1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
use strict;
use Authen::SASL;
# After cp'ing and editing this file, remove the line below
use Test::More skip_all => "Prepare your GSSAPI enviroment to run this test. see REAME.";
use Test::More tests => 5;
our $me;
require "t/common.pl";
pipe (FROM_CLIENT,TO_PARENT) or die "pipe failed.";
pipe (FROM_PARENT,TO_CLIENT) or die "pipe failed.";
my $mech = "GSSAPI";
my $service = "service";
my $host = "host";
my $keytab = "keytab_file";
my $pid = fork();
if ($pid) { # parent
close FROM_PARENT;
close TO_PARENT;
$me = "server";
# MIT only or Heimdal >= 0.6
$ENV{'KRB5_KTNAME'} = $keytab if $keytab;
my $sasl = Authen::SASL->new (
mechanism => $mech,
callback => {
checkpass => \&checkpass,
getsecret => \&getsecret,
canonuser => \&canonuser,
authorize => \&authorize,
}
) or ok(0);
ok(1);
my $conn = $sasl->server_new($service) or die "Authen::SASL::Cyrus failed." or
ok(0);
ok(1);
print $conn->listmech("","|",""),"\n";
sendreply( $conn->server_start( getreply(\*FROM_CLIENT) ),\*TO_CLIENT);
ok(1);
while ($conn->need_step) {
sendreply( $conn->server_step( &getreply(\*FROM_CLIENT) ),\*TO_CLIENT);
}
if ($conn->code == 0) {
ok(1);
print "Server: Negotiation succeeded.\n";
} else {
ok(0);
print "Server: Negotiation failed.\n",$conn->error(),"\n";
}
sleep(1);
close FROM_CLIENT;
close TO_CLIENT;
wait();
} elsif ($pid == 0) {
close FROM_CLIENT;
close TO_CLIENT;
$me = "client";
my $sasl = Authen::SASL->new (
mechanism => $mech,
callback => {
user => \&getusername,
pass => \&getpassword,
auth => \&getauthname,
}
) or die "Authen::SASL failed.";
my $conn = $sasl->client_new($service, $host)
or die "Authen::SASL::Cyrus failed.";
sendreply($conn->client_start(),\*TO_PARENT,0);
while ($conn->need_step) {
sendreply($conn->client_step( &getreply(\*FROM_PARENT) ),\*TO_PARENT);
}
if ($conn->code == 0) {
print "Client: Negotiation succeeded.\n";
} else {
print "Client: Negotiation failed.\n",$conn->error,"\n";
}
sleep(1);
close FROM_PARENT;
close TO_PARENT;
exit 0;
} else {
exit 1;
}
ok(1);
exit 0;
|
