File: //lib/python3/dist-packages/samba/tests/samba_tool/__pycache__/user.cpython-310.pyc
o
�/a� � @ s� d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZm Z d dl
m Z d dl m
Z
d dlmZ d dlmZ d dlmZ G d d
� d
e�ZdS ) � N)�SambaToolCmdTest)� credentials� nttime2unix�dsdb)�
ndr_unpack)�drsblobs)� get_bytes)�
get_string)� env_loadparmc s& e Zd ZdZg ZdZ� fdd�Z� fdd�Zdd� Z
dAd d �Z d
d� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zi fd-d.�Zi fd/d0�Zi fd1d2�Z d3d4� Z d5d6� Z d7d8� Z d9d:� Z d;d<� Z!d=d>� Z"d?d@� Z#� Z$S )B�UserCmdTestCasez%Tests for samba-tool user subcommandsNc s� t t| ��� | �ddtjd dtjd tjd f �| _| �� }|�d�| _ |�
dd� g | _ | j � | �
d d
d ��� | j � | �
d d
d ��� | j � | �
d
dd ��� | j � | �
ddd ��� | j � | �ddi�� | j � | �ddi�� | j � | �ddi�� | j � | �ddi�� | j � | �ddi�� | j � | �ddi�� | j � | �ddi�� | j � | �ddi�� | j D ]:}|d |�\}}}| �|||� | �|dd� d |d v r�| �d |d |� n
| �d |d |� |d |� q�d S ) N�-H� ldap://%s� DC_SERVER�-U%s%%%s� DC_USERNAME� DC_PASSWORD�template homedirz/home/test/%D/%U�
sambatool1�comp1)�name�company�
sambatool2�
sambatool3�comp2�
sambatool4r �
posixuser1�
posixuser2�
posixuser3�
posixuser4� unixuser1� unixuser2� unixuser3� unixuser4� createUserFn� � Shouldn't be any error messages�unixz Modified User '%s' successfully� User '%s' added successfully� checkUserFn)�superr �setUp�getSamDB�os�environ�samdb� get_loadparm�get�template_homedir�set�users�append� _randomUser�_randomPosixUser�_randomUnixUser�assertCmdSuccess� assertEqual�assertIn)�self�lp�user�result�out�err�� __class__� �=/usr/lib/python3/dist-packages/samba/tests/samba_tool/user.pyr* ( sB �
���zUserCmdTestCase.setUpc sr t t| ��� | jD ]}| �|d �r | �dd|d � q
t� }|�d�}tj �
|�r0t� |� |� d| j
� d S )Nr r= �deletez user-syncpasswords-cache.ldbr )r) r �tearDownr3 �
_find_user� runsubcmdr
� private_pathr, �path�exists�remover2 r1 )r; r= r< �cachedbrA rC rD rF O s
�
zUserCmdTestCase.tearDownc C s� | j D ]}| �|�\}}}| �|d� | �d|� q| j D ]"}| �dd|d �\}}}| �|||d� | �|d �}| �|� q | j D ]{}| �dd|d |d d d
|d d |d
d|d d|d d|d d|d ddtj d dtj d tj d f �\}}}| �|||� | �
|d d � | �d |d |� | �|d �}| �
d |� d � d!| � | �
d |� d� d!| � qCd S )"Nz Ensure that create user failsz'LDAP error 68 LDAP_ENTRY_ALREADY_EXISTSr= rE r zCan we delete users�create�passwordz--use-username-as-cn� --surname=%s�surname�--given-name=%s�
given-name�--job-title=%s� job-title�--department=%s�
department�--description=%s� description� --company=%sr r r
r r r r r$ r% r' �%s�cnz%(name)s) r3 � _create_user�
assertCmdFailr: rH r8 rG � assertIsNoner, r- r9 r0 )r; r= r> r? r@ �foundrC rC rD � test_newuser^ s8
� �z UserCmdTestCase.test_newuser� � c C s. | j �|�}t|�\}}| �d|d� |d d }ttj|�}| �|jj |d� | �
|jj |d� |dkr7d S ddd�} d}
| |jj d|
d �\} } | � | d
� | �
