From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Tue, 27 Jul 2021 02:49:12 +0000 (+1200)
Subject: tests/krb5: Check PADATA-FX-COOKIE in reply
X-Git-Tag: ldb-2.5.0~902
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=95b54078c2f82179283dfc397c4ec1f36d5edfe7;p=thirdparty%2Fsamba.git

tests/krb5: Check PADATA-FX-COOKIE in reply

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---

diff --git a/python/samba/tests/krb5/raw_testcase.py b/python/samba/tests/krb5/raw_testcase.py
index ca967c1ac13..23a4e70c22f 100644
--- a/python/samba/tests/krb5/raw_testcase.py
+++ b/python/samba/tests/krb5/raw_testcase.py
@@ -2287,6 +2287,8 @@ class RawKerberosTest(TestCaseInTempDir):
         enc_challenge = None
         pk_as_req = None
         pk_as_rep19 = None
+        fast_cookie = None
+        fx_fast = None
         for pa in rep_padata:
             patype = self.getElementValue(pa, 'padata-type')
             pavalue = self.getElementValue(pa, 'padata-value')
@@ -2319,6 +2321,19 @@ class RawKerberosTest(TestCaseInTempDir):
                 pk_as_rep19 = pavalue
                 self.assertEqual(len(pk_as_rep19), 0)
                 continue
+            if patype == PADATA_FX_COOKIE:
+                self.assertIsNone(fast_cookie)
+                fast_cookie = pavalue
+                self.assertIsNotNone(fast_cookie)
+                continue
+            if patype == PADATA_FX_FAST:
+                self.assertIsNone(fx_fast)
+                fx_fast = pavalue
+                self.assertEqual(len(fx_fast), 0)
+                continue
+
+        if fast_cookie is not None:
+            kdc_exchange_dict['fast_cookie'] = fast_cookie
 
         if enc_challenge is not None:
             if not sent_enc_challenge: