samba.git/source4/dsdb/tests/python/password_settings.py, branch master

dsdb:password_hash: reject password reset with UNWILLING_TO_PERFORM

2026-01-15T01:48:37+00:00

This is what Windows does: where a password change would cause
CONSTRAINT_VIOLATION, a reset causes UNWILLING_TO_PERFORM.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12020

Signed-off-by: Douglas Bagnall 
Reviewed-by: Gary Lockyer

s4:dsdb:tests: Fix assertion messages

2023-10-13T03:50:31+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:dsdb:tests: Fix code spelling

2023-08-03T14:31:34+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Joseph Sutton

dsdb: Allow password history and password changes without an NT hash

2022-06-26T22:10:29+00:00

We now allow this to be via the ENCTYPE_AES256_CTS_HMAC_SHA1_96 hash instead
which allows us to decouple Samba from the unsalted NT hash for
organisations that are willing to take this step (for user accounts).

(History checking is limited to the last three passwords only, as
ntPwdHistory is limited to NT hash values, and the PrimaryKerberosCtr4
package only stores three sets of keys.)

Since we don't store a salt per-key, but only a single salt, the check
will fail for a previous password if the account was renamed prior to a
newer password being set.

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Andrew Bartlett 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Stefan Metzmacher

CVE-2020-25722 selftest: Catch possible errors in PasswordSettingsTestCase.test_pso_none_applied()

2021-11-09T19:45:32+00:00

This allows future patches to restrict changing the account type
without triggering an error.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14753

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

pytests: heed assertEquals deprecation warning en-masse

2020-02-07T10:37:37+00:00

TestCase.assertEquals() is an alias for TestCase.assertEqual() and
has been deprecated since Python 2.7.

When we run our tests with in python developer mode (`PYTHONDEVMODE=1
make test`) we get 580 DeprecationWarnings about this.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Noel Power

PY3: change shebang to python3 in source4/dsdb dir

2018-12-14T13:40:20+00:00

Signed-off-by: Joe Guo 
Reviewed-by: Noel Power

python tests: fix format() strings for Python 2.6

2018-09-21T18:04:23+00:00

Python 2.6 wants "{0}".format(x), not "{}".format(x).

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

Refactor for PEP8 warning E501 line too long

2018-08-17T00:58:28+00:00

Add a wrapper function to avoid long lines. This also helps
a little to manage/contain the complexity of the code.

Signed-off-by: Tim Beale 
Signed-off-by: Joe Guo 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

Fix PEP8 warning E501 line too long

2018-08-17T00:58:28+00:00

Mostly involves splitting up long strings or comments so that they
span multiple lines. Some place-holder variables have been added in a
few places to avoid exceeding 80 chars.

Signed-off-by: Tim Beale 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall