tests/krb5: Set expected_status even if expect_status is not true

We might get an NTSTATUS code even if we aren’t explicitly saying that
we expect one.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/tests/krb5/lockout_tests.py b/python/samba/tests/krb5/lockout_tests.py
index 4140e4f882586daa9099d77cdd7665e58a90bd2c..25be0ce36dcee0f7e150cc78d88381341264ecbc 100755 (executable)
--- a/python/samba/tests/krb5/lockout_tests.py
+++ b/python/samba/tests/krb5/lockout_tests.py
@@ -147,12 +147,13 @@ def connect_kdc(pipe,
             error_code = rep.get('error-code')
             if error_code == KDC_ERR_CLIENT_REVOKED:
                 # The account was locked out.
+                kdc_exchange_dict['expected_status'] = (
+                    ntstatus.NT_STATUS_ACCOUNT_LOCKED_OUT)
+
                 if expect_status:
                     # Expect to get a LOCKED_OUT NTSTATUS code.
                     kdc_exchange_dict['expect_edata'] = True
                     kdc_exchange_dict['expect_status'] = True
-                    kdc_exchange_dict['expected_status'] = (
-                        ntstatus.NT_STATUS_ACCOUNT_LOCKED_OUT)
 
             elif error_code == KDC_ERR_PREAUTH_FAILED:
                 # Just a wrong password: the account wasn’t locked out. Don’t