diff options
| author | Joseph Sutton <josephsutton@catalyst.net.nz> | 2021-07-27 14:49:58 +1200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2021-08-18 22:28:34 +0000 |
| commit | aa2c221f4e1bfc3403de857e62eaeaee1577560c (patch) | |
| tree | ebf66b01515a9cf52e789444acc6093769caea75 /python | |
| parent | 66e1eb58bedf036ad25a868993d44480c4e0e055 (diff) | |
| download | samba-aa2c221f4e1bfc3403de857e62eaeaee1577560c.tar.gz samba-aa2c221f4e1bfc3403de857e62eaeaee1577560c.tar.bz2 samba-aa2c221f4e1bfc3403de857e62eaeaee1577560c.zip | |
tests/krb5: Check PADATA-FX-ERROR in reply
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Diffstat (limited to 'python')
| -rw-r--r-- | python/samba/tests/krb5/raw_testcase.py | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/python/samba/tests/krb5/raw_testcase.py b/python/samba/tests/krb5/raw_testcase.py index 4ebab367141..17ef8df5daa 100644 --- a/python/samba/tests/krb5/raw_testcase.py +++ b/python/samba/tests/krb5/raw_testcase.py @@ -2316,6 +2316,7 @@ class RawKerberosTest(TestCaseInTempDir): pk_as_req = None pk_as_rep19 = None fast_cookie = None + fast_error = None fx_fast = None pac_options = None for pa in rep_padata: @@ -2355,6 +2356,11 @@ class RawKerberosTest(TestCaseInTempDir): fast_cookie = pavalue self.assertIsNotNone(fast_cookie) continue + if patype == PADATA_FX_ERROR: + self.assertIsNone(fast_error) + fast_error = pavalue + self.assertIsNotNone(fast_error) + continue if patype == PADATA_FX_FAST: self.assertIsNone(fx_fast) fx_fast = pavalue @@ -2369,6 +2375,14 @@ class RawKerberosTest(TestCaseInTempDir): if fast_cookie is not None: kdc_exchange_dict['fast_cookie'] = fast_cookie + if fast_error is not None: + fast_error = self.der_decode(fast_error, + asn1Spec=krb5_asn1.KRB_ERROR()) + self.generic_check_kdc_error(kdc_exchange_dict, + callback_dict, + fast_error, + inner=True) + if pac_options is not None: self.check_pac_options_claims_support(pac_options) |