sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-28 01:58:17 +03:00
Code

tests/krb5: Require ticket checksums if decryption key is available

Browse Source 
We perform this check conditionally, because MIT doesn't currently add
ticket checksums.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Joseph Sutton 2021-10-05 15:39:11 +13:00 committed by Andrew Bartlett
parent ae2c57fb03
commit bf63221722
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
python/samba/tests/krb5/raw_testcase.py
View File

@ -2493,15 +2493,14 @@ class RawKerberosTest(TestCaseInTempDir):
ticket_private=ticket_private,
encpart_private=encpart_private)
# TODO: This parameter should be removed when all service tickets are
# issued with ticket checksums.
expect_ticket_checksum = kdc_exchange_dict['expect_ticket_checksum']
if expect_ticket_checksum:
self.assertIsNotNone(ticket_decryption_key)
if ticket_decryption_key is not None:
self.verify_ticket(ticket_creds, krbtgt_key, expect_pac=expect_pac,
expect_ticket_checksum=expect_ticket_checksum)
expect_ticket_checksum=expect_ticket_checksum
or self.tkt_sig_support)
kdc_exchange_dict['rep_ticket_creds'] = ticket_creds