JAVA-2350: Configure GSSAPI authentication tests for Evergreen

Author: jyemin

.evergreen/.evg.yml

@@ -220,11 +220,22 @@ functions:
     - command: shell.exec
       type: test
       params:
+        silent: true
         working_dir: "src"
         script: |
-          ${PREPARE_SHELL}
+          # DO NOT ECHO WITH XTRACE (which PREPARE_SHELL does)
           JDK="jdk8" MONGODB_URI="${plain_auth_mongodb_uri}" .evergreen/run-plain-auth-test.sh
 
+  "run gssapi auth test":
+    - command: shell.exec
+      type: test
+      params:
+        silent: true
+        working_dir: "src"
+        script: |
+          # DO NOT ECHO WITH XTRACE (which PREPARE_SHELL does)
+          PROJECT_DIRECTORY=${PROJECT_DIRECTORY} JDK=${JDK} MONGODB_URI=${gssapi_auth_mongodb_uri} KDC=${gssapi_auth_kdc} REALM=${gssapi_auth_realm} KEYTAB_BASE64=${gssapi_auth_keytab_base64} .evergreen/run-gssapi-auth-test.sh
+
   "publish snapshot":
     - command: shell.exec
       type: test
@@ -336,10 +347,21 @@ tasks:
       commands:
         - func: "run plain auth test"
 
+    - name: "gssapi-auth-test"
+      depends_on:
+        - variant: "static-checks"
+          name: "static-analysis"
+      commands:
+        - func: "run gssapi auth test"
+
     - name: publish-snapshot
       depends_on:
         - variant: ".tests-variant"
           name: "test"
+        - variant: ".test-gssapi-variant"
+          name: "gssapi-auth-test"
+        - variant: "plain-auth-test"
+          name: "plain-auth-test"
       commands:
         - func: "publish snapshot"
 
@@ -453,6 +475,13 @@ buildvariants:
   tasks:
      - name: "test"
 
+- matrix_name: "test-gssapi"
+  matrix_spec: { jdk: "*", os: "rhel62" }
+  display_name: "GSSAPI (Kerberos) Auth test ${jdk} ${os} "
+  tags: ["test-gssapi-variant"]
+  tasks:
+     - name: "gssapi-auth-test"
+
 - name: plain-auth-test
   display_name: "PLAIN (LDAP) Auth test"
   run_on:

.evergreen/run-gssapi-auth-test.sh

@@ -0,0 +1,48 @@
+#!/bin/bash
+
+# Don't trace since the URI contains a password that shouldn't show up in the logs
+set -o errexit  # Exit the script with error if any of the commands fail
+
+# Supported/used environment variables:
+#       MONGODB_URI             Set the URI, including username/password to use to connect to the server via PLAIN authentication mechanism
+#       JDK                     Set the version of java to be used.  Java versions can be set from the java toolchain /opt/java
+#                               "jdk5", "jdk6", "jdk7", "jdk8"
+#       KDC                     The KDC
+#       REALM                   The realm
+#       KEYTAB_BASE64           The BASE64-encoded keytab
+#       PROJECT_DIRECTORY       The project directory
+
+JDK=${JDK:-jdk}
+JAVA_HOME="/opt/java/${JDK}"
+
+############################################
+#            Main Program                  #
+############################################
+
+echo "Running GSSAPI authentication tests"
+
+echo ${KEYTAB_BASE64} | base64 -d > ${PROJECT_DIRECTORY}/.evergreen/drivers.keytab
+
+cat << EOF > .evergreen/java.login.drivers.config
+com.sun.security.jgss.krb5.initiate {
+    com.sun.security.auth.module.Krb5LoginModule required
+          doNotPrompt=true useKeyTab=true keyTab="${PROJECT_DIRECTORY}/.evergreen/drivers.keytab" principal=drivers;
+};
+EOF
+
+echo "Compiling java driver with jdk8"
+
+# We always compile with the latest version of java
+export JAVA_HOME="/opt/java/jdk8"
+./gradlew -version
+./gradlew --info driver-core:classes driver-core:testClasses
+
+echo "Running tests with ${JDK}"
+JAVA_HOME="/opt/java/${JDK}"
+./gradlew -version
+
+./gradlew --stacktrace --info \
+-Dorg.mongodb.test.uri=${MONGODB_URI} \
+-Pgssapi.enabled=true -Psun.security.krb5.debug=true -Pauth.login.config=file://${PROJECT_DIRECTORY}/.evergreen/java.login.drivers.config \
+-Pkrb5.kdc=${KDC} -Pkrb5.realm=${REALM} -Psun.security.krb5.debug=true \
+-Dtest.single=GSSAPIAuthenticationSpecification -x classes -x testClasses --rerun-tasks driver-core:test

.evergreen/run-plain-auth-test.sh

@@ -21,7 +21,7 @@ echo "Compiling java driver with jdk8"
 # We always compile with the latest version of java
 export JAVA_HOME="/opt/java/jdk8"
 ./gradlew -version
-./gradlew --info classes testClasses
+./gradlew --info driver-core:classes driver-core:testClasses
 
 echo "Running tests with ${JDK}"
 JAVA_HOME="/opt/java/${JDK}"