From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Tue, 27 Jul 2021 04:25:39 +0000 (+1200)
Subject: tests/krb5: Check sname is krbtgt for FAST generic error
X-Git-Tag: ldb-2.5.0~906
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7a27b75621908a4a6449efaecb54eb20fa45aca0;p=thirdparty%2Fsamba.git

tests/krb5: Check sname is krbtgt for FAST generic error

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---

diff --git a/python/samba/tests/krb5/raw_testcase.py b/python/samba/tests/krb5/raw_testcase.py
index 8351de1e6e3..77b682e57ea 100644
--- a/python/samba/tests/krb5/raw_testcase.py
+++ b/python/samba/tests/krb5/raw_testcase.py
@@ -2146,6 +2146,8 @@ class RawKerberosTest(TestCaseInTempDir):
         expected_sname = kdc_exchange_dict['expected_sname']
         expected_error_mode = kdc_exchange_dict['expected_error_mode']
 
+        sent_fast = self.sent_fast(kdc_exchange_dict)
+
         self.assertElementEqual(rep, 'pvno', 5)
         self.assertElementEqual(rep, 'msg-type', KRB_ERROR)
         self.assertElementEqual(rep, 'error-code', expected_error_mode)
@@ -2159,7 +2161,11 @@ class RawKerberosTest(TestCaseInTempDir):
             self.assertElementMissing(rep, 'crealm')
             self.assertElementMissing(rep, 'cname')
             self.assertElementEqualUTF8(rep, 'realm', expected_srealm)
-            self.assertElementEqualPrincipal(rep, 'sname', expected_sname)
+            if sent_fast and expected_error_mode == KDC_ERR_GENERIC:
+                self.assertElementEqualPrincipal(rep, 'sname',
+                                                 self.get_krbtgt_sname())
+            else:
+                self.assertElementEqualPrincipal(rep, 'sname', expected_sname)
             self.assertElementMissing(rep, 'e-text')
         if expected_error_mode == KDC_ERR_GENERIC:
             self.assertElementMissing(rep, 'e-data')