r19603: Make it easier to control the debug level of smbd.

Ensure that we don't accept kerberos logins without a PAC (to ensure
we actually produce a PAC in the KDC)

Andrew Bartlett

diff --git a/source/script/tests/mktestsetup.sh b/source/script/tests/mktestsetup.sh
index 9a8c2677beef725825d843abc436908a9b5d5a57..fc68e83f81d094382b3aba554e22455f6eca60d9 100755 (executable)
--- a/source/script/tests/mktestsetup.sh
+++ b/source/script/tests/mktestsetup.sh
@@ -16,6 +16,10 @@ if test -z "$SHARE_BACKEND"; then
        SHARE_BACKEND=classic
 fi
 
+if test -z "$SMBD_LOGLEVEL"; then
+       SMBD_LOGLEVEL=1
+fi
+
 DOMAIN=SAMBADOMAIN
 USERNAME=administrator
 REALM=SAMBA.EXAMPLE.COM
@@ -108,6 +112,10 @@ cat >$CONFFILE<<EOF
        torture:subunitdir = $SRCDIR/bin/torture
 
        system:anonymous = true
+#We don't want to pass our self-tests if the PAC code is wrong
+        gensec:require_pac = true
+
+        log level = $SMBD_LOGLEVEL
 
 [tmp]
        path = $TMPDIR