'canonicalize,'
'renewable-ok'))
- pac_request = self.get_pa_pac_request()
- pac_options = self.get_pa_pac_options('1') # supports claims
-
- padata = [pac_request, pac_options]
+ pac_options = '1' # supports claims
rep, kdc_exchange_dict = self._test_as_exchange(
cname=cname,
expected_sname=sname,
expected_salt=salt,
etypes=etype,
- padata=padata,
+ padata=None,
kdc_options=kdc_options,
preauth_key=None,
- ticket_decryption_key=ticket_decryption_key)
+ ticket_decryption_key=ticket_decryption_key,
+ pac_request=True,
+ pac_options=pac_options)
self.check_pre_authentication(rep)
etype_info2 = kdc_exchange_dict['preauth_etype_info2']
ts_enc_padata = self.get_enc_timestamp_pa_data(creds, rep)
- padata = [ts_enc_padata, pac_request, pac_options]
+ padata = [ts_enc_padata]
expected_realm = realm.upper()
padata=padata,
kdc_options=kdc_options,
preauth_key=preauth_key,
- ticket_decryption_key=ticket_decryption_key)
+ ticket_decryption_key=ticket_decryption_key,
+ pac_request=True,
+ pac_options=pac_options)
self.check_as_reply(rep)
tgt = rep['ticket']
pa_data = self.PA_DATA_create(PADATA_PAC_REQUEST, pa_pac)
return pa_data
- def get_pa_pac_request(self, request_pac=True):
- pac_request = self.KERB_PA_PAC_REQUEST_create(request_pac)
-
- return pac_request
-
def get_pa_pac_options(self, options):
pac_options = self.PA_PAC_OPTIONS_create(options)
pac_options = self.der_encode(pac_options,