s3:selftest: add ktest-krb5.keytab and use as "dedicated keytab file"

With the same secrets of ktest-secrets.tdb.

metze

diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm
index f2dcdd1489bac2ff4130f29013f24e0bf2017be9..99d8fc9ef10de6e8738fac13e0cbb3337711db23 100755 (executable)
--- a/selftest/target/Samba3.pm
+++ b/selftest/target/Samba3.pm
@@ -1023,6 +1023,8 @@ sub setup_ktest($$$)
 
        print "PROVISIONING server with security=ads...";
 
+       my $prefix_abs = abs_path($prefix);
+
        my $ktest_options = "
         workgroup = KTEST
         realm = ktest.samba.example.com
@@ -1035,6 +1037,9 @@ sub setup_ktest($$$)
         # This disables NTLM auth against the local SAM, which
         # we use can then test this setting by.
         ntlm auth = disabled
+
+       kerberos method = dedicated keytab
+       dedicated keytab file = $prefix_abs/private/krb5.keytab
 ";
 
        my $ret = $self->provision($prefix, "KTEST",
@@ -1045,7 +1050,6 @@ sub setup_ktest($$$)
        $ret or return undef;
 
        my $ctx;
-       my $prefix_abs = abs_path($prefix);
        $ctx = {};
        $ctx->{krb5_conf} = "$prefix_abs/lib/krb5.conf";
        $ctx->{domain} = "KTEST";
@@ -1068,6 +1072,9 @@ $ret->{USERNAME} = KTEST\\Administrator
 #Samba4 DC with the same parameters as are being used here.  The
 #domain SID is S-1-5-21-1071277805-689288055-3486227160
 
+       system("cp $self->{srcdir}/source3/selftest/ktest-krb5.keytab $prefix/private/krb5.keytab");
+       chmod 0600, "$prefix/private/krb5.keytab";
+
        system("cp $self->{srcdir}/source3/selftest/ktest-secrets.tdb $prefix/private/secrets.tdb");
        chmod 0600, "$prefix/private/secrets.tdb";
 

diff --git a/source3/selftest/ktest-krb5.keytab b/source3/selftest/ktest-krb5.keytab
new file mode 100644 (file)
index 0000000..f7d2617
Binary files /dev/null and b/source3/selftest/ktest-krb5.keytab differ