mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-02-10 08:46:58 +08:00
d3370cccd0
Check for alternate filename of ntlmssp.conf on Debian-based systems. Resolves #82 Signed-off-by: Mike Miller <mtmiller@debian.org>
83 lines
2.3 KiB
Bash
Executable File
83 lines
2.3 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# Copyright (C) 2013 Nikos Mavrogiannopoulos
|
|
#
|
|
# This file is part of ocserv.
|
|
#
|
|
# ocserv is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License as published by the
|
|
# Free Software Foundation; either version 2 of the License, or (at
|
|
# your option) any later version.
|
|
#
|
|
# ocserv is distributed in the hope that it will be useful, but
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
# General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with GnuTLS; if not, write to the Free Software Foundation,
|
|
# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
SERV="${SERV:-../src/ocserv}"
|
|
srcdir=${srcdir:-.}
|
|
PORT=4449
|
|
|
|
if test -f /etc/gss/mech.d/mech.ntlmssp.conf;then
|
|
NTLMSSP_CONF=/etc/gss/mech.d/mech.ntlmssp.conf
|
|
else
|
|
NTLMSSP_CONF=/etc/gss/mech.d/ntlmssp.conf
|
|
fi
|
|
|
|
if test ! -f $NTLMSSP_CONF;then
|
|
echo "GSS NTLM SSP was not found"
|
|
exit 77
|
|
fi
|
|
|
|
$SERV --version 2>&1|grep gssapi >/dev/null 2>&1
|
|
if [ $? != 0 ];then
|
|
exit 77
|
|
fi
|
|
|
|
. `dirname $0`/common.sh
|
|
|
|
echo "Testing local backend with gssapi... "
|
|
|
|
export NTLM_USER_FILE=$srcdir/ntlm.pass
|
|
echo "TESTINVALID:testinvalid:testpass" >$NTLM_USER_FILE
|
|
echo "TESTINVALID:testinvalid:wrongpass" >$NTLM_USER_FILE.wrong
|
|
|
|
launch_server -d 1 -f -c data/test-gssapi.config & PID=$!
|
|
wait_server $PID
|
|
|
|
echo "Connecting with curl... "
|
|
curl https://testinvalid:testpass@localhost:4449 --cacert ${srcdir}/certs/ca.pem --negotiate -f -v ||
|
|
fail $PID "Could not connect to server"
|
|
|
|
export NTLM_USER_FILE=$srcdir/ntlm.pass.wrong
|
|
echo "Connecting with curl and wrong password... "
|
|
curl https://testinvalid:wrongpass@localhost:4449 --cacert ${srcdir}/certs/ca.pem --negotiate -f -v &&
|
|
fail $PID "Connected to server with wrong password"
|
|
|
|
kill $PID
|
|
wait
|
|
|
|
echo ""
|
|
echo "Testing local backend with gssapi and local-map on... "
|
|
sleep 2
|
|
|
|
# Test whether no-local-map is by default true
|
|
launch_server -d 1 -f -c data/test-gssapi-local-map.config & PID=$!
|
|
wait_server $PID
|
|
|
|
echo "Connecting with curl... "
|
|
curl https://testinvalid:testpass@localhost:4449 --cacert ${srcdir}/certs/ca.pem --negotiate -f -v &&
|
|
fail $PID "Connected to server even when local map was required"
|
|
|
|
rm -f $srcdir/ntlm.pass
|
|
rm -f $srcdir/ntlm.pass.wrong
|
|
|
|
kill $PID
|
|
wait
|
|
|
|
exit 0
|