Lines Matching +full:cts +full:- +full:override
28 check-pytests::
64 * realm='realmname': Override the realm name
66 * portbase=NNN: Override the listener port base; currently three ports are
69 * testdir='dirname': Override the storage area for the realm's files
79 - $realm: The realm name
80 - $testdir: The realm storage directory (absolute path)
81 - $buildtop: The root of the build directory
82 - $srctop: The root of the source directory
83 - $plugins: The plugin directory in the build tree
84 - $certs: The PKINIT certificate directory in the source tree
85 - $hostname: The FQDN of the host
86 - $port0: The first listener port (portbase)
87 - ...
88 - $port9: The tenth listener port (portbase + 9)
92 - port0 is used in the default krb5.conf for the KDC
93 - port1 is used in the default krb5.conf for kadmind
94 - port2 is used in the default krb5.conf for kpasswd
95 - port3 is used in the default krb5.conf for kpropd
96 - port4 is used in the default krb5.conf for iprop (in kadmind)
97 - port5 is the return value of realm.server_port()
134 messages in the on-exit handler. message should briefly summarize
176 they will be merged with the default and per-pass specifications.
181 one-second delay, so all LDAP tests are currently confined to
189 the xtgts parameter, where each tuple is a pair of zero-based realm
225 * testpass: The command-line test pass argument. The script does not
230 - krb5kdc
231 - kadmind
232 - kadmin
233 - kadminl (kadmin.local)
234 - kdb5_ldap_util
235 - kdb5_util
236 - ktutil
237 - kinit
238 - klist
239 - kswitch
240 - kvno
241 - kdestroy
242 - kpasswd
243 - t_inetd
244 - kproplog
245 - kpropd
246 - kprop
252 command-line debugging options. Fail if the command does not return
254 multi-line string. Keyword arguments can contain input='string' to
304 a keytab for princname in the filename keytab. Uses the -norandkey
305 option to avoid re-randomizing princname's key.
349 * realm.run_kpropd_once(env, args=[]): Run kpropd once, using the -t
389 command-line flags. These are documented in the --help output.
408 # without help from the test script. The on-exit handler will display
417 print("*** Last command (#%d): %s" % (_cmd_index - 1, _last_cmd))
518 print('Or re-run this test script with the -v flag:')
520 print(' PYTHONPATH=%s %s %s -v' %
523 print('Use --debug=NUM to run a command under a debugger. Use')
524 print('--stop-after=NUM to stop after a daemon is started in order to')
525 print('attach to it with a debugger. Use --help to see other')
576 f = which('llvm-symbolizer')
580 # Debian-derived systems have versioned symbolizer names. If any
582 l = glob.glob('/usr/bin/llvm-symbolizer-*')
600 parser.add_option('-v', '--verbose', action='store_true', dest='verbose',
602 parser.add_option('-p', '--pass', dest='testpass', metavar='PASS',
603 help='If a multi-pass test, run only PASS')
604 parser.add_option('--debug', dest='debug', metavar='NUM',
606 parser.add_option('--debugger', dest='debugger', metavar='COMMAND',
607 help='Debugger command (default is gdb --args)')
608 parser.add_option('--stop-before', dest='stopb', metavar='NUM',
610 parser.add_option('--stop-after', dest='stopa', metavar='NUM',
612 parser.add_option('--shell-before', dest='shellb', metavar='NUM',
614 parser.add_option('--shell-after', dest='shella', metavar='NUM',
619 _debug = _parse_cmdnum('--debug', options.debug)
620 _stop_before = _parse_cmdnum('--stop-before', options.stopb)
621 _stop_after = _parse_cmdnum('--stop-after', options.stopa)
622 _shell_before = _parse_cmdnum('--shell-before', options.shellb)
623 _shell_after = _parse_cmdnum('--shell-after', options.shella)
628 _debugger_command = ['gdb', '--args']
630 _debugger_command = ['lldb', '--']
632 print('Cannot find a debugger; use --debugger=COMMAND')
636 # Translate a command number spec. -1 means all, None means none.
