public async void Invalid_Token()
{
using var kerberosExecutor = new KerberosExecutor(_testOutputHelper, "LINUX.CONTOSO.COM");
// Force a non-empty keytab to make macOS happy
kerberosExecutor.AddService("HTTP/linux.contoso.com");
await kerberosExecutor.Invoke(() =>
{
NegotiateAuthentication ntAuth = new NegotiateAuthentication(new NegotiateAuthenticationServerOptions {
});
// Ask for NegHints
byte[] blob = ntAuth.GetOutgoingBlob((ReadOnlySpan <byte>) default, out NegotiateAuthenticationStatusCode statusCode);
public async Task Loopback_Success()
{
using var kerberosExecutor = new KerberosExecutor(_testOutputHelper, "LINUX.CONTOSO.COM");
kerberosExecutor.AddService("HTTP/linux.contoso.com");
kerberosExecutor.AddUser("user");
await kerberosExecutor.Invoke(() =>
{
// Do a loopback authentication
NegotiateAuthenticationClientOptions clientOptions = new()
{
Credential = new NetworkCredential("user", KerberosExecutor.DefaultUserPassword, "LINUX.CONTOSO.COM"),
TargetName = $"HTTP/linux.contoso.com"
};
NegotiateAuthenticationServerOptions serverOptions = new() { };
NegotiateAuthentication clientNegotiateAuthentication = new(clientOptions);
NegotiateAuthentication serverNegotiateAuthentication = new(serverOptions);
byte[]? serverBlob = null;
byte[]? clientBlob = null;
bool shouldContinue = true;
do
{
clientBlob = clientNegotiateAuthentication.GetOutgoingBlob(serverBlob, out NegotiateAuthenticationStatusCode statusCode);
shouldContinue = statusCode == NegotiateAuthenticationStatusCode.ContinueNeeded;
Assert.True(statusCode <= NegotiateAuthenticationStatusCode.ContinueNeeded, $"Client authentication failed with {statusCode}");
if (clientBlob != null)
{
serverBlob = serverNegotiateAuthentication.GetOutgoingBlob(clientBlob, out statusCode);
Assert.True(statusCode <= NegotiateAuthenticationStatusCode.ContinueNeeded, $"Server authentication failed with {statusCode}");
}
}while (serverBlob != null && shouldContinue);
Assert.Equal("Kerberos", clientNegotiateAuthentication.Package);
Assert.Equal("Kerberos", serverNegotiateAuthentication.Package);
Assert.True(clientNegotiateAuthentication.IsAuthenticated);
Assert.True(serverNegotiateAuthentication.IsAuthenticated);
});
}