diff options
| author | Sam Hartman <hartmans@mit.edu> | 2010-09-15 17:13:41 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 2010-09-15 17:13:41 +0000 |
| commit | d100b4410ab933e21b4f3390f1b2f27d4e872442 (patch) | |
| tree | bdec7d4a785c027a6991f2639e13748d3bf57dc5 /src/tests | |
| parent | 41f6fee5e77e49732ae7c71808204aeb77aa1013 (diff) | |
| download | krb5-d100b4410ab933e21b4f3390f1b2f27d4e872442.tar.gz krb5-d100b4410ab933e21b4f3390f1b2f27d4e872442.tar.xz krb5-d100b4410ab933e21b4f3390f1b2f27d4e872442.zip | |
kinit: add KDB keytab support
This implements
http://k5wiki.kerberos.org/Projects/What_does_God_need_with_a_password.
If the KDB keytab is selected by command line options, then kinit will
register the KDB keytab and open the database. This permits an
administrator to obtain tickets as a user without knowing that user's
password.
As a result kinit links against libkadm5srv and libkdb5. Discussion is
ongoing about whether this is desirable or about whether two versions
of kinit are required.
ticket: 6779
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24316 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/tests')
| -rwxr-xr-x | src/tests/t_general.py | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/tests/t_general.py b/src/tests/t_general.py index cb2fcbc74..a2953fefd 100755 --- a/src/tests/t_general.py +++ b/src/tests/t_general.py @@ -28,6 +28,11 @@ for realm in multipass_realms(create_host=False): realm.kinit('user/fast', fastpw, flags=['-T', realm.ccache]) realm.klist('user/fast@%s' % realm.realm) + # Test kinit against kdb keytab + realm.run_as_master([kinit, "-k", "-t", + "KDB:", realm.user_princ]) + + # Test kdestroy and klist of a non-existent ccache. realm.run_as_client([kdestroy]) output = realm.run_as_client([klist], expected_code=1) |