samba.git/python/samba/tests/usage.py, branch talloc-2.4.0

CVE-2022-37966 tests/krb5: Add a test requesting tickets with various encryption types

2022-12-13T13:07:29+00:00

The KDC should leave the choice of ticket encryption type up to the
target service, and admit no influence from the client.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Joseph Sutton 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

lib/compression: script to test 3 byte hash

2022-12-01T22:56:39+00:00

Compression uses a 3 byte hash remember LZ77 matches in a 14-bit table.
This script runs the hash over all 16M combinations, then again over
all ASCII combinations, counting collisions to find hot-spots.

If you think you have a better hash, you are probably right, but you
should try it here -- alter h() -- before committing to it. This one is
literally the first one I thought of.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Joseph Sutton

tests/krb5: Add tests of PAC group handling

2022-11-08T03:37:37+00:00

In which we make AS and TGS requests and verify the SIDs we expect are
returned in the PAC.

Example command to test against Windows Server 2019 functional level
2016 with FAST enabled:

ADMIN_USERNAME=Administrator ADMIN_PASSWORD=locDCpass1 \
CLAIMS_SUPPORT=1 COMPOUND_ID_SUPPORT=1 DC_SERVER=ADDC.EXAMPLE.COM \
DOMAIN=EXAMPLE EXPECT_PAC=1 FAST_SUPPORT=1 KRB5_CONFIG=krb5.conf \
PYTHONPATH=bin/python REALM=EXAMPLE.COM SERVER=ADDC.EXAMPLE.COM \
SKIP_INVALID=1 SMB_CONF_PATH=smb.conf STRICT_CHECKING=1 \
TKT_SIG_SUPPORT=1 python3 python/samba/tests/krb5/group_tests.py

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Tue Nov  8 03:37:37 UTC 2022 on sn-devel-184

CVE-2021-20251 tests/krb5: Add tests for password lockout race

2022-09-12T23:07:37+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

tests/krb5: Add claims tests

2022-09-09T01:11:05+00:00

Based on tests originally written by Stefan Metzmacher 

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Fri Sep  9 01:11:05 UTC 2022 on sn-devel-184

CVE-2022-2031 tests/krb5: Add tests for kpasswd service

2022-07-27T10:52:36+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15074

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider

tests/krb5: Add test for presence of NT hash

2022-06-26T22:10:29+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

tests/krb5: Add tests for the Protected Users group

2022-03-18T11:55:30+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Stefan Metzmacher

tests/krb5: Add tests for PAC buffer alignment

2021-12-15T03:41:32+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

CVE-2020-25717: tests/krb5: Add a test for idmap_nss mapping users to SIDs

2021-11-15T18:10:28+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14901

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Joseph Sutton 
Signed-off-by: Stefan Metzmacher 

[metze@samba.org removed unused tests for a feature that
 was removed before merging]
Reviewed-by: Ralph Boehme