From 8cfc847166f0496df520b32e04bdd48d1955c3a2 Mon Sep 17 00:00:00 2001
From: Robin Appelman <robin@icewind.nl>
Date: Thu, 20 Jan 2022 14:09:23 +0100
Subject: [PATCH] test kerberos sso with "save ticket in memory" enabled

---
 .github/workflows/ci.yaml          | 32 ++++++++++++++++++++++++++++++
 example-apache-kerberos-memory.php | 23 +++++++++++++++++++++
 2 files changed, 55 insertions(+)
 create mode 100644 example-apache-kerberos-memory.php

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index f80ba1f..cd7de2a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -203,6 +203,38 @@ jobs:
         run: |
           docker logs apache
 
+  kerberos-sso-memory:
+    runs-on: ubuntu-20.04
+    name: Kerberos SSO tests - Save ticket in memory
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: 8.0
+      - name: Composer
+        run: composer install
+      - name: Pull images
+        run: |
+          docker pull icewind1991/samba-krb-test-dc
+          docker pull icewind1991/samba-krb-test-apache
+          docker pull icewind1991/samba-krb-test-client
+      - name: Setup AD-DC
+        run: |
+          tests/setup-krb.sh
+      - name: Test kerberos auth
+        run: |
+          DC_IP=$(docker inspect dc --format '{{.NetworkSettings.IPAddress}}')
+          LIST=$(docker run --rm --name client -v /tmp/shared:/shared --dns $DC_IP --hostname client.domain.test icewind1991/samba-krb-test-client \
+            curl -s --negotiate -u testuser@DOMAIN.TEST: --delegation always http://httpd.domain.test/example-apache-kerberos-memory.php)
+          echo $LIST
+          LIST=$(echo $LIST | tr -d '[:space:]')
+          [[ $LIST == "test.txt" ]]
+      - name: Apache logs
+        if: always()
+        run: |
+          docker logs apache
+
   static-psalm-analysis:
     runs-on: ubuntu-latest
     name: Psalm static analysis
diff --git a/example-apache-kerberos-memory.php b/example-apache-kerberos-memory.php
new file mode 100644
index 0000000..15f5df3
--- /dev/null
+++ b/example-apache-kerberos-memory.php
@@ -0,0 +1,23 @@
+<?php
+
+require('vendor/autoload.php');
+
+if (php_sapi_name() == "cli") {
+	echo "Note: this example shouldn't be called from cli as it expects apache to setup the keberos ticket\n";
+}
+
+// dfs paths not working
+$host = 'krb.domain.test';
+$share = 'netlogon';
+
+$auth = new \Icewind\SMB\KerberosApacheAuth(true);
+$serverFactory = new \Icewind\SMB\ServerFactory();
+
+$server = $serverFactory->createServer($host, $auth);
+
+$share = $server->getShare($share);
+
+$files = $share->dir('/');
+foreach ($files as $file) {
+	echo $file->getName() . "\n";
+}