| d |jj d d � | |jj d
|
d �\}
}|
d ur~| �
|
|
d� |
d }
|
| kr~|
d }
| |jj d|
d �\}}| � | d� | �
||
d� |
d }
|
| kr�|
d }
| |jj d|
d �\}}| � | d� | �
||
d� |
d }
|
| kr�|
d }
| |jj d|
d �\}}|d ur�| �
||
d� |
d }
|
| kr�|
d }
| |jj d|
d �\}}|d u�r | �
||
d� |
d }
|
| k�r |
d }
| �
|
|jj d� d S )N�supplementalCredentialsz*supplementalCredentials attribute requiredr zmin_packages checkzmax_packages checkc S s6 t |t| ��D ]}| | j|kr|| | f S qdS )N)NN)�range�lenr )�packagesr � start_idx�irC rC rD � find_package� s
�zEUserCmdTestCase._verify_supplementalCredentials.<locals>.find_package�Packages)rh zPackages required� z(Packages needs to be at num_packages - 1zPrimary:Kerberos-Newer-Keysz-Primary:Kerberos-Newer-Keys at wrong positionzPrimary:KerberoszPrimary:Kerberos requiredz"Primary:Kerberos at wrong positionzPrimary:WDigestzPrimary:WDigest requiredz!Primary:WDigest at wrong positionzPrimary:CLEARTEXTz#Primary:CLEARTEXT at wrong positionzPrimary:SambaGPGz"Primary:SambaGPG at wrong positionzUnknown packages found)r )r. �
parse_ldif�nextr: r r �supplementalCredentialsBlob�assertGreaterEqual�sub� num_packages�assertLessEqualrg �assertIsNotNoner9 )r; �ldif� min_packages� max_packages�msgs�
changetype�obj�sc_blob�scrj �nidx�pidx�pp�knidx�knp�kidx�kp�widx�wp�cidx�cp�gidx�gprC rC rD � _verify_supplementalCredentials� sz
�
�
�
�
�
�
�
�
z/UserCmdTestCase._verify_supplementalCredentialsc C s� | j D ]>}| �d�}| �dd|d d| ddtjd d tjd
tjd f �\}}}| �|||d � | �|d
d� | �|dd� qd}| �dddd| d�\}}}| �|||d� | �|d
d� ddii i i ddii i i d�}|�� D ]}|| � dd
�} | �|d|| f d || |f � qt| �ddd �\}}}| �|||d � | �|d
d � | �|d d!| � | j D ]}| �|d"|d d#|d |f � q�| j D �]S}| �d�}t
� � }
|
� � |
�
|� |
�� } t�|
�� ��d$�} t�t|���d$�}
t�t|��d%���d$�}| �dd|d d| �\}}}| �|||d � | �|d
d&� | �|dd&� | �ddd �\}}}| �|||d � | �|d
d � | �|d d!| � | �|d"|d d#|d |f � | �|d'd(| � | �|d)| d*| � | �|d+d,| � | �|d-d.| � d/|v �r�| �|d0|
d1| � | �|d2| d3| � | �|d4d5| � | �dd6|d d| d�\}}}| �|||d7� | �|d
d� | �|d8d� | �|d"|d d9|d |f � | �|d)| d*| � | �|d-d.| � | �|�d:d
�� d/|v �r | �|d0|
d1| � | �|d2| d3| � | �|d4d5| � q�| j D ]@}| �d�}| �dd|d d| d;ddtjd d tjd
tjd f �\}}}| �|||d � | �|d
d<� | �|dd<� �q#d S )=N� r= � setpasswordr z--newpassword=%sr r
r r r r zEnsure setpassword runsr$ zsetpassword with urlzChanged password OKzxsAMAccountName,unicodePwd,supplementalCredentials,virtualClearTextUTF8,virtualClearTextUTF16,virtualSSHA,virtualSambaGPG�
syncpasswordsz--cache-ldb-initialize�--attributes=%sz--decrypt-samba-gpgz0Ensure syncpasswords --cache-ldb-initialize runszgetpassword without url�value�userSyncPasswordsz
dirsync:1:0:0)� objectClass�samdbUrl�
