From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Mon, 11 Oct 2021 01:48:03 +0000 (+1300)
Subject: tests/krb5: Check logon name in PAC
X-Git-Tag: ldb-2.5.0~425
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e7c39cc44f2e16aecb01c0afc195911a474ef0b9;p=thirdparty%2Fsamba.git

tests/krb5: Check logon name in PAC

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/python/samba/tests/krb5/raw_testcase.py b/python/samba/tests/krb5/raw_testcase.py
index dbcff787f70..b0cd2bfdf0f 100644
--- a/python/samba/tests/krb5/raw_testcase.py
+++ b/python/samba/tests/krb5/raw_testcase.py
@@ -2552,6 +2552,12 @@ class RawKerberosTest(TestCaseInTempDir):
                 self.assertEqual(expected_transited_services,
                                  transited_services)
 
+            elif pac_buffer.type == krb5pac.PAC_TYPE_LOGON_NAME:
+                expected_cname = kdc_exchange_dict['expected_cname']
+                account_name = expected_cname['name-string'][0]
+
+                self.assertEqual(account_name, pac_buffer.info.account_name)
+
     def generic_check_kdc_error(self,
                                 kdc_exchange_dict,
                                 callback_dict,