krb5 commit [krb5-1.12]: Add regression test for LDAP key fencepost bug

[Tom Yu]

https://github.com/krb5/krb5/commit/78a7f2a02b82bf297817cd717f092ead40b575b2
commit 78a7f2a02b82bf297817cd717f092ead40b575b2
Author: Greg Hudson <ghudson at mit.edu>
Date:   Fri Aug 1 22:10:35 2014 -0400

    Add regression test for LDAP key fencepost bug
    
    (cherry picked from commit 0d78da225612e13d0b1cf515987305535d2f9dce)
    
    ticket: 7980
    status: resolved

 src/tests/t_kdb.py |   11 +++++++++++
 1 files changed, 11 insertions(+), 0 deletions(-)

diff --git a/src/tests/t_kdb.py b/src/tests/t_kdb.py
index 64ce682..7cd6fa6 100644
--- a/src/tests/t_kdb.py
+++ b/src/tests/t_kdb.py
@@ -285,6 +285,17 @@ realm.run([kvno, 'alias'])
 realm.kinit(realm.user_princ, flags=['-R', '-S', 'alias'])
 realm.klist(realm.user_princ, 'alias at KRBTEST.COM')
 
+# Regression test for #7980 (fencepost when dividing keys up by kvno).
+realm.run_kadminl('addprinc -randkey -e aes256-cts,aes128-cts kvnoprinc')
+realm.run_kadminl('cpw -randkey -keepold -e aes256-cts,aes128-cts kvnoprinc')
+out = realm.run_kadminl('getprinc kvnoprinc')
+if 'Number of keys: 4' not in out:
+    fail('After cpw -keepold, wrong number of keys')
+realm.run_kadminl('cpw -randkey -keepold -e aes256-cts,aes128-cts kvnoprinc')
+out = realm.run_kadminl('getprinc kvnoprinc')
+if 'Number of keys: 6' not in out:
+    fail('After cpw -keepold, wrong number of keys')
+
 realm.stop()
 
 # Briefly test dump and load.