dirsyncFilter�dirsyncAttribute�dirsyncControl�passwordAttribute�decryptSambaGPG� currentTimez%s: %sz4syncpasswords --cache-ldb-initialize: %s: %s out[%s]z --no-waitz#Ensure syncpasswords --no-wait runszsyncpasswords --no-waitzdirsync_loop(): results 0z=syncpasswords --no-wait: 'dirsync_loop(): results 0': out[%s]zsAMAccountName: %sz5syncpasswords --no-wait: 'sAMAccountName': %s out[%s]�utf8z utf-16-lezsetpassword without urlz)# unicodePwd::: REDACTED SECRET ATTRIBUTEz@getpassword '# unicodePwd::: REDACTED SECRET ATTRIBUTE': out[%s]zunicodePwd:: %sz getpassword unicodePwd: out[%s]z6# supplementalCredentials::: REDACTED SECRET ATTRIBUTEzMgetpassword '# supplementalCredentials::: REDACTED SECRET ATTRIBUTE': out[%s]zsupplementalCredentials:: z,getpassword supplementalCredentials: out[%s]zvirtualSambaGPG:: zvirtualClearTextUTF8:: %sz)getpassword virtualClearTextUTF8: out[%s]zvirtualClearTextUTF16:: %sz*getpassword virtualClearTextUTF16: out[%s]z
virtualSSHA: z getpassword virtualSSHA: out[%s]� getpasswordzEnsure getpassword runszGot password OKz)getpassword: 'sAMAccountName': %s out[%s]z
Got password OK
z--must-change-at-next-loginz setpassword with forced change)r3 �random_passwordrH r, r- r8 r9 � assertMatch�keysr0 r � Credentials�
set_anonymous� set_password� get_nt_hash�base64� b64encode�decoder r �encoder� �replace)r; r= � newpasswdr> r? r@ �
attributes� cache_attrs�a�v�creds�nthash�
unicodePwd�virtualClearTextUTF8�virtualClearTextUTF16rC rC rD �test_setpassword� s
�
��
��
�
���� ���
� ��
�� ��
� ���
��z UserCmdTestCase.test_setpasswordc
C s� | j D ]S}t�� d }| �dd|d dddtjd d tjd
tjd f �\}}}| �|||d � | �d
|d |� | �|d �}tt d|�
d� ��}| � ||dd� q d S )Ni � r= � setexpiryr z--days=2r r
r r r r z Can we run setexpiry with namesz#Expiry for user '%s' set to 2 days.r[ �accountExpires� z?Ensure account expires is within 5 seconds of the expected time) r3 �timerH r, r- r8 r: rG r �intr0 � assertWithin) r; r= �twodaysr> r? r@ r` �expires�fourdaysrC rC rD �test_setexpiryJ s
�z UserCmdTestCase.test_setexpiryc
C s� | � ddddtjd dtjd tjd f �\}}}| �|||d � d
tjtjf }| jj | j�
� tj |d gd �}| � t
|�d
kd� |D ]}t|jd d
d��}| �||d| �}qFd S )Nr= �listr r
r r r r �Error running list�0(&(objectClass=user)(userAccountControl:%s:=%u))�samaccountname��base�scope�
expression�attrsr �no users found in samdb��idx�user '%s' not found�rH r, r- r8 �ldb�OID_COMPARATOR_ANDr �UF_NORMAL_ACCOUNTr. �search� domain_dn�
SCOPE_SUBTREE�
assertTruerf �strr0 r� � r; r> r? r@ �
search_filter�userlist�userobjr r` rC rC rD � test_listp s,
�
�
����zUserCmdTestCase.test_listc
C s� d}| � ddd|ddtjd dtjd tjd
f �\}}}| �|||d � d tjtjf }| jj | j�
|�tj |d
gd�}| � t
|�dkd� |D ]}t|jd
dd��}| �||d| �} qKd S )NzCN=Usersr= r� z-br r
r r r r r� r� r� r� r r� r� r� )rH r, r- r8 r� r� r r� r. r� �normalize_dn_in_domainr� r� rf r� r0 r� )
r; �base_dnr> r? r@ r� r� r� r r` rC rC rD �test_list_base_dn� s.
