You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by dr...@apache.org on 2015/06/11 16:44:59 UTC
directory-kerby git commit: Rename some test file names as class names
Repository: directory-kerby
Updated Branches:
refs/heads/master 735686ad7 -> 6b4d1b41a
Rename some test file names as class names
Project: http://git-wip-us.apache.org/repos/asf/directory-kerby/repo
Commit: http://git-wip-us.apache.org/repos/asf/directory-kerby/commit/6b4d1b41
Tree: http://git-wip-us.apache.org/repos/asf/directory-kerby/tree/6b4d1b41
Diff: http://git-wip-us.apache.org/repos/asf/directory-kerby/diff/6b4d1b41
Branch: refs/heads/master
Commit: 6b4d1b41a76e8030d18b16ed1b0c9696461861f0
Parents: 735686a
Author: Drankye <dr...@gmail.com>
Authored: Fri Jun 12 06:42:47 2015 +0800
Committer: Drankye <dr...@gmail.com>
Committed: Fri Jun 12 06:42:47 2015 +0800
----------------------------------------------------------------------
.../kerby/kerberos/kdc/GSSInteropTestBase.java | 229 -------------------
.../kerby/kerberos/kdc/GSSTCPInteropTest.java | 57 -----
.../kerby/kerberos/kdc/GSSUDPInteropTest.java | 57 -----
.../kerby/kerberos/kdc/GssInteropTestBase.java | 229 +++++++++++++++++++
.../kerby/kerberos/kdc/GssTcpInteropTest.java | 57 +++++
.../kerby/kerberos/kdc/GssUdpInteropTest.java | 57 +++++
6 files changed, 343 insertions(+), 343 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/directory-kerby/blob/6b4d1b41/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSInteropTestBase.java
----------------------------------------------------------------------
diff --git a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSInteropTestBase.java b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSInteropTestBase.java
deleted file mode 100644
index a5f96a5..0000000
--- a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSInteropTestBase.java
+++ /dev/null
@@ -1,229 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied. See the License for the
- * specific language governing permissions and limitations
- * under the License.
- *
- */
-package org.apache.kerby.kerberos.kdc;
-
-import java.io.IOException;
-import java.security.Principal;
-import java.security.PrivilegedExceptionAction;
-import java.util.Set;
-
-import javax.security.auth.Subject;
-import javax.security.auth.callback.Callback;
-import javax.security.auth.callback.CallbackHandler;
-import javax.security.auth.callback.PasswordCallback;
-import javax.security.auth.callback.UnsupportedCallbackException;
-import javax.security.auth.kerberos.KerberosTicket;
-import javax.security.auth.login.LoginContext;
-
-import org.ietf.jgss.GSSContext;
-import org.ietf.jgss.GSSCredential;
-import org.ietf.jgss.GSSException;
-import org.ietf.jgss.GSSManager;
-import org.ietf.jgss.GSSName;
-import org.ietf.jgss.Oid;
-import org.junit.Assert;
-import org.junit.Test;
-import org.apache.kerby.kerberos.kdc.impl.NettyKdcServerImpl;
-import org.apache.kerby.kerberos.kerb.server.KdcConfigKey;
-import org.apache.kerby.kerberos.kerb.server.TestKdcServer;
-
-/**
- * This is an interop test using the Java GSS APIs against the Kerby KDC
- */
-public abstract class GssInteropTestBase extends KdcTest {
