samba.git/python/samba/netcmd/user.py, branch talloc-2.4.0

samba-tool user: Accomodate missing unicodePwd in getpassword command

2022-06-26T22:10:29+00:00

To allow for the NT hash not being stored when NTLM authentication is
disabled, we use the AES256 key instead for verification against the
other packages if the unicodePwd attribute is not present.

Signed-off-by: Joseph Sutton 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

samba-tool user: When possible, obtain AES256 key and salt

2022-06-26T22:10:29+00:00

We will make use of these in the next commit to check that the
supplemental packages are up-to-date with the current password.

Signed-off-by: Joseph Sutton 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

python: Remove redundant assignments

2022-05-10T05:19:34+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider

samba-tool user: Consistently return a tuple

2022-05-05T00:27:33+00:00

We would get an error when get_userPassword_hash() returned None, as
get_virtual_crypt_value() would try to unpack the result as a 2-element
tuple.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

samba-tool user: Remove unused imports

2022-05-05T00:27:33+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

samba-tool user: add ';format=[GeneralizedTime,UnixTime,TimeSpec]' support in "samba-tool user show"

2021-03-01T03:50:35+00:00

This is useful to convert various time values to other formats.

Pair-Programmed-With: Björn Baumbach 

Signed-off-by: Stefan Metzmacher 
Signed-off-by: Björn Baumbach 
Reviewed-by: Andrew Bartlett

samba-tool user: add ';format=[GeneralizedTime,UnixTime,TimeSpec]' support

2021-03-01T03:50:35+00:00

These are useful to convert various time values to other formats.

Pair-Programmed-With: Björn Baumbach 

Signed-off-by: Stefan Metzmacher 
Signed-off-by: Björn Baumbach 
Reviewed-by: Andrew Bartlett

samba-tool user: use an implicit_attrs list instead of add_ATTR variables

2021-03-01T03:50:35+00:00

We'll extent GetPasswordCommand.get_password_attributes() to handle
more virtual formats in future. It'll be much easier to
to maintain a list of attributes we need to filter out again.

sAMAccountName and userPrincipalName are always implicitly
requested in order to keep the existing code sane.

supplementalCredentials and unicodePwd are requested by default
when generating virtual password attributes.

Pair-Programmed-With: Björn Baumbach 

Signed-off-by: Stefan Metzmacher 
Signed-off-by: Björn Baumbach 
Reviewed-by: Andrew Bartlett

samba-tool user: use remote domain information

2021-03-01T03:50:35+00:00

Required, when running get_account_attributes() against a remote samdb.

avoid:
ERROR(): uncaught exception - 'NoneType' object has no attribute 'get'
  File "bin/python/samba/netcmd/__init__.py", line 186, in _run
    return self.run(*args, **kwargs)
  File "bin/python/samba/netcmd/user.py", line 2769, in run
    obj = self.get_account_attributes(samdb, username,
  File "bin/python/samba/netcmd/user.py", line 1250, in get_account_attributes
    realm = self.lp.get("realm")

Signed-off-by: Björn Baumbach 
Reviewed-by: Andrew Bartlett

samba-tool user: fix some typos

2021-03-01T03:50:35+00:00

Signed-off-by: Björn Baumbach 
Reviewed-by: Andrew Bartlett