torture: Add tests to prove that kinit to an SPN is not allowed (unless it is also...
authorAndrew Bartlett <abartlet@samba.org>
Thu, 16 Nov 2017 01:01:56 +0000 (14:01 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 5 Sep 2018 09:42:23 +0000 (11:42 +0200)
commit630cc6e6268cfed08b9f21cd77181f82f36ea44b
tree5226aa0c8dcc157c9746017b033dac80743c1e6e
parent8de348e9d025d336a7985a9025fe08b7096c0394
torture: Add tests to prove that kinit to an SPN is not allowed (unless it is also a UPN)

The krb5.kdc.canon testsuite has been updated to pass against Windows
Server 1709 in four modes:

* A normal user
* A user with a UPN
* A user with an SPN (machine account)
* A user with an SPN as the UPN

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
selftest/knownfail.d/kdc [new file with mode: 0644]
source4/torture/krb5/kdc-canon-heimdal.c