File: //lib/python3/dist-packages/samba/tests/__pycache__/ntlm_auth.cpython-310.pyc
o
�/aO4 � @ sD d dl Z d dlmZmZ d dlmZ d dlmZ G dd� de�ZdS )� N)�Popen�PIPE)�NTLMAuthTestCase)�
get_stringc s� e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Z� ZS ) �NTLMAuthHelpersTestsc s| t t| ��� tjd | _tjd | _tjd | _t| � d| j ��}|�
d�d | _ | � | j �
d�� | j d d� | _d S ) N� DC_USERNAME� DC_PASSWORD�DOMAINz wbinfo -n %s� r z S-1-5-21-���)�superr �setUp�os�environ�username�password�domainr � check_output�split� group_sid�
assertTrue�
startswith�
bad_group_sid)�self�out�� __class__� �7/usr/lib/python3/dist-packages/samba/tests/ntlm_auth.pyr
s zNTLMAuthHelpersTests.setUpc C s` d}d}d}| j ||||||dd�}| �|� d}d}d}| j ||||||dd�}| �|� dS )z! ntlm_auth with specified domain �foo�secret�FOOF)�client_username�client_password�
client_domain�server_username�server_password�
server_domain�server_use_winbind�fOoN��
run_helperr �r r r r �retr r r �test_specified_domain$ s0 �
�z*NTLMAuthHelpersTests.test_specified_domainc C s& | j | j| j| jdd�}| �|� dS )z ntlm_auth against winbindd T)r" r# r$ r( N�r+ r r r r �r r- r r r �test_against_winbindA s �z)NTLMAuthHelpersTests.test_against_winbindc C �6 d}d}d}| j ||||||dddd� }| �|� dS ) z5 ntlm_auth with NTLMSSP client and gss-spnego server r r r) �ntlmssp-client-1�
gss-spnegoF� r" r# r$ r% r& r' �
client_helper�
server_helperr( Nr* r, r r r �test_ntlmssp_gss_spnegoJ � � z,NTLMAuthHelpersTests.test_ntlmssp_gss_spnegoc C r2 ) z@ ntlm_auth with NTLMSSP gss-spnego-client and gss-spnego server r r r) �gss-spnego-clientr4 Fr5 Nr* r, r r r �test_gss_spnego\ r9 z$NTLMAuthHelpersTests.test_gss_spnegoc C s* | j | j| j| jdddd�}| �|� dS )zX ntlm_auth with NTLMSSP gss-spnego-client and gss-spnego server
against winbind r: r4 T)r" r# r$ r6 r7 r( Nr/ r0 r r r �test_gss_spnego_winbindn s �z,NTLMAuthHelpersTests.test_gss_spnego_winbindc C sX d| j | j| j| jf }d|g}| �|d� | j| j| j| j ddddd�}| �|� dS ) ze ntlm_auth with NTLMSSP client and gss-spnego server against
winbind with cached credentials z--ccache-save=%s%s%s%%%s�wbinfor Tr3 r4 )r" r# r$ �client_use_cached_credsr6 r7 r( N)r �winbind_separatorr r �check_exit_coder+ r )r �param� cache_cmdr- r r r �$test_ntlmssp_gss_spnego_cached_credsz s$ �� �z9NTLMAuthHelpersTests.test_ntlmssp_gss_spnego_cached_credsc C sP | j | j| j| j| jdd�}| �|� | j | j| j| j| jdd�}| �|� dS )z7 ntlm_auth against winbindd with require-membership-of T)r" r# r$ �require_membershipr( N�r+ r r r r r r � assertFalser0 r r r �test_require_membership� s �
�z,NTLMAuthHelpersTests.test_require_membershipc C sX | j | j| j| j| jdddd�}| �|� | j | j| j| j| jdddd�}| �|� dS )zs ntlm_auth with NTLMSSP gss-spnego-client and gss-spnego server
against winbind with require-membership-of r: r4 T)r" r# r$ rD r6 r7 r( NrE r0 r r r �"test_require_membership_gss_spnego� s$ �
