From e82e1b31e39631f6603be6d14debf79d2d9b16cd Mon Sep 17 00:00:00 2001 From: Tim Beale Date: Wed, 16 Jan 2019 12:12:16 +1300 Subject: [PATCH] tests: Use MUST_USE_KERBEROS over AUTO_USE_KERBEROS in auth_log tests The s3 SMB client bindings seem slightly different to s4, in that they default to setting the CLI_FULL_CONNECTION_FALLBACK_AFTER_KERBEROS flag. This seems to fallback to finding a valid KRB TGT (from a previous successful test), which results in the connection succeeding rather than failing. Setting MUST_USE_KERBEROS explicitly avoids this behaviour. Signed-off-by: Tim Beale Reviewed-by: Jeremy Allison --- python/samba/tests/auth_log.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/python/samba/tests/auth_log.py b/python/samba/tests/auth_log.py index 29976aecbee8..9c93589638e1 100644 --- a/python/samba/tests/auth_log.py +++ b/python/samba/tests/auth_log.py @@ -752,6 +752,7 @@ class AuthLogTests(samba.tests.auth_log_base.AuthLogTestBase): "ENC-TS Pre-authentication")) creds = self.insta_creds(template=self.get_credentials()) + creds.set_kerberos_state(MUST_USE_KERBEROS) creds.set_password("badPassword") thrown = False @@ -784,6 +785,7 @@ class AuthLogTests(samba.tests.auth_log_base.AuthLogTestBase): EVT_LOGON_NETWORK)) creds = self.insta_creds(template=self.get_credentials()) + creds.set_kerberos_state(MUST_USE_KERBEROS) creds.set_username("badUser") thrown = False -- 2.34.1