tests/krb5: Don’t reuse SID S-1-2-3-4

We’re already using it in ‘client_sids’ to work around a bug in Windows.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/tests/krb5/conditional_ace_tests.py b/python/samba/tests/krb5/conditional_ace_tests.py
index c51ffb85d2ed8638dc83b5f566b2866064ad28c5..017720338a8f247f0edf6ed6955f26dc88b8406c 100755 (executable)
--- a/python/samba/tests/krb5/conditional_ace_tests.py
+++ b/python/samba/tests/krb5/conditional_ace_tests.py
@@ -4482,8 +4482,8 @@ class TgsReqServicePolicyTests(ConditionalAceBaseTests):
             ('S-1-2-3-4', SidType.EXTRA_SID, self.default_attrs),
         }
 
-        device_sid_0 = 'S-1-2-3-4'
-        device_sid_1 = 'S-1-3-4-5'
+        device_sid_0 = 'S-1-3-4-5'
+        device_sid_1 = 'S-1-4-5-6'
 
         policy_sids = {
             'device_0': device_sid_0,
@@ -4592,8 +4592,8 @@ class TgsReqServicePolicyTests(ConditionalAceBaseTests):
             expected_device_sids = {
                 (security.DOMAIN_RID_USERS, SidType.BASE_SID, self.default_attrs),
                 (security.DOMAIN_RID_USERS, SidType.PRIMARY_GID, None),
-                ('S-1-2-3-4', SidType.EXTRA_SID, self.resource_attrs),
                 ('S-1-3-4-5', SidType.EXTRA_SID, self.resource_attrs),
+                ('S-1-4-5-6', SidType.EXTRA_SID, self.resource_attrs),
             }
 
             if device_claims_valid: