From: Jennifer Sutton Date: Tue, 20 Jan 2026 03:53:27 +0000 (+1300) Subject: selftest: Disable implicit dollar match without canonicalization for promoted_dc X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0ba76af4b00ac1702e0cb1232ddd4cadd456f18a;p=thirdparty%2Fsamba.git selftest: Disable implicit dollar match without canonicalization for promoted_dc This puts promoted_dc and ad_dc_ntvfs in sync, and avoids an issue in the former environment where the Heimdal KDC will use the smb.conf from one of the two DCs, and the MIT KDC will use the smb.conf from the other. Signed-off-by: Jennifer Sutton Reviewed-by: Douglas Bagnall --- diff --git a/selftest/knownfail_mit_kdc.d/krb5-kdc b/selftest/knownfail_mit_kdc.d/krb5-kdc index 931376a602e..0265951eba8 100644 --- a/selftest/knownfail_mit_kdc.d/krb5-kdc +++ b/selftest/knownfail_mit_kdc.d/krb5-kdc @@ -4,6 +4,4 @@ ^samba4.krb5.kdc\ with\ account\ having\ identical\ UPN\ and\ SPN.canon.no-canon.no-enterprise.uc-user.spn.no-canon.no-enterprise.uc-user.spn\(promoted_dc\) ^samba4.krb5.kdc\ with\ account\ having\ identical\ UPN\ and\ SPN.canon.no-canon.no-enterprise.uc-user.upn.no-canon.no-enterprise.uc-user.upn\(promoted_dc\) ^samba4.krb5.kdc\ with\ machine\ account.canon.no-canon.no-enterprise.lc-user.removedollar.no-canon.no-enterprise.lc-user.removedollar\(fl2000dc:local\) -^samba4.krb5.kdc\ with\ machine\ account.canon.no-canon.no-enterprise.lc-user.removedollar.no-canon.no-enterprise.lc-user.removedollar\(promoted_dc:local\) ^samba4.krb5.kdc\ with\ machine\ account.canon.no-canon.no-enterprise.uc-user.removedollar.no-canon.no-enterprise.uc-user.removedollar\(fl2000dc:local\) -^samba4.krb5.kdc\ with\ machine\ account.canon.no-canon.no-enterprise.uc-user.removedollar.no-canon.no-enterprise.uc-user.removedollar\(promoted_dc:local\) diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm index 5c7ba9a074d..af50e4d01ea 100755 --- a/selftest/target/Samba4.pm +++ b/selftest/target/Samba4.pm @@ -1515,6 +1515,7 @@ sub provision_promoted_dc($$$) ntlm auth = ntlmv2-only kdc force enable rc4 weak session keys = yes + kdc name match implicit dollar without canonicalization = no [sysvol] path = $ctx->{statedir}/sysvol