File: //usr/lib/python3/dist-packages/samba/tests/krb5/__pycache__/compatability_tests.cpython-310.pyc
o
eF�c1) � @ s� d dl Z d dlZe j�d d� dejd< d dlmZ d dlm m m
Z d dl m
Z
mZmZmZmZmZmZmZmZmZmZmZ dZdZdZd Z d
Z G d d � d e�Z e d
krfdZdZd dl Z e �!� dS dS )� Nz
bin/python�1�PYTHONUNBUFFERED)� KDCBaseTest) �AES128_CTS_HMAC_SHA1_96�AES256_CTS_HMAC_SHA1_96�ARCFOUR_HMAC_MD5�KDC_ERR_PREAUTH_REQUIRED�
KRB_AS_REP� KRB_ERROR�KU_AS_REP_ENC_PART�KU_PA_ENC_TIMESTAMP�PADATA_ENC_TIMESTAMP�PADATA_ETYPE_INFO2� NT_PRINCIPAL� NT_SRV_INSTF�y �z i c s� e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Z� ZS )!�SimpleKerberosTestsc s t t| ��� t| _t| _d S )N)�superr �setUp�global_asn1_print�
do_asn1_print�global_hexdump�
do_hexdump)�self�� __class__� �F/usr/lib/python3/dist-packages/samba/tests/krb5/compatability_tests.pyr 7 s
zSimpleKerberosTests.setUpc C �* | � � }| �|�\}}| �t|d � d S �Nr )�get_user_creds�as_req� assertEqual� MIT_ENC_AS_REP_PART_TYPE_TAG�r �creds�enc�_r r r �test_mit_EncASRepPart_tag< � z-SimpleKerberosTests.test_mit_EncASRepPart_tagc C r r )r! r" r# � HIEMDAL_ENC_AS_REP_PART_TYPE_TAGr% r r r � test_heimdal_EncASRepPart_tagA r* z1SimpleKerberosTests.test_heimdal_EncASRepPart_tagc C s0 | � � }| �|�\}}d|v r| �d� d S d S )N�kvnoz kvno present in EncryptedData�r! r" �fail�r r& r( r' r r r �test_mit_EncryptedData_kvnoF �
�z/SimpleKerberosTests.test_mit_EncryptedData_kvnoc C s0 | � � }| �|�\}}d|vr| �d� d S d S )Nr- z kvno absent in EncryptedDatar. r0 r r r � test_heimdal_EncryptedData_kvnoL r2 z3SimpleKerberosTests.test_heimdal_EncryptedData_kvnoc C sZ | � � }| �|�\}}| �t|d � | j|t�� d�}t|d dd�}| �t |@ � d S �Nr ��asn1Spec�flags� )�base)
r! r" r# r$ �
der_decode� krb5_asn1�
EncTGSRepPart�int�
assertTrue�ENC_PA_REP_FLAG�r r& r' r( �as_repr7 r r r �"test_mit_EncASRepPart_FAST_supportR s z6SimpleKerberosTests.test_mit_EncASRepPart_FAST_supportc C sb | � � }| �|�\}}| �t|d � | j|t�� d�}|d }t|d dd�}| �t |@ � d S r4 )
r! r" r# r+ r: r; � EncASRepPartr= � assertFalser? r@ r r r �&test_heimdal_EncASRepPart_FAST_support\ s z:SimpleKerberosTests.test_heimdal_EncASRepPart_FAST_supportc C sP | � � }tf}| �||�^}}| �|� | �|�}d|d vr&| �d� d S d S )N�saltr z8(MIT) Salt not populated for ARCFOUR_HMAC_MD5 encryption�r! r �as_pre_auth_req�check_preauth_rep�get_etype_info2r/ �r r& �etypes�repr( � etype_info2r r r �test_mit_arcfour_saltg �
