nixpkgs/nixos/tests/kerberos/mit.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

42 lines
1.0 KiB
Nix
Raw Normal View History

2019-11-23 12:25:27 +00:00
import ../make-test-python.nix ({pkgs, ...}: {
name = "kerberos_server-mit";
2022-03-20 23:15:30 +00:00
nodes.machine = { config, libs, pkgs, ...}:
{ services.kerberos_server =
{ enable = true;
realms = {
"FOO.BAR".acl = [{principal = "admin"; access = ["add" "cpw"];}];
};
};
krb5 = {
enable = true;
2022-11-18 01:13:16 +00:00
kerberos = pkgs.krb5;
libdefaults = {
default_realm = "FOO.BAR";
};
realms = {
"FOO.BAR" = {
admin_server = "machine";
kdc = "machine";
};
};
};
users.extraUsers.alice = { isNormalUser = true; };
};
testScript = ''
2019-11-23 12:25:27 +00:00
machine.succeed(
"kdb5_util create -s -r FOO.BAR -P master_key",
"systemctl restart kadmind.service kdc.service",
)
2019-11-23 12:25:27 +00:00
for unit in ["kadmind", "kdc"]:
machine.wait_for_unit(f"{unit}.service")
2019-11-23 12:25:27 +00:00
machine.succeed(
"kadmin.local add_principal -pw admin_pw admin",
"kadmin -p admin -w admin_pw addprinc -pw alice_pw alice",
"echo alice_pw | sudo -u alice kinit",
)
'';
})