#!/bin/sh
#
# Copyright (c) 2010 - 2011 Kungliga Tekniska Högskolan
# (Royal Institute of Technology, Stockholm, Sweden). 
# All rights reserved. 
#
# Portions Copyright (c) 2010 - 2011 Apple Inc. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without 
# modification, are permitted provided that the following conditions 
# are met: 
#
# 1. Redistributions of source code must retain the above copyright 
#    notice, this list of conditions and the following disclaimer. 
#
# 2. Redistributions in binary form must reproduce the above copyright 
#    notice, this list of conditions and the following disclaimer in the 
#    documentation and/or other materials provided with the distribution. 
#
# 3. Neither the name of the Institute nor the names of its contributors 
#    may be used to endorse or promote products derived from this software 
#    without specific prior written permission. 
#
# THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 
# ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 
# SUCH DAMAGE. 

env_setup="@env_setup@"
testdir="@testdir@"
confdir="@confdir@"

. ${env_setup}

KRB5_CONFIG="${1-${confdir}/krb5.conf}"
export KRB5_CONFIG

test -d ${testdir} || mkdir -p ${testdir}

if ! ping -c 1 idms-ad-uat.corp.apple.com > /dev/null 2>&1 ; then
      { echo "no UAT-APPLECONNECT available, skipping tests" ; exit 0; }
fi

echo "Interactive kinit for heimdalcoreos@APPLECONNECT-UAT.APPLE.COM"; > ${testdir}/messages
kinitpty=${testdir}/foopassword.rkpty

cat > ${kinitpty} <<EOF
expect password
password Foobar13\n
EOF

sandbox-exec \
    -D HOME="$HOME" \
    -D KRB5_TRACE=${testdir}/messages \
    -p '(version 1)(allow default)(deny file-read-data file-write-data (subpath (param "HOME")) (with send-signal SIGABRT))' \
    ${rkpty} ${kinitpty} ${kinit} --no-home-directory heimdalcoreos@APPLECONNECT-UAT.APPLE.COM >/dev/null || \
        { echo "kinit failed with: $?"; cat ${testdir}/messages ; exit 1; }
${kdestroy}


exit 0


