CVE-2022-37966 tests/krb5: Add a test requesting tickets with various encryption...
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Tue, 25 Oct 2022 06:32:27 +0000 (19:32 +1300)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 13:07:29 +0000 (13:07 +0000)
commit177334c04230d0ad74bfc2b6825ffbebd5afb9af
tree9c3b97d0897ecd65138161a17b40d9bddb037a58
parente0a91dddc4a6c70d7425c2c6836dcf2dd6d9a2de
CVE-2022-37966 tests/krb5: Add a test requesting tickets with various encryption types

The KDC should leave the choice of ticket encryption type up to the
target service, and admit no influence from the client.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
python/samba/tests/krb5/etype_tests.py [new file with mode: 0755]
python/samba/tests/krb5/kdc_tgs_tests.py
python/samba/tests/usage.py
selftest/knownfail_heimdal_kdc
selftest/knownfail_mit_kdc
source4/selftest/tests.py