a )&i@sddlZddlZddlZddlmZddlmZmZddlmZddl m Z ddl m Z ddl mZddlmZejdd d ejd <d Zd ZGd ddeZedkrd Zd ZddlZedS)N) SCOPE_SUBTREE) NTSTATUSErrorgensec) AuthContext)security) ndr_unpack) NT_STATUS_NO_IMPERSONATION_TOKEN) KDCBaseTestz bin/python1ZPYTHONUNBUFFEREDFc@s2eZdZdZddZddZddZd d d Zd S) CcacheTestszbTest for authentication using Kerberos credentials stored in a credentials cache file. cCs |dS)N_run_ccache_testselfr>/usr/lib/python3/dist-packages/samba/tests/krb5/test_ccache.py test_ccache.szCcacheTests.test_ccachecCs|jdddS)NT)renamer rrrrtest_ccache_rename1szCcacheTests.test_ccache_renamecCs|jdddddS)NFT) include_pac expect_anon allow_errorr rrrrtest_ccache_no_pac4szCcacheTests.test_ccache_no_pacFTc CsHd}d}|}|j|jjdd}|} |j|||jjd||fd\} } |j|| |d\} } |t j | j |j t d| d gd }|d t|ttj|d d d }|r|}t|}t|tjd |d <|||}|ddi}||d<||d<tj|}|| | tj!|"dt#||gd}tj$||}|| |"dd}d}d}|r|s|st%d|&|\}}|svt%d|&|\}}qvz |'}WnLt(y}z2|s|)|j*\}} |t+|WYd}~dSd}~00|j,}|j-}|.t|d |||d dS)NZ ccachemacZhostF) account_typeZ use_cachez%s/%s)rZspn)Zpacz(sAMAccountName=%s)Z objectSid)ZscopeZ expressionattrsrZsAMAccountNamez server rolez"active directory domain controllerlp_ctxZtarget_hostnameZGSSAPI)rldbmethodszrunning client gensec_updatezrunning server gensec_update)/Z get_samdbZget_cached_credsZ AccountTypeZUSERZ get_usernameZcreate_accountZCOMPUTERZcreate_ccache_with_userZ addCleanuposremovenamesearchrZ assertEquallenrrZdom_sidZget_new_usernamerZMessageZget_dnZMessageElementZFLAG_MOD_REPLACEZmodifyZget_lpsetrZSecurityZ start_clientZset_credentialsZ want_featureZ FEATURE_SEALZstart_mech_by_sasl_namerZ start_serverprintupdateZ session_inforZfailargsrZsecurity_tokenZsidsZ assertGreater) rrrrrZ mach_nameZserviceZsamdbZuser_credentialsZ user_nameZmach_credentials_ZcredsZ cachefileZldb_resZsidnew_namemsgZlpZsettingsZ gensec_clientZ auth_contextZ gensec_serverZclient_finishedZserver_finishedZserver_to_clientZclient_to_serverZsessioneenumtokenZ token_sidsrrrr 8s               zCcacheTests._run_ccache_testN)FTFF)__name__ __module__ __qualname____doc__rrrr rrrrr )sr __main__)sysr rrZsambarrZ samba.authrZ samba.dcerpcrZ samba.ndrrZsamba.ntstatusrZsamba.tests.krb5.kdc_base_testr pathinsertenvironZglobal_asn1_printZglobal_hexdumpr r/Zunittestmainrrrrs(