Function TestAuthGSSAPI

internal/sshserver/Server_test.go:162–210

Test the GSSAPI plumbing within the sshserver

(t *testing.T)

// Test the GSSAPI plumbing within the sshserver
func TestAuthGSSAPI(t *testing.T) {
	user2 := sshserver.NewTestUser("foo")
	logger := log.NewTestLogger(t)

	sshconf := config.SSHConfig{}
	structutils.Defaults(&sshconf)

	srv := sshserver.NewTestServer(
		t,
		sshserver.NewTestAuthenticationHandler(
			sshserver.NewTestHandler(),
			user2,
		),
		logger,
		nil,
	)
	srv.Start()

	gssClient := gssApiClient{
		username: "foo",
	}
	sshConfig := &ssh.ClientConfig{
		User: "foo",
		Auth: []ssh.AuthMethod{ssh.GSSAPIWithMICAuthMethod(&gssClient, "testing.containerssh.io")},
	}
	sshConfig.HostKeyCallback = func(hostname string, remote net.Addr, key ssh.PublicKey) error {
		marshaledKey := key.Marshal()
		private, err := ssh.ParsePrivateKey([]byte(srv.GetHostKey()))
		if err != nil {
			panic(err)
		}
		if bytes.Equal(marshaledKey, private.PublicKey().Marshal()) {
			return nil
		}
		return fmt.Errorf("invalid host")
	}

	sshConnection, err := ssh.Dial("tcp", srv.GetListen(), sshConfig)
	if err != nil {
		if !strings.Contains(err.Error(), "unable to authenticate") {
			assert.Fail(t, "handshake failed for non-auth reasons", err)
		}
	} else {
		_ = sshConnection.Close()
		assert.Fail(t, "authentication succeeded", err)
	}

	defer srv.Stop(10 * time.Second)
}

func TestSessionSuccess(t *testing.T) {
	//t.Parallel()()