��z)SimpleKerberosTests.test_mit_arcfour_saltc C sP | � � }tf}| �||�^}}| �|� | �|�}d|d v r&| �d� d S d S )NrF r z8(Heimdal) Salt populated for ARCFOUR_HMAC_MD5 encryptionrG rK r r r �test_heimdal_arcfour_saltq rP z-SimpleKerberosTests.test_heimdal_arcfour_saltc C s^ | � � }| �� }| �� }| �|�}| �|�}| j||dd� | �||�}| j||ddd� d S �NF��service_ticketT)rT �expect_ticket_checksum��get_client_creds�get_service_creds�get_krbtgt_creds� TicketDecryptionKey_from_creds�get_tgt�
verify_ticket�get_service_ticket�r �
user_creds� target_creds� krbtgt_creds�key�tgtrT r r r � test_heimdal_ticket_signature{ �
�z1SimpleKerberosTests.test_heimdal_ticket_signaturec C s^ | � � }| �� }| �� }| �|�}| �|�}| j||dd� | �||�}| j||ddd� d S rR rV r^ r r r �test_mit_ticket_signature� re z-SimpleKerberosTests.test_mit_ticket_signaturec C s` | � � }| �� }| �� }| �|�}| �|�}| j||dd� | �||�}| j||dddd� d S )NFrS T)rT rU �expect_full_checksumrV r^ r r r �test_full_signature� s
�z'SimpleKerberosTests.test_full_signaturec C s� |� � }|�� }| jt|gd�}| jtd|gd�}| jdd�}t�d�}d } | j| t |�|||d |d d|d d d� }
| �
|
�} | ||||fS )N)� name_type�names�krbtgti�� )�offset� forwardable��� �padata� kdc_options�cname�realm�sname� from_time� till_time�
renew_time�noncerL � addresses�additional_tickets) � get_username� get_realm�PrincipalName_creater r �get_KerberosTimer; �
KDCOptions�
AS_REQ_create�str�send_recv_transaction) r r& rL �userrs rr rt �tillrq rp �reqrM r r r rH � s8 ��
�
z#SimpleKerberosTests.as_pre_auth_reqc C s. | � |� | �|d t� | �|d t� d S )N�msg-typez
error-code)�assertIsNotNoner# r
r )r rM r r r rI � s
z%SimpleKerberosTests.check_preauth_repc C sN | j |d t�� d�}|D ]}|d tkr|d } nq
| j |t�� d�}|S )Nze-datar5 z padata-typez padata-value)r: r; � METHOD_DATAr � ETYPE_INFO2)r rM �
rep_padata�parN r r r rJ � s � ��z#SimpleKerberosTests.get_etype_info2c C s t ttf}| �||�\}}}}}| �|� | �|�}| �||d �} | �� \}
} | �|
| �} | j | t
� � d�} | � | t
| �} | j | t
�� d�} | �t| �} t
�d�}
| g}| j|t|
�|||d |d d|d d d� }| �|�}| �|� |d }| �|t� |d }| �t|d d �}||fS ) Nr r5 rm rn ro r� zenc-part�cipher)r r r rH rI rJ � PasswordKey_from_etype_info2�get_KerberosTimeWithUsec�PA_ENC_TS_ENC_create�
der_encoder; �
PA_ENC_TS_ENC�EncryptedData_creater �
EncryptedData�PA_DATA_creater
r r� r� r� r� r# r �decryptr )r r& rL rM rr rt rs r� rN rb �patime�pausec�pa_tsrq rp r� �msg_type�enc_part�enc_as_rep_partr r r r" � sL �
�
�zSimpleKerberosTests.as_req)�__name__�
__module__� __qualname__r r) r, r1 r3 rB rE rO rQ rd rf rh rH rI rJ r" �
__classcell__r r r r r 5 s"
r �__main__)"�sys�os�path�insert�environ� samba.tests.krb5.kdc_base_testr � samba.tests.krb5.rfc4120_pyasn1�tests�krb5�rfc4120_pyasn1r; �"samba.tests.krb5.rfc4120_constantsr r r r r r
r r r
r r r r r r+ r$ r? r r� �unittest�mainr r r r �<module> s(
8 k �