File: //lib/python3/dist-packages/samba/tests/__pycache__/auth_log.cpython-310.pyc
o
�\ e| � @ s� d Z ddlZddlmZmZ ddlZddlmZ ddlm
Z ddl m
Z
ddlZddlmZmZ ddlmZ dd lmZ dd
lmZ dd lmZmZmZmZm Z ddl Z G d d
� d
ej j j �Z!dS )z&Tests for the Auth and AuthZ logging.
� N)�srvsvc� dnsserver)�libsmb_samba_internal)�param)�SamDB)�DONT_USE_KERBEROS�MUST_USE_KERBEROS)�
NTSTATUSError)�call)�LdbError)�EVT_ID_SUCCESSFUL_LOGON�EVT_ID_UNSUCCESSFUL_LOGON�EVT_LOGON_NETWORK�EVT_LOGON_INTERACTIVE� EVT_LOGON_NETWORK_CLEAR_TEXTc s� e Zd Z� fdd�Z� fdd�Z dudd�Zd d
� Zd d � Zd
d� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Zd5d6� Z d7d8� Z d9d:� Z d;d<� Z d=d>� Z d?d@� Z!dAdB� Z"dCdD� Z#dEdF� Z$dGdH� Z%dIdJ� Z&dKdL� Z'dMdN� Z(dOdP� Z)dQdR� Z*dSdT� Z+dUdV� Z,dWdX� Z-dYdZ� Z.d[d\� Z/d]d^� Z0d_d`� Z1dadb� Z2dcdd� Z3dedf� Z4dgdh� Z5didj� Z6dkdl� Z7dmdn� Z8dodp� Z9dqdr� Z:dsdt� Z;� Z<S )v� AuthLogTestsc s t t| ��� tjd | _d S )N� CLIENT_IP)�superr �setUp�os�environ�
remoteAddress��self�� __class__� �6/usr/lib/python3/dist-packages/samba/tests/auth_log.pyr + s zAuthLogTests.setUpc s t t| ��� d S �N)r r �tearDownr r r r r / s zAuthLogTests.tearDown�yesFc C sJ | � � }t�� }|�|j� |�d|� |�d|� tj| jd|||d�S )Nzclient use spnegozclient ntlmv2 auth�sysvol)�lp�creds�
force_smb1) � get_loadparm�s3param� get_context�load�
configfile�set�libsmb�Conn�server)r r# �
use_spnego� ntlmv2_authr$ r" �s3_lpr r r �smb_connection2 s �zAuthLogTests.smb_connectionc
s� � ��fdd�}|rd| }�dkr!t � d| j|f | �� |�}n�dkr3t�d| j|f | �� |�}| �||�} || � �|�� d S )Nc sP | d dko'| d d dkp| d d �ko'| d d � d ko'| d d �kS �N�type�
Authorization�serviceDescription�DCE/RPC�authTyper �transportProtectionr ��msg�� authTypes�
protection�servicer r �isLastExpectedMessageB s ���z>AuthLogTests._test_rpc_ncacn_np.<locals>.isLastExpectedMessage�[%s]r z
ncacn_np:%s%sr �r r- r% r �waitForMessages)
r r< r# r> �bindingr= �
checkFunctionr? �x�messagesr r; r �_test_rpc_ncacn_np@ s �� z AuthLogTests._test_rpc_ncacn_npc C sb t tdd� t�d��|���}d|v r| �|d� d S d|v r'| �|d� d S | �|ddg� d S )Nc S s | S r r )rE r r r �<lambda>_ s zBAuthLogTests._assert_ncacn_np_serviceDescription.<locals>.<lambda>z[\[,\]]�smb2�SMB2�smb1�SMB)�list�filter�re�compile�split� assertEqual�assertIn)r rC r5 � binding_listr r r �#_assert_ncacn_np_serviceDescriptionZ s �z0AuthLogTests._assert_ncacn_np_serviceDescriptionc s� t |�}| �|t |�d� |d }| �d|d � | �d|d d � | �t|d d � | �t|d d � | �||d d � | �|d
