[debian-edu-commits] r80472 - in trunk/src/debian-edu-config: debian testsuite

[pere at alioth.debian.org]

Author: pere
Date: 2013-06-09 21:36:50 +0000 (Sun, 09 Jun 2013)
New Revision: 80472

Modified:
   trunk/src/debian-edu-config/debian/changelog
   trunk/src/debian-edu-config/testsuite/kerberos
Log:
Add new test case to detect and report passwords lingering in the
debconf database (bug #711251).  Copied from Wheezy version.

Modified: trunk/src/debian-edu-config/debian/changelog
===================================================================
--- trunk/src/debian-edu-config/debian/changelog	2013-06-09 21:31:46 UTC (rev 80471)
+++ trunk/src/debian-edu-config/debian/changelog	2013-06-09 21:36:50 UTC (rev 80472)
@@ -6,6 +6,8 @@
   * Changing debconf-set-selections-edu to not set the debconf
     template default value for passwords, to avoid storing the root
     and first user passwords in templates.dat (Closes: #711251).
+  * Add new test case to detect and report passwords lingering in the
+    debconf database (bug #711251).  Copied from Wheezy version.
 
  -- Petter Reinholdtsen <pere at debian.org>  Sun, 09 Jun 2013 23:31:09 +0200
 

Modified: trunk/src/debian-edu-config/testsuite/kerberos
===================================================================
--- trunk/src/debian-edu-config/testsuite/kerberos	2013-06-09 21:31:46 UTC (rev 80471)
+++ trunk/src/debian-edu-config/testsuite/kerberos	2013-06-09 21:36:50 UTC (rev 80472)
@@ -10,6 +10,20 @@
     . /etc/debian-edu/config
 fi
 
+# Make sure all debconf templates with password passed from d-i to
+# cfengine are empty after installation (bug #711251).
+for template in debian-edu-config/kdc-password \
+    debian-edu-config/kdc-password-again \
+    debian-edu-config/ldap-password-again \
+    debian-edu-config/ldap-password \
+    debian-edu-config/first-user-password ; do
+    if [ -n "$(perl -MDebconf::Db -MDebconf::Template -e "Debconf::Db->load; my \$template = Debconf::Template->get('$template'); print \$template->default || \$template->value;")" ]; then
+	echo "error: debconf template $template is not empty! (BTS #711251)"
+    else
+	echo "success: debconf template $template is empty."
+    fi
+done
+
 # In case we are not a Main-Server profile, just exit gracefully
 if echo "$PROFILE" | grep -q Main-Server ; then
     :