summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2021-11-02 14:02:14 +1300
committerJule Anger <janger@samba.org>2021-11-08 10:52:12 +0100
commit2b28b9c3be28368e7b2322af208f17b12587c6a5 (patch)
treeb9d10a77d687b6c757cfd2681d7aca107b638733
parent1c5a0ef89c947545ae63ac67413e29a5f86e8987 (diff)
downloadsamba-2b28b9c3be28368e7b2322af208f17b12587c6a5.tar.gz
CVE-2020-25719 selftest: Always expect a PAC in TGS replies with Heimdal
This is tested in other places already, but this ensures a global check that a TGS-REP has a PAC, regardless. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14561 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
-rwxr-xr-xsource4/selftest/tests.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py
index 3c37b06ec1c..cdc7bc77c0a 100755
--- a/source4/selftest/tests.py
+++ b/source4/selftest/tests.py
@@ -789,7 +789,7 @@ planoldpythontestsuite("ad_dc:local", "samba.tests.dckeytab", extra_args=['-U"$U
have_fast_support = int('SAMBA_USES_MITKDC' in config_hash)
tkt_sig_support = int('SAMBA4_USES_HEIMDAL' in config_hash)
-expect_pac = 0
+expect_pac = int('SAMBA4_USES_HEIMDAL' in config_hash)
planoldpythontestsuite("none", "samba.tests.krb5.kcrypto")
planoldpythontestsuite("ad_dc_default", "samba.tests.krb5.simple_tests",
environ={'SERVICE_USERNAME':'$SERVER',