|d d � |d
}| �d |d � | �||d d � | �|d
|d d � | �d|d d � | �| �|d d �� |dkr҇ fdd�}|d
}| �d|d � | �d|d d � | �||d d �� | �|d |d d � | �t|d d � | �t|d d � d S d S )N�/Did not receive the expected number of messagesr �Authenticationr3 � NT_STATUS_OK�status�eventId� logonTyper5 � �authDescriptionr4 � r7 rL r8 � sessionId� c s | dkp| � kS )Nr6 r )�desc�r> r r �checkServiceDescription� s zEAuthLogTests.rpc_ncacn_np_ntlm_check.<locals>.checkServiceDescription� ��lenrR r r rU �
assertTrue�is_guid) r rF r< r> rC r= �expected_messagesr: rc r rb r �rpc_ncacn_np_ntlm_checki s` � � � �
� �
��
� � ��z$AuthLogTests.rpc_ncacn_np_ntlm_checkc C s� t |�}| �|t |�d� |d }| �d|d � | �d|d d � | �d|d d � | �|d |d d
� | �t|d d � | �t|d d � |d }| �d|d � | �d|d d � | �d|d d � | �|d
|d d
� | �t|d d � | �t|d d � |d
}| �d|d � | �||d d � | �|d |d d � | �d|d d � | �| �|d d �� d S )NrV r rW r3 rX rY � Kerberos KDCr5 r\ r] rZ r[ r^ r4 rd r7 rL r8 r_ re �r rF r< r> rC r= ri r: r r r �rpc_ncacn_np_krb5_check� sV �
�
� � �
�
� � � � z$AuthLogTests.rpc_ncacn_np_krb5_checkc C �0 | j | �� td�}| �g d�|ddd| j� d S )N��template�kerberos_state��NTLMSSPrs rs rs r �sign�SIGN�� insta_creds�get_credentialsr rG rj �r r# r r r � test_rpc_ncacn_np_ntlm_dns_sign� �
�
�z,AuthLogTests.test_rpc_ncacn_np_ntlm_dns_signc C rn )Nro rr r rt ru rv ry r r r � test_rpc_ncacn_np_ntlm_srv_sign� r{ z,AuthLogTests.test_rpc_ncacn_np_ntlm_srv_signc C rn )Nro ��ncacn_nprs rs r � rL rv ry r r r �test_rpc_ncacn_np_ntlm_dns� �
�
�z'AuthLogTests.test_rpc_ncacn_np_ntlm_dnsc C rn )Nro r} r r rL rv ry r r r �test_rpc_ncacn_np_ntlm_srv� r� z'AuthLogTests.test_rpc_ncacn_np_ntlm_srvc C rn )Nro ��krb5�ENC-TS Pre-authenticationr� r� r rt ru �rw rx r rG rm ry r r r � test_rpc_ncacn_np_krb_dns_sign� r{ z+AuthLogTests.test_rpc_ncacn_np_krb_dns_signc C rn )Nro r� r rt ru r� ry r r r � test_rpc_ncacn_np_krb_srv_sign� r{ z+AuthLogTests.test_rpc_ncacn_np_krb_srv_signc C rn )Nro �r~ r� r� r� r r rL r� ry r r r �test_rpc_ncacn_np_krb_dns r{ z&AuthLogTests.test_rpc_ncacn_np_krb_dnsc C rn )Nro r� r rI rL r� ry r r r � test_rpc_ncacn_np_krb_dns_smb2 r{ z+AuthLogTests.test_rpc_ncacn_np_krb_dns_smb2c C rn )Nro r� r r rL r� ry r r r �test_rpc_ncacn_np_krb_srv r{ z&AuthLogTests.test_rpc_ncacn_np_krb_srvc
s� � �fdd�}|r
