Use etypes from keytab in krb5_gic_keytab

[krb5.git] / src / tests / t_keytab.py

diff --git a/src/tests/t_keytab.py b/src/tests/t_keytab.py
index b45bfa6d9e0a24aa34f964927ed32f707930a63d..7faf23cbf1db2cc64e2ae05bf26488676b7ce740 100644 (file)
--- a/src/tests/t_keytab.py
+++ b/src/tests/t_keytab.py
@@ -10,7 +10,12 @@ realm.kinit(realm.host_princ, flags=['-k'])
 pkeytab = realm.keytab + '.partial'
 realm.run_as_master([ktutil], input=('rkt %s\ndelent 1\nwkt %s\n' %
                                      (realm.keytab, pkeytab)))
-realm.kinit(realm.host_princ, flags=['-k', '-t', pkeytab], expected_code=1)
+realm.kinit(realm.host_princ, flags=['-k', '-t', pkeytab])
+
+# Test kinit with no keys for client in keytab.
+output = realm.kinit(realm.user_princ, flags=['-k'], expected_code=1)
+if 'no suitable keys' not in output:
+    fail('Expected error not seen in kinit output')
 
 # Test handling of kvno values beyond 255.
 princ = 'foo/bar@%s' % realm.realm