oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

tests: ticket acquired by AS cannot be used as evidence

Browse Source
This commit is contained in:
Isaac Boukris
2021-09-23 15:07:03 +03:00
committed by Luke Howard
parent d0e6ab43bc
commit e21e2b8d14
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
tests/kdc/check-kdc.in
View File

@@ -903,6 +903,14 @@ ${kimpersonate} -s ${ps} -c bar@${R} -t ${aesenctype} || \
${kgetcred} --out-cache=${o2cache} --delegation-credential-cache=${ocache} ${server}@${R} > /dev/null 2>/dev/null && \
{ ec=1 ; eval "${testfailed}"; }
echo "test constrained delegation evidence (evidence from AS)"; > messages.log
# This fails because we don't add PAC ticket-signature in AS-REP (as Windows).
${kinit} --cache=${ocache} --password-file=${objdir}/barpassword \
--forwardable --server=${ps} bar@${R} || \
{ ec=1 ; eval "${testfailed}"; }
${kgetcred} --delegation-credential-cache=${ocache} ${server}@${R} && \
{ ec=1 ; eval "${testfailed}"; }
echo "test constrained delegation impersonation (missing PAC)"; > messages.log
rm -f ocache.krb5
${kimpersonate} -s ${ps} -c bar@${R} -t ${aesenctype} -f forwardable || \