From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Wed, 20 Oct 2021 02:48:35 +0000 (+1300)
Subject: CVE-2020-25718 tests/krb5: Allow tests accounts to replicate to RODC
X-Git-Tag: ldb-2.5.0~284
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=f7f49db72223478b64f1d2aa07a160737f95629a;p=thirdparty%2Fsamba.git

CVE-2020-25718 tests/krb5: Allow tests accounts to replicate to RODC

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14558

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/python/samba/tests/krb5/rodc_tests.py b/python/samba/tests/krb5/rodc_tests.py
index 302ae865cf1..0e252d90262 100755
--- a/python/samba/tests/krb5/rodc_tests.py
+++ b/python/samba/tests/krb5/rodc_tests.py
@@ -41,11 +41,13 @@ class RodcKerberosTests(KDCBaseTest):
         user_creds = self.get_cached_creds(
             account_type=self.AccountType.USER,
             opts={
+                'allowed_replication': True,
                 'revealed_to_rodc': True
             })
         target_creds = self.get_cached_creds(
             account_type=self.AccountType.COMPUTER,
             opts={
+                'allowed_replication': True,
                 'revealed_to_rodc': True
             })