diff options
| author | Greg Hudson <ghudson@mit.edu> | 2012-04-19 17:55:14 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2012-04-19 17:55:14 +0000 |
| commit | 8230c4b7b7323cdef2a6c877deb710a15380f40f (patch) | |
| tree | cbcf6d5238b03f9990c674e5f6026d2b7056c290 /src/tests | |
| parent | d1da158f47ea604bed4d5db5e98a976a9e54ccd0 (diff) | |
| download | krb5-8230c4b7b7323cdef2a6c877deb710a15380f40f.tar.gz krb5-8230c4b7b7323cdef2a6c877deb710a15380f40f.tar.xz krb5-8230c4b7b7323cdef2a6c877deb710a15380f40f.zip | |
Use etypes from keytab in krb5_gic_keytab
When getting initial credentials with a keytab, filter the list of
request enctypes based on the keys in the keytab.
Based on a patch from Stef Walter.
ticket: 2131
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25818 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/tests')
| -rw-r--r-- | src/tests/t_keytab.py | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/tests/t_keytab.py b/src/tests/t_keytab.py index b45bfa6d9e..7faf23cbf1 100644 --- a/src/tests/t_keytab.py +++ b/src/tests/t_keytab.py @@ -10,7 +10,12 @@ realm.kinit(realm.host_princ, flags=['-k']) pkeytab = realm.keytab + '.partial' realm.run_as_master([ktutil], input=('rkt %s\ndelent 1\nwkt %s\n' % (realm.keytab, pkeytab))) -realm.kinit(realm.host_princ, flags=['-k', '-t', pkeytab], expected_code=1) +realm.kinit(realm.host_princ, flags=['-k', '-t', pkeytab]) + +# Test kinit with no keys for client in keytab. +output = realm.kinit(realm.user_princ, flags=['-k'], expected_code=1) +if 'no suitable keys' not in output: + fail('Expected error not seen in kinit output') # Test handling of kvno values beyond 255. princ = 'foo/bar@%s' % realm.realm |