bdZddlZddlZddlmZddlmZddlmZm Z ddl m Z m Z m Z ddlmZmZddlmZmZmZdd lmZmZdd lmZmZGd d eZdS) z Tests for samba.dcerpc.dnsserverN)system_session)SamDB) ndr_unpackndr_pack)dnsp dnsserversecurity)RpcInterfaceTestCaseenv_get_var_value)record_from_stringflag_from_stringARecord)sd_utils descriptor) WERRORErrorwerrorcVeZdZedZfdZfdZdZdZdZ dZ dZ d Z d Z d Zd Zd ZdZ d*dZdZdZdZdZdZdZdejfdZdejfdZejfdZdejfdZdejfdZd Z d!Z!d"Z"d#Z#d$Z$d%Z%d&Z&d'Z'd(Z(d)Z)xZ*S)+DnsserverTestsc ddddzddddd d g }gd }d g}g}d g}g}|D]2}|d|z|d|z3|D]2}|d|z|d|z3ddggd|||||gdd|_ddggd|||||d|_ddddzg} gd} | | d|_dS)NSAMDOM.EXAMPLE.COMz 1.EXAMPLE.COMz %sEXAMPLE.COMz1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.1.EXAMPLEz .COMz !@#$%^&*()_u HIGHÿBYTEz @.EXAMPLE.COM.)z...z .EXAMPLE.COMz .EXAMPLE.zSAMDOM..EXAMPLE.COMzSAMDOM.EXAMPLE.COM 65535z$SAMDOM.EXAMPLE.COM 65535 65535 65535z%s 1z%s 0 0 0z 192.168.0.1z255.255.255.255) z'1234:5678:9ABC:DEF0:0000:0000:0000:0000'0000:0000:0000:0000:0000:0000:0000:0000z'1234:5678:9ABC:DEF0:1234:5678:9ABC:DEF0z1234:1234:1234::z1234:1234:1234:1234:1234::z1234:5678:9ABC:DEF0::z0000:0000::0000z#1234::5678:9ABC:0000:0000:0000:0000::1::z1:1:1:1:1:1:1:1)textrz@#! )AAAAAPTRCNAMENSMXSRVTXTz 192.168.0.500z255.255.255.255/32)z'GGGG:1234:5678:9ABC:0000:0000:0000:0000z)0000:0000:0000:0000:0000:0000:0000:0000/1z'AAAA:AAAA:AAAA:AAAA:G000:0000:0000:1234z,1234:5678:9ABC:DEF0:1234:5678:9ABC:DEF0:1234z"1234:5678:9ABC:DEF0:1234:5678:9ABCz1111::1111::1111)rr r!r"r#r$r%zSAMDOM.EXAMPLE.COM -1zSAMDOM.EXAMPLE.COM 65536AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA)zSAMDOM.EXAMPLE.COM 0 65536 0zSAMDOM.EXAMPLE.COM 0 0 65536zSAMDOM.EXAMPLE.COM 65536 0 0)r$r%)append good_records bad_recordsinvalid_records) clsgood_dnsbad_dnsgood_mxbad_mxgood_srvbad_srvbad_dngood_dn invalid_mx invalid_srvs >/usr/lib/python3/dist-packages/samba/tests/dcerpc/dnsserver.py setUpClasszDnsserverTests.setUpClass#s(##z2!"#*** ..:; 0 0F MM&6/ * * * NN:. / / / / 2 2G NN6G+ , , , OOJ0 1 1 1 1 #% ( ( (,,,'  ."&()))   $.0 *, 777   c Btt|tjd|_t d|_tj d|jz| | |_ tdtjdz| t| |_d|_tj}|j|_t&j|_d|_d |_d |_tj|_|j tjd|jddd tj|dS) N DC_SERVERREALMzncacn_ip_tcp:%s[sign]z ldap://%s DC_SERVER_IP)urllp session_info credentialszoner ZoneCreate)superrsetUposenvironserverr lowerrBr get_loadparmget_credentialsconnrrsamdb custom_zone!DNS_RPC_ZONE_CREATE_INFO_LONGHORN pszZoneNamerDNS_ZONE_TYPE_PRIMARY dwZoneTypefAging fDsIntegrated fLoadExistingDNS_DP_DOMAIN_DEFAULT dwDpFlagsDnssrvOperation2DNS_CLIENT_VERSION_LONGHORNDNSSRV_TYPEID_ZONE_CREATE)selfzone_create_info __class__s r7rFzDnsserverTests.setUptsn nd##))+++j- %g..4466 '(?4;(O(,(9(9(;(;(,(<(<(>(>@@ {RZ-GG"//11(6(8(8'+';';'='=??? "$FHH'+'7$&*&@#"#)*&)*&%.