tests/krb5: Allow get_tgt() to specify different kdc-options

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Isaac Boukris <iboukris@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/tests/krb5/fast_tests.py b/python/samba/tests/krb5/fast_tests.py
index e5f67ef6c31f1d8b64c4b36174b3054d31e8327a..02ec7b1beeda6935891648a85906fc18a293707e 100755 (executable)
--- a/python/samba/tests/krb5/fast_tests.py
+++ b/python/samba/tests/krb5/fast_tests.py
@@ -1573,7 +1573,7 @@ class FAST_Tests(KDCBaseTest):
 
         return service_ticket_creds
 
-    def get_tgt(self, creds, to_rodc=False):
+    def get_tgt(self, creds, to_rodc=False, kdc_options=None):
         user_name = creds.get_username()
         realm = creds.get_realm()
 
@@ -1594,10 +1594,12 @@ class FAST_Tests(KDCBaseTest):
         ticket_decryption_key = (
             self.TicketDecryptionKey_from_creds(krbtgt_creds))
 
-        kdc_options = str(krb5_asn1.KDCOptions('forwardable,'
+        if kdc_options is None:
+            kdc_options = krb5_asn1.KDCOptions('forwardable,'
                                                'renewable,'
                                                'canonicalize,'
-                                               'renewable-ok'))
+                                               'renewable-ok')
+        kdc_options = str(kdc_options)
 
         pac_options = '1'  # supports claims