nixos/kerberos: port tests to python
This commit is contained in:
parent
be1ce70e6f
commit
d28fd8f8da
|
@ -1,4 +1,4 @@
|
||||||
import ../make-test.nix ({pkgs, ...}: {
|
import ../make-test-python.nix ({pkgs, ...}: {
|
||||||
name = "kerberos_server-heimdal";
|
name = "kerberos_server-heimdal";
|
||||||
machine = { config, libs, pkgs, ...}:
|
machine = { config, libs, pkgs, ...}:
|
||||||
{ services.kerberos_server =
|
{ services.kerberos_server =
|
||||||
|
@ -23,31 +23,20 @@ import ../make-test.nix ({pkgs, ...}: {
|
||||||
};
|
};
|
||||||
|
|
||||||
testScript = ''
|
testScript = ''
|
||||||
$machine->start;
|
machine.succeed(
|
||||||
|
"kadmin -l init --realm-max-ticket-life='8 day' --realm-max-renewable-life='10 day' FOO.BAR",
|
||||||
|
"systemctl restart kadmind.service kdc.service",
|
||||||
|
)
|
||||||
|
|
||||||
$machine->succeed(
|
for unit in ["kadmind", "kdc", "kpasswdd"]:
|
||||||
"kadmin -l init --realm-max-ticket-life='8 day' \\
|
machine.wait_for_unit(f"{unit}.service")
|
||||||
--realm-max-renewable-life='10 day' FOO.BAR"
|
|
||||||
);
|
|
||||||
|
|
||||||
$machine->succeed("systemctl restart kadmind.service kdc.service");
|
machine.succeed(
|
||||||
$machine->waitForUnit("kadmind.service");
|
"kadmin -l add --password=admin_pw --use-defaults admin",
|
||||||
$machine->waitForUnit("kdc.service");
|
"kadmin -l ext_keytab --keytab=admin.keytab admin",
|
||||||
$machine->waitForUnit("kpasswdd.service");
|
"kadmin -p admin -K admin.keytab add --password=alice_pw --use-defaults alice",
|
||||||
|
"kadmin -l ext_keytab --keytab=alice.keytab alice",
|
||||||
$machine->succeed(
|
"kinit -kt alice.keytab alice",
|
||||||
"kadmin -l add --password=admin_pw --use-defaults admin"
|
)
|
||||||
);
|
|
||||||
$machine->succeed(
|
|
||||||
"kadmin -l ext_keytab --keytab=admin.keytab admin"
|
|
||||||
);
|
|
||||||
$machine->succeed(
|
|
||||||
"kadmin -p admin -K admin.keytab add --password=alice_pw --use-defaults \\
|
|
||||||
alice"
|
|
||||||
);
|
|
||||||
$machine->succeed(
|
|
||||||
"kadmin -l ext_keytab --keytab=alice.keytab alice"
|
|
||||||
);
|
|
||||||
$machine->succeed("kinit -kt alice.keytab alice");
|
|
||||||
'';
|
'';
|
||||||
})
|
})
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
import ../make-test.nix ({pkgs, ...}: {
|
import ../make-test-python.nix ({pkgs, ...}: {
|
||||||
name = "kerberos_server-mit";
|
name = "kerberos_server-mit";
|
||||||
machine = { config, libs, pkgs, ...}:
|
machine = { config, libs, pkgs, ...}:
|
||||||
{ services.kerberos_server =
|
{ services.kerberos_server =
|
||||||
|
@ -24,22 +24,18 @@ import ../make-test.nix ({pkgs, ...}: {
|
||||||
};
|
};
|
||||||
|
|
||||||
testScript = ''
|
testScript = ''
|
||||||
$machine->start;
|
machine.succeed(
|
||||||
|
"kdb5_util create -s -r FOO.BAR -P master_key",
|
||||||
|
"systemctl restart kadmind.service kdc.service",
|
||||||
|
)
|
||||||
|
|
||||||
$machine->succeed(
|
for unit in ["kadmind", "kdc"]:
|
||||||
"kdb5_util create -s -r FOO.BAR -P master_key"
|
machine.wait_for_unit(f"{unit}.service")
|
||||||
);
|
|
||||||
|
|
||||||
$machine->succeed("systemctl restart kadmind.service kdc.service");
|
machine.succeed(
|
||||||
$machine->waitForUnit("kadmind.service");
|
"kadmin.local add_principal -pw admin_pw admin",
|
||||||
$machine->waitForUnit("kdc.service");
|
"kadmin -p admin -w admin_pw addprinc -pw alice_pw alice",
|
||||||
|
"echo alice_pw | sudo -u alice kinit",
|
||||||
$machine->succeed(
|
)
|
||||||
"kadmin.local add_principal -pw admin_pw admin"
|
|
||||||
);
|
|
||||||
$machine->succeed(
|
|
||||||
"kadmin -p admin -w admin_pw addprinc -pw alice_pw alice"
|
|
||||||
);
|
|
||||||
$machine->succeed("echo alice_pw | sudo -u alice kinit");
|
|
||||||
'';
|
'';
|
||||||
})
|
})
|
||||||
|
|
Loading…
Reference in New Issue
Block a user