�
�
����z!UserCmdTestCase.test_list_base_dnc C s� | � dddddtjd dtjd tjd f �\}}}| �|||d
� d tjtjf }| jj | j�
� tj |d gd
�}| � t
|�dkd� |D ]}t|jd dd��}| �||d| �}qGd S )Nr= r� z --full-dnr r
r r r r r� r� �dnr� r r� r� r� r� r� rC rC rD �test_list_full_dn� s,
�
�
����z!UserCmdTestCase.test_list_full_dnc C s� d}| � d|i�}| �|� | �dddddtjd d tjd
tjd f �\}}}| �|||d � | �||v d
| � | j�d| dd� | �dddddtjd d tjd
tjd f �\}}}| �|||d � | � ||v d| � | j�
|� d S )N�
expireUserr r= r� z--hide-expiredr r
r r r r r� r� �(sAMAccountname=%s)���F�user '%s' found) r5 r] rH r, r- r8 r� r. r� � assertFalse�
deleteuser)r; �expire_username� expire_userr> r? r@ rC rC rD �test_list_hide_expired� sJ
�
�
��
�
�
�z&UserCmdTestCase.test_list_hide_expiredc C s� d}| � d|i�}| �|� | �dddddtjd d tjd
tjd f �\}}}| �|||d � | �||v d
| � | j�d| � | �dddddtjd d tjd
tjd f �\}}}| �|||d � | � ||v d| � | j�
|� d S )N� disableUserr r= r� z--hide-disabledr r
r r r r r� r� r� r� ) r5 r] rH r, r- r8 r� r. �disable_accountr� r� )r; �disable_username� disable_userr> r? r@ rC rC rD �test_list_hide_disabled� sB
�
�
�
�
�
�z'UserCmdTestCase.test_list_hide_disabledc
C s� | j D �]�}| �dd|d dddtjd dtjd tjd
f �\}}}| �|||d � d |d
|d | j�� |d |d f }| �||d|d � g d�}g }|D ]}|�|� dD ] } |�d|| f � q]qT| �dd|d dd� |� ddtjd dtjd tjd
f �\}}}| �|||d � | �
d|� | �
d|� | �
d|� | �
d|� | � d|� | � d|� | � d |� | �
d |� | �
d |� | �
d |� | �
d |� | �
d!|� | �
d"|� | �
d#|� | �
d$|� | �
d%|� | � d&|� | � d'|� | � d(|� | �
d)|� | � d*|� | � d+|� | � d,|� | �
d-|� | � d.|� | � d/|� | � d0|� | �
d1|� | � d2|� | � d3|� | � d4|� | � d5|� | � d6|� | �
d7|� | �
d8|� | �
d9|� | �
d:|� | �
d;|� | �
d<|� | �
d=|� | �
d>|� | j� |�}
t
|
�d? } | �
d@| � t| d@ dA �} | �
dB| � | �t| dB dA �| � t�| �}
| �
dC| � | �t| dC dA �t|
�� | �
dD| � | �t| dD dA �dE|
� | �
dF| � t| dF dA �}| �
dG| � | �t| dG dA �|� t�|�}| �
dH| � | �t| dH dA �t|�� | �
dI| � | �t| dI dA �dE| � | �
dJ| � t| dJ dA �}t�|�}| �
dK| � | �t| dK dA �t|�� | �
dL| � | �
dM| t| dL dA �� | � dNt| dL dA �� | �||
� | �||
dO � | �
dP| � t| dP dA �}t�|�}| �
dQ| � | �t| dQ dA �t|�� | �
dR| � | �
dM| t| dR dA �� | � dNt| dR dA �� | �||� qd S )SNr= �showr z#--attributes=sAMAccountName,companyr r
r r r r zError running showz9dn: CN=%s %s,CN=Users,%s
company: %s
sAMAccountName: %s
rS rQ r z$Unexpected show output for user '%s') r � whenCreated� whenChangedr� �badPasswordTime�
lastLogoff� lastLogon�lastLogonTimestamp� lockoutTimez#msDS-UserPasswordExpiryTimeComputed�
