diff options
Diffstat (limited to 'src/tests/t_general.py')
-rwxr-xr-x | src/tests/t_general.py | 48 |
1 files changed, 48 insertions, 0 deletions
diff --git a/src/tests/t_general.py b/src/tests/t_general.py new file mode 100755 index 000000000..fb0649d57 --- /dev/null +++ b/src/tests/t_general.py @@ -0,0 +1,48 @@ +#!/usr/bin/python +from k5test import * + +for realm in multipass_realms(create_host=False): + # Create a policy and see if it survives a dump/load. + realm.run_kadminl('addpol fred') + dumpfile = os.path.join(realm.testdir, 'dump') + realm.run_as_master([kdb5_util, 'dump', dumpfile]) + realm.run_as_master([kdb5_util, 'load', dumpfile]) + output = realm.run_kadminl('getpols') + if 'fred\n' not in output: + fail('Policy not preserved across dump/load.') + + # Check that kinit fails appropriatel with the wrong password. + output = realm.run_as_client([kinit, realm.user_princ], input='wrong\n', + expected_code=1) + if 'Password incorrect while getting initial credentials' not in output: + fail('Expected error message not seen in kinit output') + + # Check that we can kinit as a different principal. + realm.kinit(realm.admin_princ, password('admin')) + realm.klist(realm.admin_princ) + + # Test FAST kinit. + fastpw = password('fast') + realm.run_kadminl('ank -pw %s +requires_preauth user/fast' % fastpw) + realm.kinit('user/fast', fastpw) + realm.kinit('user/fast', fastpw, flags=['-T', realm.ccache]) + realm.klist('user/fast@%s' % realm.realm) + + # Test kdestroy and klist of a non-existent ccache. + realm.run_as_client([kdestroy]) + output = realm.run_as_client([klist], expected_code=1) + if 'No credentials cache found' not in output: + fail('Expected error message not seen in klist output') + + # Test handling of kvno values beyond 255. + princ = 'foo/bar@%s' % realm.realm + realm.addprinc(princ) + realm.run_kadminl('modprinc -kvno 252 %s' % princ) + for kvno in range(253, 259): + realm.run_kadminl('ktadd -k %s %s' % (realm.keytab, princ)) + realm.klist_keytab(princ) + output = realm.run_kadminl('getprinc %s' % princ) + if 'Key: vno 258,' not in output: + fail('Expected vno not seen in kadmin.local output') + +success() |