d| }|dkr t � d| j|f | �� |�}n|dkr2t�d| j|f | �� |�}| �||�} || � ||�� d S )Nc s@ | d dko | d d dko | d d � d ko | d d �kS r2 r r9 �r< r= r r r? ) s ���zBAuthLogTests._test_rpc_ncacn_ip_tcp.<locals>.isLastExpectedMessager@ r zncacn_ip_tcp:%s%sr rA )
r r< r# r> rC r= rD r? �connrF r r� r �_test_rpc_ncacn_ip_tcp' s �� z#AuthLogTests._test_rpc_ncacn_ip_tcpc C s t |�}| �|t |�d� |d }| �d|d � | �d|d d � | �|d |d d � | �d |d d
� | �| �|d d �� |d }| �d |d � | �d
|d d � | �d|d d � | �|d |d d � | �t|d d � | �t|d d � d S )NrV r r4 r3 r6 r5 r\ r7 �NONEr8 r_ rW rX rY r^ r] rZ r[ �rf rR rg rh r r rl r r r �rpc_ncacn_ip_tcp_ntlm_check? s8 �
�
�
� � �z(AuthLogTests.rpc_ncacn_ip_tcp_ntlm_checkc C s� t |�}| �|t |�d� |d }| �d|d � | �d|d d � | �|d |d d � | �d |d d
� | �| �|d d �� |d }| �d |d � | �d
|d d � | �d|d d � | �|d |d d � | �t|d d � | �t|d d � |d }| �d |d � | �d
|d d � | �d|d d � | �|d |d d � | �t|d d � | �t|d d � d S )NrV r r4 r3 r6 r5 r\ r7 r� r8 r_ rW rX rY rk r^ r] rZ r[ r� rl r r r �rpc_ncacn_ip_tcp_krb5_check] sV �
�
�
� � �
�
� � �z(AuthLogTests.rpc_ncacn_ip_tcp_krb5_checkc C rn )Nro �rs � ncacn_ip_tcprs r rt ru �rw rx r r� r� ry r r r �#test_rpc_ncacn_ip_tcp_ntlm_dns_sign� r� z0AuthLogTests.test_rpc_ncacn_ip_tcp_ntlm_dns_signc C rn )Nro �r� r� r� r� r rt ru �rw rx r r� r� ry r r r �#test_rpc_ncacn_ip_tcp_krb5_dns_sign� r{ z0AuthLogTests.test_rpc_ncacn_ip_tcp_krb5_dns_signc C rn )Nro r� r r ru r� ry r r r � test_rpc_ncacn_ip_tcp_ntlm_dns� r� z+AuthLogTests.test_rpc_ncacn_ip_tcp_ntlm_dnsc C rn )Nro r� r r ru r� ry r r r � test_rpc_ncacn_ip_tcp_krb5_dns� r{ z+AuthLogTests.test_rpc_ncacn_ip_tcp_krb5_dnsc C rn )Nro r� r �connectr� r� ry r r r �&test_rpc_ncacn_ip_tcp_ntlm_dns_connect� r� z3AuthLogTests.test_rpc_ncacn_ip_tcp_ntlm_dns_connectc C rn )Nro r� r r� r� r� ry r r r �&test_rpc_ncacn_ip_tcp_krb5_dns_connect� r{ z3AuthLogTests.test_rpc_ncacn_ip_tcp_krb5_dns_connectc C rn )Nro r� r �seal�SEALr� ry r r r �#test_rpc_ncacn_ip_tcp_ntlm_dns_seal� r� z0AuthLogTests.test_rpc_ncacn_ip_tcp_ntlm_dns_sealc C rn )Nro r� r r� r� r� ry r r r �#test_rpc_ncacn_ip_tcp_krb5_dns_seal� r{ z0AuthLogTests.test_rpc_ncacn_ip_tcp_krb5_dns_sealc C sn dd� }t dtjd | �� | �� d�| _| �|�}| �dt|�d� |d }| �d |d
� | �d |d d � | �d
|d d � | �d|d d � | � |d d dk� | �t
|d d � | �t |d d � |d }| �d |d
� | �d |d d � | �d
|d d � | �d|d d � | � |d d dk� | �t
|d d � | �t |d d � d S )Nc S �< | d dko | d d dko | d d dko | d d dkS ) Nr3 r4 r5 �LDAPr8 r� r7 r� r r9 r r r r? � � ���z5AuthLogTests.test_ldap.<locals>.isLastExpectedMessage� ldap://%s�SERVER��urlr" � credentialsrd rV r rW r3 rX rY rk r5 r� r] �durationrZ r[ r\ � r r r r% rx �samdbrB rR rf rg r r �r r? rF r: r r r � test_ldap� sT �
�
�
� � �
�
� � �zAuthLogTests.test_ldapc C s� dd� }t dtjd | �� | �� d�| _| �|�}| �dt|�d� |d }| �d |d
� | �d |d d � | �d
|d d � | �d|d d � | � |d d dk� | �t
|d d � | �t |d d � d S )Nc S r� ) Nr3 r4 r5 r� r8 r� r7 rs r r9 r r r r? r� z:AuthLogTests.test_ldap_ntlm.<locals>.isLastExpectedMessager� � SERVER_IPr� r^ rV r rW r3 rX rY r� r5 rs r] r� rZ r[ r� r� r r r �test_ldap_ntlm s0 �
�
� � �zAuthLogTests.test_ldap_ntlmc C s� dd� }| j | �� d�}|�d|�� |�� f � tdtjd | �� |d�| _ | �
|�}| � dt |�d � |d
}| � d |d � | � d
|d d � | � d|d d � | � d|d d � | � t
|d d � | � t|d d � d S )Nc S r� ) Nr3 r4 r5 r� r8 �TLSr7 z simple bindr r9 r r r r? r� zAAuthLogTests.test_ldap_simple_bind.<locals>.isLastExpectedMessage�rp �%s\%s�
ldaps://%sr� r� r^ rV r rW r3 rX rY r� r5 �simple bind/TLSr] rZ r[ )rw rx � set_bind_dn�
get_domain� get_usernamer r r r% r� rB rR rf r r �r r? r# rF r: r r r �test_ldap_simple_bind s: ��
�
�
� � �z"AuthLogTests.test_ldap_simple_bindc C s� dd� }| j | �� d�}|�d� |�d|�� |�� f � d}ztdtjd | � � |d �| _
W n t y< d
}Y nw | � |d
� | �
|�}| � d t|�d � d S )
Nc S �\ | d dko-| d d dko-| d d dko-| d d dko-| d d t ko-| d d
tkS ) Nr3 rW r5 r� rY �NT_STATUS_WRONG_PASSWORDr] r� rZ r[ �r
r r9 r r r r? @ �& �
��
��
��
��zNAuthLogTests.test_ldap_simple_bind_bad_password.<locals>.isLastExpectedMessager� � badPasswordr� Fr� r� r� Tr\ rV )rw rx � set_passwordr� r� r� r r r r% r� r rR rB rf �r r? r# �thrownrF r r r �"test_ldap_simple_bind_bad_password? s*
� � �
�z/AuthLogTests.test_ldap_simple_bind_bad_passwordc C � dd� }| j | �� d�}|�d|�� df � d}ztdtjd | �� |d �| _W n t y5 d
}Y nw | �
|d
� | � |�}| �
d t |�d � d S )
Nc S r� � Nr3 rW r5 r� rY �NT_STATUS_NO_SUCH_USERr] r� rZ r[ r� r9 r r r r? ` r� zJAuthLogTests.test_ldap_simple_bind_bad_user.<locals>.isLastExpectedMessager� r� �badUserFr� r� r� Tr\ rV �
rw rx r� r� r r r r% r� r rR rB rf r� r r r � test_ldap_simple_bind_bad_user_ �$ � �
�z+AuthLogTests.test_ldap_simple_bind_bad_userc C r� )
Nc S r� r� r� r9 r r r r? ~ r� zRAuthLogTests.test_ldap_simple_bind_unparseable_user.<locals>.isLastExpectedMessager� r� �abdcefFr� r� r� Tr\ rV r� r� r r r �&test_ldap_simple_bind_unparseable_user} r� z3AuthLogTests.test_ldap_simple_bind_unparseable_userc C s^ dd� }| j | �� d�}|�� tdtjd | �� |d�| _| �|�}| � dt
|�d� d S ) Nc S s dS )NTr r9 r r r r? � s zPAuthLogTests.test_ldap_anonymous_access_bind_only.<locals>.isLastExpectedMessager� r� r� r� r rV ) rw rx �
set_anonymousr r r r% r� rB rR rf �r r? r# rF r r r �$test_ldap_anonymous_access_bind_only� s �
�z1AuthLogTests.test_ldap_anonymous_access_bind_onlyc C s� dd� }| j | �� d�}|�� tdtjd | �� |d�| _z| jj| j� � d� | �
d� W n t y9 Y nw | � |�}| �
d t|�d
� d S ) Nc S �L | d dko%| d d dko%| d d dko%| d d dko%| d d d
kS ) Nr3 r4 r5 r� r8 r� �account�ANONYMOUS LOGONr7 zno bindr r9 r r r r? � � ����zFAuthLogTests.test_ldap_anonymous_access.<locals>.isLastExpectedMessager� r� r� r� )�basez Expected an LdbError exceptionr\ rV )rw rx r� r r r r% r� �search� domain_dn�failr rB rR rf r� r r r �test_ldap_anonymous_access� s$ � �
�z'AuthLogTests.test_ldap_anonymous_accessc C s: dd� }| j | �� d�}| �|� | �|�}| �dt|�d� |d }| �d|d � | �d |d d
� | �d |d d � | �d
|d d � | �t|d d � | �t|d d � |d }| �d|d � | �d |d d
� | �d |d d � | �d
|d d � | �t|d d � | �t|d d � d S )Nc S �< | d dko d| d d v o | d d dko | d d dkS )Nr3 r4 rL r5 r7 r� r8 r r9 r r r r? � r� z4AuthLogTests.test_smb.<locals>.isLastExpectedMessager� rd rV r rW r3 rX rY rk r5 r� r] rZ r[ r\ )rw rx r1 rB rR rf r r r� r r r �test_smb� sL
�
�
�
�
�
�
�
�
�zAuthLogTests.test_smbc C � dd� }| j | �� d�}|�t� |�d� d}z| �|� W n ty* d}Y nw | �|d� | �|�}| �dt |�d� d S ) Nc S r� ) Nr3 rW r5 rk rY r� r] r� r r9 r r r r? � s
��
��
��zAAuthLogTests.test_smb_bad_password.<locals>.isLastExpectedMessager� r� FTr\ rV )
rw rx �set_kerberos_stater r� r1 r rR rB rf r� r r r �test_smb_bad_password� s
�
�z"AuthLogTests.test_smb_bad_passwordc C r� ) Nc S r� ) Nr3 rW r5 rk rY r� r] r� rZ r[ �r
r r9 r r r r? s*
��
��
��
��
��z=AuthLogTests.test_smb_bad_user.<locals>.isLastExpectedMessager� r� FTr\ rV )
rw rx r� r � set_usernamer1 r rR rB rf r� r r r �test_smb_bad_user
s
�
�z AuthLogTests.test_smb_bad_userc C � dd� }t jd }d| }d}td||ddg� | �|�}| �d t|�d
� |d }| �d |d
� | �d|d d � | �d|d d � | �d|d d � | �d|d d � | �t|d d � | �t|d d � |d }| �d |d
� | �d|d d � | �d|d d � | �d|d d � | �d|d d � | �d|d d � | �t|d d � | �t|d d � d S ) Nc S sL | d dko%| d d dko%| d d dko%| d d dko%| d d dkS )
