File: //lib/python3/dist-packages/samba/tests/__pycache__/pso.cpython-310.pyc
o
�/a�, � @ sL d dl Z d dl mZmZmZ d dlmZmZ G dd� d�ZG dd� d�ZdS )� N)�FLAG_MOD_DELETE� FLAG_MOD_ADD�FLAG_MOD_REPLACE)�DOMAIN_PASSWORD_COMPLEX� DOMAIN_PASSWORD_STORE_CLEARTEXTc @ sV e Zd Zddd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dd� Z
dd� Z dS )�TestUserNc C sf d}|| _ || _d||p
d| j�� f | _|g| _|g| _| jj|||d� | j�d| � d | _d S )Nz
Initial12#z CN=%s,%s,%szCN=Users)�userouz(sAMAccountName=%s)) �name�ldb� domain_dn�dn�all_old_passwords� pwd_history�newuser�enable_account�last_pso)�self�username�samdbr �initial_password� r �1/usr/lib/python3/dist-packages/samba/tests/pso.py�__init__ s
�
zTestUser.__init__c C s |dkrg S | j | d� S )z0Returns the expected password history for the DCr N)r �r �hist_lenr r r �old_invalid_passwords- s z TestUser.old_invalid_passwordsc C s6 |dkr | j dd� S tt| j�|�}| j d| � S )zAReturns old passwords that fall outside the DC's expected historyr N)r
�min�lenr r r r r �old_valid_passwords5 s z TestUser.old_valid_passwordsc C sH || j v r | j �|� | j �|� || jv r | j�|� | j�|� dS )z@Updates the user's password history to reflect a password changeN)r
�remove�appendr )r � new_passwordr r r �update_pwd_historyC s
zTestUser.update_pwd_historyc C s8 | j j| jdgd�}d|d v rt|d d d �S dS )z=Returns the DN of the applicable PSO, or None if none applieszmsDS-ResultantPSO)�attrsr N)r
�searchr �str)r �resr r r �get_resultant_PSOR s zTestUser.get_resultant_PSOc C s
| j d S )z#Returns the user's current password���)r
)r r r r � get_password[ s
zTestUser.get_passwordc C s. d| j | �� |f }| j�|� | �|� dS )z$Attempts to change a user's passwordzd
dn: %s
changetype: modify
delete: userPassword
userPassword: %s
add: userPassword
userPassword: %s
N)r r) r
� modify_ldifr" )r r! �ldifr r r � set_password` s
� zTestUser.set_passwordc C sb t ||�}|dkr
g | _n|t| j�k r | j| d� | _|dkr-|dkr/| �� g| _dS dS dS )ay
Updates the effective password history, to reflect changes on the DC.
When the PasswordHistoryLength applied to a user changes from a low
setting (e.g. 2) to a higher setting (e.g. 4), passwords #3 and #4
won't actually have been stored on the DC, so we need to make sure they
are removed them from our mirror pwd_history list.
r N)r r r r) )r � old_hist_len� new_hist_lenr r r r �pwd_history_changep s
�zTestUser.pwd_history_changec C s^ | j j|dgt jd�}|d d }t �� }t �| j | j�|_t �|td�|d< | j �|� dS )z>Sets a user's primaryGroupID to be that of the specified group�primaryGroupToken)�baser# �scoper �primaryGroupIDN) r
r$ �
SCOPE_BASE�Message�Dnr �MessageElementr �modify)r �group_dnr& �group_id�mr r r �set_primary_group� s � �zTestUser.set_primary_group�N) �__name__�
__module__� __qualname__r r r r" r' r) r, r/ r< r r r r r s
r c @ sL e Zd Zdd� Z
dd d �Zd
d� Zefdd�Zdd� Zddd�Z d
S )�PasswordSettingsc C s0 g d�}|j |�� tj|d�}d| _d| _|| _d| _t|d d d �t@ | _ t|d d d �t
@ | _ t|d d d �| _ t|d d d �| _
t|d d d �| _t|d d
d �td � | _t|d d d �td � | _t|d d
d �td � | _t|d d d �td � | _dS )z�
Returns a object representing the default password settings that will
take effect (i.e. when no other Fine-Grained Password Policy applies)
) � minPwdAge�lockoutDuration�lockOutObservationWindow�lockoutThreshold� maxPwdAgerB � minPwdLength�pwdHistoryLength�
pwdProperties)r2 r# �DefaultsNr rI rG rE rH rC � �cArD rB rF )r$ r r
r4 r r �
precedence�intr �
complexityr �store_plaintext� password_len�lockout_attempts� history_len�lockout_duration�lockout_window�password_age_min�password_age_max)r r �pw_attrsr& r r r �default_settings� s( ��� � $z!PasswordSettings.default_settings�
Tr � � �' � FNc
C s� |d u r | � |�S | d u r|�� }
d|
} || _d|| f | _|| _|| _|| _| | _|| _|| _ |
| _
|| _ || _ || _
| | _| j�| �� � d S )Nz+CN=Password Settings Container,CN=System,%szCN=%s,%s)rX r r r r
rL rN rO rP rQ rR rS rT rU rV �add_ldif�get_ldif)r r r rL rN rP rQ rS rU rV rR rO � container�base_dnr r r r � s&
zPasswordSettings.__init__c
C s� | j rdnd}| jr dnd}t| jd � }t| jd � }t| jd � }t| jd � }d�| j| j || j
|| j ||| j ||� }|S )N�TRUE�FALSErK av
dn: {0}
objectClass: msDS-PasswordSettings
msDS-PasswordSettingsPrecedence: {1}
msDS-PasswordReversibleEncryptionEnabled: {2}
msDS-PasswordHistoryLength: {3}
msDS-PasswordComplexityEnabled: {4}
msDS-MinimumPasswordLength: {5}
msDS-MinimumPasswordAge: {6}
msDS-MaximumPasswordAge: {7}
msDS-LockoutThreshold: {8}
msDS-LockoutObservationWindow: {9}
msDS-LockoutDuration: {10}
)
rN rO rM rS rT rU rV �formatr rL rR rP rQ )r �complexity_str�
plaintext_strrS rT �min_age�max_ager+ r r r r^ � s
��zPasswordSettings.get_ldifc C s< t �� }t �| j | j�|_t �||d�|d< | j �|� dS )zAUpdates this Password Settings Object to apply to a user or groupzmsDS-PSOAppliesToN)r
r5 r6 r r7 r8 )r �
user_group� operationr; r r r �apply_to� s �zPasswordSettings.apply_toc C s | j |td� dS )z6Updates this PSO to no longer apply to a user or group)ri N)rj r )r rh r r r �unapply s zPasswordSettings.unapplyc C s0 |d u r| j }d| j|f }|�|� || _d S )Nzh
dn: %s
changetype: modify
replace: msDS-PasswordSettingsPrecedence
msDS-PasswordSettingsPrecedence: %u
)r
r r* rL )r �new_precedencer r+ r r r �set_precedence s �
z PasswordSettings.set_precedence)
rY TrY r rZ r r[ r\ FNr= )
r> r? r@ rX r r^ r rj rk rm r r r r rA � s
�$ rA ) r
r r r �samba.dcerpc.samrr r r rA r r r r �<module> s
|