mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-02-10 08:46:58 +08:00
123 lines
3.0 KiB
Bash
Executable File
123 lines
3.0 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# Copyright (C) 2014 Red Hat
|
|
#
|
|
# This file is part of ocserv.
|
|
#
|
|
# ocserv is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License as published by the
|
|
# Free Software Foundation; either version 2 of the License, or (at
|
|
# your option) any later version.
|
|
#
|
|
# ocserv is distributed in the hope that it will be useful, but
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
# General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with ocserv; if not, write to the Free Software Foundation,
|
|
# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
srcdir=${srcdir:-.}
|
|
SERV="${SERV:-../src/ocserv}"
|
|
|
|
PORT=10500
|
|
PORT2=10501
|
|
PORT_OCSERV=443
|
|
|
|
#this test can only be run as root
|
|
id|grep root >/dev/null 2>&1
|
|
if [ $? != 0 ];then
|
|
exit 77
|
|
fi
|
|
|
|
$SERV --version 2>&1|grep gssapi >/dev/null 2>&1
|
|
if [ $? != 0 ];then
|
|
exit 77
|
|
fi
|
|
|
|
stop_all() {
|
|
$DOCKER stop test_ocserv_client_kerberos
|
|
$DOCKER rm test_ocserv_client_kerberos
|
|
$DOCKER stop test_ocserv_kerberos
|
|
$DOCKER rm test_ocserv_kerberos
|
|
exit 1
|
|
}
|
|
|
|
CONFIG="kerberos"
|
|
DOCKER_DIR=docker-kerberos
|
|
IMAGE=ocserv-kerberos-test
|
|
IMAGE_NAME=test_ocserv_kerberos
|
|
. ./docker-common.sh
|
|
|
|
#-p $PORT:$PORT/udp -p $PORT2:$PORT2/udp -p 22 -p $PORT_OCSERV:$PORT_OCSERV/udp
|
|
$DOCKER run -P --privileged=true --hostname=kerberos.test --add-host='kerberos.test:127.0.0.1' --tty=false -d --name test_ocserv_kerberos $IMAGE
|
|
if test $? != 0;then
|
|
echo "Cannot run docker image"
|
|
exit 1
|
|
fi
|
|
|
|
echo "ocserv image was run"
|
|
#wait for ocserv to server
|
|
sleep 5
|
|
|
|
IP=`$DOCKER inspect test_ocserv_kerberos | grep IPAddress | cut -d '"' -f 4`
|
|
if test -z "$IP";then
|
|
echo "Detected IP is null!"
|
|
$DOCKER inspect test_ocserv_kerberos
|
|
stop
|
|
fi
|
|
echo "Detected KDC IP: $IP"
|
|
|
|
# run the client
|
|
CONFIG="client"
|
|
DOCKER_DIR=docker-kerberos
|
|
IMAGE=ocserv-kerberos-client-test
|
|
IMAGE_NAME=test_ocserv_client_kerberos
|
|
. ./docker-common.sh
|
|
|
|
$DOCKER run -P --privileged=true --add-host="kerberos.test:$IP" --tty=false -d --name test_ocserv_client_kerberos $IMAGE
|
|
if test $? != 0;then
|
|
echo "Could not run client docker image"
|
|
stop_all
|
|
fi
|
|
|
|
CIP=`$DOCKER inspect test_ocserv_client_kerberos | grep IPAddress | cut -d '"' -f 4`
|
|
if test -z "$CIP";then
|
|
echo "Detected client IP is null!"
|
|
$DOCKER inspect test_ocserv_kerberos
|
|
stop
|
|
fi
|
|
echo "Detected client IP: $CIP"
|
|
|
|
if test ! -z "$QUIT_ON_INIT";then
|
|
exit 0
|
|
fi
|
|
|
|
echo "Waiting for client tests"
|
|
sleep 100
|
|
|
|
mkdir -p tmp-kerb
|
|
rm -f ./tmp-kerb/ok1 ./tmp-kerb/ok2
|
|
$DOCKER cp test_ocserv_client_kerberos:/tmp/ok1 ./tmp-kerb/
|
|
$DOCKER cp test_ocserv_client_kerberos:/tmp/ok2 ./tmp-kerb/
|
|
|
|
ret=0
|
|
|
|
if ! test -f ./tmp-kerb/ok1;then
|
|
echo "Kerberos client basic test failed"
|
|
ret=1
|
|
fi
|
|
|
|
if ! test -f ./tmp-kerb/ok2;then
|
|
echo "Kerberos client TGT freshness test failed"
|
|
ret=1
|
|
fi
|
|
|
|
$DOCKER stop test_ocserv_kerberos
|
|
$DOCKER rm test_ocserv_kerberos
|
|
$DOCKER stop test_ocserv_client_kerberos
|
|
$DOCKER rm test_ocserv_client_kerberos
|
|
|
|
exit $ret
|