summaryrefslogtreecommitdiffstats
path: root/src/lib/kadm5/unit-test/api.2
Commit message (Collapse)AuthorAgeFilesLines
* Fold kadm5 internal policy functions into callersGreg Hudson2013-01-092-57/+0
| | | | | | | | | kadm5_create_policy and kadm5_modify_policy had _internal variants in libkadm5srv (but not libkadm5clnt) which only existed to protect the policy_refcnt field from modification over the wire. Now that policy_refcnt is no longer used, we don't need the separation. Bump the library soname since this is technically an ABI change.
* Remove the libkadm5 api.2 unit tests which don't pertain to the cpol,Greg Hudson2009-10-2614-6600/+0
| | | | | | mpol, or gpol operations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23043 dc483132-0cff-0310-8789-dd5450dbe970
* Account lockoutGreg Hudson2009-10-251-5/+6
| | | | | | | | | | | | Merge Luke's users/lhoward/lockout2 branch to trunk. Implements account lockout policies for preauth-using principals using existing principal metadata fields and new policy fields. The kadmin API version is bumped from 2 to 3 to compatibly extend the policy_ent_rec structure. ticket: 6577 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23038 dc483132-0cff-0310-8789-dd5450dbe970
* Fix kadm5 unit test modified in r22782Greg Hudson2009-09-241-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22784 dc483132-0cff-0310-8789-dd5450dbe970
* Improve the mechanism used for addprinc -randkey. In the kadminGreg Hudson2009-09-211-1/+1
| | | | | | | | server, if the password is null when creating a principal, treat that as a request for a random key. In the kadmin client, try using the new method for random key creation and then fall back to the old one. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22782 dc483132-0cff-0310-8789-dd5450dbe970
* Allow more than 10 past keys to be stored by a policyGreg Hudson2009-05-071-35/+0
| | | | | | | | | | | Remove the arbitrary limit of 10 past keys in policies. We were not taking advantage of that limit in any other code. ticket: 6482 target_version: 1.7 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22323 dc483132-0cff-0310-8789-dd5450dbe970
* address lib/kadm5 test suite slownessKen Raeburn2009-02-021-0/+1
| | | | | | | | | | | | In mod-principal tests for clearing the principal's policy, instead of just testing to see if the wrong string is output and timing out looking for it, check also for the new expected value. Cuts test suite run time by about two minutes for each pass (client vs server). ticket: 6357 target_version: 1.7 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21866 dc483132-0cff-0310-8789-dd5450dbe970
* a stash file is not a keytabWill Fiveash2008-08-151-1/+1
| | | | | | | | | Note, this is the commit for the associated Krb Consortium project: Projects/Masterkey Keytab Stash ticket: 194 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20661 dc483132-0cff-0310-8789-dd5450dbe970
* Remove test115 for 'bad client params', no longer appropriateKen Raeburn2008-06-191-104/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20429 dc483132-0cff-0310-8789-dd5450dbe970
* * lib/kadm5/alt_prof.c (kadm5_get_config_params): Replace filename andKen Raeburn2006-05-161-30/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | envvar arguments with a flag indicating whether KDC config data should be used. Prototype and all callers changed. (krb5_read_realm_params): Delete config file and env var arguments. Prototype and all callers changed. * lib/kadm5/admin.h (KADM5_CONFIG_PROFILE): Commented out. (struct _kadm5_config_params): Delete field PROFILE. * lib/kadm5/alt_prof.c (kadm5_get_config_params): Don't look at it. (kadm5_free_config_params): Don't free it. * kadmin/testing/tcl/util.t: Remove profile data from config params. * kadmin/testing/util/tcl_kadm5.c (config_mask_flags): Deleted KADM5_CONFIG_PROFILE entry. (parse_config_params): Changed to