/* * Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License version 2 only, as * published by the Free Software Foundation. * * This code is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * version 2 for more details (a copy is included in the LICENSE file that * accompanied this code). * * You should have received a copy of the GNU General Public License version * 2 along with this work; if not, write to the Free Software Foundation, * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. * * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA * or visit www.oracle.com if you need additional information or have any * questions. */ /* * @test * @bug 6966259 * @summary Make PrincipalName and Realm immutable * @run main/othervm Constructors */ import java.util.Arrays; import sun.security.krb5.*; public class Constructors { public static void main(String[] args) throws Exception { int type; boolean testNoDefaultDomain; // Part 1: on format // Good ones type = PrincipalName.KRB_NT_UNKNOWN; checkName("a", type, "R", "R", "a"); checkName("a@R2", type, "R", "R", "a"); checkName("a/b", type, "R", "R", "a", "b"); checkName("a/b@R2", type, "R", "R", "a", "b"); checkName("a/b/c", type, "R", "R", "a", "b", "c"); checkName("a/b/c@R2", type, "R", "R", "a", "b", "c"); // Weird ones checkName("a\\/b", type, "R", "R", "a/b"); checkName("a\\/b\\/c", type, "R", "R", "a/b/c"); checkName("a\\/b\\@R2", type, "R", "R", "a/b@R2"); // Bad ones checkName("a", type, "", null); checkName("a/", type, "R", null); checkName("/a", type, "R", null); checkName("a//b", type, "R", null); checkName("a@", type, null, null); type = PrincipalName.KRB_NT_SRV_HST; // Part 2: on realm choices // When there is no default realm System.setProperty("java.security.krb5.conf", System.getProperty("test.src", ".") + "/empty.conf"); Config.refresh(); // A Windows client login to AD always has a default realm try { Realm r = Realm.getDefault(); System.out.println("testNoDefaultDomain = false. Realm is " + r); testNoDefaultDomain = false; } catch (RealmException re) { // Great. This is what we expected testNoDefaultDomain = true; } if (testNoDefaultDomain) { type = PrincipalName.KRB_NT_UNKNOWN; checkName("a", type, "R1", "R1", "a"); // arg checkName("a@R1", type, null, "R1", "a"); // or r in name checkName("a@R2", type, "R1", "R1", "a"); // arg over r checkName("a", type, null, null); // fail if none checkName("a/b@R1", type, null, "R1", "a", "b"); type = PrincipalName.KRB_NT_SRV_HST; // Let's pray "b.h" won't be canonicalized checkName("a/b.h", type, "R1", "R1", "a", "b.h"); // arg checkName("a/b.h@R1", type, null, "R1", "a", "b.h"); // or r in name checkName("a/b.h@R1", type, "R2", "R2", "a", "b.h"); // arg over r checkName("a/b.h", type, null, null); // fail if none } // When there is default realm System.setProperty("java.security.krb5.conf", System.getProperty("test.src", ".") + "/krb5.conf"); Config.refresh(); type = PrincipalName.KRB_NT_UNKNOWN; checkName("a", type, "R1", "R1", "a"); // arg checkName("a@R1", type, null, "R1", "a"); // or r in name checkName("a@R2", type, "R1", "R1", "a"); // arg over r checkName("a", type, null, "R", "a"); // default checkName("a/b", type, null, "R", "a", "b"); type = PrincipalName.KRB_NT_SRV_HST; checkName("a/b.h3", type, "R1", "R1", "a", "b.h3"); // arg checkName("a/b.h@R1", type, null, "R1", "a", "b.h"); // or r in name checkName("a/b.h3@R2", type, "R1", "R1", "a", "b.h3"); // arg over r checkName("a/b.h2", type, "R1", "R1", "a", "b.h2"); // arg over map checkName("a/b.h2@R1", type, null, "R1", "a", "b.h2"); // r over map checkName("a/b.h2", type, null, "R2", "a", "b.h2"); // map checkName("a/b.h", type, null, "R", "a", "b.h"); // default } // Check if the creation matches the expected output. // Note: realm == null means creation failure static void checkName(String n, int t, String s, String realm, String... parts) throws Exception { PrincipalName pn = null; try { pn = new PrincipalName(n, t, s); } catch (Exception e) { if (realm == null) { return; // This is expected } else { throw e; } } if (!pn.getRealmAsString().equals(realm) || !Arrays.equals(pn.getNameStrings(), parts)) { throw new Exception(pn.toString() + " vs " + Arrays.toString(parts) + "@" + realm); } } }