summaryrefslogtreecommitdiff
path: root/python
AgeCommit message (Collapse)AuthorFilesLines
2021-03-08gpo: Test Group Policy VGP Issue PolicyDavid Mulder2-0/+76
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08samba-tool: Add a gpo command for setting VGP MOTD Group PolicyDavid Mulder1-1/+67
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08samba-tool: Test gpo manage motd set commandDavid Mulder2-0/+74
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08samba-tool: Add a gpo command for listing VGP MOTD Group PolicyDavid Mulder1-1/+37
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08samba-tool: Test gpo manage motd list commandDavid Mulder2-0/+73
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: Apply Group Policy MOTD setting from VGPDavid Mulder1-1/+46
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: Test Group Policy VGP MOTD PolicyDavid Mulder2-0/+76
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: vgp_sudoers_ext handle missing and dispersed principal namesDavid Mulder1-2/+8
If we don't anticipate a missing principal name, the extension crashes. Also, principal names could be in dispersed listelements. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: Ensure that vgp_sudoers_ext handles missing/dispersed principal namesDavid Mulder1-3/+31
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: Add rsop output for vgp_openssh_extDavid Mulder1-0/+21
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: vgp_openssh_ext create the config dirDavid Mulder1-0/+2
We should create the /etc/ssh/sshd_config.d dir if it doesn't exist. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: Improve the samba-gpupdate --rsop outputDavid Mulder1-1/+8
Use the CSE name based on the class name, not the module name. Also ignore the Local Policy gpo. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: Add admxload warning about Windows templatesDavid Mulder1-0/+6
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: Ensure that samba-gpupdate doesn't require ad-dcDavid Mulder1-2/+2
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-08gpo: Test to ensure that samba-gpupdate doesn't require ad-dcDavid Mulder1-0/+44
Running samba-gpupdate on a client is causing an error in gp_access_ext, due to it attempting to access sam.ldb before detecting whether we are on an ad-dc. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-03-01test: samba-tool user show: Test ↵Björn Baumbach1-0/+132
';format=[GeneralizedTime,UnixTime,TimeSpec] attributes Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-03-01samba-tool user: add ';format=[GeneralizedTime,UnixTime,TimeSpec]' support ↵Stefan Metzmacher1-28/+68
in "samba-tool user show" This is useful to convert various time values to other formats. Pair-Programmed-With: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-03-01samba-tool user: add ';format=[GeneralizedTime,UnixTime,TimeSpec]' supportStefan Metzmacher1-0/+125
These are useful to convert various time values to other formats. Pair-Programmed-With: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-03-01samba-tool user: use an implicit_attrs list instead of add_ATTR variablesStefan Metzmacher1-68/+119
We'll extent GetPasswordCommand.get_password_attributes() to handle more virtual formats in future. It'll be much easier to to maintain a list of attributes we need to filter out again. sAMAccountName and userPrincipalName are always implicitly requested in order to keep the existing code sane. supplementalCredentials and unicodePwd are requested by default when generating virtual password attributes. Pair-Programmed-With: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-03-01pyglue: add float2nttime() and nttime2float()Stefan Metzmacher3-0/+68
The float value is what the native python time.time() returns, it's basically a struct timespec converted to double/float. Pair-Programmed-With: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-03-01samba-tool user: use remote domain informationBjörn Baumbach1-2/+2
Required, when running get_account_attributes() against a remote samdb. avoid: ERROR(<class 'AttributeError'>): uncaught exception - 'NoneType' object has no attribute 'get' File "bin/python/samba/netcmd/__init__.py", line 186, in _run return self.run(*args, **kwargs) File "bin/python/samba/netcmd/user.py", line 2769, in run obj = self.get_account_attributes(samdb, username, File "bin/python/samba/netcmd/user.py", line 1250, in get_account_attributes realm = self.lp.get("realm") Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-03-01samba-tool user: fix some typosBjörn Baumbach1-23/+23
Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-02-24samba-tool: Add a gpo command for removing VGP Startup Scripts Group PolicyDavid Mulder1-1/+57
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Feb 24 22:01:08 UTC 2021 on sn-devel-184
2021-02-24samba-tool: Test gpo manage script startup remove commandDavid Mulder2-0/+50
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-24samba-tool: Add a gpo command for adding VGP Startup Scripts Group PolicyDavid Mulder1-1/+79
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-24samba-tool: Test gpo manage script startup add commandDavid Mulder2-0/+72
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-24samba-tool: Add a gpo command for listing VGP Startup Scripts Group PolicyDavid Mulder1-1/+48
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-24samba-tool: Test gpo manage script startup list commandDavid Mulder2-0/+79
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-24gpo: Apply Group Policy Startup Scripts from VGPDavid Mulder1-2/+99
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-24gpo: Test Group Policy VGP Startup Script PolicyDavid Mulder2-0/+149
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-22pytest/segfault: fix the rpc.echo testDouglas Bagnall1-1/+1
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: David Mulder <dmulder@suse.com>
2021-02-22pytest/segfaults: drop a useless lineDouglas Bagnall1-1/+0
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: David Mulder <dmulder@suse.com>
2021-02-22pytest:segfault: avoid gdb_backtrace on knownfailDouglas Bagnall1-0/+11
We know that test_net_replicate_init__3() segfaults. It is a knownfail and we don't need to see the gdb backtrace every time. This saves nearly two minutes on `make test TESTS=segfault`. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: David Mulder <dmulder@suse.com>
2021-02-14samba-tool: Replace gpo command for removing Sudoers Group PolicyDavid Mulder1-1/+68
Replace it with the VGP command for removing sudoers entries from an xml file. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sun Feb 14 00:53:41 UTC 2021 on sn-devel-184
2021-02-13samba-tool: Test gpo manage vgp sudoers remove commandDavid Mulder2-74/+21
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-13samba-tool: Replace gpo command for adding Sudoers Group PolicyDavid Mulder1-1/+80
Replace it with the VGP command for adding sudoers entries in an xml file. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-13samba-tool: Test VGP sudoers add commandDavid Mulder2-69/+34
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-13samba-tool: Replace gpo command for listing Sudoers Group PolicyDavid Mulder1-1/+48
Replace it with the VGP command for listing sudoers entries in an xml file. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-13samba-tool: Test gpo manage vgp sudoers list commandDavid Mulder2-53/+36
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-13gpo: VGP Sudoers policy must handle group principalsDavid Mulder1-4/+14
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-13gpo: Test that VGP Sudoers policy handles group principalsDavid Mulder1-1/+5
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-11gpo: Security gpext rsop list only own policiesDavid Mulder1-2/+4
The rsop should only list the policies from that extension, not from all policies in the same file. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Feb 11 18:28:09 UTC 2021 on sn-devel-184
2021-02-11gpo: Test that Security gpext rsop lists only own policiesDavid Mulder1-1/+2
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-11gpo: Ensure empty Security sections are removedDavid Mulder1-0/+2
Failing to remove the empty section causes tests to fail, and is also just bad practice. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-11gpo: Test that empty Security sections are removedDavid Mulder1-0/+35
Ensure that empty sections are removed when calling samba-tool gpo manage security set. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-10classicupgrade: treat old never expires value rightBjörn Jacke1-1/+1
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14624 Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Wed Feb 10 15:06:49 UTC 2021 on sn-devel-184
2021-02-09samba-tool: Add a gpo command for setting VGP OpenSSH Group PolicyDavid Mulder1-1/+91
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Feb 9 21:24:14 UTC 2021 on sn-devel-184
2021-02-09samba-tool: Test gpo manage openssh set commandDavid Mulder2-0/+75
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-09samba-tool: Add a gpo command for listing VGP OpenSSH Group PolicyDavid Mulder1-1/+42
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-02-09samba-tool: Test gpo manage openssh list commandDavid Mulder2-0/+78
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>