Nr3 r4 r5 rL r7 rs r� r� r8 r r9 r r r r? , r� z?AuthLogTests.test_smb1_anonymous.<locals>.isLastExpectedMessager� � //%s/IPC$�-N�
bin/smbclientz-mNT1�-c quitrd rV r rW r3 r� rY rL r5 rs r] � No-Password� passwordTyperZ r[ r\ rX r� �
becameAccount� r r r
rB rR rf r
r r �r r? r- �path�authrF r: r r r �test_smb1_anonymous+ �j
�
�
�
�
�
�
�
�
�
�
�
�
�
�z AuthLogTests.test_smb1_anonymousc C r� ) Nc S r� ) Nr3 r4 r5 rJ r7 rs r� r� r8 rL r r9 r r r r? a r� z?AuthLogTests.test_smb2_anonymous.<locals>.isLastExpectedMessager� r� r� r� z-mSMB3r� rd rV r rW r3 r� rY rJ r5 rs r] r� r� rZ r[ r\ rX r� r� r� r� r r r �test_smb2_anonymous` r� z AuthLogTests.test_smb2_anonymousc C s� dd� }| j | �� td�}| �|� | �|�}| �dt|�d� |d }| �d|d � | �d |d d
� | �|d d d d
g� | �d|d d � | �d|d d � | �t|d d � | �t |d d � d S )Nc S r� )Nr3 r4 rL r5 r7 rs r8 r r9 r r r r? � r� zBAuthLogTests.test_smb_no_krb_spnego.<locals>.isLastExpectedMessagero r^ rV r rW r3 rX rY r5 rL rJ rs r] �NTLMv2r� rZ r[ )
rw rx r r1 rB rR rf rS r r r� r r r �test_smb_no_krb_spnego� s8
�
��
�
�
�
�z#AuthLogTests.test_smb_no_krb_spnegoc C �z dd� }| j | �� td�}|�d� d}z| �|� W n ty& d}Y nw | �|d� | �|�}| �dt|�d� d S ) Nc S �l | d dko5d| d d v o5| d d dko5| d d dko5| d d d
ko5| d d t ko5| d d tkS )
Nr3 rW rL r5 r] rs r� r� rY r� rZ r[ r� r9 r r r r? � �& ���
��
��
��zOAuthLogTests.test_smb_no_krb_spnego_bad_password.<locals>.isLastExpectedMessagero r� FTr\ rV � rw rx r r� r1 r rR rB rf r� r r r �#test_smb_no_krb_spnego_bad_password� �"
�
�
�z0AuthLogTests.test_smb_no_krb_spnego_bad_passwordc C r� ) Nc S r� )
Nr3 rW rL r5 r] rs r� r� rY r� rZ r[ r� r9 r r r r? � r� zKAuthLogTests.test_smb_no_krb_spnego_bad_user.<locals>.isLastExpectedMessagero r� FTr\ rV � rw rx r r� r1 r rR rB rf r� r r r � test_smb_no_krb_spnego_bad_user� r� z,AuthLogTests.test_smb_no_krb_spnego_bad_userc C s� dd� }| j | �� td�}| j|dddd� | �|�}| �dt|�d� |d }| �d
|d � | �d |d
d
� | �d|d
d � | �d|d
d � | �d|d
d � | �t|d
d � | �t|d
d � d S )Nc S s< | d dko | d d dko | d d dko | d d dkS )Nr3 r4 r5 rL r7 � bare-NTLMr8 r r9 r r r r? � r� zOAuthLogTests.test_smb_no_krb_no_spnego_no_ntlmv2.<locals>.isLastExpectedMessagero T�no�r$ r/ r. r^ rV r rW r3 rX rY rL r5 r� r] �NTLMv1r� rZ r[ ) rw rx r r1 rB rR rf r r r� r r r �#test_smb_no_krb_no_spnego_no_ntlmv2� s@
��
�
�
�
�
�
�z0AuthLogTests.test_smb_no_krb_no_spnego_no_ntlmv2c C � dd� }| j | �� td�}|�d� d}z | j|dddd� W n ty* d}Y nw | �|d� | �|�}| �d t|�d
