[BACK]Return to testkerberos.pl CVS log [TXT] [DIR] Up to [LON-CAPA] / loncom / debugging_tools

Diff for /loncom/debugging_tools/testkerberos.pl between versions 1.1 and 1.2

version 1.1, 2008/02/11 17:21:34 version 1.2, 2010/04/12 20:07:45
Line 30 Line 30
 #################################################  #################################################
 use strict;  use strict;
 use Authen::Krb5;  use Authen::Krb5;
 use Authen::Krb4;  
   
 print STDOUT "Enter your LON-CAPA domain, (e.g., msu): ";  print STDOUT "Enter your LON-CAPA domain, (e.g., msu): ";
 my $domain = <STDIN>;  my $domain = <STDIN>;
Line 99  if ($username eq '' || $password eq '') Line 98  if ($username eq '' || $password eq '')
         if ($version != 4 && $version != 5) {          if ($version != 4 && $version != 5) {
             $response = "Kerberos check failed - unexpected kerberos version - $version (this should be 4 or 5)";              $response = "Kerberos check failed - unexpected kerberos version - $version (this should be 4 or 5)";
         } else {          } else {
             my $krbreturn;  
             if ($version == 5) {              if ($version == 5) {
                 &Authen::Krb5::init_context();                  $response = &check_krb5($username,$realm,$password);
                 my $krbclient = &Authen::Krb5::parse_name($username.'@'.$realm);  
                 my $krbservice = "krbtgt/".$realm."\@".$realm;  
                 my $krbserver  = &Authen::Krb5::parse_name($krbservice);  
                 my $credentials= &Authen::Krb5::cc_default();  
                 $credentials->initialize(&Authen::Krb5::parse_name($username.'@'.$realm));  
                 if (exists(&Authen::Krb5::get_init_creds_password)) {  
                     $krbreturn = &Authen::Krb5::get_init_creds_password(&Authen::Krb5::parse_name($username.'@'.$realm),$password,$krbservice);  
                     if (ref($krbreturn) eq 'Authen::Krb5::Creds') {  
                         $response = "Kerberos check passed. Kerberos $version. User: $username - response from Authen::Krb5 was Creds object\n";  
                     } else {  
                         $response = "Kerberos check failed. Kerberos $version. User: $username - response was $krbreturn";  
                     }  
                 } else {  
                     $krbreturn  = &Authen::Krb5::get_in_tkt_with_password($krbclient,$krbserver,  
                                                                           $password,$credentials);  
                     if ($krbreturn == 1) {  
                         $response = "Kerberos check passed. Kerberos $version. User: $username - response was $krbreturn";  
                     } else {  
                         $response = "Kerberos check failed. Kerberos $version. User: $username - response was $krbreturn";  
                     }  
                 }  
             } elsif ($version == 4) {              } elsif ($version == 4) {
                 $krbreturn =                   $response = &check_krb4($username,$realm,$password);
                      &Authen::Krb4::get_pw_in_tkt($username,'',$realm,'krbtgt',$realm,1,$password);  
                 if ($krbreturn == 0) {   
                     $response = "Kerberos check passed. Kerberos $version. User: $username - response was $krbreturn";  
                 } else {  
                     $response = "Kerberos check failed. Kerberos $version. User: $username - response was $krbreturn";  
                 }  
             }              }
         }          }
     } else {      } else {
Line 139  if ($username eq '' || $password eq '') Line 110  if ($username eq '' || $password eq '')
 }  }
 print STDOUT "$response\n";  print STDOUT "$response\n";
   
   sub check_krb4 {
       my ($username,$realm,$password) = @_;
       my ($krbreturn,$response);
       eval {
           require Authen::Krb4;
       };
       if (!$@) {
           $krbreturn = &Authen::Krb4::get_pw_in_tkt($username,'',$realm,'krbtgt',$realm,1,$password);
           if ($krbreturn == 0) {
               $response = "Kerberos check passed. Kerberos 4. User: $username - response was $krbreturn";
           } else {
               $response = "Kerberos check failed. Kerberos 4. User: $username - response was $krbreturn";
           }
       } else {
           $response = 'Kerberos check failed. Kerberos '.$version.
                       ' requires "perl-Authen-Krb4" which does not appear to be installed.'."\n".
                       'This may be because you are using revision 1.7 or later of the krb5 package,'.
                       ' which no longer supports Kerberos 4.'."\n".'Checking with Kerberos 5 instead:'."\n".
                       &check_krb5($username,$realm,$password);
       }
       return $response;
   }
   
   sub check_krb5 {
       my ($username,$realm,$password) = @_;
       &Authen::Krb5::init_context();
       my $krbclient = &Authen::Krb5::parse_name($username.'@'.$realm);
       my $krbservice = "krbtgt/".$realm."\@".$realm;
       my $krbserver  = &Authen::Krb5::parse_name($krbservice);
       my $credentials= &Authen::Krb5::cc_default();
       $credentials->initialize(&Authen::Krb5::parse_name($username.'@'.$realm));
       my ($krbreturn,$response);
       if (exists(&Authen::Krb5::get_init_creds_password)) {
           $krbreturn = &Authen::Krb5::get_init_creds_password(&Authen::Krb5::parse_name($username.'@'.$realm),
                                                                                         $password,$krbservice);
           if (ref($krbreturn) eq 'Authen::Krb5::Creds') {
               $response = "Kerberos check passed. Kerberos 5. User: $username - response from Authen::Krb 5 was Creds object\n";
           } else {
               $response = "Kerberos check failed. Kerberos 5. User: $username - response was $krbreturn";
           }
       } else {
           $krbreturn  = &Authen::Krb5::get_in_tkt_with_password($krbclient,$krbserver,
                                                                 $password,$credentials);
           if ($krbreturn == 1) {
               $response = "Kerberos check passed. Kerberos 5. User: $username - response was $krbreturn";
           } else {
               $response = "Kerberos check failed. Kerberos 5. User: $username - response was $krbreturn";
           }
       }
       return $response;
   }
   
Removed from v.1.1  
changed lines
  Added in v.1.2

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
500 Internal Server Error

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator at root@localhost to inform them of the time this error occurred, and the actions you performed just before this error.

More information about this error may be available in the server error log.