pwdLastSet)�GeneralizedTime�UnixTime�TimeSpecz %s;format=%sr� �,z;format=GeneralizedTimez;format=UnixTimez;format=TimeSpeczname: z name;format=GeneralizedTime: zname;format=UnixTime: zname;format=TimeSpec: zwhenCreated: 20z&whenCreated;format=GeneralizedTime: 20z whenCreated;format=UnixTime: 1z whenCreated;format=TimeSpec: 1zwhenChanged: 20z&whenChanged;format=GeneralizedTime: 20z whenChanged;format=UnixTime: 1z whenChanged;format=TimeSpec: 1z#accountExpires: 9223372036854775807z'accountExpires;format=GeneralizedTime: z accountExpires;format=UnixTime: z accountExpires;format=TimeSpec: zbadPasswordTime: 0z(badPasswordTime;format=GeneralizedTime: z!badPasswordTime;format=UnixTime: z!badPasswordTime;format=TimeSpec: z
lastLogoff: 0z#lastLogoff;format=GeneralizedTime: z lastLogoff;format=UnixTime: z lastLogoff;format=TimeSpec: z lastLogon: 0z"lastLogon;format=GeneralizedTime: zlastLogon;format=UnixTime: zlastLogon;format=TimeSpec: zlastLogonTimestamp:z lockoutTime:z&msDS-UserPasswordExpiryTimeComputed: 1z>msDS-UserPasswordExpiryTimeComputed;format=GeneralizedTime: 20z6msDS-UserPasswordExpiryTimeComputed;format=UnixTime: 1z6msDS-UserPasswordExpiryTimeComputed;format=TimeSpec: 1z
pwdLastSet: 1z%pwdLastSet;format=GeneralizedTime: 20z pwdLastSet;format=UnixTime: 1z pwdLastSet;format=TimeSpec: 1rl r� r z"whenCreated;format=GeneralizedTimezwhenCreated;format=UnixTimezwhenCreated;format=TimeSpecz %d.000000000r� z"whenChanged;format=GeneralizedTimezwhenChanged;format=UnixTimezwhenChanged;format=TimeSpecz!pwdLastSet;format=GeneralizedTimezpwdLastSet;format=UnixTimezpwdLastSet;format=TimeSpecz%d.z
.000000000�< z:msDS-UserPasswordExpiryTimeComputed;format=GeneralizedTimez3msDS-UserPasswordExpiryTimeComputed;format=UnixTimez3msDS-UserPasswordExpiryTimeComputed;format=TimeSpec)r3 rH r, r- r8 r. r� r9 r4 �joinr: � assertNotInrm rn r� r� �string_to_timerp �
assertLess�
assertGreater)r; r= r> r? r@ � expected_out�
time_attrsr� �ta�fm�out_msgs�out_msg�when_created_str�when_created_time�when_changed_str�when_changed_time�pwd_last_set_str�pwd_last_set_time�pwd_expires_str�pwd_expires_timerC rC rD � test_show� s�
�
� ����
�
�
�
�
�
��zUserCmdTestCase.test_showc C sZ t | j�d��}| �dd|�\}}}| �|||� | �|dd� | �d| |� | jD ]#}| �dd|d |�\}}}| �|||d
� | �d |d |f |� q+| �dd |�\}}}| �|� | �d
t | j� |� | jD ]*}d| j�
� }| �dd|d |�\}}}| �|||d
� | �d |d |f |� ql| �dd |�\}}}| �|||d| � d S )Nz OU=movetest�ou�addr$ z$There shouldn't be any error messagez
Added ou "%s"r= �mover zError running movezMoved user "%s" into "%s"rE zFsubtree_delete: Unable to delete a non-leaf node (it has %d children)!z CN=Users,%szFailed to delete ou '%s') r� r. r� rH r8 r9 r: r3 r^ rf r� )r; �
