URL: https://github.com/freeipa/freeipa/pull/200 Author: ofayans Title: #200: Test: basic kerberos over http functionality Action: opened
PR body: """ https://fedorahosted.org/freeipa/ticket/6446 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/200/head:pr200 git checkout pr200
From 00f3dcd33510e9c05ada63bf9b543e326ec1a274 Mon Sep 17 00:00:00 2001 From: Oleg Fayans <ofay...@redhat.com> Date: Tue, 1 Nov 2016 09:25:16 +0100 Subject: [PATCH] Test: basic kerberos over http functionality https://fedorahosted.org/freeipa/ticket/6446 --- ipatests/test_integration/test_http_kdc_proxy.py | 53 ++++++++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 ipatests/test_integration/test_http_kdc_proxy.py diff --git a/ipatests/test_integration/test_http_kdc_proxy.py b/ipatests/test_integration/test_http_kdc_proxy.py new file mode 100644 index 0000000..bc1b800 --- /dev/null +++ b/ipatests/test_integration/test_http_kdc_proxy.py @@ -0,0 +1,53 @@ +# +# Copyright (C) 2016 FreeIPA Contributors see COPYING for license +# + +import time +import ipaddress +from ipatests.test_integration import tasks +from ipatests.test_integration.base import IntegrationTest +from ipaplatform.paths import paths + + +class TestHttpKdcProxy(IntegrationTest): + topology = "line" + num_clients = 1 + + @classmethod + def install(cls, mh): + super(TestHttpKdcProxy, cls).install(mh) + # client ip version check + client_ip = ipaddress.ip_address(unicode(cls.clients[0].ip)) + if isinstance(client_ip, ipaddress.IPv4Address): + util = 'iptables' + else: + util = 'ip6tables' + # Block access from client to master's port 88 + cls.master.run_command([ + util, '-A', 'INPUT', '-s', cls.clients[0].ip, + '-p', 'tcp', '--dport', '88', '-j', 'DROP']) + cls.master.run_command([ + util, '-A', 'INPUT', '-s', cls.clients[0].ip, + '-p', 'udp', '--dport', '88', '-j', 'DROP']) + # configure client + cls.clients[0].run_command( + "sed -i 's/ kdc = .*$/ kdc = https:\/\/%s\/KdcProxy/' %s" % ( + cls.master.hostname, paths.KRB5_CONF) + ) + cls.clients[0].run_command( + "sed -i 's/master_kdc = .*$/master_kdc" + " = https:\/\/%s\/KdcProxy/' %s" % ( + cls.master.hostname, paths.KRB5_CONF) + ) + # Workaround for https://fedorahosted.org/freeipa/ticket/6443 + time.sleep(1200) + # End of workaround + + @classmethod + def uninstall(cls, mh): + super(TestHttpKdcProxy, cls).uninstall(mh) + cls.master.run_command(['iptables', '-F']) + + def test_http_kdc_proxy_works(self): + result = tasks.kinit_admin(self.clients[0], raiseonerr=False) + assert(result.returncode == 0), ("Unable to kinit using KdcProxy")
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
