From: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Date: Wed, 7 Jan 2026 23:13:11 +0000 (+1300)
Subject: tests: run more kdc tests with no implicit $ without canonicalization
X-Git-Tag: tdb-1.4.15~77
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f71398c194a67f9ff92d9520a66ffe7d3c7269e3;p=thirdparty%2Fsamba.git

tests: run more kdc tests with no implicit $ without canonicalization

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
---

diff --git a/selftest/knownfail.d/krb5-implicit-canon b/selftest/knownfail.d/krb5-implicit-canon
new file mode 100644
index 00000000000..7f6c7b58ea0
--- /dev/null
+++ b/selftest/knownfail.d/krb5-implicit-canon
@@ -0,0 +1,64 @@
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_NetbiosRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_NetbiosRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_NetbiosRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_NetbiosRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_NetbiosRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_NetbiosRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_NetbiosRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_NetbiosRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_NetbiosRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_NetbiosRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_NetbiosRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_NetbiosRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperUserName_NetbiosRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperUserName_NetbiosRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperUserName_NetbiosRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperUserName_NetbiosRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperUserName_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperUserName_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperUserName_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_Enterprise_UpperUserName_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_NetbiosRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_NetbiosRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_NetbiosRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_NetbiosRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_NetbiosRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_NetbiosRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_NetbiosRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_NetbiosRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UpperUserName_NetbiosRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UpperUserName_NetbiosRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UpperUserName_NetbiosRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UpperUserName_NetbiosRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UpperUserName_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UpperUserName_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UpperUserName_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperRealm_UpperUserName_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperUserName_NetbiosRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperUserName_NetbiosRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperUserName_NetbiosRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperUserName_NetbiosRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperUserName_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperUserName_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperUserName_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_canonicalization_tests\.samba\.tests\.krb5\.as_canonicalization_tests\.KerberosASCanonicalizationTests\.test_MachineCredentials_UpperUserName_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
diff --git a/selftest/knownfail_mit_kdc.d/krb5-no-dollar b/selftest/knownfail_mit_kdc.d/krb5-no-dollar
new file mode 100644
index 00000000000..2aeac48c32e
--- /dev/null
+++ b/selftest/knownfail_mit_kdc.d/krb5-no-dollar
@@ -0,0 +1,19 @@
+# We expect these ones to fail return PRINCIPAL_UNKNOWN due to the combination of
+#
+#   kdc name match implicit dollar without canonicalization = no
+#
+# in the smb.conf, and combinations of test options 
+# ("MachineCredentials", "RemoveDollar", NO "Canonicalize")
+# should cause an uncanonicalized dollar-ticket attempt.
+#
+# For some reason, MIT returns PREAUTH_REQUIRED when these options are
+# combined with "Enterprise" and "UpperRealm".
+
+^samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_tests.KerberosASCanonicalizationTests.test_MachineCredentials_Enterprise_UpperRealm_RemoveDollar\(ad_dc_ntvfs\)
+^samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_tests.KerberosASCanonicalizationTests.test_MachineCredentials_Enterprise_UpperRealm_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_tests.KerberosASCanonicalizationTests.test_MachineCredentials_Enterprise_UpperRealm_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_tests.KerberosASCanonicalizationTests.test_MachineCredentials_Enterprise_UpperRealm_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_tests.KerberosASCanonicalizationTests.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_RemoveDollar\(ad_dc_ntvfs\)
+^samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_tests.KerberosASCanonicalizationTests.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
+^samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_tests.KerberosASCanonicalizationTests.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_UPN_RemoveDollar\(ad_dc_ntvfs\)
+^samba.tests.krb5.as_canonicalization_tests.samba.tests.krb5.as_canonicalization_tests.KerberosASCanonicalizationTests.test_MachineCredentials_Enterprise_UpperRealm_UpperUserName_UPN_RemoveDollar_AsReqSelf\(ad_dc_ntvfs\)
diff --git a/selftest/knownfail_mit_kdc.d/no-implicit-dollar-canonicalization b/selftest/knownfail_mit_kdc.d/no-implicit-dollar-canonicalization
new file mode 100644
index 00000000000..af3910af71b
--- /dev/null
+++ b/selftest/knownfail_mit_kdc.d/no-implicit-dollar-canonicalization
@@ -0,0 +1,10 @@
+^samba\.tests\.krb5\.as_req_tests\.samba\.tests\.krb5\.as_req_tests\.AsReqKerberosTests\.test_logon_hours\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_req_tests\.samba\.tests\.krb5\.as_req_tests\.AsReqKerberosTests\.test_logon_hours_wrong_password\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_req_tests\.samba\.tests\.krb5\.as_req_tests\.AsReqKerberosTests\.test_pw_expired_wrong_password\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.alias_tests\.samba\.tests\.krb5\.alias_tests\.AliasTests\.test_create_alias_delete\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.alias_tests\.samba\.tests\.krb5\.alias_tests\.AliasTests\.test_create_alias_rename\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.alias_tests\.samba\.tests\.krb5\.alias_tests\.AliasTests\.test_dc_alias_delete\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.alias_tests\.samba\.tests\.krb5\.alias_tests\.AliasTests\.test_dc_alias_rename\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_req_tests\.samba\.tests\.krb5\.as_req_tests\.AsReqKerberosTests\.test_logon_hours\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_req_tests\.samba\.tests\.krb5\.as_req_tests\.AsReqKerberosTests\.test_logon_hours_wrong_password\(ad_dc_ntvfs\)
+^samba\.tests\.krb5\.as_req_tests\.samba\.tests\.krb5\.as_req_tests\.AsReqKerberosTests\.test_pw_expired_wrong_password\(ad_dc_ntvfs\)
diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py
index a55ce256790..b636a28c366 100755
--- a/source4/selftest/tests.py
+++ b/source4/selftest/tests.py
@@ -2071,6 +2071,14 @@ planpythontestsuite(
     "ad_dc_ntvfs",
     "samba.tests.krb5.alias_tests",
     environ=krb5_environ)
+planpythontestsuite(
+    "ad_dc_ntvfs",
+    "samba.tests.krb5.as_canonicalization_tests",
+    environ=krb5_environ)
+planpythontestsuite(
+    "ad_dc_ntvfs",
+    "samba.tests.krb5.as_req_tests",
+    environ=krb5_environ)
 
 
 planpythontestsuite("ad_dc", "samba.tests.krb5.as_canonicalization_tests",