full_ou_dnr> r? r@ r= �new_dnrC rC rD � test_move� sJ
�
��
��
�
��
�zUserCmdTestCase.test_movec
C s& | j D �] }d|d }d}d|d }| �|d �}t|�d��}| �dd|d d| d | d
| �\}}} | �||| � | �| d d � | �d
|� | �|d �}| �d|�d� |� | �d|�d� |� | �d|�d� |� | �d|�d� d|||f � | �d|�d� d|||f � | �dd|d ddd�\}}} | �||| � | �| d d � | �d
|� | �|d �}| �|�d�d� | �|�d�d� | �|�d�d� | �d|�d� |d � | �dd|d d| d| �\}}} | �||| � |�r| �dd|d d| �\}}} qdS )zlrename the existing surname and given name and add missing
initials, then remove them, for all users�new_given_name_of_r �A�new_surname_of_r\ r= �renamerP �
--initials=%srR r$ r% � successfullyr[ � givenName�initials�sn� %s %s. %s�
--surname=� --initials=�
--given-name=N�--surname=%(surname)s�--given-name=%(given-name)s�--force-new-cn=%s)r3 rG r� r0 rH r8 r9 r: )
r; r= �
new_givenname� new_initials� new_surnamer` �old_cnr> r? r@ rC rC rD �&test_rename_surname_initials_givenname� s`
� � �
�
�
���z6UserCmdTestCase.test_rename_surname_initials_givennamec C s� | j D ]�}d|d }d|d }d|d }| �dd|d d| d| �\}}}| �|||� | �|d d
� | �d |� | �|�}| �d |�d
� |� | �d |�d� |� | �dd|d| �\}}}| �|||� | �|�}| �d |�d
� |� | �dd|d�\}}}| �|� | �d|� | �d|� | �dd|d�\}}}| �|� | �d|� | �d|� | �dd|d| d| �\}}}| �|||� qdS )z?rename and try to remove the cn and the samaccount of all users�
new_cn_of_r �new_samaccount_of_r r= r z--samaccountname=%sr! r$ r% r r[ r\ �sAMAccountNamerP z--force-new-cn=zFailed to rename userzdelete protected attributez--samaccountname=z--samaccountname=%(name)sz--force-new-cn=%(name)sN)r3 rH r8 r9 r: rG r0 r^ ) r; r= �new_cn�new_samaccountnamer$ r> r? r@ r` rC rC rD � test_rename_cn_samaccountname� s\
�
�
�
�
�
�
�
��z-UserCmdTestCase.test_rename_cn_samaccountnamec
C s� | j D ]�}d|d }d|d }d}d|d }| �dd|d d| �\}}}| �|||� | �dd|d d d
d �\}}}| �|||� | �dd|d d �\}}}| �|||� | �|d
d� | �d|� | �|d �} | �d| �d� |d � | �dd|d d| d| d| d| �\}}}| �|||� | �dd|d d �\}}}| �|||� | �|d
d� | �d|� | �|d �} | �d| �d� d|||f � | �dd|d d d
d| d| �\}}}| �|||� qdS )z)reset the cn of all users to the standardr' r r r r r= r r! r r r z
--reset-cnr$ r% r r[ r\ rP r rR r r r N�r3 rH r8 r9 r: rG r0 )
r; r= r* r" r# r$ r> r? r@ r` rC rC rD �test_rename_standard_cn s`
�
�
�
�
� �
��z'UserCmdTestCase.test_rename_standard_cnc C s$ | j D ]�}d|d }d|d }| �dd|d d| d| �\}}}| �|||� | �|dd � | �d
|� | �|d �}| �d |�d � |� | �d |�d
� |� | �dd|d dd�\}}}| �|||� | �|dd � | �d
|� | �|d �}| �|�d �d � | �|�d
�d � qd S )N�new_mailaddress_of_r znew displayname of r= r z--mail-address=%sz--display-name=%sr$ r% r r[ �mail� displayNamez--mail-address=z--display-name=r- )r; r= �new_mail�new_displaynamer> r? r@ r` rC rC rD �#test_rename_mailaddress_displaynameW s8
