samba.git/python/samba/netcmd/user/readpasswords, branch talloc-2.4.2

python/netcmd: Improve documentation for "samba-tool user getpassword"

2023-12-21T02:05:38+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

python/netcmd: Add "samba-tool user get-kerberos-ticket" to get a ticket for a gMSA

2023-12-21T02:05:38+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool: document that -H can be used with gMSA accounts

2023-12-21T02:05:38+00:00

Signed-off-by: Rob van der Linde 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool: fix some grammar in getpassword docstrings

2023-12-21T02:05:38+00:00

Signed-off-by: Rob van der Linde 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool: Make samba-tool user getpassword support a ';previous=1' option

2023-12-21T02:05:38+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool user getpassword: Prepare to support a ;previous=1 option, change behaviour for ;rounds=

2023-12-21T02:05:38+00:00

This will return the previous password, but the pattern is to include
the option in the returned attribute name, so we need to use
vatter["raw_attr"], not 'a'.

This changes the behaviour for the ;rounds= option used when we hold
the plaintext password (possibly under GPG encryption).

This is now consistant with other parameters in the LDAP attribute,
and is now included in the returned attribute name.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool: Add support for getting the generated unicodePwd for a gMSA account

2023-12-21T02:05:38+00:00

This pre-hashed value may be more practical to use than the random "UTF-16"
password.  In particular it is easy to compare with the DB values.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

netcmd: user: samba-tool support to allow non-windows use of GMSA accounts (show password)

2023-12-21T02:05:38+00:00

Signed-off-by: Rob van der Linde 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool user getpassword: Use UTF16_MUNGED charcnv to map "UTF16" to UTF8

2023-12-21T02:05:38+00:00

This copes with random invalid UTF-16 as seen with gMSA accounts.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

samba-tool: Prepare to allow samba-tool user getpasswords to operate against a remote server

2023-12-21T02:05:38+00:00

While passwords are not normally available for read, Group Managed Service Account
passwords are, as this is how they are distributed.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall