diff options
| author | Gary Lockyer <gary@catalyst.net.nz> | 2026-03-26 13:39:45 +1300 |
|---|---|---|
| committer | Gary Lockyer <gary@samba.org> | 2026-03-30 23:37:36 +0000 |
| commit | f9ca5b75f82e8efbeebdc8520114a5d89dcbbf00 (patch) | |
| tree | f4ecb94d8b98a7012ee90a032648e767ee2e2943 /python/samba | |
| parent | b79df27457e78ec2e8e301865c553fb76a596f9d (diff) | |
| download | samba-f9ca5b75f82e8efbeebdc8520114a5d89dcbbf00.tar.gz samba-f9ca5b75f82e8efbeebdc8520114a5d89dcbbf00.tar.bz2 samba-f9ca5b75f82e8efbeebdc8520114a5d89dcbbf00.zip | |
tests:krb5 expired password handling
The windows ADDC checks password validity before password expiry. So an
incorrect expired password will return KDC_ERR_PREAUTH_REQUIRED not
KDC_ERR_KEY_EXPIRED.
The KDC behaviour fixes will be made to lorikeet-heimdal and then imported to
samba.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=15746
Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
Diffstat (limited to 'python/samba')
| -rwxr-xr-x | python/samba/tests/krb5/as_req_tests.py | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/python/samba/tests/krb5/as_req_tests.py b/python/samba/tests/krb5/as_req_tests.py index e4e677223d5..23a1a13a3a6 100755 --- a/python/samba/tests/krb5/as_req_tests.py +++ b/python/samba/tests/krb5/as_req_tests.py @@ -707,8 +707,7 @@ class AsReqKerberosTests(AsReqBaseTest): # the uncanonicalized client is going to be found first. expected_error = KDC_ERR_C_PRINCIPAL_UNKNOWN else: - expected_error = (KDC_ERR_KEY_EXPIRED, - KDC_ERR_PREAUTH_FAILED, + expected_error = (KDC_ERR_PREAUTH_FAILED, KDC_ERR_PREAUTH_REQUIRED) self._run_as_req_enc_timestamp( |