python:tests/krb5: allow get_service_ticket to accept a trust referral ticket without...

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>

diff --git a/python/samba/tests/krb5/kdc_base_test.py b/python/samba/tests/krb5/kdc_base_test.py
index 167a2d70a54e31c67af7db461e0555049457f174..17877aa886378faa27830a806e84f6bec0a304df 100644 (file)
--- a/python/samba/tests/krb5/kdc_base_test.py
+++ b/python/samba/tests/krb5/kdc_base_test.py
@@ -3250,6 +3250,7 @@ class KDCBaseTest(TestCaseInTempDir, RawKerberosTest):
                            expect_requester_sid=None,
                            expect_pac_attrs=None,
                            expect_pac_attrs_pac_request=None,
+                           expect_krbtgt_referral=False,
                            fresh=False):
         user_name = tgt.cname['name-string'][0]
         ticket_sname = tgt.sname
@@ -3313,6 +3314,7 @@ class KDCBaseTest(TestCaseInTempDir, RawKerberosTest):
             expected_device_claims=expected_device_claims,
             unexpected_device_claims=unexpected_device_claims,
             ticket_decryption_key=decryption_key,
+            expect_ticket_kvno=(not expect_krbtgt_referral),
             check_rep_fn=self.generic_check_kdc_rep,
             check_kdc_private_fn=self.generic_check_kdc_private,
             tgt=tgt,