KEYCLOAK-2988 - Fix kerberos tests - able to run with Windows and RHIDM.

testsuite/integration-arquillian/tests/base/src/main/java/org/keycloak/testsuite/util/LDAPTestConfiguration.java

@@ -45,6 +45,7 @@ public class LDAPTestConfiguration {
 
     private int sleepTime;
     private boolean startEmbeddedLdapServer = true;
+    private boolean caseSensitiveLogin = true;
     private Map<String, String> config;
 
     protected static final Map<String, String> PROP_MAPPINGS = new HashMap<String, String>();
@@ -150,6 +151,7 @@ public class LDAPTestConfiguration {
 
         startEmbeddedLdapServer = p.getBoolean("idm.test.ldap.start.embedded.ldap.server", true);
         sleepTime = p.getInteger("idm.test.ldap.sleepTime", 1000);
+        caseSensitiveLogin = p.getBoolean("idm.test.kerberos.caseSensitiveLogin", true);
         log.info("Start embedded server: " + startEmbeddedLdapServer);
         log.info("Read config: " + config);
     }
@@ -166,4 +168,8 @@ public class LDAPTestConfiguration {
         return sleepTime;
     }
 
+    public boolean isCaseSensitiveLogin() {
+        return caseSensitiveLogin;
+    }
+
 }

testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/adapter/federation/AbstractKerberosAdapterTest.java

@@ -17,6 +17,7 @@
 
 package org.keycloak.testsuite.adapter.federation;
 
+import static org.keycloak.testsuite.auth.page.AuthRealm.DEMO;
 import static org.keycloak.testsuite.util.IOUtil.loadRealm;
 
 import java.security.Principal;
@@ -107,16 +108,16 @@ public abstract class AbstractKerberosAdapterTest extends AbstractServletsAdapte
     public void before() throws Exception {   
         testRealmPage.setAuthRealm(AuthRealm.TEST);
         changePasswordPage.setAuthRealm(testRealmPage);
+        // Global kerberos configuration
         ldapTestConfiguration = LDAPTestConfiguration.readConfiguration(getConnectionPropertiesLocation());
+        String krb5ConfPath = LDAPTestConfiguration.getResource("test-krb5.conf");
+        log.info("Krb5.conf file location is: " + krb5ConfPath);
+        System.setProperty("java.security.krb5.conf", krb5ConfPath);
         if (ldapTestConfiguration.isStartEmbeddedLdapServer() && ldapEmbeddedServer == null) {
             ldapEmbeddedServer = createServer();
             ldapEmbeddedServer.init();
             ldapEmbeddedServer.start();
         }
-        // Global kerberos configuration
-        String krb5ConfPath = LDAPTestConfiguration.getResource("test-krb5.conf");
-        log.info("Krb5.conf file location is: " + krb5ConfPath);
-        System.setProperty("java.security.krb5.conf", krb5ConfPath);
         UserFederationProviderModel model = new UserFederationProviderModel();
         model.setConfig(ldapTestConfiguration.getLDAPConfig());
         spnegoSchemeFactory = new KeycloakSPNegoSchemeFactory(getKerberosConfig(model));
@@ -136,8 +137,8 @@ public abstract class AbstractKerberosAdapterTest extends AbstractServletsAdapte
             if (ldapEmbeddedServer != null) {
                 ldapEmbeddedServer.stop();
                 ldapEmbeddedServer = null;
-                ldapTestConfiguration = null;
             }
+            ldapTestConfiguration = null;
         } catch (Exception e) {
             throw new RuntimeException("Error tearDown Embedded LDAP server.", e);
         }
@@ -185,7 +186,7 @@ public abstract class AbstractKerberosAdapterTest extends AbstractServletsAdapte
     // KEYCLOAK-2102
     @Test
     public void spnegoCaseInsensitiveTest() throws Exception {
-        Response spnegoResponse = spnegoLogin("MyDuke", "theduke");
+        Response spnegoResponse = spnegoLogin(ldapTestConfiguration.isCaseSensitiveLogin() ? "MyDuke" : "myduke", "theduke");
         Assert.assertEquals(302, spnegoResponse.getStatus());
         List<UserRepresentation> users = testRealmResource().users().search("myduke", 0, 1);
         String userId = users.get(0).getId();
@@ -364,4 +365,10 @@ public abstract class AbstractKerberosAdapterTest extends AbstractServletsAdapte
         defaultProperties.setProperty(LDAPEmbeddedServer.PROPERTY_LDIF_FILE, "classpath:kerberos/users-kerberos.ldif");
         return new KerberosEmbeddedServer(defaultProperties);
     }
+
+    @Override
+    public void setDefaultPageUriParameters() {
+        super.setDefaultPageUriParameters();
+        testRealmPage.setAuthRealm(AuthRealm.TEST);
+    }
 }

testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/adapter/federation/AbstractKerberosStandaloneAdapterTest.java

@@ -76,7 +76,7 @@ public abstract class AbstractKerberosStandaloneAdapterTest extends AbstractKerb
     public void spnegoLoginTest() throws Exception {
         spnegoLoginTestImpl();
         // Assert user was imported and hasn't any required action on him
-        assertUser("hnelson", "hnelson@keycloak.org", null, null, false);
+        assertUser("hnelson", "hnelson@" + getConfig().get(KerberosConstants.KERBEROS_REALM).toLowerCase(), null, null, false);
     }
 
     @Test
@@ -98,11 +98,11 @@ public abstract class AbstractKerberosStandaloneAdapterTest extends AbstractKerb
         Assert.assertEquals(200, spnegoResponse.getStatus());
         String responseText = spnegoResponse.readEntity(String.class);
         Assert.assertTrue(responseText.contains("You need to update your user profile to activate your account."));
-        Assert.assertTrue(responseText.contains("hnelson@keycloak.org"));
+        Assert.assertTrue(responseText.contains("hnelson@" + getConfig().get(KerberosConstants.KERBEROS_REALM).toLowerCase()));
         spnegoResponse.close();
 
         // Assert user was imported and has required action on him
-        assertUser("hnelson", "hnelson@keycloak.org", null, null, true);
+        assertUser("hnelson", "hnelson@" + getConfig().get(KerberosConstants.KERBEROS_REALM).toLowerCase(), null, null, true);
 
         // Switch updateProfileOnFirstLogin to off
 

testsuite/integration-arquillian/tests/other/adapters/pom.xml

@@ -59,6 +59,7 @@
             -Dapp.server.ssl.base.url=https://localhost:${app.server.https.port}
             -Dapp.server.ssl.required=${app.server.ssl.required}
             -Dmy.host.name=localhost
+            -Djava.security.krb5.conf=${project.build.directory}/dependency/kerberos/test-krb5.conf
         </adapter.test.props>
         
         <app.server.home>${containers.home}/app-server-${app.server}</app.server.home>