� d S ) Nc S �l | d dko5| d d dko5| d d dko5| d d dko5| d d d
ko5| d d t ko5| d d tkS )
Nr3 rW r5 rL r] r� r� r� rY r� rZ r[ r� r9 r r r r? r� z\AuthLogTests.test_smb_no_krb_no_spnego_no_ntlmv2_bad_password.<locals>.isLastExpectedMessagero r� FTr� r� r\ rV r� r� r r r �0test_smb_no_krb_no_spnego_no_ntlmv2_bad_password �*
�
� �
�z=AuthLogTests.test_smb_no_krb_no_spnego_no_ntlmv2_bad_passwordc C r ) Nc S r )
Nr3 rW r5 rL r] r� r� r� rY r� rZ r[ r� r9 r r r r? / r� zXAuthLogTests.test_smb_no_krb_no_spnego_no_ntlmv2_bad_user.<locals>.isLastExpectedMessagero r� FTr� r� r\ rV r� r� r r r �,test_smb_no_krb_no_spnego_no_ntlmv2_bad_user. r z9AuthLogTests.test_smb_no_krb_no_spnego_no_ntlmv2_bad_userc � d� � fdd�}t jd }t jd }t jd }d||� df }td d
|d |g� | �|�}| �|�}t|�}| �d |d
kp@|dkd� d S )Nr c �p | d dko7| d d dko7| d d dko7| d d dko7| d d d
� ko7| d d t ko7| d d tkS )
Nr3 rW r5 �SamLogonr] � interactiverY rX � workstation�\\%srZ r[ )r r r9 �r
r r r? R s.
��
���
��
��
��zEAuthLogTests.test_samlogon_interactive.<locals>.isLastExpectedMessager� �USERNAME�PASSWORD�samlogon %s %s %s %dr\ �
bin/rpcclient�-c�-U%Tr` � rV �r r r
rB �remove_netlogon_messagesrf �assertIs�r r? r- �user�password�samlogonrF �receivedr r r �test_samlogon_interactiveN s
�z&AuthLogTests.test_samlogon_interactivec � d� � fdd�}t jd }t jd }d}d||� df }td d
|d |g� | �|�}| �|�}t|�}| �d |d
kp=|dkd� d S )Nr c r )
Nr3 rW r5 r r] r rY r� r
r rZ r[ �r
r r9 r r r r? r �2
��
��
��
��
��
��zRAuthLogTests.test_samlogon_interactive_bad_password.<locals>.isLastExpectedMessager� r
r� r r\ r r r Tr` r rV r r r r r �&test_samlogon_interactive_bad_passwordn s
�z3AuthLogTests.test_samlogon_interactive_bad_passwordc � d� � fdd�}t jd }d}t jd }d||� df }td d
|d |g� | �|�}| �|�}t|�}| �d |d
kp=|dkd� d S )Nr c r )
Nr3 rW r5 r r] r rY r� r
r rZ r[ r r9 r r r r? � r zNAuthLogTests.test_samlogon_interactive_bad_user.<locals>.isLastExpectedMessager� r� r r r\ r r r Tr` r rV r r r r r �"test_samlogon_interactive_bad_user� s
�z/AuthLogTests.test_samlogon_interactive_bad_userc r )Nr c r �
Nr3 rW r5 r r] �networkrY rX r
r rZ r[ �r r r9 r r r r? � �*
����
��
��
��zAAuthLogTests.test_samlogon_network.<locals>.isLastExpectedMessager� r
r r r^ r r r Tr` r rV r r r r r �test_samlogon_network� s
�z"AuthLogTests.test_samlogon_networkc r )Nr c r )
Nr3 rW r5 r r] r$ rY r� r
r rZ r[ r� r9 r r r r? � �.
