From 9af88e3f23e7ccfc9eef6b8f7510e5318dab513f Mon Sep 17 00:00:00 2001
From: Adam Williamson <awilliam@redhat.com>
Date: Thu, 8 Sep 2016 10:28:31 -0700
Subject: [PATCH] destroy kerberos cache before firefox in freeipa password
 change

In F25+, Firefox seems to do kerberos auth automatically, so if
we go to the FreeIPA admin URL while kerberos-authed as test4,
we are logged in right away as test4 - neat! But not what we
wanted. So let's kdestroy.
---
 tests/freeipa_password_change_postinstall.pm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/freeipa_password_change_postinstall.pm b/tests/freeipa_password_change_postinstall.pm
index aff08196..2862779d 100644
--- a/tests/freeipa_password_change_postinstall.pm
+++ b/tests/freeipa_password_change_postinstall.pm
@@ -8,6 +8,8 @@ sub run {
     $self->console_login(user=>'root');
     # clear browser data so we don't go back to the 'admin' login
     assert_script_run 'rm -rf /root/.mozilla';
+    # clear kerberos ticket so we don't auto-auth as 'test4'
+    assert_script_run 'kdestroy -A';
     type_string "startx /usr/bin/firefox -width 1024 -height 768\n";
     assert_screen "firefox";
     start_webui("test1", "batterystaple");