mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 14:40:16 -05:00
Julien Rische
fb36633e69
Since commit 4ed7da378940198cf4415f86d4eb013de6ac6455 in MIT krb5, kdb5_util sets the required bits on the modification mask of updated principal entries to enable ipa-kdb to switch the active master key. This commit creates a "test_fedora_legacy" ipaplatform where the AES HMAC-SHA2 encryption types are not enabled. "test_mkey_upgrade" uses this platform to initialize a domain with an aes256-cts-hmac-sha1-96 master key, and test its upgrade to aes256-cts-hmac-sha384-192. Some parts of the test infrastructure had to be made aware of this new platform (e.g. firewall integration). Reviewed-By: Rob Crittenden <rcritten@redhat.com>
17 lines
372 B
Python
17 lines
372 B
Python
#
|
|
# Copyright (C) 2025 FreeIPA Contributors see COPYING for license
|
|
#
|
|
"""Fedora AES HMAC-SHA1 master key constants
|
|
"""
|
|
from ipaplatform.fedora.constants import FedoraConstantsNamespace, User, Group
|
|
|
|
|
|
__all__ = ("constants", "User", "Group")
|
|
|
|
|
|
class TestFedoraLegacyConstantsNamespace(FedoraConstantsNamespace):
|
|
pass
|
|
|
|
|
|
constants = TestFedoraLegacyConstantsNamespace()
|