We were recently hit by bug #1956833, where GSS-SPNEGO was suddenly disabled and nobody noticed until an app tried to use it.
For that case, I'm thinking about a very simple test that would be like this:
for algo in $ALGORITHMS; do
saslpluginviewer -m $algo > /dev/null || {
echo "Algorithm $algo not available"
exit 1
}
done
And ALGORITHMS is a list of the algorithms we expect to always be available, like:
SCRAM-SHA-1 SCRAM-SHA-256 GS2-IAKERB GS2-KRB5 GSS-SPNEGO GSSAPI DIGEST-MD5 EXTERNAL CRAM-MD5 NTLM PLAIN LOGIN ANONYMOUS
We were recently hit by bug #1956833, where GSS-SPNEGO was suddenly disabled and nobody noticed until an app tried to use it.
For that case, I'm thinking about a very simple test that would be like this:
for algo in $ALGORITHMS; do
saslpluginviewer -m $algo > /dev/null || {
echo "Algorithm $algo not available"
exit 1
}
done
And ALGORITHMS is a list of the algorithms we expect to always be available, like:
SCRAM-SHA-1 SCRAM-SHA-256 GS2-IAKERB GS2-KRB5 GSS-SPNEGO GSSAPI DIGEST-MD5 EXTERNAL CRAM-MD5 NTLM PLAIN LOGIN ANONYMOUS