]> git.ipfire.org Git - thirdparty/samba.git/commitdiff
testprogs/blackbox: let test_trust_token.sh check for S-1-18-1 with kerberos
authorStefan Metzmacher <metze@samba.org>
Tue, 18 Jun 2024 17:11:09 +0000 (19:11 +0200)
committerJule Anger <janger@samba.org>
Wed, 3 Jul 2024 08:48:12 +0000 (08:48 +0000)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15666

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit cda8beea45303a77080c64bb2391d22c59672deb)

testprogs/blackbox/test_trust_token.sh

index 075c0329171d0f52b9e9c92d8f787a557c8ba739..92d4ad5702111bbdd2c22882b37592a853b205d4 100755 (executable)
@@ -34,7 +34,7 @@ ldbsearch=$(system_or_builddir_binary ldbsearch "${BINDIR}")
 test_token()
 {
        auth_args="${1}"
-       auth_sid="${2-}"
+       auth_sid="${2}"
 
        out=$($VALGRIND $ldbsearch -H ldap://$SERVER.$REALM -U$TRUST_REALM\\$TRUST_USERNAME%$TRUST_PASSWORD -b '' --scope=base -k ${auth_args} tokenGroups 2>&1)
        ret=$?
@@ -84,7 +84,8 @@ test_token()
        return 0
 }
 
-testit "Test token with kerberos" test_token "yes" "" || failed=$(expr $failed + 1)
+# Check that SID_AUTHENTICATION_AUTHORITY_ASSERTED_IDENTITY(S-1-18-1) is added for krb5
+testit "Test token with kerberos" test_token "yes" "S-1-18-1" || failed=$(expr $failed + 1)
 # Check that SID_NT_NTLM_AUTHENTICATION(S-1-5-64-10) is added for NTLMSSP
 testit "Test token with NTLMSSP" test_token "no" "S-1-5-64-10" || failed=$(expr $failed + 1)