samba.git/python/samba/netcmd/user/readpasswords/common.py, branch master

samba-tool user: hashlib.sha1 is always present

2024-12-20T07:04:31+00:00

We maybe thought we were checking that sha1 was in hashlib, but we were
only checking that hashlib is in the Python library (`hashlib.sha1()`
would not raise ImportError).

The documentation says hashlib always contains sha1 -- if that
changes, it is better we know by failing noisily with the import error
at the top of the file.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15756

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andreas Schneider

samba-tool user: use _glue.crypt, not crypt.crypt

2024-12-20T07:04:31+00:00

Because we know we have _glue.crypt, and we know it raises exceptions
rather than returning None, we can simplify the checks.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15756

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andreas Schneider

netcmd: More explicit warning when python-gpg is missing

2024-10-31T00:23:09+00:00

Signed-off-by: Andréas Leroux 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Jennifer Sutton 

Autobuild-User(master): Douglas Bagnall 
Autobuild-Date(master): Thu Oct 31 00:23:09 UTC 2024 on atb-devel-224

samba-tool user readpasswords: avoid `assert` for validation

2024-06-11T05:32:28+00:00

`assert` can be optimised away if python is run with `-O`.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Jo Sutton 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Tue Jun 11 05:32:28 UTC 2024 on atb-devel-224

auth/credentials: Make cli_credentials_get_aes256_key into generic key access

2024-03-14T22:06:39+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jo Sutton

auth/credentials: Use salt on credentials object for Creds.get_aes256_key()

2024-03-14T22:06:39+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jo Sutton

samba-tool user getpassword: Also return the time a GMSA password is valid until

2024-02-29T01:31:31+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool: Allow ;format=UnixTime etc to operate on virtual attributes

2024-02-29T01:31:31+00:00

To convert a virtual attribute we must understand that it has
been put into "obj" under the name including the ;format= part
and so we must look it back up with that name when looking to
covert it from (say) NTTIME to a unix time.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool user getpassword: Do not show preview of gMSA password

2024-02-29T01:31:31+00:00

The AD server will send a preview of the next gMSA password, 5mins before
it is expected to be active.

This is useful in a keytab, which needs to be in place before a ticket
could possibly be issued, but is not helpful for authentication, as
the server also accepts passwords for 5mins after the change.

This avoids needing teach all users of this tool how to fall back to
the previous password for a 5min period every 30 days, by default.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool: Make samba-tool user getpassword support a ';previous=1' option

2023-12-21T02:05:38+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall