load_lib lib.t
api_exit
api_start

test "modify-principal 100-105"
proc test100_104 {} {
    global test
    global prompt
    
    if {! ((  [principal_exists "$test/a"]) ||
	   [create_principal "$test/a"])} {
	    error_and_restart "$test: couldn't create principal \"$test/a\""
	    return
    }

    if {! [cmd {
	kadm5_init admin admin $KADM5_ADMIN_SERVICE null \
		$KADM5_STRUCT_VERSION $KADM5_API_VERSION_2 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }

    set origtest "$test"

    test "modify-principal 100"
    one_line_succeed_test [format {
	kadm5_modify_principal $server_handle [simple_principal "%s/a"] \
		{KADM5_MAX_RLIFE}
    } $origtest]

    test "modify-principal 101"
    one_line_fail_test [format {
	kadm5_modify_principal $server_handle [simple_principal "%s/a"] \
		{KADM5_LAST_SUCCESS}
    } $origtest] "BAD_MASK"

    test "modify-principal 102"
    one_line_fail_test [format {
	kadm5_modify_principal $server_handle [simple_principal "%s/a"] \
		{KADM5_LAST_FAILED}
    } $origtest] "BAD_MASK"

    test "modify-principal 103"
    one_line_fail_test [format {
	kadm5_modify_principal $server_handle [simple_principal "%s/a"] \
		{KADM5_FAIL_AUTH_COUNT}
    } $origtest] "BAD_MASK"

    test "modify-principal 103.5"
    one_line_fail_test [format {
	kadm5_modify_principal $server_handle [simple_principal "%s/a"] \
		{KADM5_KEY_DATA}
    } $origtest] "BAD_MASK"

    test "modify-principal 105"
    one_line_fail_test [format {
	kadm5_modify_principal $server_handle \
            "{%s/a} 0 0 0 0 {%s/a} 0 0 0 0 null 0 0 0 0 0 0 1 {} {{1 1 x}}" \
		{KADM5_TL_DATA}
    } $origtest $origtest] "BAD_TL_TYPE"

    test "modify-principal 100,104"
    if { ! [cmd [format {
	kadm5_modify_principal $server_handle \
		"{%s/a} 0 0 0 0 {%s/a} 0 0 0 0 null 0 88 0 0 0 0 1 {} {{990 6 foobar}}" \
		{KADM5_MAX_RLIFE KADM5_TL_DATA}
    } $origtest $origtest]]} {
	fail "$test: cannot set MAX_RLIFE or TL_DATA"
	return
    }
    if {! [cmd [format {
	kadm5_get_principal $server_handle "%s/a" principal {KADM5_PRINCIPAL_NORMAL_MASK KADM5_TL_DATA}
    } $origtest]]} {
	error_and_restart "$test: could not retrieve principal"
	return
    }
    send "lindex \$principal 12\n"
    expect {
	-re "(\[0-9\]+)\n$prompt$" {set rlife $expect_out(1,string) }
	timeout {
	    error_and_restart "$test: timeout getting rlife"
	    return
	}
	eof {
	    error_and_restart "$test: eof getting rlife"
	    return
	}
    }
    send "lindex \$principal 19\n"
    expect {
	-re "\(\{.*\}\)\n$prompt$" {set tl $expect_out(1,string) }
	timeout {
	    error_and_restart "$test: timeout getting tl_data"
	    return
	}
	eof {
	    error_and_restart "$test: eof getting tl_data"
	    return
	}
    }
    if {($rlife == 88) && ($tl == "{{990 6 foobar}}")} {
	pass "$test"
    } else {
	fail "$test: $rlife should be 88, $tl should be {{990 6 foobar}}"
    }

    if { ! [cmd {kadm5_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test100_104