File: //lib/python3/dist-packages/samba/tests/__pycache__/py_credentials.cpython-310.pyc
o
�/aH; � @ s� d dl mZmZ d dlZd dlZd dlmZ d dlmZm Z m
Z
m Z d dl m
Z
mZmZ d dlmZmZmZ d dlmZ d dlmZmZmZ d d lmZ d d
l m Z d d lm Z m Z d d l m!Z! d dl"Z" d
Z#dZ$G dd� de�Z%e fdd�Z&dd� Z'dS )� )�TestCase� delete_forceN)�system_session)� Credentials�CLI_CRED_NTLMv2_AUTH�CLI_CRED_NTLM_AUTH�DONT_USE_KERBEROS)�netlogon�ntlmssp�srvsvc)�netr_Authenticator�netr_WorkstationInformation�MSV1_0_ALLOW_MSVCHAPV2)�SEC_CHAN_WKSTA)� UF_WORKSTATION_TRUST_ACCOUNT�UF_PASSWD_NOTREQD�UF_NORMAL_ACCOUNT)�ndr_pack)�SamDB)�
NTSTATUSError�ntstatus)�
get_string�PCTM�PCTUc s� e Zd Z� fdd�Z� fdd�Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Z� ZS )#�PyCredentialsTestsc s� t t| ��� tjd | _tjd | _tjd | _| �� | _ | �
� | _ t � | _
td| j | j
| j | j d�| _| �� | �� d S )N�SERVER�DOMAIN� SERVER_IPz ldap://%s)�url� session_info� credentials�lp)�superr �setUp�os�environ�server�domain�host� get_loadparmr! �get_credentialsr r �sessionr �ldb�create_machine_account�create_user_account��self�� __class__� �</usr/lib/python3/dist-packages/samba/tests/py_credentials.pyr# 8 s
� zPyCredentialsTests.setUpc s. t t| ��� t| j| j� t| j| j� d S �N)r" r �tearDownr r, �
machine_dn�user_dnr/ r1 r3 r4 r6 K s zPyCredentialsTests.tearDownc C s | � t| jj� d S r5 )� assertRaises�
ValueError�
machine_creds�new_client_authenticatorr/ r3 r3 r4 �test_no_netlogon_connectionS s �z.PyCredentialsTests.test_no_netlogon_connectionc C s | � � }| j�� }| �|� d S r5 )�get_netlogon_connectionr; r< �assertIsNotNone)r0 �c�ar3 r3 r4 � test_have_netlogon_connectionZ s
z0PyCredentialsTests.test_have_netlogon_connectionc C s| | � � }| �|�\}}| �|||� | �|�\}}| �|||� | �|�\}}| �|||� | �|�\}}| �|||� d S r5 )r> �get_authenticator� do_NetrLogonSamLogonWithFlags�do_NetrLogonGetDomainInfo)r0 r@ �
authenticator�
subsequentr3 r3 r4 �test_client_authenticatora s z,PyCredentialsTests.test_client_authenticatorc
C s� | � � }t| j| j| j�}tj}tj}d}z|�| j | j�
� ||||� W d S t yN } z t �
|jd �j}|tjkrB| �d� n� W Y d }~d S d }~ww )Nr �got wrong password error)r> �samlogon_logon_infor' � machine_name�
user_credsr �$NetlogonNetworkTransitiveInformation�NetlogonValidationSamInfo4�netr_LogonSamLogonExr& �get_workstationr �ctypes�c_uint32�args�valuer �NT_STATUS_WRONG_PASSWORD�fail�r0 r@ �logon� logon_level�validation_level�
netr_flags�e�enumr3 r3 r4 �test_SamLogonExl s0 �
�
���z"PyCredentialsTests.test_SamLogonExc
C s� | � � }| j�d� t| j| j| j�}tj}tj}d}z|� | j
| j� � ||||� W d S t yc } z+t
�|jd �j}|tjkrH| �d� n| �dt|� � W Y d }~d S W Y d }~d S d }~ww )N� r rI zgot unexpected error)r> rL �
set_domainrJ r' rK r rM rN rO r& rP r rQ rR rS rT r rU rV �strrW r3 r3 r4 �test_SamLogonEx_no_domain� s2 �
�
���z,PyCredentialsTests.test_SamLogonEx_no_domainc
C s� | � � }t| j| j| jtd�}tj}tj}d}z|� | j
| j� � ||||� W d S t yP } z t
�|jd �j}|tjkrD| �d� n� W Y d }~d S d }~ww �N)�flagsr rI )r> rJ r' rK rL r r rM rN rO r& rP r rQ rR rS rT r rU rV rW r3 r3 r4 �test_SamLogonExNTLM� s2 �
�
���z&PyCredentialsTests.test_SamLogonExNTLMc
C s� | � � }t| j| j| jtd�}t|j_t j
}t j }d}z|� | j
| j�� ||||� W d S tyT } z t�|jd �j}|tjkrH| �d� n� W Y d }~d S d }~ww rc )r> rJ r' rK rL r r �
identity_info�parameter_controlr rM rN rO r& rP r rQ rR rS rT r rU rV rW r3 r3 r4 �test_SamLogonExMSCHAPv2� s4 �
�
���z*PyCredentialsTests.test_SamLogonExMSCHAPv2c C s$ | � � t�d| j | j| j� d S )Nz ncacn_np:%s)�do_Netr_ServerPasswordSet2r r& r! r; r/ r3 r3 r4 �test_encrypt_netr_password� s
