Merge pull request #20883 from jheysel-r7/fix/impersonate_config_check

Add validate_options check for IMPERSONATE and IMPERSONATE_TYPE in get_ticket

Author: adfoster-r7

modules/auxiliary/admin/kerberos/get_ticket.rb

@@ -134,6 +134,10 @@ def validate_options
     if datastore['SPN'].present? && !datastore['SPN'].match(%r{.+/.+})
       fail_with(Failure::BadConfig, 'SPN format must be service_name/FQDN (ex: cifs/dc01.mydomain.local)')
     end
+
+    if datastore['IMPERSONATE'].present? && datastore['IMPERSONATE_TYPE'] == 'none'
+      fail_with(Failure::BadConfig, 'IMPERSONATE_TYPE must be set to "generic", "dmsa" or "auto" when IMPERSONATE is provided')
+    end
   end
 
   def run