CVE-2020-25718 tests/krb5: Allow tests accounts to replicate to RODC

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14558

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/tests/krb5/rodc_tests.py b/python/samba/tests/krb5/rodc_tests.py
index 302ae865cf18db63538c9735fc1348fdcf5e894f..0e252d90262ffc9c159f35200c7770576337d87b 100755 (executable)
--- a/python/samba/tests/krb5/rodc_tests.py
+++ b/python/samba/tests/krb5/rodc_tests.py
@@ -41,11 +41,13 @@ class RodcKerberosTests(KDCBaseTest):
         user_creds = self.get_cached_creds(
             account_type=self.AccountType.USER,
             opts={
+                'allowed_replication': True,
                 'revealed_to_rodc': True
             })
         target_creds = self.get_cached_creds(
             account_type=self.AccountType.COMPUTER,
             opts={
+                'allowed_replication': True,
                 'revealed_to_rodc': True
             })