rlPhaseStartTest "Create a valid keyring, then try issuing a
command that will fallback to kerberos auth. Verify that the fallback
happens"
                kdestroy
                keyctl purge user # Purging keys to be certain that the
user-find populates the keyring properly.
                rlRun "keyctl clear @s" 0 "Clear local session keyring"
                rlRun "keyctl clear @u" 0 "Clear local user keyring"
                KinitAsUser $u1 $u1pass
                outf="/dev/shm/outfileg.txt"
                ipa -vv user-find $u1 &> $outf # running ipa user-find
to populate the keyring.
                ipa user-find admin &> /dev/null
                sleep 5
                rlRun "keyctl list @s | grep ipa_session_cookie | grep
$u1" 0 "verify u1's ipa session cookie was created"
                rlRun "grep Authorization:\ negotiate $outf" 0 "This
first user-find should complete a full kerberos auth."
                outf="/dev/shm/outfileh.txt"
                sleep 5
                ipa -vv user-find $u1 &>/dev/shm/1
                ipa -vv user-find $u1 &>/dev/shm/2
                ipa -vv user-find $u1 &>/dev/shm/3
                sleep 30
                ipa -vv user-find $u1 &>/dev/shm/4
                sleep 30
                ipa -vv user-find $u1 &>/dev/shm/5

                ipa -vv user-find $u1 &> $outf # This command should
work off of the current session.
                rlRun "grep Authorization:\ negotiate $outf" 1
"Re-verify that a normal user-find does not do a full kerberos auth"
                outf="/dev/shm/outfilei.txt"
                ipa -vv --delegate user-find &> $outf # this command
should force a full kerberos auth
                rlRun "grep Authorization:\ negotiate $outf" 0 "ipa
delegate should force a full kerberos auth. Verify that it happened."
        rlPhaseEnd