From: Stefan Metzmacher Date: Fri, 13 Dec 2024 14:44:43 +0000 (+0100) Subject: python:tests/krb5: allow netlogon.py tests to work against a KDC with claims enabled X-Git-Tag: tdb-1.4.13~205 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6c21a74c44e573f66df8bde416e86619f27e6906;p=thirdparty%2Fsamba.git python:tests/krb5: allow netlogon.py tests to work against a KDC with claims enabled Signed-off-by: Stefan Metzmacher Reviewed-by: Jennifer Sutton --- diff --git a/python/samba/tests/krb5/netlogon.py b/python/samba/tests/krb5/netlogon.py index 108539e55ec..ac377f0b3c6 100755 --- a/python/samba/tests/krb5/netlogon.py +++ b/python/samba/tests/krb5/netlogon.py @@ -1722,8 +1722,13 @@ class NetlogonSchannel(KDCBaseTest): validation_level, expect_send_encrypted, expect_recv_encrypted) - self.assertEqual(validationEx.results, - netlogon.NETLOGON_TICKET_LOGON_FULL_SIGNATURE_PRESENT) + if validationEx.results & netlogon.NETLOGON_TICKET_LOGON_SOURCE_USER_CLAIMS: + self.assertEqual(validationEx.results, + netlogon.NETLOGON_TICKET_LOGON_SOURCE_USER_CLAIMS | + netlogon.NETLOGON_TICKET_LOGON_FULL_SIGNATURE_PRESENT) + else: + self.assertEqual(validationEx.results, + netlogon.NETLOGON_TICKET_LOGON_FULL_SIGNATURE_PRESENT) self.assertEqual(validationEx.kerberos_status[0], ntstatus.NT_STATUS_OK) self.assertEqual(validationEx.netlogon_status[0], ntstatus.NT_STATUS_OK) self.assertIsNone(validationEx.source_of_status.string) @@ -1739,8 +1744,7 @@ class NetlogonSchannel(KDCBaseTest): validation_level, expect_send_encrypted, expect_recv_encrypted) - self.assertEqual(validationWF.results, - netlogon.NETLOGON_TICKET_LOGON_FULL_SIGNATURE_PRESENT) + self.assertEqual(validationWF.results, validationEx.results) self.assertEqual(validationWF.kerberos_status[0], ntstatus.NT_STATUS_OK) self.assertEqual(validationWF.netlogon_status[0], ntstatus.NT_STATUS_OK) self.assertIsNone(validationWF.source_of_status.string)