xref: /freebsd/crypto/krb5/src/tests/t_unlockiter.py (revision 7f2fe78b9dd5f51c821d771b63d2e096f6fd49e9) 
1from k5test import *
2
3# Default KDB iteration is locked.  Expect write lock failure unless
4# unlocked iteration is explicitly requested.
5realm = K5Realm(create_user=False, create_host=False, start_kdc=False,
6                bdb_only=True)
7realm.run(['./unlockiter'], expected_code=1)
8realm.run(['./unlockiter', '-u'])
9realm.run(['./unlockiter', '-l'], expected_code=1)
10
11# Set default to unlocked iteration.  Only explicitly requested locked
12# iteration should block the write lock.
13realm = K5Realm(create_user=False, create_host=False, start_kdc=False,
14                bdb_only=True,
15                krb5_conf={'dbmodules': {'db': {'unlockiter': 'true'}}})
16realm.run(['./unlockiter'])
17realm.run(['./unlockiter', '-u'])
18realm.run(['./unlockiter', '-l'], expected_code=1)
19
20success('Unlocked iteration unit tests')
21