File: //lib/python3/dist-packages/samba/tests/__pycache__/password_hash_gpgme.cpython-310.pyc
o
�/a�/ � @ sd d Z ddlmZmZmZmZ ddlmZ ddlm Z ddl
Z
ddl m Z ddl
Z
G dd� de�ZdS ) a
Tests for source4/dsdb/samdb/ldb_modules/password_hash.c
These tests need to be run in an environment in which
io->ac->gpg_key_ids != NULL, so that the gpg supplemental credentials
are generated. The functional level needs to be >= 2008 so that the
kerberos newer keys are generated.
� )�PassWordHashTests� get_package� USER_PASS� USER_NAME)�
ndr_unpack)�drsblobsN)�PasswordSettingsc sN e Zd Z� fdd�Zdd� Zdd� Zddd �Zd
d � Zd d
� Zdd� Z � Z
S )�PassWordHashGpgmeTestsc s t t| ��� d S �N)�superr �setUp)�self�� __class__� �A/usr/lib/python3/dist-packages/samba/tests/password_hash_gpgme.pyr + s z PassWordHashGpgmeTests.setUpc C s( | � � | j�d�s| �d� | �� }t|jj�}| �d|� t |d�\}}| �d|� | �d|j
� t |d�\}}| �d|� | �d|j
� t |d�\}}| �d |� | �d|j
� t |d
�\}}| �d |� | �d
|j
� t |d �\}}| �d|� | �d |j
� t t j
t�|j��}| �|� d S )
N�password hash gpg key ids�DNo password hash gpg key ids, Primary:SambaGPG will not be generated� �Primary:Kerberos-Newer-Keys� �Primary:Kerberos� �Primary:WDigest� �Packages� �Primary:SambaGPG)�add_user�lp�get�skipTest�get_supplemental_creds�len�sub�packages� assertEqualr �namer r �package_PrimaryWDigestBlob�binascii�a2b_hex�data�check_wdigests)r
�sc�size�pos�package�
wd_package�digestsr r r �$test_default_supplementalCredentials. s2
�z;PassWordHashGpgmeTests.test_default_supplementalCredentialsc C s| | j dd� | j�d�s| �d� | �� }t|jj�}| �d|� t |d�\}}| �d|� | �d|j
� t |d�\}}| �d |� | �d|j
� t |d
�\}}| �d |� | �d
|j
� t |d �\}}| �d
|� | �d |j
� t |d�\}}| �d|� | �d|j
� t |d�\}}| �d|� | �d|j
� t t j
t�|j��}| �|� t t jt�|j��}| �t�d�|j� d S )NT��
clear_textr r � r r r r r r �Primary:CLEARTEXTr r r r � utf-16-le)r r r r! r" r# r$ r% r& r r' r r r( r) r* r+ r, � package_PrimaryCLEARTEXTBlobr �encode� cleartext) r
r- r. r/ r0 r1 �
ct_packager2 �ctr r r �&test_supplementalCredentials_cleartextT s@
�
�z=PassWordHashGpgmeTests.test_supplementalCredentials_cleartextNc C st | � � }|r+t|d�\}}| �|dud� ttjt�|j��}| � |�
d�|j � dS t|d�}| �|du d� dS )z3Checks cleartext is (or isn't) returned as expectedr7 Nz Failed to retrieve cleartextr8 z$Got cleartext when we shouldn't have) r" r �
assertTruer r r9 r) r* r+ r& r: r; )r
�expect_cleartext�passwordr- r/ r< r= r r r �assert_cleartext� s
�
�z'PassWordHashGpgmeTests.assert_cleartextc C sL | j dd� | jdtd� td| jddd�}| �| jj|j� dt d | j }|�
|� t � d
d
�}| j�
d t |� | jdd � |�|� t � d
d
�}| j�
d t |� | jd|d� | �d� t � d
d
�}| j�
d t |� | jdd � td
| jddd�}| �| jj|j� |�
|� t � d
d
�}| j�
d t |� | jd|d� dS )z?Checks that a PSO's cleartext setting can override the domain'sTr4 )r@ rA zno-plaintext-PSO�� F)�
precedence�store_plaintextzcn=z
,cn=users,� z(sAMAccountName=%s))r@ z
plaintext-PSO�d N)r rB r r �ldb�
addCleanup�delete�dnr �base_dn�apply_to�samba�generate_random_password� setpassword�unapply�set_store_cleartext)r
�no_plaintext_pso�userdn� new_password�
plaintext_psor r r �*test_supplementalCredentials_cleartext_pso� s8 �
�
zAPassWordHashGpgmeTests.test_supplementalCredentials_cleartext_psoc C �t | j dgd� | �� }t|jj�}| �d|� t|d�\}}| �d|� | �d|j� t|d�\}}| �d|� | �d|j� t|d�\}}| �d |� | �d|j� t|d
�\}}| �d |� | �d
|j� t|d �\}}| �d
|� | �d |j� t|d�\}}| �d|� | �d|j� tt j
t � |j
��}| �|� tt jt � |j
��}| �|g d�� | �t|jj� d S )N)�"password hash userPassword schemesz#CryptSHA512 CryptSHA256 CryptSHA512��optionsr6 r r r r r r �Primary:userPasswordr r r r )��{CRYPT}�6N)r^ �5Nr] �r r" r# r$ r% r& r r' r r r( r) r* r+ r, � package_PrimaryUserPasswordBlob�checkUserPassword� checkNtHashr �current_nt_hash�hash� r
r- r. r/ r0 �
wp_package�
up_packager2 �upr r r �!test_userPassword_multiple_hashes� �>
�
�z8PassWordHashGpgmeTests.test_userPassword_multiple_hashesc C rX )N)rY zGCryptSHA512:rounds=5120 CryptSHA256:rounds=2560 CryptSHA512:rounds=5122rZ r6 r r r r r r r\ r r r r ))r^ r_ i )r^ r` i
)r^ r_ i ra rg r r r �2test_userPassword_multiple_hashes_rounds_specified� rl zIPassWordHashGpgmeTests.test_userPassword_multiple_hashes_rounds_specifiedr
) �__name__�
__module__� __qualname__r r3 r> rB rW rk rm �
__classcell__r r r r r ) s &
/-5r )�__doc__�samba.tests.password_hashr r r r � samba.ndrr � samba.dcerpcr r) �samba.tests.psor rN r r r r r �<module> s