delta/samba.git/python, branch master git.samba.org: samba.git tests/krb5: Add tests for authentication policies 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-05-04T01:53:06+00:00 84a7ae8e0c7730e03161d69b5ca55436cfc5b066 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
tests/krb5: Allow specifying whether PA-DATA types are to be checked 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-05-04T02:44:11+00:00 f9b666297cbbe5d475b570a9d268df1f3fce048e Not all tests are intended to test that the correct PA-DATA types are returned. This parameter allows us to skip checking for cases where we don’t care. View with ‘git show -b’. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Not all tests are intended to test that the correct PA-DATA types are
returned. This parameter allows us to skip checking for cases where we
don’t care.

View with ‘git show -b’.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
tests/krb5: Allow server and workstation accounts to perform a SamLogon 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-05-04T02:41:00+00:00 53b62429f894cc6d8689d38acc59e8d6ca4ddff9 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
tests/krb5: Allow specifying machine credentials to _test_samlogon() 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-05-04T02:40:21+00:00 c1ab6036bb091dea69e8fce189c9badf10bdd753 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
tests/krb5: Rename ‘server’ to ‘dc_server’ 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-05-04T01:55:31+00:00 031f1c7632e32b52b686a11c1f587cd13da2d3ab This makes it more clear that this is in fact the DC. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
This makes it more clear that this is in fact the DC.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
tests/krb5: Test that NT_STATUS_ACCOUNT_LOCKED_OUT is returned in KDC reply e-data 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-12-01T02:35:56+00:00 3424c6d20fe32f7821ccd61b385189ef271e68ab Certain clients rely on this behaviour. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Certain clients rely on this behaviour.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
tests/krb5: Improve edata checking 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-05-04T02:55:36+00:00 18b24f9572877b295a863432daaf458eb72562d0 Instead of guessing based on a heuristic whether we have KERB_ERROR_DATA or METHOD_DATA in the ‘e-data’ field, decode it first as KERB_ERROR_DATA and fall back to METHOD_DATA if that fails. The environment variable EXPECT_NT_STATUS indicates that the KDC supports returning a status code in the e-data field. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Instead of guessing based on a heuristic whether we have KERB_ERROR_DATA
or METHOD_DATA in the ‘e-data’ field, decode it first as KERB_ERROR_DATA
and fall back to METHOD_DATA if that fails.

The environment variable EXPECT_NT_STATUS indicates that the KDC
supports returning a status code in the e-data field.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
tests/krb5: Remove unused import 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-04-27T04:22:38+00:00 3063abbfb0aaee65b80bd185d66923c148a861b4 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
samba-tool domain: Clean up code 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-02-13T01:53:42+00:00 0d609ee5ed33f01cbb35baae61adf1f19d804fa6 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
samba-tool domain: Remove unused variables 2023-05-18T01:03:37+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-02-13T01:53:19+00:00 56d98e974c39e640ef2aa3da1d3d2ea9980c677a Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>