samba.git/source4/dsdb/tests/python, branch talloc-2.4.0

s4-dsdb: Remove unused variables in token_group python test

2022-10-21T03:57:33+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall

s4-dsdb: simplify conditional in python token_group test

2022-10-21T03:57:33+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall

s4-dsdb: Remove unused import in token_group python test

2022-10-21T03:57:33+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall

s4-dsdb: Use Python 'del' rather than assigning over with None

2022-10-21T03:57:33+00:00

This is the clearer way to trigger the destruction of this variable
and so the LDB connection under it.

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall

s4-dsdb: remove unused Python variables

2022-10-21T03:57:33+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall

s4-dsdb: Use a raw python string to avoid creating and invalid escape sequence

2022-10-21T03:57:33+00:00

While the invalid escape sequence worked and was passed to the LDB
layer for it's use, linting tools will complain so we should not do
this.  We don't want to get caught out when a future python version
becomes more strict.

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall

pytests:s4/dsdb/passwords: avoid unused imports

2022-09-16T06:47:43+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Fri Sep 16 06:47:43 UTC 2022 on sn-devel-184

pytest/password_lockout: be less verbose by default

2022-09-16T05:46:35+00:00

leaving the carefully constructed verbosity there for whoever choses
to switch it on.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

CVE-2020-25720: s4-acl: Owner no longer has implicit Write DACL

2022-09-16T02:32:36+00:00

The implicit right of an object's owner to modify its security
descriptor no longer exists, according to the new access rules. However,
we continue to grant this implicit right for fileserver access checks.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14810

Signed-off-by: Nadezhda Ivanova 
Reviewed-by: Andrew Bartlett

CVE-2020-25720: s4-acl: Adjusted some tests to work with the new behavior

2022-09-16T02:32:36+00:00

Test using non-priviledged accounts now need to make sure they have
WP access on the prvided attributes, or Write-DACL
Some test create organizational units with a specific SD, and those now
need the user to have WD or else they give errors

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14810

Signed-off-by: Nadezhda Ivanova 
Reviewed-by: Andrew Bartlett