selftest/expectedfail_heimdal

   1 # ad_dc_ntvfs and fl2008r2dc have
   2 # ldap server require strong auth = allow_sasl_without_tls_channel_bindings
   3 # it means correct channel bindings are required, if the client indicated
   4 # explicit (even null) channel bindings are provided
   5 #
   6 # Note currently only embedded_heimdal supports
   7 # GSS_C_CHANNEL_BOUND_FLAG as client.
   8 # See also:
   9 # https://github.com/heimdal/heimdal/pull/1234
  10 # https://github.com/krb5/krb5/pull/1329
  11 ^samba4.ldb.simple.ldaps.with.SASL-BIND.*use-kerberos=required.*ldap_testing:channel_bound=yes.*ldap_testing:tls_channel_bindings=no.*ad_dc_ntvfs
  12 ^samba4.ldb.simple.ldap.starttls.*SASL-BIND.*use-kerberos=required.*ldap_testing:channel_bound=yes.*ldap_testing:tls_channel_bindings=no.*ad_dc_ntvfs
  13 ^samba4.ldb.simple.ldaps.with.SASL-BIND.*use-kerberos=required.*ldap_testing:channel_bound=yes.*ldap_testing:tls_channel_bindings=no.*fl2008r2dc
  14 ^samba4.ldb.simple.ldap.starttls.*SASL-BIND.*use-kerberos=required.*ldap_testing:channel_bound=yes.*ldap_testing:tls_channel_bindings=no.*fl2008r2dc