From 49adbe508653cae7feab705a897a7b9284d40b6d Mon Sep 17 00:00:00 2001
From: Steve Traylen <steve.traylen@cern.ch>
Date: Fri, 12 Jan 2024 08:20:34 +0100
Subject: [PATCH] Addition of a pamtester test

---
 .github/workflows/pamtester.yml  | 17 +++++++++++++++++
 pamtester/expired_kerberos_token |  2 ++
 2 files changed, 19 insertions(+)
 create mode 100644 .github/workflows/pamtester.yml
 create mode 100644 pamtester/expired_kerberos_token

diff --git a/.github/workflows/pamtester.yml b/.github/workflows/pamtester.yml
new file mode 100644
index 0000000..6b4283b
--- /dev/null
+++ b/.github/workflows/pamtester.yml
@@ -0,0 +1,17 @@
+---
+name: pamtester run of pam_krb5_cc_move
+on: [push]
+jobs:
+  pamtester:
+    runs-on: ubuntu-latest
+    steps:
+      - run: sudo apt install pamtester gcc make libpam-dev libkrb5-dev
+      - uses: actions/checkout@v4
+      - run: make
+      - run: sudo make install INSTALLDIR=/usr/lib/x86_64-linux-gnu/security
+      - run: sudo cp pamtester/krb5_cc_move /etc/pam.d/krb5_cc_move
+      - run: cp pamtester/expired_kerberos_token /tmp/source
+      - run: sudo adduser testuser
+      - run: sudo chown testuser /tmp/source
+      - run: sudo pamtester -v krb5_cc_move testuser open_session
+      - run: KRB5CCNAME=/tmp/destination klist
diff --git a/pamtester/expired_kerberos_token b/pamtester/expired_kerberos_token
new file mode 100644
index 0000000..ce08ea0
--- /dev/null
+++ b/pamtester/expired_kerberos_token
@@ -0,0 +1,2 @@
+# Just use for testing
+session optional pam_krb5_cc_move.so debug source=FILE:/tmp/source destination=FILE:/tmp/destination