From e830da448b10d9a2e23627ce00f153656b17988f Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Tue, 26 Nov 2024 11:01:16 +0100 Subject: [PATCH] selftest: add 'server support krb5 netlogon = yes' for ad_dc Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider --- selftest/knownfail.d/samba.tests.krb5.netlogon | 4 ++++ selftest/target/Samba4.pm | 1 + source4/selftest/tests.py | 2 +- 3 files changed, 6 insertions(+), 1 deletion(-) diff --git a/selftest/knownfail.d/samba.tests.krb5.netlogon b/selftest/knownfail.d/samba.tests.krb5.netlogon index c6a6273cd80..0f8d4c3fa3d 100644 --- a/selftest/knownfail.d/samba.tests.krb5.netlogon +++ b/selftest/knownfail.d/samba.tests.krb5.netlogon @@ -2,3 +2,7 @@ ^samba.tests.krb5.netlogon.*.test_wks1_authenticate_flags # This is not implemented yet ^samba.tests.krb5.netlogon.*.NetlogonSchannel.test_ticket_samlogon +# These will be fixed in the next commits +^samba.tests.krb5.netlogon.*.NetlogonSchannel.test_check_passwords_.*_auth3_e13fffff +^samba.tests.krb5.netlogon.*.NetlogonSchannel.test_check_passwords_.*_authK +^samba.tests.krb5.netlogon.*.NetlogonSchannel.test_.*_samlogon_.*_authK diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm index cfa8200c3ef..923cc744e35 100755 --- a/selftest/target/Samba4.pm +++ b/selftest/target/Samba4.pm @@ -2096,6 +2096,7 @@ sub provision_ad_dc() lpq cache time = 0 print notify backchannel = yes + server support krb5 netlogon = yes CVE_2020_1472:warn_about_unused_debug_level = 3 CVE_2022_38023:warn_about_unused_debug_level = 3 CVE_2022_38023:error_debug_level = 2 diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py index 4aa37efdc1b..76dd3c68841 100755 --- a/source4/selftest/tests.py +++ b/source4/selftest/tests.py @@ -1996,7 +1996,7 @@ for env in ["ad_dc"]: **krb5_environ, 'FAST_SUPPORT': fast_support, 'NETLOGON_STRONG_KEY_SUPPORT': '0', - 'NETLOGON_AUTH_KRB5_SUPPORT': '0', + 'NETLOGON_AUTH_KRB5_SUPPORT': '1', }) planoldpythontestsuite('fl2008r2dc', 'samba.tests.krb5.salt_tests',