Add regression test for LDAP key fencepost bug

(cherry picked from commit 0d78da225612e13d0b1cf515987305535d2f9dce)

ticket: 7980
status: resolved

diff --git a/src/tests/t_kdb.py b/src/tests/t_kdb.py
index 64ce682cc9fff432219cda80b61175f3781c02f4..7cd6fa623e5de8980cef72e6e2b1a9718f9ba824 100644 (file)
--- a/src/tests/t_kdb.py
+++ b/src/tests/t_kdb.py
@@ -285,6 +285,17 @@ realm.run([kvno, 'alias'])
 realm.kinit(realm.user_princ, flags=['-R', '-S', 'alias'])
 realm.klist(realm.user_princ, 'alias@KRBTEST.COM')
 
+# Regression test for #7980 (fencepost when dividing keys up by kvno).
+realm.run_kadminl('addprinc -randkey -e aes256-cts,aes128-cts kvnoprinc')
+realm.run_kadminl('cpw -randkey -keepold -e aes256-cts,aes128-cts kvnoprinc')
+out = realm.run_kadminl('getprinc kvnoprinc')
+if 'Number of keys: 4' not in out:
+    fail('After cpw -keepold, wrong number of keys')
+realm.run_kadminl('cpw -randkey -keepold -e aes256-cts,aes128-cts kvnoprinc')
+out = realm.run_kadminl('getprinc kvnoprinc')
+if 'Number of keys: 6' not in out:
+    fail('After cpw -keepold, wrong number of keys')
+
 realm.stop()
 
 # Briefly test dump and load.