641 return -1
652 elif cmdnum == -1:
853 # - Output to a file and poll the file for the sentinel
856 # - Create an intermediate subprocess which discards output
870 # If a daemon doesn't catch SIGTERM (like gss-server), treat it as
872 if code == -signal.SIGTERM:
966 self.run([kadminl, 'cpw', '-randkey', '-e', krbtgt_keysalt,
1069 # llvm-symbolizer, which is invoked by asan when displaying stack
1070 # traces. If they are, asan-compiled krb5 libraries in
1083 wrapper_path = os.path.join(self.testdir, 'llvm-symbolizer')
1118 self.run([kdb5_util, 'create', '-s', '-P', 'master'])
1125 self._kdc_proc = _start_daemon([krb5kdc, '-n'] + args, env,
1139 self._kadmind_proc = _start_daemon([kadmind, '-nofork',
1140 '-p', kdb5_util, '-K', kprop,
1141 '-F', dump_path], env,
1150 datatrans_path = os.path.join(self.testdir, 'incoming-datatrans')
1151 kpropdacl_path = os.path.join(self.testdir, 'kpropd-acl')
1152 return [kpropd, '-D', '-P', str(self.kprop_port()),
1153 '-f', datatrans_path, '-p', kdb5_util, '-a', kpropdacl_path]
1165 return self.run(self._kpropd_args() + ['-t'] + args, env=env)
1178 self.run([kadminl, 'addprinc', '-pw', password, princname])
1180 self.run([kadminl, 'addprinc', '-randkey', princname])
1183 self.run([kadminl, 'ktadd', '-k', keytab, '-norandkey', princname])
1195 flags = flags + ['-X', 'X509_user_identity=%s' % id]
1215 output = self.run([klist, '-k', keytab], **keywords)
1217 'KVNO Principal\n----' not in output or
1226 flags=['-S', 'kadmin/admin',
1227 '-c', self.kadmin_ccache] + flags)
1230 return self.run([kadmin, '-c', self.kadmin_ccache] + args, **keywords)
1334 r.addprinc('krbtgt/%s' % jname, password('cr-%d-%d-' % (i, j)))
1338 password('cr-%d-%d-' % (j, i)))
1395 'supported_enctypes': 'des3-cbc-sha1:normal',
1396 'master_key_type': 'des3-cbc-sha1'}}}),
1402 'supported_enctypes': 'arcfour-hmac:normal',
1403 'master_key_type': 'arcfour-hmac'}}}),
1407 {'libdefaults': {'permitted_enctypes': 'aes128-cts'}},
1409 'supported_enctypes': 'aes128-cts:normal',
1410 'master_key_type': 'aes128-cts'}}}),
1412 # Exercise the camellia256-cts enctype.
1414 {'libdefaults': {'permitted_enctypes': 'camellia256-cts'}},
1416 'supported_enctypes': 'camellia256-cts:normal',
1417 'master_key_type': 'camellia256-cts'}}}),
1419 # Exercise the aes128-sha2 enctype.
1420 ('aes128-sha2', None,
1421 {'libdefaults': {'permitted_enctypes': 'aes128-sha2'}},
1423 'supported_enctypes': 'aes128-sha2:normal',
1424 'master_key_type': 'aes128-sha2'}}}),
1426 # Exercise the aes256-sha2 enctype.
1427 ('aes256-sha2', None,
1428 {'libdefaults': {'permitted_enctypes': 'aes256-sha2'}},
1430 'supported_enctypes': 'aes256-sha2:normal',
1431 'master_key_type': 'aes256-sha2'}}}),
1434 ('aes256.destgt', 'arcfour-hmac:normal',
1456 pkinit_certs = os.path.join(srctop, 'tests', 'pkinit-certs')