Testing 3 Kerberos realms from same server

2017-05-01 Thread Tareq Alrashid
Greetings, On RHEL7 systems. We finally got around to setting up a separate development and test realms. We wanted to test normal/successful operations on all the realms specially after new code deployment or new RHEL patches. Testing all systems from same server which has a single keytab wit

Re: Testing 3 Kerberos realms from same server

2017-05-01 Thread Greg Hudson
On 05/01/2017 11:04 AM, Tareq Alrashid wrote: [...] > Code written in Python simply loops through each of the 3 realms, kinit with > the keytab performs a few kadmin operations and either passes or fails. > > The strange result is that only the realm name set by “default_realm =“, pass > and al

Re: Fwd: Testing 3 Kerberos realms from same server

2017-05-01 Thread Greg Hudson
On 05/01/2017 04:10 PM, David A. Kovacic wrote: > The perl programs use Authen::Krb5::Admin and the python program uses > python-kadmin to try the tests - both of which use the Kerberos > libraries to implement the "init with keytab" routine to produce an > admin object with which we can manipulate

Re: Fwd: Testing 3 Kerberos realms from same server

2017-05-01 Thread David A. Kovacic
Unfortunately we are not using kadmin and do not have the ability to set the "-r" flag in this case. We are trying to create test programs in perl and python that test the KDC functionality so that when we upgrade we can test development, test, and production servers all from the same machine rath

Re: Fwd: Testing 3 Kerberos realms from same server

2017-05-01 Thread Russ Allbery
"David A. Kovacic" writes: > Unfortunately we are not using kadmin and do not have the ability to set > the "-r" flag in this case. We are trying to create test programs in > perl and python that test the KDC functionality so that when we upgrade > we can test development, test, and production s