require 20 parameters instead of 21. * lib/kadm5/unit-test/api.2/init-v2.exp (test100): Deleted. * lib/kadm5/alt_prof.c (krb5_aprof_init): Fetch the list of config files from the library and add the caller-indicated config file to the front of the list. * lib/kadm5/clnt/client_init.c (kadm5_init_krb5_context): New function. * lib/kadm5/clnt/libkadm5clnt.exports: Export it. * lib/kadm5/srv/server_init.c: Include k5-int.h, osconf.h, gssapiP_krb5.h. (kadm5_init_krb5_context): New function. * lib/kadm5/srv/libkadm5srv.exports: Export it. * lib/kadm5/srv/Makefile.in (LOCAL_INCLUDES): Add gssapi directories. * lib/kadm5/admin.h (kadm5_init_krb5_context): Declare it. * kadmin/dbutil/kdb5_destroy.c (kdb5_destroy): Call kadm5_init_krb5_context instead of krb5_init_context. * kadmin/dbutil/dump.c (load_db): Likewise. * kadmin/dbutil/kdb5_util.c (main): Likewise. * kadmin/dbutil/kadm5_create.c (kadm5_create): Likewise. * kadmin/dbutil/kdb5_stash.c (kdb5_stash): Likewise. * kadmin/dbutil/loadv4.c (load_v4db): Likewise. * kadmin/server/ovsec_kadmd.c (main): Likewise. * kadmin/cli/kadmin.c (kadmin_startup): Likewise. * kadmin/testing/util/tcl_ovsec_kadm.c (tcl_ovsec_kadm_init): Likewise. * lib/kadm5/unit-test/lock-test.c (main): Likewise. * lib/kadm5/unit-test/handle-test.c (main): Likewise. * lib/kadm5/unit-test/randkey-test.c (main): Likewise. * lib/kadm5/unit-test/setkey-test.c (main): Likewise. * lib/kadm5/chpass_util.c (_kadm5_chpass_principal_util): Likewise. * lib/kadm5/kadm_rpc_xdr.c (xdr_krb5_principal): Likewise. * lib/krb5/os/init_os_ctx.c (add_kdc_config_file): New function. (os_init_paths): Add new argument KDC; call add_kdc_config_file if true. * lib/krb5/krb/init_ctx.c (krb5int_init_context_kdc): New function. (init_common): Add new argument KDC, passed to krb5_os_init_context. * lib/krb5/libkrb5.exports: Export krb5int_init_context_kdc. * k5-int.h (krb5_os_init_context): Update decl. * lib/kadm5/srv/server_init.c (kadm5_init): Call krb5int_init_context_kdc. * krb524/krb524d.c (main): Likewise. * lib/kadm5/unit-test/api.2/init-v2.exp: Don't run test 154 for error for $KRB5_KDC_PROFILE file not present. * lib/krb5/os/init_os_ctx.c (os_get_default_config_files): Rewrite KLL test so as not to confuse Emacs indentation support. * lib/gssapi/krb5/init_sec_context.c (kg_kdc_flag_mutex, kdc_flag): New variables. (krb5_gss_init_context, krb5_gss_use_kdc_context): New functions. * lib/gssapi/krb5/gssapiP_krb5.h (kg_kdc_flag_mutex): Declare. (krb5_gss_init_context, krb5_gss_use_kdc_context): Declare. (krb5_init_context): Define as macro to invoke krb5_gss_init_context for now. * lib/gssapi/gss_libinit.c (gssint_lib_init): Initialize the mutex. (gssint_lib_fini): Destroy it. * lib/gssapi/libgssapi_krb5.exports: Export krb5_gss_use_kdc_context. * lib/kadm5/srv/server_init.c (kadm5_init): Don't complain if the config files specify an admin server, since we now look at krb5.conf as well. * lib/kadm5/unit-test/api.2/init-v2.exp: Delete test test114 for bad server params. * plugins/kdb/db2/adb_openclose.c (osa_adb_init_db): Use krb5int_init_context_kdc instead of krb5_init_context. * kdc/rtest.c (main): Likewise. * kdc/fakeka.c (main): Likewise. * kdc/main.c (main, init_realm): Likewise. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18009 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp: Temporarily disabled test103Ken Raeburn2005-10-041-1/+5
| | | | | | | ticket: 3202 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17404 dc483132-0cff-0310-8789-dd5450dbe970
* missed one file on previous commitTom Yu2005-02-111-2/+2
| | | | | | | ticket: 2913 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17100 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp (test117): Update lifetime expected for new defaultsKen Raeburn2003-06-021-2/+2
| | | | | | | ticket: 1190 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15542 dc483132-0cff-0310-8789-dd5450dbe970
