tests/krb5: Add more AS-REQ ENC-TIMESTAMP tests with different encryption types

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/tests/krb5/as_req_tests.py b/python/samba/tests/krb5/as_req_tests.py
index 315720f85d6a51e1102a6b8b842007713de98834..a69278214ccc53432d2c4a83a84138ff6cce93b4 100755 (executable)
--- a/python/samba/tests/krb5/as_req_tests.py
+++ b/python/samba/tests/krb5/as_req_tests.py
@@ -209,6 +209,46 @@ class AsReqKerberosTests(AsReqBaseTest):
         client_creds = self.get_mach_creds()
         self._run_as_req_enc_timestamp(client_creds)
 
+    def test_as_req_enc_timestamp_rc4(self):
+        client_creds = self.get_client_creds()
+        self._run_as_req_enc_timestamp(
+            client_creds,
+            etypes={kcrypto.Enctype.RC4})
+
+    def test_as_req_enc_timestamp_mac_rc4(self):
+        client_creds = self.get_mach_creds()
+        self._run_as_req_enc_timestamp(
+            client_creds,
+            etypes={kcrypto.Enctype.RC4})
+
+    def test_as_req_enc_timestamp_rc4_dummy(self):
+        client_creds = self.get_client_creds()
+        self._run_as_req_enc_timestamp(
+            client_creds,
+            etypes={kcrypto.Enctype.RC4,
+                    -1111})
+
+    def test_as_req_enc_timestamp_mac_rc4_dummy(self):
+        client_creds = self.get_mach_creds()
+        self._run_as_req_enc_timestamp(
+            client_creds,
+            etypes={kcrypto.Enctype.RC4,
+                    -1111})
+
+    def test_as_req_enc_timestamp_aes128_rc4(self):
+        client_creds = self.get_client_creds()
+        self._run_as_req_enc_timestamp(
+            client_creds,
+            etypes={kcrypto.Enctype.AES128,
+                    kcrypto.Enctype.RC4})
+
+    def test_as_req_enc_timestamp_mac_aes128_rc4(self):
+        client_creds = self.get_mach_creds()
+        self._run_as_req_enc_timestamp(
+            client_creds,
+            etypes={kcrypto.Enctype.AES128,
+                    kcrypto.Enctype.RC4})
+
 
 if __name__ == "__main__":
     global_asn1_print = False

diff --git a/selftest/knownfail_mit_kdc b/selftest/knownfail_mit_kdc
index 36be42d0481acfa39aa123c2a2164eab7d786d13..0a15ebf788127d09214ec8de8e3d5fdd91ad27c2 100644 (file)
--- a/selftest/knownfail_mit_kdc
+++ b/selftest/knownfail_mit_kdc
@@ -283,6 +283,8 @@ samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_
 #
 # MIT currently fails some as_req_no_preauth tests.
 #
+^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_enc_timestamp_aes128_rc4.*fl2003dc
+^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_enc_timestamp_mac_aes128_rc4.*fl2003dc
 ^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_no_preauth.*aes.*rc4.*fl2003dc
 ^samba.tests.krb5.as_req_tests.samba.tests.krb5.as_req_tests.AsReqKerberosTests.test_as_req_no_preauth.*rc4.*aes.*fl2003dc
 # Differences in our KDC compared to windows