summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2013-08-28 18:40:18 -0400
committerGreg Hudson <ghudson@mit.edu>2013-08-28 18:40:18 -0400
commitdec685691b3955b27c56b629da829b9e6cf0d789 (patch)
treed38ef9f4846797c6f6e2782d58eb228c2b2cc962
parent22f00f6b8233fa281e5aad854789bd14abdda91b (diff)
downloadkrb5-dec685691b3955b27c56b629da829b9e6cf0d789.tar.gz
krb5-dec685691b3955b27c56b629da829b9e6cf0d789.tar.xz
krb5-dec685691b3955b27c56b629da829b9e6cf0d789.zip
Add test for alias to local TGS
-rw-r--r--src/tests/t_kdb.py17
1 files changed, 17 insertions, 0 deletions
diff --git a/src/tests/t_kdb.py b/src/tests/t_kdb.py
index b82c81426b..7a9471f8a1 100644
--- a/src/tests/t_kdb.py
+++ b/src/tests/t_kdb.py
@@ -269,6 +269,23 @@ out = realm.run([klist])
if 'alias@KRBTEST.COM\n' not in out or 'canon@KRBTEST.COM' not in out:
fail('After fetching alias and canon, klist is missing one or both')
+# Make sure an alias to the local TGS is still treated like an alias.
+ldap_modify('dn: krbPrincipalName=krbtgt/KRBTEST.COM@KRBTEST.COM,'
+ 'cn=KRBTEST.COM,cn=krb5\n'
+ 'changetype: modify\n'
+ 'add:krbPrincipalName\n'
+ 'krbPrincipalName: tgtalias@KRBTEST.COM\n'
+ '-\n'
+ 'add: krbCanonicalName\n'
+ 'krbCanonicalName: krbtgt/KRBTEST.COM@KRBTEST.COM\n')
+out = realm.run_kadminl('getprinc tgtalias')
+if 'Principal: krbtgt/KRBTEST.COM@KRBTEST.COM' not in out:
+ fail('Could not fetch krbtgt through tgtalias')
+realm.run([kvno, 'tgtalias'])
+out = realm.run([klist])
+if 'tgtalias@KRBTEST.COM\n' not in out:
+ fail('After fetching tgtalias, klist is missing it')
+
realm.stop()
# Briefly test dump and load.