krb5 commit: Add AD-SIGNTICKET test for renewing tickets

[Greg Hudson]

https://github.com/krb5/krb5/commit/9a4f9ef7ea4ae19e5677da3875ff66364cc82c7d
commit 9a4f9ef7ea4ae19e5677da3875ff66364cc82c7d
Author: Greg Hudson <ghudson at mit.edu>
Date:   Sun Dec 4 00:18:25 2016 -0500

    Add AD-SIGNTICKET test for renewing tickets
    
    Add another regression test for #8139 using renewed tickets.

 src/tests/t_authdata.py |    8 ++++++++
 1 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/src/tests/t_authdata.py b/src/tests/t_authdata.py
index 3352502..a531cf8 100644
--- a/src/tests/t_authdata.py
+++ b/src/tests/t_authdata.py
@@ -88,6 +88,7 @@ realm, realm2 = cross_realms(2, args=({'realm': 'LOCAL'},
 realm.run([kadminl, 'modprinc', '+requires_preauth', '-maxrenewlife', '2 days',
            realm.user_princ])
 realm.run([kadminl, 'modprinc', '-maxrenewlife', '2 days', realm.host_princ])
+realm.run([kadminl, 'modprinc', '-maxrenewlife', '2 days', realm.krbtgt_princ])
 realm.extract_keytab(realm.krbtgt_princ, realm.keytab)
 realm.extract_keytab(realm.host_princ, realm.keytab)
 realm.extract_keytab('krbtgt/FOREIGN', realm.keytab)
@@ -178,6 +179,13 @@ realm.run([kadminl, 'cpw', '-randkey', '-keepold', '-e', 'des3-cbc-sha1',
 realm.run(['./forward'])
 realm.run([kvno, realm.host_princ])
 
+# Repeat the above test using a renewed TGT.
+realm.kinit(realm.user_princ, password('user'), ['-r', '2d'])
+realm.run([kadminl, 'cpw', '-randkey', '-keepold', '-e', 'aes128-cts',
+           realm.krbtgt_princ])
+realm.kinit(realm.user_princ, None, ['-R'])
+realm.run([kvno, realm.host_princ])
+
 realm.stop()
 realm2.stop()