- private String clientPrincipal;
- private String serverPrincipal;
-
- @Override
- protected void setUpKdcServer() throws Exception {
- kdcServer = new TestKdcServer();
- prepareKdcServer();
-
- kdcServer.setInnerKdcImpl(new NettyKdcServerImpl());
- kdcServer.init();
-
- // Must disable pre-auth
- kdcServer.getSetting().getKdcConfig().setBoolean(KdcConfigKey.PREAUTH_REQUIRED, false);
-
- kdcRealm = kdcServer.getKdcRealm();
- clientPrincipal = "drankye@" + kdcRealm;
- setClientPrincipal(clientPrincipal);
- serverPrincipal = "test-service/localhost@" + kdcRealm;
- setServerPrincipal(serverPrincipal);
- }
-
- @Override
- protected void createPrincipals() {
- kdcServer.createTgsPrincipal();
- kdcServer.createPrincipal(serverPrincipal, TEST_PASSWORD);
- kdcServer.createPrincipal(clientPrincipal, TEST_PASSWORD);
- }
-
- @Test
- public void testKdc() throws Exception {
- kdcServer.start();
-
- LoginContext loginContext = new LoginContext("drankye", new KerberosCallbackHandler());
- loginContext.login();
-
- Subject clientSubject = loginContext.getSubject();
- Set<Principal> clientPrincipals = clientSubject.getPrincipals();
- Assert.assertFalse(clientPrincipals.isEmpty());
-
- // Get the TGT
- Set<KerberosTicket> privateCredentials =
- clientSubject.getPrivateCredentials(KerberosTicket.class);
- Assert.assertFalse(privateCredentials.isEmpty());
- KerberosTicket tgt = privateCredentials.iterator().next();
- Assert.assertNotNull(tgt);
-
- // Get the service ticket
- KerberosClientExceptionAction action =
- new KerberosClientExceptionAction(clientPrincipals.iterator().next(),
- "test-service/localhost@TEST.COM");
-
- byte[] kerberosToken = (byte[]) Subject.doAs(clientSubject, action);
- Assert.assertNotNull(kerberosToken);
-
- loginContext.logout();
-
- validateServiceTicket(kerberosToken);
-
- kdcServer.stop();
- }
-
- private void validateServiceTicket(byte[] ticket) throws Exception {
- // Get the TGT for the service
- LoginContext loginContext = new LoginContext("test-service", new KerberosCallbackHandler());
- loginContext.login();
-
- Subject serviceSubject = loginContext.getSubject();
- Set<Principal> servicePrincipals = serviceSubject.getPrincipals();
- Assert.assertFalse(servicePrincipals.isEmpty());
-
- // Handle the service ticket
- KerberosServiceExceptionAction serviceAction =
- new KerberosServiceExceptionAction(ticket, "test-service/localhost@TEST.COM");
-
- Subject.doAs(serviceSubject, serviceAction);
- }
-
- private static class KerberosCallbackHandler implements CallbackHandler {
-
- public void handle(Callback[] callbacks) throws IOException,
- UnsupportedCallbackException {
- for (int i = 0; i < callbacks.length; i++) {
- if (callbacks[i] instanceof PasswordCallback) {
- PasswordCallback pc = (PasswordCallback) callbacks[i];
- if (pc.getPrompt().contains("drankye")) {
- pc.setPassword(TEST_PASSWORD.toCharArray());
- break;
- } else if (pc.getPrompt().contains("test-service")) {
- pc.setPassword(TEST_PASSWORD.toCharArray());
- break;
- }
- }
- }
- }
- }
-
- /**
- * This class represents a PrivilegedExceptionAction implementation to obtain a service ticket from a Kerberos
- * Key Distribution Center.
