s3:selftest: add ktest-krb5.keytab and use as "dedicated keytab file"

With the same secrets of ktest-secrets.tdb.

metze

diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm
index e7045ce0ee914a74705e55c1273b27152772b4e4..8ca7f1307fadb5edc16bc2affb3e7525e8e8efaf 100755 (executable)
--- a/selftest/target/Samba3.pm
+++ b/selftest/target/Samba3.pm
@@ -419,12 +419,17 @@ sub setup_ktest($$$)
 
        print "PROVISIONING server with security=ads...";
 
+       my $prefix_abs = abs_path($prefix);
+
        my $ktest_options = "
         workgroup = KTEST
         realm = ktest.samba.example.com
        security = ads
         username map = $prefix/lib/username.map
         server signing = required
+
+       kerberos method = dedicated keytab
+       dedicated keytab file = $prefix_abs/private/krb5.keytab
 ";
 
        my $ret = $self->provision($prefix,
@@ -435,7 +440,6 @@ sub setup_ktest($$$)
        $ret or return undef;
 
        my $ctx;
-       my $prefix_abs = abs_path($prefix);
        $ctx = {};
        $ctx->{krb5_conf} = "$prefix_abs/lib/krb5.conf";
        $ctx->{domain} = "KTEST";
@@ -456,6 +460,9 @@ $ret->{USERNAME} = KTEST\\Administrator
 #Samba4 DC with the same parameters as are being used here.  The
 #domain SID is S-1-5-21-1071277805-689288055-3486227160
 
+       system("cp $self->{srcdir}/source3/selftest/ktest-krb5.keytab $prefix/private/krb5.keytab");
+       chmod 0600, "$prefix/private/krb5.keytab";
+
        system("cp $self->{srcdir}/source3/selftest/ktest-secrets.tdb $prefix/private/secrets.tdb");
        chmod 0600, "$prefix/private/secrets.tdb";
 

diff --git a/source3/selftest/ktest-krb5.keytab b/source3/selftest/ktest-krb5.keytab
new file mode 100644 (file)
index 0000000..f7d2617
Binary files /dev/null and b/source3/selftest/ktest-krb5.keytab differ