tests: verify tgt-freshness-time in Kerberos setup

This commit is contained in:
Nikos Mavrogiannopoulos
2015-04-29 10:47:02 +02:00
parent e54f6e2ac2
commit 1a1ab808a7
3 changed files with 15 additions and 10 deletions
@@ -26,4 +26,4 @@ ADD dev-tun.tgz /dev/
RUN ldconfig
CMD sshd-keygen;/usr/sbin/sshd;echo testuser123|kinit testuser@KERBEROS.TEST && /usr/sbin/openconnect kerberos.test --cafile /etc/ca.pem -b && sleep 5 && ping -w 5 192.168.1.1 && ping6 -w 5 fd91:6d87:7341:db6a::1 && kdestroy && ( /usr/sbin/openconnect kerberos.test --cafile /etc/ca.pem --cookieonly --non-inter || touch /tmp/ok ) ;sleep 3600
CMD sshd-keygen;/usr/sbin/sshd;echo testuser123|kinit testuser@KERBEROS.TEST && /usr/sbin/openconnect kerberos.test --cafile /etc/ca.pem -b && sleep 5 && ping -w 5 192.168.1.1 && ping6 -w 5 fd91:6d87:7341:db6a::1 && kdestroy && ( /usr/sbin/openconnect kerberos.test --cafile /etc/ca.pem --cookieonly --non-inter || touch /tmp/ok1 );echo testuser123|kinit testuser@KERBEROS.TEST && sleep 61 && ( /usr/sbin/openconnect kerberos.test --non-inter --cafile /etc/ca.pem || touch /tmp/ok2 );sleep 3600
+1 -1
View File
@@ -4,7 +4,7 @@
#auth = "certificate"
#auth = "plain[/etc/ocserv/passwd]"
auth = "pam"
enable-auth = gssapi
enable-auth = gssapi[tgt-freshness-time=60]
# Whether to enable support for the occtl tool (i.e., either through D-BUS,
# or via a unix socket).