- */
- private static class KerberosClientExceptionAction implements PrivilegedExceptionAction<byte[]> {
-
- private static final String JGSS_KERBEROS_TICKET_OID = "1.2.840.113554.1.2.2";
-
- private Principal clientPrincipal;
- private String serviceName;
-
- public KerberosClientExceptionAction(Principal clientPrincipal, String serviceName) {
- this.clientPrincipal = clientPrincipal;
- this.serviceName = serviceName;
- }
-
- public byte[] run() throws GSSException {
- GSSManager gssManager = GSSManager.getInstance();
-
- GSSName gssService = gssManager.createName(serviceName, GSSName.NT_USER_NAME);
- Oid oid = new Oid(JGSS_KERBEROS_TICKET_OID);
- GSSName gssClient = gssManager.createName(clientPrincipal.getName(), GSSName.NT_USER_NAME);
- GSSCredential credentials =
- gssManager.createCredential(
- gssClient, GSSCredential.DEFAULT_LIFETIME, oid, GSSCredential.INITIATE_ONLY
- );
-
- GSSContext secContext =
- gssManager.createContext(
- gssService, oid, credentials, GSSContext.DEFAULT_LIFETIME
- );
-
- secContext.requestMutualAuth(false);
- secContext.requestCredDeleg(false);
-
- try {
- byte[] token = new byte[0];
- byte[] returnedToken = secContext.initSecContext(token, 0, token.length);
-
- return returnedToken;
- } finally {
- secContext.dispose();
- }
- }
- }
-
- private static class KerberosServiceExceptionAction implements PrivilegedExceptionAction<byte[]> {
-
- private static final String JGSS_KERBEROS_TICKET_OID = "1.2.840.113554.1.2.2";
-
- private byte[] ticket;
- private String serviceName;
-
- public KerberosServiceExceptionAction(byte[] ticket, String serviceName) {
- this.ticket = ticket;
- this.serviceName = serviceName;
- }
-
- public byte[] run() throws GSSException {
-
- GSSManager gssManager = GSSManager.getInstance();
-
- GSSContext secContext = null;
- GSSName gssService = gssManager.createName(serviceName, GSSName.NT_USER_NAME);
-
- Oid oid = new Oid(JGSS_KERBEROS_TICKET_OID);
- GSSCredential credentials =
- gssManager.createCredential(
- gssService, GSSCredential.DEFAULT_LIFETIME, oid, GSSCredential.ACCEPT_ONLY
- );
- secContext = gssManager.createContext(credentials);
-
- try {
- return secContext.acceptSecContext(ticket, 0, ticket.length);
- } finally {
- if (null != secContext) {
- secContext.dispose();
- }
- }
- }
-
- }
-}
http://git-wip-us.apache.org/repos/asf/directory-kerby/blob/6b4d1b41/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSTCPInteropTest.java
----------------------------------------------------------------------
diff --git a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSTCPInteropTest.java b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSTCPInteropTest.java
deleted file mode 100644
index 8c51300..0000000
--- a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSTCPInteropTest.java
+++ /dev/null
@@ -1,57 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied. See the License for the
- * specific language governing permissions and limitations
- * under the License.
- *
- */
-package org.apache.kerby.kerberos.kdc;
-
-import java.io.File;
-
-import org.junit.Before;
-
-/**
- * This is an interop test using the Java GSS APIs against the Kerby KDC (using TCP)
- */
-public class GssTcpInteropTest extends GssInteropTestBase {
-
- @Before
- @Override
- public void setUp() throws Exception {
- super.setUp();
-
- File file1 = new File(this.getClass().getResource("/kerberos.jaas").getPath());
- String content1 = getFileContent(file1.getPath());
- String path1 = writeToTestDir(content1, file1.getName());
-
- // System.setProperty("sun.security.krb5.debug", "true");
- System.setProperty("java.security.auth.login.config", path1);
-
- // Read in krb5.conf and substitute in the correct port
- File file2 = new File(this.getClass().getResource("/krb5.conf").getPath());
- String content2 = getFileContent(file2.getPath());
- content2 = content2.replaceAll("port", "" + tcpPort);
- String path2 = writeToTestDir(content2, file2.getName());
-
- System.setProperty("java.security.krb5.conf", path2);
- }
-
- @Override
- protected boolean allowUdp() {
- return false;
- }
-
-}
http://git-wip-us.apache.org/repos/asf/directory-kerby/blob/6b4d1b41/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSUDPInteropTest.java
----------------------------------------------------------------------
diff --git a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSUDPInteropTest.java b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSUDPInteropTest.java
deleted file mode 100644
index 011c070..0000000
--- a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GSSUDPInteropTest.java
+++ /dev/null
@@ -1,57 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied. See the License for the
- * specific language governing permissions and limitations
- * under the License.
