o

eF�c��@s�dd
lZdd
l
Z
ej�dd�
de
jd<dd
lZddlmZ
ddlmZm	Z	
ddl
mZ
ddlm
Z

dd	lmZ
dd
lmZ
ddlmZ
dZdZGd
d�de�ZedkrbdZdZdd
lZe��
d
Sd
S)�Nz
bin/python�
1�PYTHONUNBUFFERED)
�
SCOPE_SUBTREE)�
NTSTATUSError�gensec)
�AuthContext)
�security)
�
ndr_unpack)
� NT_STATUS_NO_IMPERSONATION_TOKEN)
�KDCBaseTestFc@s6eZ
dZd
Zdd�Zdd�Zdd�Z			d
d
d�
ZdS)�CcacheTestszbTest for authentication using Kerberos credentials stored in a
       credentials cache file.
    c

Cs|��
dS)
N�
�_run_ccache_test�
�self�r�>/usr/lib/python3/dist-packages/samba/tests/krb5/test_ccache.py�test_ccache.s
zCcacheTests.test_ccachec

Cs|jd
d�

dS)NT)
�renamer
rrrr�test_ccache_rename1s
zCcacheTests.test_ccache_renamec

Cs|jd
ddd�
dS)NFT)�include_pac�expect_anon�allow_errorr
rrrr�test_ccache_no_pac4s


�zCcacheTests.test_ccache_no_pacFTc 
CsBd
}d}|��}|j
|jjdd�}|��}	|j|||jjd||fd�\}
}|j||
|d�\}}
|�t	j
|
j�
|jt
d|	d	g
d
�}|�dt|�
�
ttj|dd	d�}|
rs|��}t�|���
}t�|tjd
�|d
<|�|�

|��}|�dd�
i}||d<||d<tj�|�
}|�|�

|� tj!�

|�"d�

t#||gd�}tj�$||�}|�|
�

|�"d�

d}d}d}|r�|s�|s�t%d�

|�&|�
\}}|s�t%d�

|�&|�
\}}|r�|r�z|�'�}Wn%t(�
y
}
z|s�|�)�
|j*\}}|�t+|�
WYd}~dSd}~w
w|j,}|j-}|�.t|�
d�
|�||d�
dS)N�	ccachemac�hostF)�account_type�	use_cachez%s/%s)r�spn)
�pacz(sAMAccountName=%s)�	objectSid)�scope�
expression�attrs�
r
�sAMAccountNamezserver rolez"active directory domain controller�lp_ctx�target_hostname�GSSAPI)r&�ldb�methods�zrunning client gensec_updatezrunning server gensec_update)/�	get_samdb�get_cached_creds�AccountType�USER�get_username�create_account�COMPUTER�create_ccache_with_user�
addCleanup�os�remove�name�searchr�assertEqual�lenr	r�dom_sid�get_new_usernamer)�Message�get_dn�MessageElement�FLAG_MOD_REPLACE�modify�get_lp�setr�Security�start_client�set_credentials�want_feature�FEATURE_SEAL�start_mech_by_sasl_namer�start_server�print�update�session_infor�fail�argsr
�security_token�sids�
assertGreater) rrrrr�	mach_name�service�samdb�user_credentials�	user_name�mach_credentials�
_�creds�	cachefile�ldb_res�sid�new_name�msg�lp�settings�
gensec_client�auth_context�
gensec_server�client_finished�server_finished�server_to_client�client_to_server�session�
e�enum�token�
token_sidsrrrr8s�


�




�
�


�

�



�

















�


��






��

zCcacheTests._run_ccache_testN)FTFF)�__name__�
__module__�__qualname__�__doc__rrrrrrrrr)s

�r�__main__)�sysr5�path�insert�environr)r�sambarr�
samba.authr�samba.dcerpcr�	samba.ndrr	�samba.ntstatusr
�samba.tests.krb5.kdc_base_testr�global_asn1_print�global_hexdumprrn�unittest�mainrrrr�<module>
s,