��
�
� �z3UserCmdTestCase.test_rename_mailaddress_displaynamec
C sP | j D ]�}| �|d �}d|�d� }|�d�d }d|d |f }d|d }| �dd |d d
| �\}}} | �|� | �d | � | �dd |d d
| �\}}} | �||| � | �| d d
� | �d|� | �|d �}| �d|�d� |� | �dd |d d
�\}}} | �|� | �d | � | �dd |d d
| �\}}} | �||| � qdS )zrename upn of all usersr r[ �userPrincipalName�@rl z new_%s@%sz%s@invalid.suffixr= r z--upn=%szis not a valid upnr$ r% r N) r3 rG r0 �splitrH r^ r: r8 r9 )
r; r= r` �old_upn� valid_suffix�
valid_new_upn�invalid_new_upnr> r? r@ rC rC rD �test_rename_upnv sB
�
�
�
�
�
��z UserCmdTestCase.test_rename_upnc C s� zdd l }W n ty | �d� Y d S w t�� }z|�|�}W n ty0 | �d� Y d S w |d }|d u s?t|�dkrAd}| �|d |d |d |d ||d d ��}| � d
d |d |d
d|d d|d d|d d|d d|d d|d d|d d d d tj
d d tj
d! tj
d" f �\}}}| � |||� | � |d#d$� | �
d%|d |� | �|� | � d
d&|d � | �d |d i�}| � d
d |d |d
d|d d|d d|d d|d d|d d|d d d|d d'|d( d)|d* d+|d, d-|d. d d tj
d d tj
d! tj
d" f �\}}}| � |||� | � |d#d$� | �
d%|d |� | �|� | � d
d&|d � d S )/Nr z1Skipping getpwent test, no 'pwd' module availablez5Skipping getpwent test, current EUID not found in NSS� z Foo GECOS� rb rc )r �uid� uidNumber� gidNumber�gecos�
loginShellr= rN r rO rP rQ rR rS rT rU rV rW rX rY rZ r �
--gecos=%srB z--rfc2307-from-nssr r
r r r r r$ r% r' rE �--login-shell=%srC �--uid=%sr? �--uid-number=%sr@ �--gid-number=%srA )�pwd� ImportError�skipTestr, �geteuid�getpwuid�KeyErrorrf r6 rH r- r8 r9 r: �_check_posix_user) r; rI r? �urB r= r> r? r@ rC rC rD �
test_getpwent� s~
�
� �
�
�
z UserCmdTestCase.test_getpwentc
C s d}| � dd|�\}}}| �|d� | �d| |� | �d|� d}d}| � dd |d
� | � dd |d
� | � dd|d d tjd
d|d
f �\}}}| �|d� | �d| |� | �d|� | � dd|� | � dd|� | jD ] }| � dd|d �\}}}| �|||d� | �|dd� qod S )N�userdoesnotexistr= �unlockz)Ensure that unlock nonexistent user failszFailed to unlock user '%s'zUnable to find user�unprivilegedunlockuser� usertounlockr
�Passw0rdr r
r r z)Fail with LDAP_INSUFFICIENT_ACCESS_RIGHTSz-LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTSrE r zError running user unlockr$ r% )rH r^ r: r, r- r3 r8 r9 )r; �nonexistentusernamer> r? r@ �unprivileged_username�unlocktest_usernamer= rC rC rD � test_unlock� s<
� �
�
��zUserCmdTestCase.test_unlockc C sR | � � | �d�| � � | � � | � � | � � | � � | j dd�| j| jd�
}|�|� |S )zKcreate a user with random attribute values, you can specify base attributesr� �d )�count)
r rO rQ rS rU rW r rY r# r( )�
randomNamer� r] � _check_user�update)r; r� r= rC rC rD r5 s
�
zUserCmdTestCase._randomUserc C sX | � i �}|�|� | �� | �� | �� | �� | �� | j| jd�}|�|� |�|� |S )�ucreate a user with random attribute values and additional RFC2307
