1 files changed, 45 insertions, 0 deletions
diff --git a/test/integration/targets/get_url/tasks/use_gssapi.yml b/test/integration/targets/get_url/tasks/use_gssapi.yml
new file mode 100644
index 0000000..f3d2d1f
--- /dev/null
+++ b/test/integration/targets/get_url/tasks/use_gssapi.yml
@@ -0,0 +1,45 @@
+- name: test Negotiate auth over HTTP with explicit credentials
+  get_url:
+    url: http://{{ httpbin_host }}/gssapi
+    dest: '{{ remote_tmp_dir }}/gssapi_explicit.txt'
+    use_gssapi: yes
+    url_username: '{{ krb5_username }}'
+    url_password: '{{ krb5_password }}'
+  register: http_explicit
+
+- name: get result of test Negotiate auth over HTTP with explicit credentials
+  slurp:
+    path: '{{ remote_tmp_dir }}/gssapi_explicit.txt'
+  register: http_explicit_actual
+
+- name: assert test Negotiate auth with implicit credentials
+  assert:
+    that:
+    - http_explicit.status_code == 200
+    - http_explicit_actual.content | b64decode | trim == 'Microsoft Rulz'
+
+- name: skip tests on macOS, I cannot seem to get it to read a credential from a custom ccache
+  when: ansible_facts.distribution != 'MacOSX'
+  block:
+  - name: get Kerberos ticket for implicit auth tests
+    httptester_kinit:
+      username: '{{ krb5_username }}'
+      password: '{{ krb5_password }}'
+
+  - name: test Negotiate auth over HTTPS with implicit credentials
+    get_url:
+      url: https://{{ httpbin_host }}/gssapi
+      dest: '{{ remote_tmp_dir }}/gssapi_implicit.txt'
+      use_gssapi: yes
+    register: https_implicit
+
+  - name: get result of test Negotiate auth over HTTPS with implicit credentials
+    slurp:
+      path: '{{ remote_tmp_dir }}/gssapi_implicit.txt'
+    register: https_implicit_actual
+
+  - name: assert test Negotiate auth with implicit credentials
+    assert:
+      that:
+      - https_implicit.status_code == 200
+      - https_implicit_actual.content | b64decode | trim == 'Microsoft Rulz'