71bd858d8e
by Andrew Tridgell of the Samba project.) [RT #22629] 2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation of external DLZ drivers that can be loaded as shared objects at runtime rather than linked with named. Currently this is switched on via a compile-time option, "configure --with-dlz-dlopen". Note: the syntax for configuring DLZ zones is likely to be refined in future releases. (Contributed by Andrew Tridgell of the Samba project.) [RT #22629] 2987. [func] Improve ease of configuring TKEY/GSS updates by adding a "tkey-gssapi-keytab" option. If set, updates will be allowed with any key matching a principal in the specified keytab file. "tkey-gssapi-credential" is no longer required and is expected to be deprecated. (Contributed by Andrew Tridgell of the Samba project.) [RT #22629]
57 lines
1.4 KiB
Bash
57 lines
1.4 KiB
Bash
#!/bin/sh
|
|
# tests for TSIG-GSS updates
|
|
|
|
SYSTEMTESTTOP=..
|
|
. $SYSTEMTESTTOP/conf.sh
|
|
|
|
status=0
|
|
|
|
DIGOPTS="@10.53.0.1 -p 5300"
|
|
|
|
# we don't want a KRB5_CONFIG setting breaking the tests
|
|
unset KRB5_CONFIG
|
|
|
|
test_update() {
|
|
host="$1"
|
|
type="$2"
|
|
cmd="$3"
|
|
digout="$4"
|
|
|
|
cat <<EOF > ns1/update.txt
|
|
server 10.53.0.1 5300
|
|
update add $host $cmd
|
|
send
|
|
EOF
|
|
echo "I:testing update for $host $type $cmd"
|
|
$NSUPDATE -g ns1/update.txt || {
|
|
echo "I:update failed for $host $type $cmd"
|
|
return 1
|
|
}
|
|
|
|
out="$($DIG $DIGOPTS -t $type -q $host | egrep ^$host)"
|
|
[ $(echo "$out" | grep "$digout" | wc -l) -eq 1 ] || {
|
|
echo "I:dig output incorrect for $host $type $cmd: $out"
|
|
return 1
|
|
}
|
|
return 0
|
|
}
|
|
|
|
echo "I:testing updates as administrator"
|
|
KRB5CCNAME=$(pwd)/ns1/administrator.ccache
|
|
export KRB5CCNAME
|
|
|
|
test_update testdc1.example.nil. A "86400 A 10.53.0.10" "10.53.0.10" || status=1
|
|
test_update testdc2.example.nil. A "86400 A 10.53.0.11" "10.53.0.11" || status=1
|
|
test_update denied.example.nil. TXT "86400 TXT helloworld" "helloworld" && status=1
|
|
|
|
echo "I:testing updates as a user"
|
|
KRB5CCNAME=$(pwd)/ns1/testdenied.ccache
|
|
export KRB5CCNAME
|
|
|
|
test_update testdenied.example.nil. A "86400 A 10.53.0.12" "10.53.0.12" && status=1
|
|
test_update testdenied.example.nil. TXT "86400 TXT helloworld" "helloworld" || status=1
|
|
|
|
[ $status -eq 0 ] && echo "I:tsiggss tests all OK"
|
|
|
|
exit $status
|