tests/krb5: Check properties of current GKDI key

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/tests/krb5/gkdi_tests.py b/python/samba/tests/krb5/gkdi_tests.py
index 51d70a90bc4b55928c77d04a5236f0efa61796ee..b94447de9933de3abc22885531c1dd663a63050b 100755 (executable)
--- a/python/samba/tests/krb5/gkdi_tests.py
+++ b/python/samba/tests/krb5/gkdi_tests.py
@@ -113,7 +113,11 @@ class GkdiExplicitRootKeyTests(GkdiKdcBaseTest):
         # It actually doesn’t matter what we specify for the L1 and L2 indices.
         # We’ll get the same result regardless — they just cannot specify a key
         # from the future.
-        self.check_rpc_get_key(root_key_id, self.current_gkid())
+        current_gkid = self.current_gkid()
+        key = self.check_rpc_get_key(root_key_id, current_gkid)
+
+        self.assertEqual(current_gkid, key.gkid)
+        self.assertEqual(root_key_id, key.root_key_id)
 
     def test_previous_l0_idx(self):
         """Request a key with a previous L0 index."""