�z-PyCredentialsTests.test_encrypt_netr_passwordc C s� | � � }| �|�\}}d}d}t�||�}|�d�}t|�}dd� t�|| �D �} t� � }
||
_
| dd� |D � |
_ | j �
|
� |�| j| j �� t| j||
� || _| j �|� d S )N� i � utf-16-lec S �" g | ]
}t |t�r |nt|��qS r3 ��
isinstance�int�ord��.0�xr3 r3 r4 �
<listcomp>� � " zAPyCredentialsTests.do_Netr_ServerPasswordSet2.<locals>.<listcomp>c S rm r3 rn rr r3 r3 r4 ru � rv )r> rC �samba�generate_random_password�encode�lenr$ �urandomr �netr_CryptPassword�length�datar; �encrypt_netr_crypt_password�netr_ServerPasswordSet2r& rP r rK � machine_pass� set_password) r0 r@ rF rG �PWD_LEN�DATA_LEN�newpass�encoded�pwd_len�filler�pwdr3 r3 r4 ri � s*
�z-PyCredentialsTests.do_Netr_ServerPasswordSet2c C s t � d| j | j| j�S )Nz ncacn_ip_tcp:%s[schannel,seal])r r& r! r; r/ r3 r3 r4 r> � s �z*PyCredentialsTests.get_netlogon_connectionc C s� t �dd�| _t| _d| j| j�� f | _t| j| j� dt | j� �
d�}| j� | jdd| j t t
tB �|d�� t� | _| j�| �� � | j�t� | j�t� | j�| j� | j�| jd � | j�| j� d S ) Nrk �cn=%s,%s�"%s"rl �computerz%s$��dn� objectclass�sAMAccountName�userAccountControl�
unicodePwd�$)rw rx r� � MACHINE_NAMErK r, � domain_dnr7 r r ry �addra r r r r; �guessr) �set_secure_channel_typer �set_kerberos_stater r� � set_username�set_workstation�r0 �utf16pwr3 r3 r4 r- s&
� z)PyCredentialsTests.create_machine_accountc C s� t �dd�| _t| _d| j| j�� f | _t| j| j� dt | j� �
d�}| j� | jdd| j t t
�|d�� t� | _| j�| �� � | j�| j� | j�| j� | j�| j� d S )Nrk r� r� rl �userz%sr� )rw rx � user_pass� USER_NAME� user_namer, r� r8 r r ry r� ra r r rL r� r) r� r� r� rK r� r3 r3 r4 r. ! s$ �z&PyCredentialsTests.create_user_accountc C s> | j �� }t� }dd� |d D �|j_|d |_t� }||fS )Nc S rm r3 rn rr r3 r3 r4 ru > rv z8PyCredentialsTests.get_authenticator.<locals>.<listcomp>�
credential� timestamp)r; r< r �credr~ r� )r0 r@ �auth�currentrG r3 r3 r4 rC ; s
z$PyCredentialsTests.get_authenticatorc
C sF t | j| j| j�}tj}tj}d}|�| j| j� � ||||||� d S )Nr )
rJ r' rK rL r rM rN �netr_LogonSamLogonWithFlagsr& rP )r0 r@ r� rG rX rY rZ r[ r3 r3 r4 rD D s ��z0PyCredentialsTests.do_NetrLogonSamLogonWithFlagsc C s& t � }|�| j| j�� ||d|� d S )N� )r
�netr_LogonGetDomainInfor& rL rP )r0 r@ r� rG �queryr3 r3 r4 rE U s �z,PyCredentialsTests.do_NetrLogonGetDomainInfo)�__name__�
__module__� __qualname__r# r6 r= rB rH r^ rb re rh rj ri r> r- r. rC rD rE �
__classcell__r3 r3 r1 r4 r 6 s$ r c
C s� t | |�}d}|j|||d�}t�� }dd� |D �|_t�� |_t|d �|j_dd� |d D �|j_ t�
� |_ |� � \}} | |j j
_||j j_|�� |j j_|S )Ns abcdefgh)rd � challenge� target_infoc S rm r3 rn rr r3 r3 r4 ru p rv z'samlogon_logon_info.<locals>.<listcomp>� nt_responsec S rm r3 rn rr r3 r3 r4 ru s rv )�samlogon_target�get_ntlm_responser �netr_NetworkInfor� �netr_ChallengeResponse�ntrz r} r~ �netr_IdentityInforf �get_ntlm_username_domain� domain_name�string� account_namerP � workstation)
r� �
computer_name�credsrd �target_info_blobr� �responserX �usernamer' r3 r3 r4 rJ c s"
�
rJ c C s^ t �� }d|_t �� }t j|_||_t �� }t j|_| |_t �� }t j|_|||g|_ t
|�S )N� ) r
� AV_PAIR_LIST�count�AV_PAIR�MsvAvNbComputerName�AvId�Value�MsvAvNbDomainName�MsvAvEOL�pairr )r� r� r� � computername�
domainname�eolr3 r3 r4 r� � s r� )(� samba.testsr r r$ rw �
samba.authr �samba.credentialsr r r r � samba.dcerpcr r
r �samba.dcerpc.netlogonr r
r �samba.dcerpc.miscr �
samba.dsdbr r r � samba.ndrr � samba.samdbr r r � samba.commonr rQ r� r� r rJ r� r3 r3 r3 r4 �<module> s. 0