���
��
��
��
��zNAuthLogTests.test_samlogon_network_bad_password.<locals>.isLastExpectedMessager� r
r� r r^ r r r Tr` r rV r r r r r �"test_samlogon_network_bad_password� s
�z/AuthLogTests.test_samlogon_network_bad_passwordc r! )Nr c r )
Nr3 rW r5 r r] r$ rY r� r
r rZ r[ r� r9 r r r r? � r( zJAuthLogTests.test_samlogon_network_bad_user.<locals>.isLastExpectedMessager� r� r r r^ r r r Tr` r rV r r r r r � test_samlogon_network_bad_user� s
�z+AuthLogTests.test_samlogon_network_bad_userc r )Nr c � | d dko?| d d dko?| d d dko?| d d dko?| d d d
ko?| d d d � ko?| d d
t ko?| d d tkS )Nr3 rW r5 r r] r$ rY rX r� �MSCHAPv2r
r rZ r[ r% r9 r r r r? s.
�����
��
��
��zHAuthLogTests.test_samlogon_network_mschap.<locals>.isLastExpectedMessager� r
r � samlogon %s %s %s %d 0x00010000r^ r r r Tr` r rV r r r r r � test_samlogon_network_mschap s
�
�z)AuthLogTests.test_samlogon_network_mschapc r )Nr c r+ )Nr3 rW r5 r r] r$ rY r� r� r, r
r rZ r[ r� r9 r r r r? 4 �2
���
���
��
��
��zUAuthLogTests.test_samlogon_network_mschap_bad_password.<locals>.isLastExpectedMessager� r
r� r- r^ r r r Tr` r rV r r r r r �)test_samlogon_network_mschap_bad_password0 s
�
�z6AuthLogTests.test_samlogon_network_mschap_bad_passwordc r! )Nr c r+ )Nr3 rW r5 r r] r$ rY r� r� r, r
r rZ r[ r� r9 r r r r? V r/ zQAuthLogTests.test_samlogon_network_mschap_bad_user.<locals>.isLastExpectedMessager� r� r r- r^ r r r Tr` r rV r r r r r �%test_samlogon_network_mschap_bad_userR s
�
�z2AuthLogTests.test_samlogon_network_mschap_bad_userc �� d� � fdd�}t jd }t jd }t jd }d||� f }tdd |d
|g� | �|�}| �|�}t|�}| �d |d kp?|d
kd� |d }| �d|d � | �d|d d � | �d|d d � | �d|d d � | �| � |d d �� d S )Nr c r r# r% r9 r r r r? x r& zGAuthLogTests.test_samlogon_schannel_seal.<locals>.isLastExpectedMessager� r
r zschannel;samlogon %s %s %sr r r Tr` r rV ���r4 r3 r6 r5 �schannelr7 r� r8 r_ �
r r r
rB r rf r rR rg rh � r r? r- r r r rF r r: r r r �test_samlogon_schannel_sealt s,
�
� z(AuthLogTests.test_samlogon_schannel_sealc r2 )Nr c r r# r% r9 r r r r? � r& zGAuthLogTests.test_samlogon_schannel_sign.<locals>.isLastExpectedMessager� r
r z schannelsign;samlogon %s %s %sr r r Tr` r rV r3 r4 r3 r6 r5 r4 r7 r� r8 r_ r5 r6 r r r �test_samlogon_schannel_sign� s0
�
�
� z(AuthLogTests.test_samlogon_schannel_sign)r r F)=�__name__�
__module__� __qualname__r r r1 rG rU rj rm rz r| r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r" r' r) r* r. r0 r1 r7 r8 �
__classcell__r r r r r ) sx
�24
+
- ! "( 55 ! !! !""*r )"�__doc__� samba.tests�samba� samba.dcerpcr r r � samba.samba3r r+ r r& � samba.samdbr �samba.tests.auth_log_base�samba.credentialsr r r �
subprocessr
�ldbr � samba.dcerpc.windows_event_idsr r
r r r rO �tests�
auth_log_base�AuthLogTestBaser r r r r �<module> s