File: //lib/python3/dist-packages/samba/tests/krb5/__pycache__/as_canonicalization_tests.cpython-310.pyc
o
eF�cg8 � @ sB d dl Z d dlZe j�d d� dejd< d dlmZmZ d dlZd dl m
Z
d dl m m
mZ d dlmZ d dlmZ d d lmZ d d
lmZmZmZmZmZm Z m Z m Z m Z m Z m!Z!m"Z" d Z#d Z$eG d d
� d
e��Z%eG dd� de��Z&G dd� d�Z'dZ(dZ)eG dd� de
��Z*e+dkr�d Z#d Z$d dl,Z,e,�-� dS dS )� Nz
bin/python�1�PYTHONUNBUFFERED)�Enum�unique)� KDCBaseTest)�DONT_USE_KERBEROS)�SEC_CHAN_WKSTA)�DynamicTestCase) �AES256_CTS_HMAC_SHA1_96�AES128_CTS_HMAC_SHA1_96�ARCFOUR_HMAC_MD5�KDC_ERR_PREAUTH_REQUIRED�
KRB_AS_REP�KU_AS_REP_ENC_PART� KRB_ERROR�KU_PA_ENC_TIMESTAMP�PADATA_ENC_TIMESTAMP�NT_ENTERPRISE_PRINCIPAL� NT_PRINCIPAL� NT_SRV_INSTFc @ s8 e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
d � Z d S )
� TestOptions� � � � � � �@ � � c C �
| j |@ S �N��value��self�x� r' �L/usr/lib/python3/dist-packages/samba/tests/krb5/as_canonicalization_tests.py�is_setA �
zTestOptions.is_setN)
�__name__�
__module__� __qualname__� Canonicalize�
Enterprise�
UpperRealm�
UpperUserName� NetbiosRealm�UPN� RemoveDollar� AsReqSelf�Lastr) r' r' r' r( r 5 s r c @ s e Zd ZdZdZdd� ZdS )�CredentialsTyper r c C r r! r" r$ r' r' r( r) J r* zCredentialsType.is_setN)r+ r, r- �User�Machiner) r' r' r' r( r7 E s r7 c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�TestDatac C s� || _ || _| �||�| _| �||�| _tj�|�r t }nt
}t j || jgd�| _
tj�|�r4| j
| _n t j td| jgd�| _tj�|�| _d S )N)� name_type�names�krbtgt)�options�
user_creds�
_get_username� user_name�
_get_realm�realmr r/ r) r r r �PrincipalName_create�cnamer5 �snamer r. � canonicalize)r% r> �creds�client_name_typer' r' r( �__init__P s �
�zTestData.__init__c C s@ |� � }tj�|�r|�� }tj�|�r|�� }|S |�� }|S r! )� get_realmr r2 r) �
get_domainr0 �upper�lower)r% r> rH rC r' r' r( rB d s �zTestData._get_realmc C sb |� � }tj�|�r|�d�r|d d� }tj�|�r%|�� }d�||�}tj�|�r/|� � }|S )N�$���z{0}@{1})
� get_usernamer r4 r) �endswithr/ rK �formatr1 rM )r% r> rH �namerC r' r' r( r@ n s zTestData._get_usernamec C sp d}|dd� | j� d 7 }|d| j d 7 }|d| j d 7 }|dt| j� d 7 }|dt| j� d 7 }|S ) Nz Test Data: z options = 'z{:08b}�'z
user name = 'z , realm = 'z , cname = 'z , sname = ')rS r> rA rC �strrE rF )r% �repr' r' r( �__repr__y s zTestData.__repr__N)r+ r, r- rJ rB r@ rX r' r' r' r( r: N s
r: �
tstkrb5cnnmch�
tstkrb5cnnusrc sp e Zd Zedd� �Zdd� Zdd� Z� fdd�Zd d
� Zd d � Z d
d� Z
dd� Z dd� Z dd� Z
dd� Z� ZS )� KerberosASCanonicalizationTestsc C sV dd� }dd� }t D ] }ttjj�D ]}|||�rq|||�}| �d|||� qq
d S )Nc S s8 | t jkr
tj�|�r
dS | t jkrtj�|�rdS dS )z0 Filter out any mutually exclusive test options TF)r7 r9 r r4 r) r5 )�ctr> r' r' r( �skip� s
�
�zCKerberosASCanonicalizationTests.setUpDynamicTestCases.<locals>.skipc S s0 d| j }tD ]}|�|�r|d|j 7 }q|S )Nz
%sCredentialsz_%s)rT r r) )r\ r> rT �optr' r' r( �build_test_name� s
�zNKerberosASCanonicalizationTests.setUpDynamicTestCases.<locals>.build_test_name�test)r7 �ranger r6 r# �generate_dynamic_test)�clsr] r_ r\ r& rT r' r' r( �setUpDynamicTestCases� s
��z5KerberosASCanonicalizationTests.setUpDynamicTestCasesc C s* | j d u r| �� }| �|t�\| _ }| j S r! )r? � get_samdb�create_account� USER_NAME�r% �samdb�_r' r' r( �user_account_creds� s
z2KerberosASCanonicalizationTests.user_account_credsc C sJ | j d u r"| �� }| j|t| jjd�\| _ }| j �t� | j �t � | j S )N)� account_type)
�
machine_credsre rf � MACHINE_NAME� AccountType�COMPUTER�set_secure_channel_typer �set_kerberos_stater rh r' r' r( �machine_account_creds� s
� z5KerberosASCanonicalizationTests.machine_account_credsc s& t � �� t| _t| _d | _d | _d S r! )�super�setUp�global_asn1_print�
do_asn1_print�global_hexdump�
