[28060] in CVS-changelog-for-Kerberos-V5
krb5 commit: Add another kadmin ACL test for backreferences
daemon@ATHENA.MIT.EDU (Greg Hudson)
Fri Nov 22 12:00:38 2013
Date: Fri, 22 Nov 2013 12:00:28 -0500
From: Greg Hudson <ghudson@mit.edu>
Message-Id: <201311221700.rAMH0Sd9024993@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/119281156097a9da659ce5a7c06f0d517994781c
commit 119281156097a9da659ce5a7c06f0d517994781c
Author: Greg Hudson <ghudson@mit.edu>
Date: Thu Nov 21 16:18:27 2013 -0500
Add another kadmin ACL test for backreferences
Add a test using backreferences which don't correspond directly to
principal components, to verify that *N refers to the Nth wildcard and
not the Nth component.
src/tests/t_kadmin_acl.py | 6 ++++++
1 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/src/tests/t_kadmin_acl.py b/src/tests/t_kadmin_acl.py
index 32e57b8..c4b8465 100644
--- a/src/tests/t_kadmin_acl.py
+++ b/src/tests/t_kadmin_acl.py
@@ -40,6 +40,7 @@ wctarget = make_client('wctarget')
admin = make_client('user/admin')
none = make_client('none')
restrictions = make_client('restrictions')
+onetwothreefour = make_client('one/two/three/four')
realm.run_kadminl('addpol -minlife "1 day" minlife')
@@ -64,6 +65,7 @@ restricted_modify im * +preauth
restricted_rename ad * +preauth
*/* d *2/*1
+*/two/*/* d *3/*1/*2
*/admin a
wctarget a wild/*
restrictions a type1 -policy minlife
@@ -328,6 +330,10 @@ if 'Principal "admin/user@KRBTEST.COM" deleted.' not in out:
out = kadmin_as(admin, 'delprinc -force none')
if 'Operation requires' not in out:
fail('delprinc failure (wildcard backreferences not matched)')
+realm.addprinc('four/one/three', 'pw')
+out = kadmin_as(onetwothreefour, 'delprinc -force four/one/three')
+if 'Principal "four/one/three@KRBTEST.COM" deleted.' not in out:
+ fail('delprinc success (wildcard backreferences 2)')
kadmin_as(restrictions, 'addprinc -pw pw type1')
out = realm.run_kadminl('getprinc type1')
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