* Set length correctly in krb5_get_in_tkt_with_password if password isTom Yu2003-05-211-2/+2
| | | | | | | | | | actually passed in. Also, fix test suite to be more lenient about password prompts, which changed under the previous patches for this ticket. ticket: 1480 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15463 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp (test150, test151, test153): Don't try to set KRB5CCNAME;Ken Raeburn2002-12-191-3/+0
| | | | | | | | | | only the fact that it wasn't being done correctly prevented it from causing test failures. * lib/lib.t (kinit): If kinit reports a problem initializing the credentials cache, raise an error. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15056 dc483132-0cff-0310-8789-dd5450dbe970
* This commit fixes the test suite aspects. Callers of the variousTom Yu2002-10-191-2/+3
| | | | | | | | | | | | | | | read_password functions still need to be updated. * api.2/init-v2.exp (test106): Make regexp more forgiving of variant password prompts. * api.0/init.exp (test7, test22, test225): Make regexp more forgiving of variant password prompts. ticket: 1217 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14932 dc483132-0cff-0310-8789-dd5450dbe970
* * api.0/chpass-principal.exp:Tom Yu2002-09-1517-412/+412
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * api.0/crte-policy.exp: * api.0/crte-principal.exp: * api.0/destroy.exp: * api.0/dlte-policy.exp: * api.0/dlte-principal.exp: * api.0/get-policy.exp: * api.0/get-principal.exp: * api.0/init.exp: * api.0/mod-policy.exp: * api.0/mod-principal.exp: * api.0/randkey-principal.exp: * api.0/rename-principal.exp: * api.1/lock.exp: * api.2/chpass-principal-v2.exp: * api.2/chpass-principal.exp: * api.2/crte-policy.exp: * api.2/crte-principal.exp: * api.2/destroy.exp: * api.2/dlte-policy.exp: * api.2/dlte-principal.exp: * api.2/get-policy.exp: * api.2/get-principal-v2.exp: * api.2/get-principal.exp: * api.2/init-v2.exp: * api.2/init.exp: * api.2/mod-policy.exp: * api.2/mod-principal-v2.exp: * api.2/mod-principal.exp: * api.2/randkey-principal-v2.exp: * api.2/randkey-principal.exp: * lib/lib.t: s/error/perror. * config/unix.exp: Work around tcl 8.4's (incorrect?) output EOL translation. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14866 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp (test100): Expect MISSING_KRB5_CONF_PARAMS error nowKen Raeburn2002-08-081-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14691 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp: For test 101 failure, change port number 1 -Ezra Peisach2001-11-271-1/+1
| | | | | | | which is used by tcpmux under Irix, to 4 - which is unassigned by IANA. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14021 dc483132-0cff-0310-8789-dd5450dbe970
* * api.0/init.exp: Silly typo fixedMitchell Berger2001-06-201-1/+1
| | | | | | * api.2/init.exp: Same silly typo fixed. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13396 dc483132-0cff-0310-8789-dd5450dbe970
* pullup from 1.2 branchKen Raeburn2000-06-273-6/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12442 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp (test109): Wait for prompt between commandsKen Raeburn1999-09-211-0/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11833 dc483132-0cff-0310-8789-dd5450dbe970
* look up local hostname instead of using 'localhost'; pass RUNTESTFLAGSKen Raeburn1999-09-011-2/+44
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11774 dc483132-0cff-0310-8789-dd5450dbe970
* * api.0/init.exp, api.2/init.exp: use spawn/expect instead of execBarry Jaspan1996-12-091-1/+3
| | | | | | so tests don't fail when kadmin.local produces output git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9630 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp: update tests for new init error codes andBarry Jaspan1996-11-071-2/+21