%D" ""9#H#$#';#'#$#/#,#F#3 5 5 5 5 5r9c |jtjd|j|jddtjdtt| dS)NrDeleteZoneFromDs) rMrYrrZrIrODNSSRV_TYPEID_NULLrErtearDown)r\r^s r7rbzDnsserverTests.tearDownsc ""9#H#$#';#'#3#$#5#,#?#' ) ) ) nd##,,.....r9c jd}d}||jd||||jd||||jd||||jd||||jd||||j|j|||jtjd|j|jd d t|tjd d \}}| t|j d | |j dj j d | |j d j j d| |j dj j d| |j dj j d| |j dj j d| |j dj j dd S), Confirm the zone is sorted 192.168.50.50r atestrecord-1 atestrecord-2 atestrecord-3 atestrecord-4 atestrecord-0r@NrrC add_recordrOrMDnssrvEnumRecords2rrZrIr DNS_RPC_VIEW_AUTHORITY_DATA assertEquallenrec dnsNodeNamestrr\ record_strrecord_type_str_results r7test_enum_is_sortedz"DnsserverTests.test_enum_is_sorteds %  (/?JWWW (/?JWWW (/?JWWW (/?JWWW (/?JWWW ($*:OZXXXI001V1215151A14151A/1R1R1:1V1515 7 7 6 VZ!,,, A26;;; A26HHH A26HHH A26HHH A26HHH A26HHHHHr9c "d}d}||jd||||jd||||jd||||jd||||jd||||j|jdz||||j|jdz\}}tj|jt |}|d d |j|j|||j tj d |j |jd d t|tjd d \}}|t#|jd ||jd jjd||jdjjd||jdjjd||jdjjd||jdjjd||jdjjd|jdjj|jdzkr2||jdjj|jd Sd S)rdrerrfrgrhrirj1rdcrkNrrCrmrnrorprl)rrrOget_record_from_dbldbDnrNry set_componentrenamerMrsrrZrIr rtrurvrwrx)r\r{r|dnrecordnew_dnr}r~s r7!test_enum_is_sorted_with_zone_dupz0DnsserverTests.test_enum_is_sorted_with_zone_dups %  (/?JWWW (/?JWWW (/?JWWW (/?JWWW (/?JWWW ($*:S*@/S]^^^,,T-=t?ORU?UVV F CGG,,Qd&6777 "f%%%I001V1215151A14151A/1R1R1:1V1515 7 7 6 VZ!,,, A26;;; A26HHH A26HHH A26HHH A26HHH A26HHH :a= $ (T-=-C D D   VZ]6:Dz3DnsserverTests.ldap_get_records..s%EEE 4/33EEEr9)rNrrrrget)r\rBnamerexprnodesrs r7rzDnsserverTests.ldap_get_recordss888j3355888t777 !!w(+(9-1)4 "77 (,,{++EEWEEEEr9c dg}ddg}dgdi}dggddgd gd gd }d D] }|||<|||< |D]}||D]}||jd ||d|D]=}||jd ||d||jd |>||jd ||d|D]B}||jd ||d||jd ||CΌ|D]T}||D]G}d} |D]n}| dz} ||jd ||||jd || D#t$r} t d|d| d|dd} ~ wwxYw|D]&}||jd |||dkr&'||jd ||d|D]_}||dkr ||jd ||d0#t$r#} t d|dd|d| d} ~ wwxYw||jd ||dIVdS)z Make sure that records which should be distinct from each other or duplicate to each other behave as expected. )rzSAMDOM.EXAMPLE.COz EXAMPLE.COMzSAMDOM.EXAMPLE)rzsamdom.example.comzSAMDOM.example.COM)zEXAMPLE.rr ))AAAA::zaaaa::)rz AAAA:0000::)rz'AAAA:0000:0000:0000:0000:0000:0000:0000)rzAAAA:0:0:0:0:0:0:0)z0123::z123::)rz::0r)z 192.168.1.0z 192.168.1.1z 192.168.2.0z 192.169.1.0z 