samba.git/python/samba/tests/dcerpc/raw_protocol.py, branch master

tests/dcerpc/raw_protocol: test invalid schannel binds

2024-10-10T14:01:04+00:00

Note the ad_member will keep these as expected failures,
as it doesn't provide the netlogon service,
while the knownfail for the ADDC is only temporary.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

tests/dcerpc/raw_protocol: add more tests for auth_pad alignment

2024-10-10T14:01:04+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

tests/dcerpc/raw_protocol: add tests for max auth_padding, auth_len or auth_offset

2024-10-10T14:01:04+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

tests/dcerpc/raw_protocol: fix comment in test_spnego_change_auth_type1

2024-10-10T14:01:04+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

tests/dcerpc/raw_protocol: test_no_auth_ctx_request

2024-10-10T14:01:04+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

tests/dcerpc/raw_protocol: run test_neg_xmit_ffff_ffff over tcp and smb

2024-10-10T14:01:04+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

tests/dcerpc/raw_protocol: add more test for auth padding during ALTER_CONTEXT/AUTH3

2024-10-10T14:01:04+00:00

The aim is to keep testing the code paths, which are no longer
testing because allow_bind_auth_pad is false now, which
means the existing tests fail directly at the BIND,
but we also want to test the error handling on
ALTER_CONTEXT (and AUTH3).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

tests/dcerpc/raw_protocol: pass against Windows 2022 and require special env vars for legacy servers

2024-10-10T14:01:04+00:00

Test works against Windows 2022 and works like this:

SMB_CONF_PATH=/dev/null SERVER=172.31.9.118 \
  TARGET_HOSTNAME=w2022-118.w2022-l7.base IGNORE_RANDOM_PAD=1 \
  DOMAIN=W2022-L7 REALM=W2022-L7.BASE \
  USERNAME=administrator PASSWORD=A1b2C3d4 \
  python/samba/tests/dcerpc/raw_protocol.py -v -f TestDCERPC_BIND

Against a legacy Windows2012R2 server this still works:

SMB_CONF_PATH=/dev/null SERVER=172.31.9.188 \
  TARGET_HOSTNAME=w2012r2-188.w2012r2-l6.base ALLOW_BIND_AUTH_PAD=1 \
  LEGACY_BIND_NACK_NO_REASON=1 AUTH_LEVEL_CONNECT_LSA=1 \
  IGNORE_RANDOM_PAD=1 DOMAIN=W2012R2-L6 REALM=W2012R2-L6.BASE \
  USERNAME=administrator PASSWORD=A1b2C3d4 \
  python/samba/tests/dcerpc/raw_protocol.py -v -f TestDCERPC_BIND

Currently Samba behaves like 2012R2, but the next commits
will change that...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

python: tests: update all super calls to python 3 style in tests

2023-11-30T01:05:32+00:00

Signed-off-by: Rob van der Linde 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett 

[abartlet@samba.org Some python2 style super() calls remain due
 to being an actual, even if reasonable, behaviour change]

CVE-2021-23192: python/tests/dcerpc: add tests to check how security contexts relate to fragmented requests

2021-11-09T19:45:34+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14875

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Samuel Cabrero