attributes, you can specify base attributes)r? rC rB r@ rA r# r( )r5 r_ r] � randomXid�_create_posix_userrO �r; r� r= �posixAttributesrC rC rD r6 ' �
�
z UserCmdTestCase._randomPosixUserc C sX | � i �}|�|� | �� | �� | �� | �� | �� | j| jd�}|�|� |�|� |S )r` )r@ rA r? rC rB r# r( )r5 r_ ra r] �_create_unix_user�_check_unix_userrc rC rC rD r7 9 re z UserCmdTestCase._randomUnixUserc C s� | � |d �}| �d|�d� d| � | �d|�d� |d � | �d|�d� |d � | �d|�d� |d � | �d|�d� |d � d S )
zD check if a user from SamDB has the same attributes as its template r r[ z%(given-name)s %(surname)s�titlerU r rY rW N)rG r9 r0 �r; r= r` rC rC rD r^ K s zUserCmdTestCase._check_userc C s� | � |d �}| �d|�d� |d � | �d|�d� |d � | �d|�d� d|d � | �d|�d� d|d � | �d|�d� |d � | �|� dS ) zJ check if a posix_user from SamDB has the same attributes as its template r r[ rC rB r@ rA r? N)rG r9 r0 r^ ri rC rC rD rO U s z!UserCmdTestCase._check_posix_userc C s� | � |d �}| �d|�d� |d � | �d|�d� |d � | �d|�d� d|d � | �d|�d� d|d � | �d|�d� |d � | �dd|�d � � | �|� d
S ) zI check if a unix_user from SamDB has the same attributes as its
template r r[ rC rB r@ rA r? z /home/test/�unixHomeDirectoryN)rG r9 r0 r: r^ ri rC rC rD rg ` s ��z UserCmdTestCase._check_unix_userc C sx | � dd|d |d d|d d|d d |d
d |d d
|d d|d ddtjd dtjd tjd f �
S )Nr= r
r rO rP rQ rR rS rT rU rV rW rX rY rZ r r r
r r r r �rH r, r- �r; r= rC rC rD r] o s
�z UserCmdTestCase._create_userc C s� | � dd|d |d d|d d|d d |d
d |d d
|d d|d d|d d|d d|d d|d d|d dd tjd d tjd tjd f �S )!z+ create a new user with RFC2307 attributes r= rN r rO rP rQ rR rS rT rU rV rW rX rY rZ r rD rB rE rC rF r? rG r@ rH rA r r
r r r r rk rl rC rC rD rb z s
�z"UserCmdTestCase._create_posix_userc C sr | � |� | �dd|d d|d d|d d|d d
|d d |d
ddtjd dtjd tjd f � S )z! Add RFC2307 attributes to a userr= � addunixattrsr r[ r@ rH rA rD rB rE rC rF r? r r
r r r r )r] rH r, r- rl rC rC rD rf � s
��z!UserCmdTestCase._create_unix_userc C sD dt �|�d| j�� f }| jj| j�� t j|d�}|r |d S d S )Nz,(&(sAMAccountName=%s)(objectCategory=%s,%s))z$CN=Person,CN=Schema,CN=Configuration)r� r� r� r )r� �
binary_encoder. r� r� r� )r; r r� r� rC rC rD rG � s �zUserCmdTestCase._find_user)rb rc )%�__name__�
__module__� __qualname__�__doc__r3 r. r* rF ra r� r� r� r� r� r� r� r� r r r& r, r. r4 r< rQ rZ r5 r6 r7 r^ rO rg r] rb rf rG �
__classcell__rC rC rA rD r # sJ '%
�Su&%! 54; 'U $
r )r, r� r� r� �samba.tests.samba_tool.baser �sambar r r � samba.ndrr � samba.dcerpcr � samba.commonr r � samba.testsr
r rC rC rC rD �<module> s