From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Mon, 20 Sep 2021 03:06:18 +0000 (+1200)
Subject: tests/krb5: Add method to determine if principal is krbtgt
X-Git-Tag: ldb-2.5.0~561
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c0b81f0dd54d0d71b5d0f5a870b505e82d0e85b8;p=thirdparty%2Fsamba.git

tests/krb5: Add method to determine if principal is krbtgt

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/python/samba/tests/krb5/raw_testcase.py b/python/samba/tests/krb5/raw_testcase.py
index 985792887ca..cadf2b50dc9 100644
--- a/python/samba/tests/krb5/raw_testcase.py
+++ b/python/samba/tests/krb5/raw_testcase.py
@@ -2977,7 +2977,7 @@ class RawKerberosTest(TestCaseInTempDir):
     def verify_ticket(self, ticket, krbtgt_key, expect_pac=True):
         # Check if the ticket is a TGT.
         sname = ticket.ticket['sname']
-        is_tgt = sname['name-string'][0] == b'krbtgt'
+        is_tgt = self.is_tgs(sname)
 
         # Decrypt the ticket.
 
@@ -3371,6 +3371,10 @@ class RawKerberosTest(TestCaseInTempDir):
             krb5pac.PAC_TYPE_KDC_CHECKSUM: krbtgt_key
         }
 
+    def is_tgs(self, principal):
+        name = principal['name-string'][0]
+        return name in ('krbtgt', b'krbtgt')
+
     def get_empty_pac(self):
         return self.AuthorizationData_create(AD_WIN2K_PAC, bytes(1))