self.verify_ticket(service_ticket, key, service_ticket=True,
expect_ticket_checksum=True)
- def test_mit_pre_1_20_ticket_signature(self):
- # Ensure that a DC does not issue tickets signed with its krbtgt key.
- user_creds = self.get_client_creds()
- target_creds = self.get_service_creds()
-
- krbtgt_creds = self.get_krbtgt_creds()
- key = self.TicketDecryptionKey_from_creds(krbtgt_creds)
-
- # Get a TGT from the DC.
- tgt = self.get_tgt(user_creds)
-
- # Ensure the PAC contains the expected checksums.
- self.verify_ticket(tgt, key, service_ticket=False)
-
- # Get a service ticket from the DC.
- service_ticket = self.get_service_ticket(tgt, target_creds)
-
- # Ensure the PAC does not contain the expected checksums.
- self.verify_ticket(service_ticket, key, service_ticket=True,
- expect_ticket_checksum=False)
-
def test_full_signature(self):
# Ensure that a DC correctly issues tickets signed with its krbtgt key.
user_creds = self.get_client_creds()