wintest: autodetect if named supports tkey-gssapi-keytab

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Fri Dec  3 08:48:52 CET 2010 on sn-devel-104

diff --git a/wintest/conf/abartlet.conf b/wintest/conf/abartlet.conf
index fe75408c12024ba59cacaf15a86c5c794607c36a..af3c5b76d7dc28e1a41167ac2bb67492ebb372eb 100644 (file)
--- a/wintest/conf/abartlet.conf
+++ b/wintest/conf/abartlet.conf
@@ -24,6 +24,7 @@ INTERFACE_NET         : 192.168.122.2/24
 
 # how to run bind9
 BIND9                : /usr/sbin/named
+NAMED_CHECKCONF       : /usr/sbin/named-checkconf
 RNDC                 : /usr/sbin/rndc
 BIND_USER             : named
 

diff --git a/wintest/conf/tridge.conf b/wintest/conf/tridge.conf
index f9ab1dcc943f88ac7ae47490b41f10f8afdaca02..e6d6910ab3a5aa770264dcba4fcf96cbc5fb5f36 100644 (file)
--- a/wintest/conf/tridge.conf
+++ b/wintest/conf/tridge.conf
@@ -24,6 +24,7 @@ INTERFACE_NET       : 10.0.0.2/24
 
 # how to run bind9
 BIND9                : /usr/sbin/named
+NAMED_CHECKCONF       : /usr/sbin/named-checkconf
 RNDC                 : /usr/sbin/rndc
 BIND_USER            : bind
 

diff --git a/wintest/test-s4-howto.py b/wintest/test-s4-howto.py
index 5aa2e79d135c38a632c99db4a54a76c60a9e66e2..db699fd058ca4c9706e5542f61d80172ba1ed323 100755 (executable)
--- a/wintest/test-s4-howto.py
+++ b/wintest/test-s4-howto.py
@@ -3,14 +3,13 @@
 '''automated testing of the steps of the Samba4 HOWTO'''
 
 import sys, os
-import wintest, pexpect, time
+import wintest, pexpect, time, subprocess
 
 def check_prerequesites(t):
     t.info("Checking prerequesites")
     t.setvar('HOSTNAME', t.cmd_output("hostname -s").strip())
     if os.getuid() != 0:
         raise Exception("You must run this script as root")
-    t.putenv("KRB5_CONFIG", '${PREFIX}/private/krb5.conf')
     t.run_cmd('ifconfig ${INTERFACE} ${INTERFACE_NET} up')
     if t.getvar('INTERFACE_IPV6'):
         t.run_cmd('ifconfig ${INTERFACE} inet6 del ${INTERFACE_IPV6}/64', checkfail=False)
@@ -133,6 +132,16 @@ def rndc_cmd(t, cmd, checkfail=True):
     '''run a rndc command'''
     t.run_cmd("${RNDC} -c ${PREFIX}/etc/rndc.conf %s" % cmd, checkfail=checkfail)
 
+def named_supports_gssapi_keytab(t):
+    '''see if named supports tkey-gssapi-keytab'''
+    t.write_file("${PREFIX}/named.conf.test",
+                 'options { tkey-gssapi-keytab "test"; };')
+    try:
+        t.run_cmd("${NAMED_CHECKCONF} ${PREFIX}/named.conf.test")
+    except subprocess.CalledProcessError:
+        return False
+    return True
+
 
 def configure_bind(t):
     t.chdir('${PREFIX}')
@@ -148,6 +157,19 @@ def configure_bind(t):
         ipv6_listen = ''
     t.setvar('BIND_LISTEN_IPV6', ipv6_listen)
 
+    if named_supports_gssapi_keytab(t):
+        t.setvar("NAMED_TKEY_OPTION",
+                 'tkey-gssapi-keytab "${PREFIX}/private/dns.keytab";')
+    else:
+        t.info("LCREALM=${LCREALM}")
+        t.setvar("NAMED_TKEY_OPTION",
+                 '''tkey-gssapi-credential "DNS/${LCREALM}";
+                 tkey-domain "${LCREALM}";
+                 ''')
+        t.putenv("KRB5_CONFIG", '${PREFIX}/private/krb5.conf')
+        t.putenv('KEYTAB_FILE', '${PREFIX}/private/dns.keytab')
+        t.putenv('KRB5_KTNAME', '${PREFIX}/private/dns.keytab')
+
     t.write_file("etc/named.conf", '''
 options {
        listen-on port 53 { ${INTERFACE_IP};  };
@@ -159,7 +181,7 @@ options {
         memstatistics-file "${PREFIX}/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;
-       tkey-gssapi-keytab "${PREFIX}/private/dns.keytab";
+       ${NAMED_TKEY_OPTION}
         max-cache-ttl 10;
         max-ncache-ttl 10;