�z7NTLMAuthHelpersTests.test_require_membership_gss_spnegoc C s� t | jd| jddgtttd�}d| j| j| j| jf }|j|� d�d�\}}| �
|j d� | � |�
d �� t | jd| jddgtttd�}d| j| j| j| jf }|j|� d�d�\}}| �
|j d� | � |�
d
�� d S ) z? ntlm_auth plaintext authentication with require-membership-of �--require-membership-of�--helper-protocolzsquid-2.5-basic��stdout�stdin�stderrz
%s%s%s %s
�utf-8��inputr s OK
s ERR
N)r �ntlm_auth_pathr r r r? r r � communicate�encode� assertEqual�
returncoder r r )r �proc�credsr �errr r r � test_plaintext_with_membership� s6 ��
����z3NTLMAuthHelpersTests.test_plaintext_with_membershipc C s, g d�}t | jddddgtttd�}d�|�}|j|�d�d �\}}| �|jd
� |�d �}| �t |�d � | �|d
d
� | �|d d� | �|d d� | �|d d� d|d
< t | jddddgtttd�}d�|�}|j|�d�d �\}}| �|jd
� |�d �}| �t |�d� | �|d
d� dS )z- ntlm_auth ntlm-server-1 with fixed password )�"LANMAN-Challenge: 0123456789abcdef�=NT-Response: 25a98c1c31e81847466b29b2df4680f39958fb8c213a9cc6zNT-Domain: TESTzUsername: testuser� Request-User-Session-Key: Yes�.
�
--password�SecREt01rJ �
ntlm-server-1rK �
rO rP r �
� � Authenticated: Yes� s2 User-Session-Key: 3F373EA8E4AF954F14FAA506F8EEBDC4� � .� � z"LANMAN-Challenge: A123456789abcdef� � Authenticated: NoN)
r rR r �joinrS rT rU rV r �len�r � ntlm_cmdsrW �bufr rY �linesr r r �&test_ntlm_server_1_with_fixed_password� s> ��
���
z;NTLMAuthHelpersTests.test_ntlm_server_1_with_fixed_passwordc C sP d| j d| j d| j ddg}t| jd| jddgtttd �}d
�|�}|j|� d �d �\}}| �
|j d
� |� d�}| �
t
|�d� | �
|d
d� | �
|d d� | �
|d d� t| jd| jddgtttd �}d
�|�}|j|� d �d �\}}| �
|j d
� |� d�}| �
t
|�d� | �
|d
d� | �
|d d� | �
|d d� dS )zA ntlm_auth ntlm-server-1 with plaintext password against winbind z Password: %s�
NT-Domain: %s� Username: %sr] r^ rI rJ ra rK rb rO rP r rc ri re rf rh rg rj rl N)r r r r rR r r rm rS rT rU rV r rn r ro r r r �)test_ntlm_server_1_with_plaintext_winbind� sD ���
��
z>NTLMAuthHelpersTests.test_ntlm_server_1_with_plaintext_winbindc C s� ddd| j d| j ddg}t| jddgtttd �}d
�|�}|j|�d �d �\}}| �|j d
� |�
d�}| �t |�d� | �|d
d� dS )zO ntlm_auth ntlm-server-1 with incorrect fixed password against
winbind r[ r\ rt ru r] r^ rJ ra rK rb rO rP r rc rk rl N) r r r rR r rm rS rT rU rV r rn ro r r r �2test_ntlm_server_1_with_incorrect_password_winbind& s$ ���
zGNTLMAuthHelpersTests.test_ntlm_server_1_with_incorrect_password_winbindc C s, | j d| jd| jd| jdg}| �|d� dS )z ntlm_auth diagnostics z
--usernamer_ z--domainz
--diagnosticsr N)rR r r r r@ )r �cmd_liner r r �test_diagnostics> s �z%NTLMAuthHelpersTests.test_diagnostics)�__name__�
__module__� __qualname__r
r. r1 r8 r; r< rC rG rH rZ rs rv rw ry �
__classcell__r r r r r s
+*r ) r �
subprocessr r �samba.tests.ntlm_auth_baser � samba.commonr r r r r r �<module> s