#!/bin/sh
env_setup="@env_setup@"
confdir="@confdir@"
testdir="@testdir@"
. ${env_setup}
${have_db} || exit 77
testfailed="echo test failed; cat messages.log; exit \$ec"
${have_db} || exit 77
R=TEST.H5L.SE
R2=TEST2.H5L.SE
port=@port@
pwport=@pwport@
logfile=${testdir}/messages.log
kadmin="${kadmin} -l -r $R"
kdc="${kdc} --addresses=localhost -P $port"
kpasswdd="${kpasswdd} --addresses=localhost -p $pwport"
server=host/datan.test.h5l.se
cache="FILE:${testdir}/cache.krb5"
keytabfile=${testdir}/server.keytab
keytab="FILE:${keytabfile}"
kinit="${kinit} -c $cache ${afs_no_afslog}"
klist="${klist} -c $cache"
kgetcred="${kgetcred} -c $cache"
kdestroy="${kdestroy} -c $cache ${afs_no_unlog}"
KRB5_CONFIG="${confdir}/krb5.conf"
export KRB5_CONFIG
mkdir ${testdir}
rm -f ${testdir}/${keytabfile}
rm -f ${testdir}/current-db*
rm -f ${testdir}/out-*
rm -f ${testdir}/mkey.file*
> ${logfile}
echo "Creating database for $R"
${kadmin} \
init \
--realm-max-ticket-life=1day \
--realm-max-renewable-life=1month \
${R} || exit 1
${kadmin} add -p foo --use-defaults foo@${R} || exit 1
${kadmin} add -p kaka --use-defaults ${server}@${R} || exit 1
${kadmin} ext -k ${keytab} ${server}@${R} || exit 1
echo "Creating database for ${R2}"
${kadmin} \
init \
--realm-max-ticket-life=1day \
--realm-max-renewable-life=1month \
${R2} || exit 1
${kadmin} add -p foo --use-defaults bar@${R2} || exit 1
echo "Doing database check for ${R} ${R2}"
${kadmin} check ${R} || exit 1
${kadmin} check ${R2} || exit 1
echo foo > ${testdir}/foopassword
echo Starting kdc
env ${HEIM_MALLOC_DEBUG} ${kdc} &
kdcpid=$!
sh ${wait_kdc} KDC ${logfile}
if [ "$?" != 0 ] ; then
kill -9 ${kdcpid}
exit 1
fi
echo Starting kpasswdd
env ${HEIM_MALLOC_DEBUG} ${kpasswdd} &
kpasswddpid=$!
trap "kill -9 ${kdcpid} ${kpasswddpid}; echo signal killing kdc; exit \$ec;" EXIT
ec=0
echo "Getting client initial tickets"; > ${logfile}
${kinit} --password-file=${testdir}/foopassword foo@$R || \
{ ec=1 ; eval "${testfailed}"; }
echo "Getting tickets"; > ${logfile}
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
echo "Listing tickets"; > ${logfile}
${klist} > /dev/null || { ec=1 ; eval "${testfailed}"; }
${test_ap_req} ${server}@${R} ${keytab} ${cache} || \
{ ec=1 ; eval "${testfailed}"; }
${kdestroy}
echo "checking ${R}"
pw=ak4unandsop39NuJ
echo "Changing password"
cat > cpw.tmp <<EOF
expect Password
password foo\n
expect New password
send ${pw}\n
expect New password
send ${pw}\n
expect Success
EOF
${rkpty} cpw.tmp env ${kpasswd} foo@${R} || \
{ ec=$? ; eval "${testfailed}"; }
rm cpw.tmp
echo ${pw} > ${testdir}/barpassword
echo "Getting client initial tickets for ${R}"; > ${logfile}
${kinit} --password-file=${testdir}/barpassword foo@$R || \
{ ec=1 ; eval "${testfailed}"; }
echo "Getting tickets"; > ${logfile}
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
echo "Listing tickets"; > ${logfile}
${klist} > /dev/null || { ec=1 ; eval "${testfailed}"; }
${test_ap_req} ${server}@${R} ${keytab} ${cache} || \
{ ec=1 ; eval "${testfailed}"; }
${kdestroy}
echo "checking ${R2}"
cat > cpw.tmp <<EOF
expect Password
password foo\n
expect New password
send ${pw}\n
expect New password
send ${pw}\n
expect Success
EOF
${rkpty} cpw.tmp ${kpasswd} bar@${R2} || \
{ ec=$? ; eval "${testfailed}"; }
rm cpw.tmp
echo "Getting client initial tickets for ${R2}"; > ${logfile}
${kinit} --password-file=${testdir}/barpassword bar@${R2} || \
{ ec=1 ; eval "${testfailed}"; }
${kdestroy}
echo "killing kdc (${kdcpid} ${kpasswddpid})"
sh ${leaks_kill} kdc $kdcpid || exit 1
sh ${leaks_kill} kpasswdd $kpasswddpid || exit 1
trap "" EXIT
exit $ec