summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2014-06-04 17:07:28 -0400
committerGreg Hudson <ghudson@mit.edu>2014-06-10 23:54:41 -0400
commit4799121941cfd846f9d3d7a905ac4c84342ff306 (patch)
tree43640740627857d900fb8fca6f17775b74a9799d
parentf07516a9f65207b1fb2f9f07b1ec7d3caa51c6be (diff)
downloadkrb5-4799121941cfd846f9d3d7a905ac4c84342ff306.tar.gz
krb5-4799121941cfd846f9d3d7a905ac4c84342ff306.tar.xz
krb5-4799121941cfd846f9d3d7a905ac4c84342ff306.zip
Add test for KDC client logging
Add a test case which performed a TGS request with an expired ticket and checks that the client principal is logged. ticket: 7910
-rw-r--r--src/tests/Makefile.in1
-rw-r--r--src/tests/t_kdc_log.py23
2 files changed, 24 insertions, 0 deletions
diff --git a/src/tests/Makefile.in b/src/tests/Makefile.in
index 536f5cb0b..abd431d07 100644
--- a/src/tests/Makefile.in
+++ b/src/tests/Makefile.in
@@ -134,6 +134,7 @@ check-pytests:: t_init_creds t_localauth
-i au.log
$(RUNPYTEST) $(srcdir)/t_salt.py $(PYTESTFLAGS)
$(RUNPYTEST) $(srcdir)/t_bogus_kdc_req.py $(PYTESTFLAGS)
+ $(RUNPYTEST) $(srcdir)/t_kdc_log.py $(PYTESTFLAGS)
$(RUNPYTEST) $(srcdir)/t_proxy.py $(PYTESTFLAGS)
clean::
diff --git a/src/tests/t_kdc_log.py b/src/tests/t_kdc_log.py
new file mode 100644
index 000000000..8ddb7691b
--- /dev/null
+++ b/src/tests/t_kdc_log.py
@@ -0,0 +1,23 @@
+#!/usr/bin/python
+
+from k5test import *
+
+# Make a TGS request with an expired ticket.
+realm = K5Realm()
+realm.stop()
+realm.start_kdc(['-T', '3600'])
+realm.run([kvno, realm.host_princ], expected_code=1)
+
+kdc_logfile = os.path.join(realm.testdir, 'kdc.log')
+f = open(kdc_logfile, 'r')
+found_skew = False
+for line in f:
+ if 'Clock skew too great' in line:
+ found_skew = True
+ if realm.user_princ not in line:
+ fail('Client principal not logged in expired-ticket TGS request')
+f.close()
+if not found_skew:
+ fail('Did not find KDC log line for expired-ticket TGS request')
+
+success('KDC logging tests')