File: //usr/lib/python3/dist-packages/samba/tests/krb5/__pycache__/test_idmap_nss.cpython-310.pyc
o
eF�cO# � @ s� d dl Z d dlZe j�d d� dejd< d dlmZ d dlmZ d dl m
Z
d dl m Z d d l
mZ d d
lmZmZ d d lmZ d d lmZ d d
lmZ dZdZG dd� de�Ze dkrjdZdZd dl Z e � � dS dS )� Nz
bin/python�1�PYTHONUNBUFFERED)�
SCOPE_SUBTREE)�
NTSTATUSError)�DONT_USE_KERBEROS)�security)�
ndr_unpack)� NT_STATUS_NO_IMPERSONATION_TOKEN�NT_STATUS_LOGON_FAILURE)�libsmb_samba_internal)�param)� KDCBaseTestFc @ s� e Zd ZdZe�de� ��ZdZe�de� ��Z d!dd�Z d!dd �Z
d!d
d �Z d d
� Z dd� Z
dd� Zdd� Zdd� Zdd� Zdd� Zdd� Zd d � Z d"d d �Zd S )#�
IdmapNssTestsi� z S-1-22-1-i� FTc C � | j d||d�}|�d� |S )N�MAPPED��prefix�allow_missing_password�allow_missing_keys� ��_get_krb5_creds�set_workstation��selfr r �c� r �A/usr/lib/python3/dist-packages/samba/tests/krb5/test_idmap_nss.py�get_mapped_creds3 � �
z IdmapNssTests.get_mapped_credsc C r )N�UNMAPPEDr r r r r r r �get_unmapped_creds< r z IdmapNssTests.get_unmapped_credsc C r )N�INVALIDr r r r r r r �get_invalid_credsE r z IdmapNssTests.get_invalid_credsc C �" | � � }| j|d| j| jd� d S )NT�� use_kerberos�expected_first_sid� expected_uid�r �_run_idmap_nss_test�mappeduser_sid�mappeduser_uid�r �
user_credsr r r �test_mapped_user_kerberosO �
�z'IdmapNssTests.test_mapped_user_kerberosc C r$ )NFr% r) r- r r r �test_mapped_user_ntlmV r0 z#IdmapNssTests.test_mapped_user_ntlmc C � | � � }| j|ddtd� d S �NT)r& �
remove_pac�expected_error)r r* r r- r r r � test_mapped_user_no_pac_kerberos\ �
�z.IdmapNssTests.test_mapped_user_no_pac_kerberosc C r$ )NT�r& �expected_additional_sidr( �r! r* �unmappeduser_sid�unmappeduser_uidr- r r r �test_unmapped_user_kerberosb r0 z)IdmapNssTests.test_unmapped_user_kerberosc C r$ )NFr8 r: r- r r r �test_unmapped_user_ntlmh r0 z%IdmapNssTests.test_unmapped_user_ntlmc C r2 r3 )r! r* r r- r r r �"test_unmapped_user_no_pac_kerberosn r7 z0IdmapNssTests.test_unmapped_user_no_pac_kerberosc C � | � � }| j|dtd� d S )NT�r& r5 �r# r* r
r- r r r �test_invalid_user_kerberost �
�z(IdmapNssTests.test_invalid_user_kerberosc C r@ )NFrA rB r- r r r �test_invalid_user_ntlmy rD z$IdmapNssTests.test_invalid_user_ntlmc C r2 r3 )r# r* r r- r r r �!test_invalid_user_no_pac_kerberos~ r7 z/IdmapNssTests.test_invalid_user_no_pac_kerberosNc
C sX |d ur | � |� |d ur| � |� |d ur| �|� |s"| �|� | �� }| j} d}
d} | �� } |d u r[|�� }
|jtd|
� d�dgd�}| � dt
|�� t t j
|d jddd ��}|r�| j|| |
| | d
�\}}| �tj|j� tj�d d �}| �tjjd |� d
|j tjd < n|}|�t� t�� }|�| �� j � |�d�}| �|j d|� |� dd� |�d�}| �|j d|� |� dd� z t j | | ||d�}W n t y� } z|j!\}}| � ||� W Y d }~d S d }~ww | �|� |�"� \}}}} } | � || d � | �#|| dd� � |�r | �$|| d � | �%|| � | � |� | � ||� d S )N�cifs�tmpz(sAMAccountName=�)� objectSid)�scope�
expression�attrs� r )�idx)�pac�
KRB5CCNAMEr zFILE:zclient min protocol�NT1zclient max protocol)�lp�creds���)&�assertIsNotNone� assertIsNone� assertFalse� get_samdb�host�get_server_creds� get_username�searchr � assertEqual�lenr r �dom_sid�get�create_ccache_with_user�
addCleanup�os�remove�name�environ� __setitem__�set_kerberos_stater �s3param� get_context�load�get_lp�
configfile�set�libsmb�Connr �args� posix_whoami� assertNotIn�assertNotEqual�assertIn) r r. r& r4 r5 r' r9 r( �samdb� server_name�service�share� server_creds� user_name�resrT � cachefile� krb5_ccname�s3_lp� min_protocol� max_protocol�conn�e�enum�_�uid�gid�gids�sids�guestr r r r* � s|
��
�
��
z!IdmapNssTests._run_idmap_nss_test)FT)FNNNN)�__name__�
__module__� __qualname__r, r r` r+ r< r; r r! r# r/ r1 r6 r= r> r? rC rE rF r* r r r r r , s:
�
�
�
�r �__main__) �sysrd �path�insertrg �ldbr �sambar �samba.credentialsr � samba.dcerpcr � samba.ndrr �samba.ntstatusr r
� samba.samba3r rp r rj � samba.tests.krb5.kdc_base_testr
�global_asn1_print�global_hexdumpr r� �unittest�mainr r r r �<module> s.
9 