do_hexdumpr? rm )r% �� __class__r' r( ru � s
z%KerberosASCanonicalizationTests.setUpc
C s( |t jkr
| �� }n|t jkr| �� }ntd��t||�}z | �|�\}}W n% tj j
yK } zdd l }| � d�
|j|�� |�� W Y d }~nd }~ww |d ur�d|d v rb|d d } | �| |� |d }
| �|
|� |d �d�} | �| |� |d } | �| |� |d
�d�}
| �|
|� d S d S ) NzUnexpected credential typer z#ASN1 Error, Options {0:08b}:{1} {2}�kvno�enc-partrE �crealm�asciirF �srealm)r7 r8 rk r9 rs � Exceptionr: �as_req�pyasn1�error� PyAsn1Error� traceback�failrS r> �
format_exc�
check_kvno� check_cname�decode� check_crealm� check_sname� check_srealm)r% r& r\ rH �datarW �as_rep�er� r| rE r~ rF r� r' r' r( �_test_with_args� s<
��� �z/KerberosASCanonicalizationTests._test_with_argsc C s� |j }|j}|j}|j}| jdd�}d}|jr tt�d��}d }t t
t f} | j |||||d |d d| d d d� }
| �
|
�} | �| � | �| d dd �t|��� | �| d
td �t|��� | �| d td �| d t|��� | j| d
t�� d�} | D ]}
|
d dkr�|
d } nqz| j|t�� d�}| �||d �}| �� \}}| �||�}| j|t�� d�}| �|t |�}| j|t� � d�}| � t |�}d}|jr�tt�d��}|g}| j |||||d |d d| d d d� }
| �
|
�} | �| � | �| d dd �t|��� | d
}| � |td �| �!d d�t|��� | �|t"d �t|��� |�#t$| d d �}|d dk�r<| j|t�%� d�}| |fS | j|t�&� d�}| |fS )Ni�� )�offset�0rG i���) �padata� kdc_optionsrE rC rF � from_time� till_time�
renew_time�nonce�etypes� addresses�additional_tickets�pvno� zData {0}zmsg-typez
error-codezError code {0}, Data {1}ze-data)�asn1Specz padata-type� z padata-valuer � r} �cipher�z )'r? rC rE rF �get_KerberosTimerG rV � krb5_asn1�
KDCOptionsr
r r �
AS_REQ_create�send_recv_transaction�assertIsNotNone� assertEqualrS r r
�
der_decode� METHOD_DATA� ETYPE_INFO2� PasswordKey_from_etype_info2�get_KerberosTimeWithUsec�PA_ENC_TS_ENC_create�
der_encode�
PA_ENC_TS_ENC�EncryptedData_creater �
EncryptedData�PA_DATA_creater �assertNotEqual�getr �decryptr �
EncTGSRepPart� EncASRepPart)r% r� r? rC rE rF �tillr� r� r� �reqrW �
rep_padata�pa� etype_info2�key�patime�pausec�pa_ts�msg_type�encr� r' r' r( r� � s� ��
��� � �� �
�
���z&KerberosASCanonicalizationTests.as_reqc C s� t j�|j�r
t}n t j�|j�rt}nt}|d }| �||d�|j�� |d }|d � d�}|j
}t j�|j�r?|j � � }| �||d�|j�� d S )N� name-typez cname name-type, Options {0:08b}� name-stringr r z cname principal, Options {0:08b})
r r. r) r> r r/ r r� rS r� rA r? rQ )r% rE r� �expected_name_typer; �nsrT �expectedr' r' r( r� ] s*
�
�z+KerberosASCanonicalizationTests.check_cnamec C �$ |j �� }| �||d�|j�� d S )Nzcrealm, Options {0:08b}�r? rK r� rS r> )r% r~ r� rC r' r' r( r� v �
�z,KerberosASCanonicalizationTests.check_crealmc C s |d }|d }|d � d�}tj�|j�rOt}tj�|j�s(tj�|j�r(t}| � ||d�
|j�� |j }tj�|j�rB|j �
� }| � ||d�
|j�� d S | � t|d�
|j�� | � d|d�
|j�� |d � d�}|j}tj�|j�r}|j �� �� }| � ||d �
|j�� d S )
Nr� r� r r z sname name-type, Options {0:08b}z sname principal, Options {0:08b}r= r z sname realm, Options {0:08b})r� r r5 r) r> r r. r/ r r� rS rA r? rQ r rC rK rM ) r% rF r� �ntr� rT r� r� rC r' r' r( r� { sR �
�
�
�
�
�z+KerberosASCanonicalizationTests.check_snamec C r� )Nzsrealm, Options {0:08b}r� )r% r� r� rC r' r' r( r� � r� z,KerberosASCanonicalizationTests.check_srealmc C s | � d|d�|j�� d S )Nr zkvno, Options {0:08b})r� rS r> )r% r| r� r' r' r( r� � s �z*KerberosASCanonicalizationTests.check_kvno)r+ r, r- � classmethodrd rk rs ru r� r� r� r� r� r� r� �
__classcell__r' r' rz r( r[ � s
&w*r[ �__main__).�sys�os�path�insert�environ�enumr r r� � samba.tests.krb5.kdc_base_testr � samba.tests.krb5.rfc4120_pyasn1�tests�krb5�rfc4120_pyasn1r� �samba.credentialsr �samba.dcerpc.miscr � samba.testsr �"samba.tests.krb5.rfc4120_constantsr
r r r
r r r r r r r r rv rx r r7 r: rn rg r[ r+ �unittest�mainr' r' r' r( �<module> s>
85 ) �