samba.git/python/samba/tests/krb5/protected_users_tests.py, branch master

python: Generate HRESULT definitions automatically

2024-01-15T01:56:53+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall 

Autobuild-User(master): Joseph Sutton 
Autobuild-Date(master): Mon Jan 15 01:56:53 UTC 2024 on atb-devel-224

python: move HRES_SEC_* constants to samba module

2023-11-30T01:05:32+00:00

Signed-off-by: Rob van der Linde 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

tests/krb5: Fix RC4‐only Protected Users tests

2023-10-19T21:37:36+00:00

We forgot to actually use the ‘supported_enctypes’ parameter.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

tests/krb5: Improve _test_samr_change_password() method

2023-05-05T02:54:31+00:00

Instead of using anonymous credentials, we now connect using the
passed-in credentials.

We now correctly construct nt_password and nt_verifier so as to
successfully change the password, instead of having to distinguish
between a WRONG_PASSWORD error and an error caused by the password
change being disallowed.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

tests/krb5: Generify protected users test methods

2023-05-05T02:54:30+00:00

We can reuse them to test accounts restricted authentication in some
form or another.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

tests/krb5: Handle NT hashes being disabled

2023-05-05T02:54:30+00:00

If NT hashes are disabled, we should not expect the RC4 enctype to be
available for non-computer accounts.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

tests/krb5: Pass client credentials down into kdc_exchange_dict

2023-05-05T02:54:30+00:00

These are useful inside the test infrastructure.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

tests/krb5: Split out functions for testing logons and password changes

2023-05-05T02:54:30+00:00

This allows their use for testing other forms of restricted accounts.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

tests/krb5: Fix comment indentation

2023-04-12T13:52:31+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider

tests/krb5: Cache drsuapi connection

2023-03-20T00:22:32+00:00

We call get_keys() a lot, and it's more efficient if we aren't creating
a new connection for every new account we create.

To allow us to maintain a single cached connection, remove the samdb
parameter from get_keys() and get_secrets(). No-one was using it anyway.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett