From: Greg Hudson <ghudson@mit.edu>
Date: Sun, 4 Dec 2016 05:18:25 +0000 (-0500)
Subject: Add AD-SIGNTICKET test for renewing tickets
X-Git-Tag: krb5-1.16-beta1~186
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F574%2Fhead;p=thirdparty%2Fkrb5.git

Add AD-SIGNTICKET test for renewing tickets

Add another regression test for #8139 using renewed tickets.
---

diff --git a/src/tests/t_authdata.py b/src/tests/t_authdata.py
index 33525022ba..a531cf81af 100644
--- a/src/tests/t_authdata.py
+++ b/src/tests/t_authdata.py
@@ -88,6 +88,7 @@ realm, realm2 = cross_realms(2, args=({'realm': 'LOCAL'},
 realm.run([kadminl, 'modprinc', '+requires_preauth', '-maxrenewlife', '2 days',
            realm.user_princ])
 realm.run([kadminl, 'modprinc', '-maxrenewlife', '2 days', realm.host_princ])
+realm.run([kadminl, 'modprinc', '-maxrenewlife', '2 days', realm.krbtgt_princ])
 realm.extract_keytab(realm.krbtgt_princ, realm.keytab)
 realm.extract_keytab(realm.host_princ, realm.keytab)
 realm.extract_keytab('krbtgt/FOREIGN', realm.keytab)
@@ -178,6 +179,13 @@ realm.run([kadminl, 'cpw', '-randkey', '-keepold', '-e', 'des3-cbc-sha1',
 realm.run(['./forward'])
 realm.run([kvno, realm.host_princ])
 
+# Repeat the above test using a renewed TGT.
+realm.kinit(realm.user_princ, password('user'), ['-r', '2d'])
+realm.run([kadminl, 'cpw', '-randkey', '-keepold', '-e', 'aes128-cts',
+           realm.krbtgt_princ])
+realm.kinit(realm.user_princ, None, ['-R'])
+realm.run([kvno, realm.host_princ])
+
 realm.stop()
 realm2.stop()