krb5 commit: Add AD-SIGNTICKET test for renewing tickets

Greg Hudson <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.cvs
Message-ID <[email protected]>
https://github.com/krb5/krb5/commit/9a4f9ef7ea4ae19e5677da3875ff66364cc82c7d
commit 9a4f9ef7ea4ae19e5677da3875ff66364cc82c7d
Author: Greg Hudson <[email protected]>
Date:   Sun Dec 4 00:18:25 2016 -0500

    Add AD-SIGNTICKET test for renewing tickets
    
    Add another regression test for #8139 using renewed tickets.

 src/tests/t_authdata.py |    8 ++++++++
 1 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/src/tests/t_authdata.py b/src/tests/t_authdata.py
index 3352502..a531cf8 100644
--- a/src/tests/t_authdata.py
+++ b/src/tests/t_authdata.py
@@ -88,6 +88,7 @@ realm, realm2 = cross_realms(2, args=({'realm': 'LOCAL'},
 realm.run([kadminl, 'modprinc', '+requires_preauth', '-maxrenewlife', '2 days',
            realm.user_princ])
 realm.run([kadminl, 'modprinc', '-maxrenewlife', '2 days', realm.host_princ])
+realm.run([kadminl, 'modprinc', '-maxrenewlife', '2 days', realm.krbtgt_princ])
 realm.extract_keytab(realm.krbtgt_princ, realm.keytab)
 realm.extract_keytab(realm.host_princ, realm.keytab)
 realm.extract_keytab('krbtgt/FOREIGN', realm.keytab)
@@ -178,6 +179,13 @@ realm.run([kadminl, 'cpw', '-randkey', '-keepold', '-e', 'des3-cbc-sha1',
 realm.run(['./forward'])
 realm.run([kvno, realm.host_princ])
 
+# Repeat the above test using a renewed TGT.
+realm.kinit(realm.user_princ, password('user'), ['-r', '2d'])
+realm.run([kadminl, 'cpw', '-randkey', '-keepold', '-e', 'aes128-cts',
+           realm.krbtgt_princ])
+realm.kinit(realm.user_princ, None, ['-R'])
+realm.run([kvno, realm.host_princ])
+
 realm.stop()
 realm2.stop()
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.