tests/krb5: Use consistent ordering for etypes
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Mon, 19 Dec 2022 00:43:08 +0000 (13:43 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 8 Feb 2023 00:03:40 +0000 (00:03 +0000)
commit77036bba013751021f7229f0d78011298b634501
tree852a2f7b1275482660b62d7f4ab991f29340a550
parente5a6b001fd2844bfa5fa56047fb4cc09563966c4
tests/krb5: Use consistent ordering for etypes

The 'etype' field in a Kerberos request is ordered. Make this fact
clearer by using a tuple or an array to represent etypes rather than a
set.

get_default_enctypes() now returns encryption types in order of
strength. As a consequence, the encryption type chosen by the MIT KDC
matches up with that chosen by Windows, and more tests begin to pass.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
python/samba/tests/krb5/as_req_tests.py
python/samba/tests/krb5/kdc_base_test.py
selftest/knownfail_mit_kdc
selftest/knownfail_mit_kdc_1_20