From: Stefan Metzmacher Date: Tue, 3 Dec 2024 11:50:18 +0000 (+0100) Subject: python:tests/krb5: let set_pac_sids() replace the requester_sid X-Git-Tag: tevent-0.17.0~627 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b78af644464f283096a78f1ae0e747a03d700f1b;p=thirdparty%2Fsamba.git python:tests/krb5: let set_pac_sids() replace the requester_sid Signed-off-by: Stefan Metzmacher Reviewed-by: Ralph Boehme --- diff --git a/python/samba/tests/krb5/kdc_base_test.py b/python/samba/tests/krb5/kdc_base_test.py index 36a7300a76e..8caa635c9ad 100644 --- a/python/samba/tests/krb5/kdc_base_test.py +++ b/python/samba/tests/krb5/kdc_base_test.py @@ -1906,6 +1906,7 @@ class KDCBaseTest(TestCaseInTempDir, RawKerberosTest): new_sids, domain_sid=None, user_rid=None, + requester_sid=None, set_user_flags=0, reset_user_flags=0): if domain_sid is None: @@ -2033,8 +2034,9 @@ class KDCBaseTest(TestCaseInTempDir, RawKerberosTest): upn_dns_info_ex.objectsid = security.dom_sid( f'{domain_sid}-{user_rid}') - # But don't replace the user's SID in the Requester SID buffer, or - # we'll get a SID mismatch. + elif pac_buffer.type == krb5pac.PAC_TYPE_REQUESTER_SID: + if requester_sid is not None: + pac_buffer.info.sid = requester_sid self.assertTrue(found_logon_info, 'no LOGON_INFO PAC buffer')