Currently the test suite uses openldap as a server. However, we'd like to be able to run it in RHEL/CentOS, which means that it ought to be done with 389ds.
n.b.: While it's tempting to use freeipa rather than doing this by hand, there are two large problems with that. First, freeipa takes forever to download and install because it's setting up so much else that we don't need (we just need a KDC). Second, freeipa's server isn't usable in distros that aren't Fedora-like, while gssproxy is; within reason, I'd like to keep parity between where we can run our code and our tests.
Currently the test suite uses openldap as a server. However, we'd like to be able to run it in RHEL/CentOS, which means that it ought to be done with 389ds.
n.b.: While it's tempting to use freeipa rather than doing this by hand, there are two large problems with that. First, freeipa takes forever to download and install because it's setting up so much else that we don't need (we just need a KDC). Second, freeipa's server isn't usable in distros that aren't Fedora-like, while gssproxy is; within reason, I'd like to keep parity between where we can run our code and our tests.