🏡 index : quine-global-labs/mirror-cockpit-project-cockpit.git

#!/bin/sh

#
# Copyright (C) 2013 Red Hat, Inc.
# SPDX-License-Identifier: LGPL-2.1-or-later

set -euf

cd $(dirname $0)

warning()
{
	echo "mock-kdc: $*" >&2
}

check_require()
{
	for n in "$@"; do
		if ! which $n 2> /dev/null; then
			warning "$n not present"
			exit 18
		fi
	done
}

check_require kadmin.local krb5kdc kdb5_util

dir=$(mktemp -d)

# Generate the KDC configuration file
sed -e "s,[@]dir[@],$dir,g" mock-krb5.conf.in > $dir/krb5.conf
sed -e "s,[@]dir[@],$dir,g" mock-kdc.conf.in > $dir/kdc.conf
KRB5_KDC_PROFILE=$dir/kdc.conf
export KRB5_KDC_PROFILE
KRB5_CONFIG=$dir/krb5.conf
export KRB5_CONFIG

echo "KRB5_CONFIG=$dir/krb5.conf"
echo "KRB5_KTNAME=$dir/localhost.keytab"

touch $dir/kadmind.log

# Generate the KDC database, undocumented -W argument: no strong random
kdb5_util create -r COCKPIT.MOCK -s -W -P foobar > /dev/null

# Generate the ACL file
echo "*/admin@COCKPIT.MOCK      *" > $dir/kadm5.acl

# Add the users
kadmin="kadmin.local -r COCKPIT.MOCK"
$kadmin -q "addprinc -pw foobar -clearpolicy root/admin"# > /dev/null
$kadmin -q "addprinc -pw marmalade -clearpolicy $USER" > /dev/null

unique_localhosts()
{
	grep '\blocalhost\b' /etc/hosts | while read addr names; do
		for name in $names; do
			echo $name
		done
	done | sort | uniq
}

# Add the hosts
unique_localhosts | while read name; do
	$kadmin -q "addprinc -randkey -clearpolicy host/$name@COCKPIT.MOCK" > /dev/null
        $kadmin -q "ktadd -q -keytab $dir/localhost.keytab host/$name@COCKPIT.MOCK" > /dev/null
done

# Run krb5kdc
LC_ALL=C krb5kdc -n -r COCKPIT.MOCK 2>&1

rm -rf $dir/