samba.git/source4/dsdb/tests/python/acl.py, branch talloc-2.1.2

s4-dsdb: Tests for security checks on undelete operation

2015-02-03T04:02:11+00:00

Implemented according to MS-ADTS 3.1.1.5.3.7.1. Unfortunately it appears
LC is also necessary, and it is not granted by default to anyone but
System and Administrator, so tests had to be done negatively

Signed-off-by: Nadezhda Ivanova 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Garming Sam 
Change-Id: Ic03b8fc4e222e7842ec8a9645a1bb33e7df9c438

ldap: Use samba.tests.subunitrun.

2014-11-22T01:23:10+00:00

Change-Id: I872654afb31a5eda8c88aac716f9ce79816e5f05
Signed-off-by: Jelmer Vernooij 
Reviewed-by: Andrew Bartlett

dsdb.tests.acl: Create and run a single testsuite, should easy migration to regulary Python unit tests.

2014-11-19T17:30:07+00:00

Change-Id: I89072d3af1d90e87a47c197d28943f47cedc5deb
Signed-off-by: Jelmer Vernooij 
Reviewed-by: Andrew Bartlett

join.py: Reinstate full_nc_list and make creation of NTDS-DSA object common

2014-08-31T22:36:41+00:00

The new function join_ntdsdsa_obj() returns the object, to be added over LDAP or DsAddEntry().

Andrew Bartlett

Change-Id: I41ac256fb3d4edffc617af4ae580acd941b4de83

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher 
Reviewed-By: Jelmer Vernooij

s4-dsacl: Fixed incorrect handling of privileges in sec_access_check_ds

2013-10-24T20:45:57+00:00

Restore and backup privileges are not relevant to ldap
access checks, and the TakeOwnership privilege should
grant write_owner right

Signed-off-by: Nadezhda Ivanova 

Reviewed-by: Andrew Bartlett

dsdb: Add test for modification of two attributes, one permitted, one denied (bug #9554 - CVE-2013-0172)

2013-01-15T13:03:47+00:00

Reviewed-by: Stefan Metzmacher 
(cherry picked from commit 8bafe0871526cd5d5e7fdbe123ab661379f64cb1)

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Tue Jan 15 14:03:47 CET 2013 on sn-devel-104

s4-join: Import DNS zones in AD DC join

2012-06-24T14:26:41+00:00

samdb: Accept a list of member variables rather than a comma-separated string.

2012-06-21T16:05:33+00:00

s4-selftest: Avoid running kinit for each new connection

2012-02-19T23:49:56+00:00

Kerberos is efficient when the credentials cache is set up once and
then reused.

Sadly this test creates a user, does a test and deletes the user, over
and over.

For this, using NTLM saves a little time, but we also stress the rest
of the DB, and should rework the test.

Andrew Bartlett

Autobuild-User: Andrew Bartlett 
Autobuild-Date: Mon Feb 20 00:49:56 CET 2012 on sn-devel-104

s4-dsdb: use get_config_basedn() in python tests

2011-09-19T00:57:03+00:00

we can't just append CN=Configuration to the basedn, as that won't
give the right configuration DN for a subdomain of a forest

Pair-Programmed-With: Andrew Bartlett