Make doing basic testing of Kerberos ticket forwarding and system setup

easier.

1 files changed, 42 insertions, 0 deletions

diff --git a/ipa-server/xmlrpc-server/test/test.py b/ipa-server/xmlrpc-server/test/test.py
new file mode 100644
index 00000000..ade16e30
--- /dev/null
+++ b/ipa-server/xmlrpc-server/test/test.py
@@ -0,0 +1,42 @@
+#!/usr/bin/python
+
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
+
+# A test CGI that tests that the Kerberos credentials cache was created
+# properly in Apache.
+
+import ldap
+import ldap.sasl
+import os
+
+sasl_auth = ldap.sasl.sasl({}, "GSSAPI")
+conn = ldap.initialize("ldap://localhost:389/")
+conn.protocol_version = 3
+
+print "Content-type: text/plain"
+print ""
+
+try:
+    print "KRB5CCNAME is", os.environ["KRB5CCNAME"]
+
+    try:
+        conn.sasl_interactive_bind_s("", sasl_auth)
+    except ldap.LDAPError,e:
+        print "Error using SASL mechanism", sasl_auth.mech, str(e)
+    else:
+        print "Sucessfully bound to LDAP using SASL mechanism", sasl_auth.mech
+    conn.unbind()
+except KeyError,e:
+    print "not set."