| | | | | | get_config_params behavior when KDC_PROFILE does not exist git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9329 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/mod-principal-v2.exp: provide finer-grained test numbersBarry Jaspan1996-11-071-15/+20
| | | | | | in case of failure git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9325 dc483132-0cff-0310-8789-dd5450dbe970
* * lib/lib.t: global $test everywhere it is usedBarry Jaspan1996-11-061-13/+13
| | | | | | | | * api.2/mod-principal-v2.exp: init to kadmin/admin, not kadmin/changepw; specify real principal, not null (obviously I never ran these tests via the client library before) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9308 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/get-principal-v2.exp, api.2/mod-principal-v2.exp: updateBarry Jaspan1996-11-012-12/+35
| | | | | | for new tl_data semantics [krb5-admin/140] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9271 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/get-principal-v2.exp: Fix for test 100 where {} is notEzra Peisach1996-10-231-1/+1
| | | | | | equivalent to "{}" for empty tl_data field. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9239 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/mod-principal-v2.exp: create this file, implement testsBarry Jaspan1996-10-211-0/+102
| | | | | | 100-104 [krb5-admin/20] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9219 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp: add test 117, for default max_lifeBarry Jaspan1996-10-181-0/+62
| | | | | | [krb5-admin/18] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9195 dc483132-0cff-0310-8789-dd5450dbe970
* * config/unix.exp, lib/lib.t: begin in process of making theseBarry Jaspan1996-10-172-10/+15
| | | | | | | | | | | | | unit tests less horribly inefficient * api.[02]/crte-principal.exp, api.[02].mod-principal: update unit tests for new pw_expiration semantics [krb5-admin/87] * Makefile.in: ditch the capi and sapi hack, just the api for everything, and rename the log files after the tests complete so they are both kept around for viewing [krb5-admin/82] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9188 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp: Remove tests 104 & 105 as lockfile andEzra Peisach1996-10-011-36/+0
| | | | | | policy database names are hard wired. [krb5-admin/46] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9136 dc483132-0cff-0310-8789-dd5450dbe970
* * api.0/init.exp, api.1/lock.exp, api.2/init.exp: use $K5ROOTBarry Jaspan1996-09-261-2/+3
| | | | | | instead of /krb5 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9120 dc483132-0cff-0310-8789-dd5450dbe970
* * changes to use runtest --srcdir:Barry Jaspan1996-09-2316-16/+16
| | | | | | | | | - Makefile.in: rewrote [csapi].* links to work in srcdir (boo, hiss) - move lib.t to lib/lib.t - api.*/*.exp: s/source lib.t/load_lib lib.t/ git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9108 dc483132-0cff-0310-8789-dd5450dbe970
* * api.2/init-v2.exp: make test100 only run on clientBarry Jaspan1996-09-111-2/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9082 dc483132-0cff-0310-8789-dd5450dbe970
* * api.0/init.exp, api.2/init.exp, config/unix.exp, Makefile.ov:Barry Jaspan1996-08-201-7/+5
| | | | | | use kadmin.local instead of kdb5_edit git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8958 dc483132-0cff-0310-8789-dd5450dbe970
* this commit includes all the changes on the OV_9510_INTEGRATION andMarc Horowitz1996-07-2216-0/+8385
OV_MERGE branches. This includes, but is not limited to, the new openvision admin system, and major changes to gssapi to add functionality, and bring the implementation in line with rfc1964. before committing, the code was built and tested for netbsd and solaris. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8774 dc483132-0cff-0310-8789-dd5450dbe970