tests/krb5: Correctly determine whether tickets are service tickets
commit100be7eb8e70ba270a8e92957a5e47466160a901
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Tue, 14 Dec 2021 06:16:00 +0000 (14 19:16 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 15 Dec 2021 03:41:32 +0000 (15 03:41 +0000)
tree9cfc1aafd85cf5b7953987a0fa7c96debbd0be0c
parent1eb91291b54b194d8312dac6dd605c793eabfd53
tests/krb5: Correctly determine whether tickets are service tickets

Previously we expected tickets to contain a ticket checksum if the sname
was not the krbtgt. However, the ticket checksum should not be present
if we are performing an AS-REQ to our own account. Now we determine a
ticket is a service ticket only if the request is also a TGS-REQ.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
python/samba/tests/krb5/compatability_tests.py
python/samba/tests/krb5/kdc_base_test.py
python/samba/tests/krb5/raw_testcase.py
python/samba/tests/krb5/rodc_tests.py