sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-01 04:58:35 +03:00
Code

tests/krb5: Verify tickets obtained with get_service_ticket()

Browse Source 
We only require the ticket checksum with Heimdal, because MIT currently
doesn't add it.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Joseph Sutton 2021-10-06 16:35:47 +13:00 committed by Andrew Bartlett
parent bf63221722
commit d86eee2fd0
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
python/samba/tests/krb5/kdc_base_test.py
View File

@ -1287,6 +1287,14 @@ class KDCBaseTest(RawKerberosTest):
sname=sname, sname=sname,
decryption_key=target_key) decryption_key=target_key)
if to_rodc:
krbtgt_creds = self.get_rodc_krbtgt_creds()
else:
krbtgt_creds = self.get_krbtgt_creds()
krbtgt_key = self.TicketDecryptionKey_from_creds(krbtgt_creds)
self.verify_ticket(service_ticket_creds, krbtgt_key,
expect_ticket_checksum=self.tkt_sig_support)
self.tkt_cache[cache_key] = service_ticket_creds self.tkt_cache[cache_key] = service_ticket_creds
return service_ticket_creds return service_ticket_creds