From: Greg Hudson <ghudson@mit.edu>
Date: Sat, 2 Aug 2014 02:10:35 +0000 (-0400)
Subject: Add regression test for LDAP key fencepost bug
X-Git-Tag: krb5-1.13-alpha1~10
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0d78da225612e13d0b1cf515987305535d2f9dce;p=thirdparty%2Fkrb5.git

Add regression test for LDAP key fencepost bug

ticket: 7980
---

diff --git a/src/tests/t_kdb.py b/src/tests/t_kdb.py
index 14269901f9..b310ccfff4 100644
--- a/src/tests/t_kdb.py
+++ b/src/tests/t_kdb.py
@@ -297,6 +297,17 @@ realm.run([kvno, 'alias'])
 realm.kinit(realm.user_princ, flags=['-R', '-S', 'alias'])
 realm.klist(realm.user_princ, 'alias@KRBTEST.COM')
 
+# Regression test for #7980 (fencepost when dividing keys up by kvno).
+realm.run_kadminl('addprinc -randkey -e aes256-cts,aes128-cts kvnoprinc')
+realm.run_kadminl('cpw -randkey -keepold -e aes256-cts,aes128-cts kvnoprinc')
+out = realm.run_kadminl('getprinc kvnoprinc')
+if 'Number of keys: 4' not in out:
+    fail('After cpw -keepold, wrong number of keys')
+realm.run_kadminl('cpw -randkey -keepold -e aes256-cts,aes128-cts kvnoprinc')
+out = realm.run_kadminl('getprinc kvnoprinc')
+if 'Number of keys: 6' not in out:
+    fail('After cpw -keepold, wrong number of keys')
+
 realm.stop()
 
 # Briefly test dump and load.