tests/krb5: Allow excluding the PAC server checksum

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14881

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit dcf45a151a198f7165cd332a26db78a5d8e8f8c5)

diff --git a/python/samba/tests/krb5/raw_testcase.py b/python/samba/tests/krb5/raw_testcase.py
index aefbdd6d7617f831408a47f704350fa7697a939a..4c1aedbca0f186b663bc010553515f29a663c1f7 100644 (file)
--- a/python/samba/tests/krb5/raw_testcase.py
+++ b/python/samba/tests/krb5/raw_testcase.py
@@ -3342,7 +3342,10 @@ class RawKerberosTest(TestCaseInTempDir):
         kdc_checksum_buffer = checksum_buffers.get(
             krb5pac.PAC_TYPE_KDC_CHECKSUM)
         if kdc_checksum_buffer is not None:
-            self.assertIsNotNone(server_checksum_buffer)
+            if server_checksum_buffer is None:
+                # There's no server signature to make the checksum over, so
+                # just make the checksum over an empty bytes object.
+                server_checksum = bytes()
 
             kdc_checksum_key = checksum_keys[krb5pac.PAC_TYPE_KDC_CHECKSUM]