193.168.1.0))zAAAA::1234:5678:9ABCz::AAAA:1234:5678:9ABC)z1000::z::1000)rz::11z::1111)z1234::z0234::)zSAMDOM.EXAMPLE.COM 1 1 1zSAMDOM.EXAMPLE.COM 1 1 0zSAMDOM.EXAMPLE.COM 1 0 1zSAMDOM.EXAMPLE.COM 0 1 1zSAMDOM.EXAMPLE.COM 2 1 0zSAMDOM.EXAMPLE.COM 2 2 2)zSAMDOM.EXAMPLE.COM 1zSAMDOM.EXAMPLE.COM 0)zA RECORDzB RECORDza record)rr r%r$r&)r!r"r#rrFrrC expected_numzFailed to add zG, which should be distinct from all others in the set. Original error: z Distinct set: rNr"zManaged to remove z by attempting to remove z. Original error: )rrrOrrr) r\ distinct_dns duplicate_dns duplicatesdistinctr|duplicate_tuplerdistinct_tupleies r7test_duplicate_matchingz&DnsserverTests.test_duplicate_matchings :; \02 OOO ^^+++ijCD89    6 8 8O(4H_ %*7J ' ') ` `O#-o#> ` ` 0,Q`abQcddd-]]FOOD$4lOU[glOmmm++D,q0A0A0A66611.NOOOO""4#3\?TbcdTeffff; g g gs0";E F (F F 'H H4 H/ /H4 c|jD]h}|j|D]X}||jd||||jd|||jd||YidS)zb Make sure that we can add, update and delete a variety of valid records. rNr)rrrOrr)r\r|r{s r7test_accept_valid_commandsz)DnsserverTests.test_accept_valid_commandss $0 ` `O"/@ ` `  0,Q[\\\''(8,XXX""4#3\?T^____ ` ` `r9rrBrc || | } || d|z| \} } ||| jd|d| jd|d||| jd|d| jd|d||| jd|d| jd|d||| jd|d| jd|d||| jd |d| jd|d||| j d |d| j d|d||| j d |d| j d|d||| j d |d| j d|ddS) Nz/Expected record %s but was not found over LDAP.z"Unexpected data length for record z. Got z , expected rzUnexpected rank for record zUnexpected flags for record z#Unexpected time to live for record z!Unexpected dwReserved for record zUnexpected data for record zUnexpected wType for record z Unexpected timestamp for record ) rassertIsNotNoneru wDataLengthrflags dwTtlSeconds dwReservedrJrr dwTimeStamp)r\rrrrrrrrrBrec_namerrec_dnrws r7 check_paramszDnsserverTests.check_paramss*%%dH55 S"SVZ"Z[[[  coow{w{w{~A~M~M~MOZOZOZ8[ \ \ \ sxxbfbfbfhkhphphprvrvrv)wxxx  eieieiknktktktv{v{v{+|}}} s'7'7z~z~z~ADAQAQAQS_S_S_:` a a a S^^txtxtxz}{I{I{IKUKUKU6V W W W sx~~'7'7'7rvrvrvx{yAyGyGyIyIyIyIKOKUKUKWKWKWKW:X Y Y Y  eieieiknktktktv{v{v{+|}}} coouyuyuy{~|K|K|KMXMXMX8Y Z Z Z Z Zr9c ||jddd|ddddddd||jddd||jdd d |d ddddd d ||jdd d ||jddd|ddddddd||jddddS)zx Make sure that, when we add records to the database, they're added with reasonable parameters. rrrerorirCr z AAAA:AAAA::z'AAAA:AAAA:0000:0000:0000:0000:0000:0000r" cnamedest rpN)rrrOrr)r\s r7test_record_paramsz!DnsserverTests.test_record_params-s (,_MMM !S!S!_a@@@ 4+\3PPP (, NNN "c1c1.WY[\\\ 4+\6=QQQ (,MMM "c1c1k1=== 4+\7KPPPPPr9c d}|jD]}|j|D]} ||jd||d||jd|d||jd||d`#t $r}t ||dz}Yd}~d}~wwxYw|jD]}|j|D]}|j|d}||jd|| ||jd||dn+#t $r}t ||dz}Yd}~nd}~wwxYw||jd||||dkd|zdS) z Make sure that we can't add a variety of invalid records, and that we can't update valid records to invalid ones. rrFrrrCNz6Failed to reject invalid commands. Total failures: %d.) r*rrrOrrrprintr) assertTrue)r\ num_failuresr|r{rgood_record_strs r7test_reject_invalid_commandsz+DnsserverTests.test_reject_invalid_commands<s  #/ 4 4O".? 4 4 4OOD$4lOU_kpOqqq++D,Failed collision and replacement behavior. Total failures: %d.)r)rrrOrrrrr)r\rrecord_type_str_1record1record_type_str_2record2has_ahas_aaaa has_cnamehas_ptrhas_mxhas_srvhas_txt add_error_okrexpected_num_type_1expected_num_type_2s r7!test_add_duplicate_different_typez0DnsserverTests.test_add_duplicate_different_type\s  !%!2M [M [ '(9:1=G OOD,lqA)S0L4E4L,6U:Kv:U-8XOSX>X>X\mqu\u\u./+)T11u11./+p//0@,PaqD/EEEE)ppp'3a'7 !4!4!46G6G6GIZIZIZ\m\m\mopppppppppp//0@,PaqD/EEEE)ppp'3a'7 !4!4!46G6G6GIZIZIZ\m\m\moppppppppp &&t'7GXZabbbb%DDDD   t/?PRY Z Z Z Z  )+knz+z{{{{{sZ :D E %EE <F G%!G  GG33 H(=!H##H(,I  I I c|jdd}||jdd||jD]R}|j|d}||jd||d||jd|dSd}d}||jd d |d||jd d |d||jdd|d S)z@ Test some special properties of CNAME records. r"rCrrFrrz testrecord 1mxrecr$nsrecr#Nr)r\ cname_recordr| other_record mx_record ns_records r7 _test_cnamezDnsserverTests._test_cnames (1!4  (,NNN#0 e eO,_=a@L OOD,lO\ejO k k k  # #D$4lObc # d d d d#   ('4eTTT ('4eTTT 4+\7LQQQQQr9c*|jD]}|j|d}||jd||||jd||d||jd|||jd||dS)zK Make sure that we can't add duplicate values of any type. rrFrNr)r\r|rs r7test_add_duplicate_valuez'DnsserverTests.test_add_duplicate_values $0 X XO&7:F OOD,lOV T T T OOD,lOV_dO e e e  # #D$4lO T T T   t/PV W W W W  X Xr9c|jD]}tdt|j|D]}|j||dz }|j||}|dkr2|dkrdnd}||jd||||jd||||jd||||jd||||jd||όdS)z Attempt to add values with the same name and type in the same zone. This should work, and should result in both values existing (except with some types). rCr"rmrrN)r)rangervrrrOrr)r\r|rrrrs r7test_add_similar_valuez%DnsserverTests.test_add_similar_values8 $0 ] ]O1c$"3O"DEEFF ] ]+O$>qqA  0,QXYYY 0,QXYYY''(8,fr'sss""4#3\?T[\\\""4#3\?T[\\\\% ] ] ]r9TcV ||||\}}n0#t$r#} |rtd|d|dYd} ~ dSd} ~ wwxYwd} |jdjD]} | j|krd} n| r|std|d|d| s|rtd|d|ddSdS) zo Asserts whether or not the given record with the given type exists in the given zone. zRecord ' ' of type 'z+' was not present when it should have been.NFrTz*' was present when it shouldn't have been.) query_records RuntimeErrorrrwrr) r\rBrr|expected_record_strrclient_versionr}r~rfoundrs r7 assert_recordzDnsserverTests.assert_recordst  **4GGIAvv    $n(;(;(;___&NOOO  jm+  F{1112  P P .h{h{h{~M~M~M"NOO O P9 P .i|i|i|NNN"OPP P P P P Ps A AA rCc  ||||\}}t|jdj}||kst d||||fzdS#t $r|dkst d|||fzYdSwxYw)zq Asserts that there are a given amount of records with the given type in the given zone. rzLThere were %d records of type '%s' with the name '%s' when %d were expected.zLThere were no records of type '%s' with the name '%s' when %d were expected.N)rrvrwrrr) r\rBrr|rrr}r~ num_resultss r7rz!DnsserverTests.assert_num_records s N**4GGIAvfjm344K,..$%s(3_dL'Y&Z[[[/. N N N1$$$%s(7|'L&MNNN%$$ NsAA%BBc |j|d|j||dt|tjtjzdd S)Nr)rMrsrIr rrtDNS_RPC_VIEW_NO_CHILDREN)r\rBrr|rs r7rzDnsserverTests.query_recordssOy++N,-,0K,0,0,0,<_,M,M,5,QT]Tv,v,0,0 2 2 2r9c Zt||d}tj}||_ |j|d|j|||d|std|d|ddS#t$r3} |r&td|d|d t| d Yd} ~ dSd} ~ wwxYw) z Attempts to add a map from the given name to a record of the given type, in the given zone. Also asserts whether or not the add was successful. This can also update existing records if they have the same name. rseprNzSuccessfully added record 'r', which should have failed.zFailed to add record '+', which should have succeeded. Error was ''. r rDNS_RPC_RECORD_BUFrwrMDnssrvUpdateRecord2rIrrry) r\rBrr|r{rrr add_rec_bufrs r7rrzDnsserverTests.add_record)s,$OZSIII244   N I ) ).*+*.+*.*.*5*.  0 0 0 F$n(2 OOO&EFFF F F N N N N$n(2 OOOSVVVV&MNNN N N N N N N N=A-- B*7(B%%B*c Zt||d}tj}||_ |j|d|j||d||std|d|ddS#t$r3} |r&td|d|d t| d Yd} ~ dSd} ~ wwxYw) z Attempts to delete a record with the given name, record and record type from the given zone. Also asserts whether or not the deletion was successful. rrrNzSuccessfully deleted record 'rrzFailed to delete record 'r r!r") r\rBrr|r{rrr del_rec_bufrs r7rzDnsserverTests.delete_recordEsv$OZSIII244   h I ) ).*+*.+*.*.*.*5  7 7 7 Q$ns}s}s}@O@O@O&PQQQ Q Q h h h h$nCMCMCMO^O^O^`cde`f`f`f`f&ghhh h h h h h h hr&c|jtjd|jdd\}}|tj||jtjd|jdd\}}|tj||jtj d|jdd\}}|tj |dS)Nr ServerInfo) rM DnssrvQuery2rDNS_CLIENT_VERSION_W2KrIruDNSSRV_TYPEID_SERVER_INFO_W2KDNS_CLIENT_VERSION_DOTNET DNSSRV_TYPEID_SERVER_INFO_DOTNETrZDNSSRV_TYPEID_SERVER_INFO)r\typeidr~s r7 test_query2zDnsserverTests.test_query2^s// 0P0104 040< >> @&III// 0S0104 040< >> CVLLL// 0U0104 040< >> r)r\rr?r1r@rrs r7test_operation2_invalidz&DnsserverTests.test_operation2_invalids">/7"9;;%2"!%!< ),,^-.-1[-5-.-A-3-;==CC   vayFEEEFEEEE  s&A.. B#8BB#c tj}d}tj}||_tj|_tj|_d|_ tj |_ |j |d|jdddtj|tjtjz}|j |d|jddtj|\}}|d|j|j |d|j|ddtjd|j |d|jddtj|\}}|d|jdS)Nz1.168.192.in-addr.arparrD EnumZonesrCr`)rrZrPrQrrRrSr: fAllowUpdaterTrWrXrMrYrIr[DNS_ZONE_REQUEST_REVERSEDNS_ZONE_REQUEST_PRIMARYDnssrvComplexOperation2DNSSRV_TYPEID_DWORDru dwZoneCountra)r\rrev_zone zone_createrequest_filterr}rr1s r7test_operation2zDnsserverTests.test_operation2s}">+ACC "* !%!; #'#>    ) ?  "">#$#';#'#$#/#,#F#. 0 0 0$<#<=944^5659[595@5>5R5C EE5 E-... "">#$#';#+#$#5#,#?#' ) ) ) 99.:;:>+:>:E:C:W:H JJ  E-.....r9c 6tj}tjtjz}|j|d|jddtj|\}}|tj ||d|j tj tjz}|j|d|jddtj|\}}|tj ||d|j dS)NrrErn) rrZDNS_ZONE_REQUEST_FORWARDrHrMrIrIrJruDNSSRV_TYPEID_ZONE_LISTrKrG)r\rrNr1rs r7test_complexoperation2z%DnsserverTests.test_complexoperation2s ">#<#<= 99.:;:>+:>:E:C:W:H JJ  :FCCC E-...#<#<= 99.:;:>+:>:E:C:W:H JJ  :FCCC E-.....r9c tj}tj}tjtjz}|j|d|jddd||dd \}}| d|j dS)Nrz ..RootHintsr) rrZr DNS_TYPE_NSDNS_RPC_VIEW_ROOT_HINT_DATADNS_RPC_VIEW_ADDITIONAL_DATArMrsrIrucount)r\r record_type select_flagsr} roothintss r7test_enumrecords2z DnsserverTests.test_enumrecords2s">& !=!>? y33N4548K4A47484?4@4848 : : 9 Y_-----r9c@tj}tj}tj}d}t d}t d}tj}||_|j |d|j |j ||d|j |d|j |j |d||dd \}} | d| j| d| jdj| tj| jdjdj| d| jdjdjtj}||_tj} || _|j |d|j |j ||| |j |d|j |j |d||dd \} } | d| j| d| jdj| tj| jdjdj| d| jdjdjtj} || _|j |d|j |j |d| |t(|jj |d|j |j |d||dd dS)Ndummyz1.2.3.4z5.6.7.8rrC)rrZr DNS_TYPE_Artrr#rwrMr$rIrBrsrurY wRecordCountrrr assertRaisesr) r\rrZr[rrwrec2r%r}r~r(buflens r7test_updaterecords2z"DnsserverTests.test_updaterecords2s">o  < i  y!! 244   %%n&'&*k&*i&*&1&*  , , ,I0012151515151<1=1515 7 7 6 FL))) FJqM6777 &*Q-*?*B*HIII FJqM$9!$<$ABBB 244  244   %%n&'&*k&*i&*&1&1  3 3 355n676:k6:i6:6:6A6B6:6: < < FL))) FJqM6777 &*Q-*?*B*HIII FJqM$9!$<$ABBB 244   %%n&'&*k&*i&*&*&1  3 3 3 , (D(+)%& r9c 6|jd|jztjdddg}|t |d|d|d|ddd}tj |j}ttj |}tj |j}|j|jtjdd g}tttj |dd d}tjd |d |i}tjttj |} tj| ||} || d d | d| |jd||jdS)z_ Make sure that security descriptors of the msdcs zone is as expected. zDC=ForestDnsZones,%sz&(&(objectClass=dnsZone)(name=_msdcs*))nTSecurityDescriptor objectClassrrCr(sAMAccountName=DnsAdmins) objectSidzO:SYG:BAD:AI(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;CC;;;AU)(A;;RPLCLORC;;;WD)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED) DnsAdminsrz8SD of msdcs zone different to expected. Difference was: Expected:  Got: N)rNrrrrrurvassertInrSDUtilsrr rdom_sidget_domain_sidry sddl2binary get_clean_sd get_diff_sdsas_sddl domain_sid) r\rtmputilssdrvr dns_admin packed_sd expected_sddiffs r7#test_security_descriptor_msdcs_zonez2DnsserverTests.test_security_descriptor_msdcs_zonecs  !!'= @]@]@_@_'_(+(9-U)?(O"QQ UQ''' ,eAh777Ah-.q1 ,, +S 1 1%dj&?&?&A&ABB jTZ%B%B%D%DCL]+G'2m 55 8#3SVK5H5KLLMM *,R ,6 Y7O QQ !-j9Li.X.XYY &{B CC rr$$ 3 3E4D E E E E**U%5666$8 9 9 9 9 9r9c d}tj}tj|_d|_d|_d|_||_tj |_ |j tj d|jdddtj||j}|d|j|t(jd|zdg }|t/|d|dj}|d|d|ddd}t5j|j}t9t:j|}t;j|j } |j|jt(jd d g } tCt9t:j| dd d} t=j"d | d | i} t=j#t9t:j| } t=j$| d | i}t=j#t9t:j|}t=j%| }t=j#t9t:j|} t)j&|jdtC|z}|'| f|'|f|'|fg}|D]\}}|j|t(j(dg}|d|d|ddd}t5j|j}t9t:j|}t=j)||| }||dd|d|d|*|j+d|*|j+ |j tj d|j|ddtj,ddS#|j tj d|j|ddtj,dwxYw)zb Make sure that security descriptors of forest dns zones are as expected. test_forest_zonerrCNrDzDC=ForestDnsZones (name=%s)rgrrirjO:DAG:DAD:AI(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;CC;;;AU)(A;;RPLCLORC;;;WD)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)rkCN=MicrosoftDNS,%srrrrz0Security descriptor of forest DNS zone with DN ')' different to expected. Difference was: rlrmr`)-rrPrrRrSrTrUrVrQDNS_DP_FOREST_DEFAULTrXrMrYrZrIr[rNr add_childrrrrurvrrnrrorr rrprqryrrrs'get_dns_forest_microsoft_dns_descriptorget_dns_partition_descriptorrget_linearized SCOPE_BASErtrurvra)r\ forest_zoner] partition_dnr current_dnrwrxryrvrrzr{r| packed_msdnsexpected_msdns_sdpacked_part_sdexpected_part_sdmsdns_dnsecurity_desc_dictkeysec_descr}s r7$test_security_descriptor_forest_zonez3DnsserverTests.test_security_descriptor_forest_zones ) $FHH&*&@#"#)*&)*&'2$%.%D" ""9#H#$#';#'#$#/#,#F#3 5 5 5z4466 2333 !!|3;L-8;-F)?(@"BB UQ'''1X[  ,eAh777Ah-.q1 ,, +S 1 1%dj&?&?&A&ABB jTZ%B%B%D%D&)&7+G'2m 55  8#3SVK5H5KLLMM *,R ,6 Y7O QQ !-j9Li.X.XYY !I*KVXaJbdd &3Jx?RT`4a4abb#@LL%2:h>Q>L4N4NOO -vdj*>\ARAR*RSSH#-#<#<#>#> "L#+#:#:#<#<>O"P#/#>#>#@#@BR"S"U $6 r rh ))s#.1G0H*JJ 4eAh???Ah56q9 (44 3S99!.xZHH  rr$'CCx/?/?@P/Q/Q/Q/QSUS]S]^c^nSoSoSo,qrrrr r I & &y'L'('+{'2'('9'0'C'+ - - - - -DI & &y'L'('+{'2'('9'0'C'+ - - - -s 'E'R Q>L4N4NOO6$*&:S=N=N&NOO)88::KH'6688:KL+::<<>NOQ 2 n nOS(J%%3cn-C,D&FFE MM0%( ; ; ;(1215C$TZ00EH/55B*8RDDD   T22 #TTT8+;+;E / / / / /!I!I!IF-N-N-N^<<<>!I!I!IRTTT*.,.,.,`HHH43336 F F FSgSgSgj ` ` `BN Z Z Z Z Q Q Qttt@U|U|U|pRRR. X X X]]]8!%Y5ZPPPP4LM*3*ONNNN"IRHm 2 2 2 2")2WNNNN:!%Y5Zhhhh2FFF4..1/1/1/f///6..."S S S |%9%9%9NX-X-X-t<n<n<n<n<n<n<nr9r)__doc__rGr samba.authr samba.samdbr samba.ndrrr samba.dcerpcrrr samba.testsr r samba.dnsserverr r rsambarrrrrrr9r7rs($'& %%%%%%********2222222222????????IIIIIIIIII&&&&&&&&%%%%%%%%nnnnn)nnnnnr9