda8743075f77ff3f12d44ef8b 100644 (file)
@@ -20,7 +20,7 @@ options {
        recursion no;
        notify yes;
        minimal-responses no;
-       tkey-gssapi-credential "DNS/ns10.example.com@EXAMPLE.COM";
+       @TKEY_CONFIGURATION@
 };
 
 key rndc_key {
index f95ea4ed26848392e569ee0072ba5e6743945913..e80f6775afd25da42b7d6d58c056a574c421c4bb 100644 (file)
@@ -20,7 +20,7 @@ options {
        recursion no;
        notify yes;
        minimal-responses no;
-       tkey-gssapi-credential "DNS/ns9.example.com@EXAMPLE.COM";
+       @TKEY_CONFIGURATION@
 };
 
 key rndc_key {
index c055da3bc87ff219f4a706484e80b5f6dafbbddd..5593a2ed0ab53cd9883bdd839a28e1e5379bb564 100644 (file)
@@ -24,8 +24,23 @@ copy_setports ns5/named.conf.in ns5/named.conf
 copy_setports ns6/named.conf.in ns6/named.conf
 copy_setports ns7/named.conf.in ns7/named.conf
 copy_setports ns8/named.conf.in ns8/named.conf
-copy_setports ns9/named.conf.in ns9/named.conf
-copy_setports ns10/named.conf.in ns10/named.conf
+
+# If "tkey-gssapi-credential" is set in the configuration and GSSAPI support is
+# not available, named will refuse to start.  As the test system framework does
+# not support starting named instances conditionally, ensure that
+# "tkey-gssapi-credential" is only present in named.conf if GSSAPI support is
+# available.
+copy_setports ns9/named.conf.in ns9/named.conf.in.tkey
+copy_setports ns10/named.conf.in ns10/named.conf.in.tkey
+if $FEATURETEST --gssapi; then
+       sed 's|@TKEY_CONFIGURATION@|tkey-gssapi-credential "DNS/ns9.example.com@EXAMPLE.COM";|' ns9/named.conf.in.tkey > ns9/named.conf
+       sed 's|@TKEY_CONFIGURATION@|tkey-gssapi-credential "DNS/ns10.example.com@EXAMPLE.COM";|' ns10/named.conf.in.tkey > ns10/named.conf
+else
+       sed 's|@TKEY_CONFIGURATION@||' ns9/named.conf.in.tkey > ns9/named.conf
+       sed 's|@TKEY_CONFIGURATION@||' ns10/named.conf.in.tkey > ns10/named.conf
+fi
+rm -f ns9/named.conf.in.tkey
+rm -f ns10/named.conf.in.tkey
 
 copy_setports verylarge.in verylarge