- *
- */
-package org.apache.kerby.kerberos.kdc;
-
-import java.io.File;
-
-import org.junit.Before;
-
-/**
- * This is an interop test using the Java GSS APIs against the Kerby KDC (using UDP)
- */
-public class GssUdpInteropTest extends GssInteropTestBase {
-
- @Before
- @Override
- public void setUp() throws Exception {
- super.setUp();
-
- File file1 = new File(this.getClass().getResource("/kerberos.jaas").getPath());
- String content1 = getFileContent(file1.getPath());
- String path1 = writeToTestDir(content1, file1.getName());
-
- // System.setProperty("sun.security.krb5.debug", "true");
- System.setProperty("java.security.auth.login.config", path1);
-
- // Read in krb5.conf and substitute in the correct port
- File file2 = new File(this.getClass().getResource("/krb5-udp.conf").getPath());
- String content2 = getFileContent(file2.getPath());
- content2 = content2.replaceAll("port", "" + udpPort);
- String path2 = writeToTestDir(content2, file2.getName());
-
- System.setProperty("java.security.krb5.conf", path2);
- }
-
- @Override
- protected boolean allowUdp() {
- return true;
- }
-
-}
http://git-wip-us.apache.org/repos/asf/directory-kerby/blob/6b4d1b41/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssInteropTestBase.java
----------------------------------------------------------------------
diff --git a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssInteropTestBase.java b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssInteropTestBase.java
new file mode 100644
index 0000000..a5f96a5
--- /dev/null
+++ b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssInteropTestBase.java
@@ -0,0 +1,229 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ *
+ */
+package org.apache.kerby.kerberos.kdc;
+
+import java.io.IOException;
+import java.security.Principal;
+import java.security.PrivilegedExceptionAction;
+import java.util.Set;
+
+import javax.security.auth.Subject;
+import javax.security.auth.callback.Callback;
+import javax.security.auth.callback.CallbackHandler;
+import javax.security.auth.callback.PasswordCallback;
+import javax.security.auth.callback.UnsupportedCallbackException;
+import javax.security.auth.kerberos.KerberosTicket;
+import javax.security.auth.login.LoginContext;
+
+import org.ietf.jgss.GSSContext;
+import org.ietf.jgss.GSSCredential;
+import org.ietf.jgss.GSSException;
+import org.ietf.jgss.GSSManager;
+import org.ietf.jgss.GSSName;
+import org.ietf.jgss.Oid;
+import org.junit.Assert;
+import org.junit.Test;
+import org.apache.kerby.kerberos.kdc.impl.NettyKdcServerImpl;
+import org.apache.kerby.kerberos.kerb.server.KdcConfigKey;
+import org.apache.kerby.kerberos.kerb.server.TestKdcServer;
+
+/**
+ * This is an interop test using the Java GSS APIs against the Kerby KDC
+ */
+public abstract class GssInteropTestBase extends KdcTest {
+ private String clientPrincipal;
+ private String serverPrincipal;
+
+ @Override
+ protected void setUpKdcServer() throws Exception {
+ kdcServer = new TestKdcServer();
+ prepareKdcServer();
+
+ kdcServer.setInnerKdcImpl(new NettyKdcServerImpl());
+ kdcServer.init();
+
+ // Must disable pre-auth
+ kdcServer.getSetting().getKdcConfig().setBoolean(KdcConfigKey.PREAUTH_REQUIRED, false);
+
+ kdcRealm = kdcServer.getKdcRealm();
+ clientPrincipal = "drankye@" + kdcRealm;
+ setClientPrincipal(clientPrincipal);
+ serverPrincipal = "test-service/localhost@" + kdcRealm;
+ setServerPrincipal(serverPrincipal);
+ }
+
+ @Override
+ protected void createPrincipals() {
+ kdcServer.createTgsPrincipal();
+ kdcServer.createPrincipal(serverPrincipal, TEST_PASSWORD);
+ kdcServer.createPrincipal(clientPrincipal, TEST_PASSWORD);
+ }
+
+ @Test
+ public void testKdc() throws Exception {
+ kdcServer.start();
+
+ LoginContext loginContext = new LoginContext("drankye", new KerberosCallbackHandler());
+ loginContext.login();
+
+ Subject clientSubject = loginContext.getSubject();
+ Set<Principal> clientPrincipals = clientSubject.getPrincipals();
+ Assert.assertFalse(clientPrincipals.isEmpty());
+
+ // Get the TGT
+ Set<KerberosTicket> privateCredentials =
+ clientSubject.getPrivateCredentials(KerberosTicket.class);
+ Assert.assertFalse(privateCredentials.isEmpty());
+ KerberosTicket tgt = privateCredentials.iterator().next();
+ Assert.assertNotNull(tgt);
+
+ // Get the service ticket
+ KerberosClientExceptionAction action =
+ new KerberosClientExceptionAction(clientPrincipals.iterator().next(),
+ "test-service/localhost@TEST.COM");
+
+ byte[] kerberosToken = (byte[]) Subject.doAs(clientSubject, action);
+ Assert.assertNotNull(kerberosToken);
+
+ loginContext.logout();
+
+ validateServiceTicket(kerberosToken);
+
+ kdcServer.stop();
+ }
+
+ private void validateServiceTicket(byte[] ticket) throws Exception {
+ // Get the TGT for the service
+ LoginContext loginContext = new LoginContext("test-service", new KerberosCallbackHandler());
+ loginContext.login();
+
+ Subject serviceSubject = loginContext.getSubject();
+ Set<Principal> servicePrincipals = serviceSubject.getPrincipals();
+ Assert.assertFalse(servicePrincipals.isEmpty());
+
+ // Handle the service ticket
+ KerberosServiceExceptionAction serviceAction =
+ new KerberosServiceExceptionAction(ticket, "test-service/localhost@TEST.COM");
+
+ Subject.doAs(serviceSubject, serviceAction);
+ }
+
+ private static class KerberosCallbackHandler implements CallbackHandler {
+
+ public void handle(Callback[] callbacks) throws IOException,
+ UnsupportedCallbackException {
+ for (int i = 0; i < callbacks.length; i++) {
+ if (callbacks[i] instanceof PasswordCallback) {
+ PasswordCallback pc = (PasswordCallback) callbacks[i];
+ if (pc.getPrompt().contains("drankye")) {
+ pc.setPassword(TEST_PASSWORD.toCharArray());
+ break;
+ } else if (pc.getPrompt().contains("test-service")) {
+ pc.setPassword(TEST_PASSWORD.toCharArray());
+ break;
+ }
+ }
+ }
+ }
+ }
+
+ /**
+ * This class represents a PrivilegedExceptionAction implementation to obtain a service ticket from a Kerberos
+ * Key Distribution Center.
+ */
+ private static class KerberosClientExceptionAction implements PrivilegedExceptionAction<byte[]> {
+
+ private static final String JGSS_KERBEROS_TICKET_OID = "1.2.840.113554.1.2.2";
+
+ private Principal clientPrincipal;
+ private String serviceName;
+
+ public KerberosClientExceptionAction(Principal clientPrincipal, String serviceName) {
+ this.clientPrincipal = clientPrincipal;
+ this.serviceName = serviceName;
+ }
+
+ public byte[] run() throws GSSException {
+ GSSManager gssManager = GSSManager.getInstance();
+
+ GSSName gssService = gssManager.createName(serviceName, GSSName.NT_USER_NAME);
+ Oid oid = new Oid(JGSS_KERBEROS_TICKET_OID);
+ GSSName gssClient = gssManager.createName(clientPrincipal.getName(), GSSName.NT_USER_NAME);
+ GSSCredential credentials =
+ gssManager.createCredential(
+ gssClient, GSSCredential.DEFAULT_LIFETIME, oid, GSSCredential.INITIATE_ONLY
+ );
+
+ GSSContext secContext =
+ gssManager.createContext(
+ gssService, oid, credentials, GSSContext.DEFAULT_LIFETIME
+ );
+
+ secContext.requestMutualAuth(false);
+ secContext.requestCredDeleg(false);
+
+ try {
+ byte[] token = new byte[0];
+ byte[] returnedToken = secContext.initSecContext(token, 0, token.length);
+
+ return returnedToken;
+ } finally {
+ secContext.dispose();
+ }
+ }
+ }
+
+ private static class KerberosServiceExceptionAction implements PrivilegedExceptionAction<byte[]> {
+
+ private static final String JGSS_KERBEROS_TICKET_OID = "1.2.840.113554.1.2.2";
+
+ private byte[] ticket;
+ private String serviceName;
+
+ public KerberosServiceExceptionAction(byte[] ticket, String serviceName) {
+ this.ticket = ticket;
+ this.serviceName = serviceName;
+ }
+
+ public byte[] run() throws GSSException {
+
+ GSSManager gssManager = GSSManager.getInstance();
+
+ GSSContext secContext = null;
