From: Andrew Bartlett Date: Tue, 2 Nov 2021 01:02:14 +0000 (+1300) Subject: CVE-2020-25719 selftest: Always expect a PAC in TGS replies with Heimdal X-Git-Tag: samba-4.13.14~27 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2b28b9c3be28368e7b2322af208f17b12587c6a5;p=thirdparty%2Fsamba.git CVE-2020-25719 selftest: Always expect a PAC in TGS replies with Heimdal This is tested in other places already, but this ensures a global check that a TGS-REP has a PAC, regardless. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14561 Signed-off-by: Andrew Bartlett Reviewed-by: Joseph Sutton --- diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py index 3c37b06ec1c..cdc7bc77c0a 100755 --- a/source4/selftest/tests.py +++ b/source4/selftest/tests.py @@ -789,7 +789,7 @@ planoldpythontestsuite("ad_dc:local", "samba.tests.dckeytab", extra_args=['-U"$U have_fast_support = int('SAMBA_USES_MITKDC' in config_hash) tkt_sig_support = int('SAMBA4_USES_HEIMDAL' in config_hash) -expect_pac = 0 +expect_pac = int('SAMBA4_USES_HEIMDAL' in config_hash) planoldpythontestsuite("none", "samba.tests.krb5.kcrypto") planoldpythontestsuite("ad_dc_default", "samba.tests.krb5.simple_tests", environ={'SERVICE_USERNAME':'$SERVER',