mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-31 17:17:48 -05:00
ipatests: fix kdcproxy tests against AD
In recent kdcproxy commit 1773f28eeea72ec6efcd433d3b66595c44d1253f, the use of DNS discovery has been restricted to declared realms in order to mitigate CVE-2025-59088. The present commit update the TestHttpKdcProxy::test_ad_user_login_on_client_with_kdcproxy test to take this change into account. Signed-off-by: Julien Rische <jrische@redhat.com> Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
This commit is contained in:
1 parent
b7c66bf23b
commit
0aced73926
1 file changed
+1
-1
@@ -131,8 +131,8 @@ class TestHttpKdcProxy(IntegrationTest):
|
||||
with tasks.remote_ini_file(self.master, paths.KDCPROXY_CONFIG) as conf:
|
||||
conf.set('global', 'use_dns', 'true')
|
||||
conf.set('global', 'configs', 'mit')
|
||||
conf.add_section(self.ad.domain.realm)
|
||||
if use_tcp:
|
||||
conf.add_section(self.ad.domain.realm)
|
||||
conf.set(self.ad.domain.realm, 'kerberos',
|
||||
'kerberos+tcp://{}:88'.format(self.ad.hostname))
|
||||
conf.set(self.ad.domain.realm, 'kpasswd',
|
||||
|
||||
Reference in new issue
Block a user