+ GSSName gssService = gssManager.createName(serviceName, GSSName.NT_USER_NAME);
+
+ Oid oid = new Oid(JGSS_KERBEROS_TICKET_OID);
+ GSSCredential credentials =
+ gssManager.createCredential(
+ gssService, GSSCredential.DEFAULT_LIFETIME, oid, GSSCredential.ACCEPT_ONLY
+ );
+ secContext = gssManager.createContext(credentials);
+
+ try {
+ return secContext.acceptSecContext(ticket, 0, ticket.length);
+ } finally {
+ if (null != secContext) {
+ secContext.dispose();
+ }
+ }
+ }
+
+ }
+}
http://git-wip-us.apache.org/repos/asf/directory-kerby/blob/6b4d1b41/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssTcpInteropTest.java
----------------------------------------------------------------------
diff --git a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssTcpInteropTest.java b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssTcpInteropTest.java
new file mode 100644
index 0000000..8c51300
--- /dev/null
+++ b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssTcpInteropTest.java
@@ -0,0 +1,57 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ *
+ */
+package org.apache.kerby.kerberos.kdc;
+
+import java.io.File;
+
+import org.junit.Before;
+
+/**
+ * This is an interop test using the Java GSS APIs against the Kerby KDC (using TCP)
+ */
+public class GssTcpInteropTest extends GssInteropTestBase {
+
+ @Before
+ @Override
+ public void setUp() throws Exception {
+ super.setUp();
+
+ File file1 = new File(this.getClass().getResource("/kerberos.jaas").getPath());
+ String content1 = getFileContent(file1.getPath());
+ String path1 = writeToTestDir(content1, file1.getName());
+
+ // System.setProperty("sun.security.krb5.debug", "true");
+ System.setProperty("java.security.auth.login.config", path1);
+
+ // Read in krb5.conf and substitute in the correct port
+ File file2 = new File(this.getClass().getResource("/krb5.conf").getPath());
+ String content2 = getFileContent(file2.getPath());
+ content2 = content2.replaceAll("port", "" + tcpPort);
+ String path2 = writeToTestDir(content2, file2.getName());
+
+ System.setProperty("java.security.krb5.conf", path2);
+ }
+
+ @Override
+ protected boolean allowUdp() {
+ return false;
+ }
+
+}
http://git-wip-us.apache.org/repos/asf/directory-kerby/blob/6b4d1b41/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssUdpInteropTest.java
----------------------------------------------------------------------
diff --git a/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssUdpInteropTest.java b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssUdpInteropTest.java
new file mode 100644
index 0000000..011c070
--- /dev/null
+++ b/kerby-kdc-test/src/test/java/org/apache/kerby/kerberos/kdc/GssUdpInteropTest.java
@@ -0,0 +1,57 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ *
+ */
+package org.apache.kerby.kerberos.kdc;
+
+import java.io.File;
+
+import org.junit.Before;
+
+/**
+ * This is an interop test using the Java GSS APIs against the Kerby KDC (using UDP)
+ */
+public class GssUdpInteropTest extends GssInteropTestBase {
+
+ @Before
+ @Override
+ public void setUp() throws Exception {
+ super.setUp();
+
+ File file1 = new File(this.getClass().getResource("/kerberos.jaas").getPath());
+ String content1 = getFileContent(file1.getPath());
+ String path1 = writeToTestDir(content1, file1.getName());
+
+ // System.setProperty("sun.security.krb5.debug", "true");
+ System.setProperty("java.security.auth.login.config", path1);
+
+ // Read in krb5.conf and substitute in the correct port
+ File file2 = new File(this.getClass().getResource("/krb5-udp.conf").getPath());
+ String content2 = getFileContent(file2.getPath());
+ content2 = content2.replaceAll("port", "" + udpPort);
+ String path2 = writeToTestDir(content2, file2.getName());
+
+ System.setProperty("java.security.krb5.conf", path2);
+ }
+
+ @Override
+ protected boolean allowUdp() {
+ return true;
+ }
+
+}