1 #!/bin/sh 2 # 3 # Copyright (c) 2006 - 2007 Kungliga Tekniska Hgskolan 4 # (Royal Institute of Technology, Stockholm, Sweden). 5 # All rights reserved. 6 # 7 # Redistribution and use in source and binary forms, with or without 8 # modification, are permitted provided that the following conditions 9 # are met: 10 # 11 # 1. Redistributions of source code must retain the above copyright 12 # notice, this list of conditions and the following disclaimer. 13 # 14 # 2. Redistributions in binary form must reproduce the above copyright 15 # notice, this list of conditions and the following disclaimer in the 16 # documentation and/or other materials provided with the distribution. 17 # 18 # 3. Neither the name of the Institute nor the names of its contributors 19 # may be used to endorse or promote products derived from this software 20 # without specific prior written permission. 21 # 22 # THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 23 # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 24 # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25 # ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 26 # FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27 # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28 # OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29 # HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30 # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31 # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32 # SUCH DAMAGE. 33 # 34 # Id 35 # 36 37 srcdir="@srcdir@" 38 env_setup="@env_setup@" 39 objdir="@objdir@" 40 port="@port@" 41 42 . ${env_setup} 43 44 # Disable test if: no data, no java, or socket wrapper 45 ../db/have-db || exit 77 46 sh ${srcdir}/have-java.sh || exit 77 47 [ X"$SOCKET_WRAPPER_DIR" != X ] && exit 77 48 49 R=TEST.H5L.SE 50 server=host/localhost 51 keytabfile="${objdir}/server.keytab" 52 keytab="FILE:${keytabfile}" 53 cache="FILE:${objdir}/cache.krb5" 54 55 kinit="${TESTS_ENVIRONMENT} ../../kuser/kinit -c $cache ${afs_no_afslog}" 56 kadmin="${TESTS_ENVIRONMENT} ../../kadmin/kadmin -l -r $R" 57 kdc="${TESTS_ENVIRONMENT} ../../kdc/kdc --addresses=127.0.0.1 -P $port" 58 gssclient="${TESTS_ENVIRONMENT} ../../appl/test/gssapi_client" 59 60 KRB5_CONFIG="${objdir}/krb5.conf" 61 export KRB5_CONFIG 62 63 rm -f ${keytabfile} messages.log 64 rm -f current-db* 65 rm -f out-* 66 rm -f mkey.file* 67 68 echo "Compile" 69 javac -d "${objdir}" "${srcdir}/KerberosInit.java" || \ 70 { echo "Failed to compile java program: $?" ; exit 77; } 71 72 echo "Compile" 73 javac -d "${objdir}" "${srcdir}/../../appl/test/jgssapi_server.java" || \ 74 { echo "Failed to compile java program: $?" ; exit 77; } 75 76 > messages.log 77 78 echo foo > ${objdir}/foopassword 79 80 echo Creating database 81 ${kadmin} \ 82 init \ 83 --realm-max-ticket-life=1day \ 84 --realm-max-renewable-life=1month \ 85 ${R} || exit 1 86 87 ${kadmin} add -p foo --use-defaults lha@${R} || exit 1 88 ${kadmin} modify --attributes=+requires-pre-auth lha@${R} || exit 1 89 ${kadmin} add -p kaka --use-defaults ${server}@${R} || exit 1 90 ${kadmin} ext -k ${keytab} ${server}@${R} || exit 1 91 92 echo Starting kdc 93 ${kdc} --detach --testing || { echo "kdc failed to start"; exit 1; } 94 kdcpid=`getpid kdc` 95 96 trap "kill -9 ${kdcpid}; echo signal killing kdc; exit 1;" EXIT 97 98 echo "Run init" 99 java \ 100 -Dsun.security.krb5.debug=true \ 101 -Djava.security.krb5.conf="${objdir}"/krb5.conf \ 102 -Djava.security.auth.login.config="${srcdir}/jaas.conf" \ 103 KerberosInit > output.tmp 2>&1 || { cat output.tmp ; exit 1; } 104 105 106 # Disabled because of: 107 # 108 # http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7077646 109 # http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7077640 110 # 111 112 if false ; then 113 114 echo "start server" 115 java \ 116 -Dsun.security.krb5.debug=true \ 117 -Djava.security.krb5.conf="${objdir}"/krb5.conf \ 118 -Djavax.security.auth.useSubjectCredsOnly=false \ 119 -Djava.security.auth.login.config="${srcdir}/jaas.conf" \ 120 jgssapi_server > output.tmp 2>&1 & 121 javapid=$! 122 sleep 5 123 124 trap "kill -9 ${kdcpid} ${javapid}; echo signal killing kdc java; exit 1;" EXIT 125 126 echo "Getting client initial tickets"; > messages.log 127 ${kinit} --password-file=${objdir}/foopassword lha@$R || \ 128 { echo "kinit failed" ; exit 1; } 129 130 env KRB5CCNAME=${cache} \ 131 ${gssclient} --port=4717 --service=host localhost || exit 1 132 133 sleep 5 134 135 kill ${javapid} 136 137 grep 'Exception in thread' output.tmp && exit 1 138 fi 139 140 echo "Done" 141 142 echo "killing kdc (${kdcpid} ${javapid})" 143 kill $kdcpid $javapid || exit 1 144 145 trap "" EXIT 146 147 exit 0 148