tests/krb5: Add tests for the primary group
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Thu, 15 Dec 2022 23:47:41 +0000 (12:47 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 8 Feb 2023 00:03:40 +0000 (00:03 +0000)
commit96485d8e164df24053cb5b44e88d74c177cd9f79
tree94542728b489f06cc3885587ac396eacd29992d6
parente00eeed9d2bdb97ab9bd8e7517f7ed1aa0617d43
tests/krb5: Add tests for the primary group

Primary groups are handled differently from normal groups of which a
user is simply a member. Of particular note is the case where a
domain-local group is made a primary group; a case normally disallowed
by Windows, but not by Samba. Therefore we want tests for it.

Our testing framework must be able to set the user's primary group, and
to clean up afterwards; to set the primary group RID of a PAC; and to
check that the primary group RID is as expected in the PAC returned to
us.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
python/samba/tests/krb5/group_tests.py
python/samba/tests/krb5/raw_testcase.py
selftest/knownfail_heimdal_kdc
selftest/knownfail_mit_kdc