a )&i @sddlZddlZddlZddlmZddlmmmZddl m Z ddl m Z m Z mZmZejdddejd<dZdZGd d d e Zed krdZdZddlZedS) N) delete_force) KDCBaseTest)AES256_CTS_HMAC_SHA1_96ARCFOUR_HMAC_MD5KDC_ERR_TGT_REVOKED NT_PRINCIPALz bin/python1ZPYTHONUNBUFFEREDFc@sJeZdZddZddZdddZdd Zd d Zdd d ZdddZ dS) AliasTestscCs|jdddSNrenameaction _run_dc_aliasselfr>/usr/lib/python3/dist-packages/samba/tests/krb5/alias_tests.pytest_dc_alias_rename+szAliasTests.test_dc_alias_renamecCs|jdddSNdeleter rrrrrtest_dc_alias_delete.szAliasTests.test_dc_alias_deleteNcs4|dd}|j|fdd|ddS)NcsS)Nrr target_credsrr5z*AliasTests._run_dc_alias..r )Z get_dc_credsZ get_username _run_alias)rr target_namerrrr1szAliasTests._run_dc_aliascCs|jdddSr _run_create_aliasrrrrtest_create_alias_rename7sz#AliasTests.test_create_alias_renamecCs|jdddSrrrrrrtest_create_alias_delete:sz#AliasTests.test_create_alias_deletecs*fdd}j||ddS)NcsT}|}d|}d|}d|i}j|jj||d\}}|S)N.zldap/ dNSHostName) account_typespnZadditional_details) get_samdbZdomain_dns_namelowercreate_account AccountTypeCOMPUTER)samdbrealmZhostnamer&ZdetailsZcredsfnrrrr create_target@s   z3AliasTests._run_create_alias..create_targetr )get_new_usernamer)rr r0rr/rr =szAliasTests._run_create_aliascsT}}j||jjd\}}t||||}|| } | | t t ||} t |t jd| d<|| ||j|dddjd} |d} |t| j|| j|| j| | j| j|dkrV} t t ||} t | t jd| d<|| n |d krl||n ||}|}|j |t j!d gd }t|d j"d d d }j#t$d|gd}j#t$|gd%|}&t'j(j)}t*t+f}fdd}t,}j-||||j.j/|dddd}j0|d||d}1||dS)N)r%ZsAMAccountName0T) kdc_optionsZfreshzauthorization-data@r rr$)Zscopeattrsr)idxZldap)Z name_typenamescsjjdd}|g|fS)N)namer-Ztgt_session_keyZctype)ZPA_S4U2Self_createZ session_key)Z_kdc_exchange_dictZ_callback_dictZreq_bodyZpadatar-rZ target_cnametgtrrgenerate_s4u2self_padatas z7AliasTests._run_alias..generate_s4u2self_padataF)Zexpected_crealmZexpected_cnameZexpected_srealmZexpected_snameZticket_decryption_keyZgenerate_padata_fnexpected_error_modeZcheck_error_fnZcheck_kdc_private_fnr:authenticator_subkeyr3Z expect_pacZ expect_edata)Zcnamer-snameetypes)2r'r1r)r*r+Z addCleanuprZ get_objectSidZ get_realmZget_saltZset_forced_saltldbZMessageZDnZMessageElementZFLAG_MOD_REPLACEZmodifyZ set_usernameZget_tgtZ get_pac_dataZticket_privater(Z assertEqualstrZ account_nameZ account_sidZ logon_nameupnZ domain_namerZfailZget_dnsearchZ SCOPE_BASEgetZPrincipalName_createrZTicketDecryptionKey_from_credsZ RandomKeykcryptoZEnctypeZAES256rrrZtgs_exchange_dictZgeneric_check_kdc_errorZgeneric_check_kdc_privateZ_generic_kdc_exchangeZcheck_error_rep)rrZtarget_creds_fnr r,Z mach_nameZ mach_credsZmach_dnZmach_sidZold_saltmsgZpac_datarBZ mach_name2rZ target_dnresZtarget_hostnamer>Ztarget_decryption_keyr=r?r;r<Zkdc_exchange_dictZreprr9rrWs           zAliasTests._run_alias)N)N)N) __name__ __module__ __qualname__rrrr!r"r rrrrrr *s  r __main__)sysosr@Z samba.testsrZsamba.tests.krb5.kcryptoZtestsZkrb5rEZsamba.tests.krb5.kdc_base_testrZ"samba.tests.krb5.rfc4120_constantsrrrrpathinsertenvironZglobal_asn1_printZglobal_hexdumpr rHZunittestmainrrrrs"