samba.git/python/samba, branch talloc-2.3.2

tests python krb5: Add python kerberos compatability tests

2020-11-09T02:46:50+00:00

Add new python test to document the differences between the MIT and
Heimdal Kerberos implementations.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

selftest: add a test for the CreateTrustedDomainRelax wrapper

2020-11-06T10:02:35+00:00

Originally copied from 'source4/scripting/devel/createtrust'
(had to drop the TRUST_AUTH_TYPE_VERSION part though, as it
fails against samba DC).

Signed-off-by: Isaac Boukris 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Alexander Bokovoy

Use the new CreateTrustedDomainRelax()

2020-11-06T10:02:35+00:00

Signed-off-by: Isaac Boukris 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Alexander Bokovoy

Add CreateTrustedDomainRelax wrapper for fips mode

2020-11-06T10:02:35+00:00

Signed-off-by: Isaac Boukris 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Alexander Bokovoy

selftest: add a test for py dce transport_encrypted

2020-11-06T10:02:35+00:00

Signed-off-by: Isaac Boukris 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Alexander Bokovoy

Revert "cli_credentials_parse_string: fix parsing of principals"

2020-11-05T06:30:31+00:00

This reverts commit eb0474d27bae4592b25ac6bf600da29c6a1cb9f8.

tests python krb5: Add python kerberos canonicalization tests

2020-11-04T22:54:41+00:00

Add python canonicalization tests, loosely based on the code in
source4/torture/krb5/kdc-canon-heimdal.c.  The long term goal is to move
the integration level tests out of kdc-canon-heimdal, leaving it as a
heimdal library unit test.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

tests python krb5: Add canonicalize flag to ASN1

2020-11-04T22:54:41+00:00

Add the canonicalize flag to KerberosFlags, so that it can be used in
python based canonicalization tests.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

tests python krb5: Make PrincipalName_create a class method

2020-11-04T22:54:41+00:00

Make PrincipalName_create a class method, so it can be used in helper
classes.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

cli_credentials_parse_string: fix parsing of principals

2020-11-04T14:59:34+00:00

When parsing a principal-like name, user name was left with full
principal instead of taking only the left part before '@' sign.

>>> from samba import credentials
>>> t = credentials.Credentials()
>>> t.parse_string('admin@realm.test', credentials.SPECIFIED)
>>> t.get_username()
'admin@realm.test'

The issue is that cli_credentials_set_username() does a talloc_strdup()
of the argument, so we need to change order of assignment to allow
talloc_strdup() to copy the right part of the string.

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher