Volker Lendecke a4ecd112e7 test: Test winbind idmap_ad ticket expiry behaviour ... We need to make sure that winbind's idmap_ad deals fine with an expired krb ticket used to connect to AD via LDAP. In a customer situation we have seen the RFC4511 section 4.4.1 unsolicited ldap exop response coming through, but the TCP disconnect that Windows seems to do after that did not make it. Winbind deals fine with a TCP disconnect, but right now it does not handle just the section 4.4.1 response properly: It completely hangs. This test requests a ticket valid for 5 seconds and makes the LDAP server postpone the TCP disconnect after the ticket expiry for 10 seconds. The tests that winbind reacts to the ticket expiry exop response by making sure in this situation the wbinfo call running into the issue takes less than 8 seconds. If it did not look at the expiry exop response, it would take more than 10 seconds. Bug: https://bugzilla.samba.org/show_bug.cgi?id=14465 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>		2020-08-21 19:14:33 +00:00
..
ktest-krb5_ccache-2	s3-selftest Add tests to show kerberos works across a password change	2011-04-06 05:24:48 +02:00
ktest-krb5_ccache-3	s3-selftest Add tests to show kerberos works across a password change	2011-04-06 05:24:48 +02:00
ktest-secrets.tdb	s3-selftest Add tests to show kerberos works across a password change	2011-04-06 05:24:48 +02:00
tests.py	test: Test winbind idmap_ad ticket expiry behaviour	2020-08-21 19:14:33 +00:00