tests/krb5: Allow server and workstation accounts to perform a SamLogon

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/tests/krb5/kdc_base_test.py b/python/samba/tests/krb5/kdc_base_test.py
index cd4d35daff86936cbce0007bb5d1f5db5f7be7c1..8c258fe711ce585dd43e40b83430cd3bb019f0a9 100644 (file)
--- a/python/samba/tests/krb5/kdc_base_test.py
+++ b/python/samba/tests/krb5/kdc_base_test.py
@@ -3376,6 +3376,9 @@ class KDCBaseTest(RawKerberosTest):
         identity_info = netlogon.netr_IdentityInfo()
         identity_info.domain_name.string = domain
         identity_info.account_name.string = username
+        identity_info.parameter_control = (
+            netlogon.MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT) | (
+                netlogon.MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT)
         identity_info.workstation.string = workstation
 
         logon.identity_info = identity_info