Fc*ddlZddlZejdddejd<ddlZddlmZmZddl m Z m Z ddl m cmcmZddlmZddlmZdd lmZmZmZmZmZmZmZmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(ddl)m cmcm*Z+d Z,d Z-Gd d eZ.Gd de.Z/e0dkrd Z,d Z-ddl1Z1e1j2dSdS)Nz bin/python1PYTHONUNBUFFERED)dsdbntstatus)krb5pacsecurity) KDCBaseTest)Krb5EncryptionKey)AES256_CTS_HMAC_SHA1_96ARCFOUR_HMAC_MD5 KRB_ERROR KRB_TGS_REPKDC_ERR_BADKEYVERKDC_ERR_BADMATCHKDC_ERR_ETYPE_NOSUPPKDC_ERR_GENERICKDC_ERR_MODIFIEDKDC_ERR_NOT_USKDC_ERR_POLICYKDC_ERR_PREAUTH_REQUIREDKDC_ERR_C_PRINCIPAL_UNKNOWNKDC_ERR_S_PRINCIPAL_UNKNOWNKDC_ERR_TGT_REVOKEDKRB_ERR_TKT_NYVKDC_ERR_WRONG_REALMNT_ENTERPRISE_PRINCIPAL NT_PRINCIPAL NT_SRV_INSTFcHeZdZ ddZ ddZdS) KdcTgsBaseTestsNc|}|t|d}|}|td|ddg} |r| } n|t|g} |} |} |d} |||}|j}d}tj |}|r t|f}nt}| || | | ||| || | | ||d|d| \}}| ||t|d |d }|r|||||krdSn||||d }|||d |}||}|g}| }| || | | |||||| | ||||||d\}}|r|||dS|||dS)N/ name_typenameshostioffsetetypez/forwardable,renewable,canonicalize,renewable-ok)cnamerealmsnametillclient_as_etypesexpected_error_modeexpected_crealmexpected_cnameexpected_srealmexpected_sname expected_saltexpected_supported_etypesetypespadata kdc_options preauth_keyticket_decryption_keymsg-type error-codepreauth_etype_info2rF)r,r-r.r/r0r1r2r3r4r5r6r7r8r9r:r;r< expect_edatarep_ticket_creds) get_usernamePrincipalName_creatersplit get_realmget_saltget_KerberosTimeTicketDecryptionKey_from_credstgs_supported_enctypes krb5_asn1 KDCOptionsr_test_as_exchangeassertIsNotNone assertEqualr assertInPasswordKey_from_etype_info2get_kvno"get_enc_timestamp_pa_data_from_keyuppercheck_error_repcheck_as_reply)selfcredsexpected_error target_credsr+expected_ticket_etype user_namer, target_namer.r5r-saltr/r<expected_etypesr: initial_errorrepkdc_exchange_dict error_code etype_info2r; ts_enc_padatar9expected_realms @/usr/lib/python3/dist-packages/samba/tests/krb5/kdc_tgs_tests.py_as_reqzKdcTgsBaseTests._as_reqAs# &&(( ))L090D0D*FF#//11 ))L17SbS9I0J*LL  L"NN!66>I]7LLN!!~~$$E$22  / / 6K 0 M M '=&  *;77  55~FMM4M!%!7!7" -! ! &5#"7#"8"9"9 $ S!!! C O444&  8 MM*m 4 4 4^++,   ]J 7 7 7'(=> 778CA8=8H8HJJ ?? LL !%!7!7" .* *)&5##"7%"8" "  &    n 5 5 54 C    !3440FTcx| durd} n| |} | durd} ||}ns| m|}|dkr|t|| g} n4|ddkr |dd}|t d|g} || }||jg}|j}nd}|||}| |jj }|w| |j }| ||j}tj |j|jdd }t|d}|j}|j} d }!n d}d}d}d} d}!|t$t&f}|r |j}"d}#n d}"|j}#||j}||j|| ||| || |"|#|j|||||||!|||||||||| }$||$d| | || }%|r||%|dS||%t:|$d S)NFkrbtgtr#r'$r&r*s explicitarmorstgsarmorr)r2r3r4r5r<generate_padata_fngenerate_fast_fngenerate_fast_armor_fncheck_error_fn check_rep_fncheck_kdc_private_fnr1expected_statustgt armor_key armor_tgt armor_subkey pac_optionsauthenticator_subkeyr:r7r@ expect_pacexpect_pac_attrsexpect_pac_attrs_pac_requestexpect_requester_sid expected_sid expect_claims)r,r-r.r8additional_ticketsrA)rEget_krbtgt_snamerBrCrrticket session_keyrH RandomKeyr+generate_armor_keykcryptocf2keyr generate_simple_fastgenerate_ap_reqr r generic_check_kdc_errorgeneric_check_kdc_repr,tgs_exchange_dictcrealmgeneric_check_kdc_private_generic_kdc_exchangerT check_replyr)&rVrtrXrYrvr:r3r5additional_ticketrmr.srealmuse_fastrr8rZr7rzr{r|r}r@r~rsr\rdecryption_keysubkeyrwexplicit_armor_keyrurnrorxrprqrar`s& rf_tgs_reqzKdcTgsBaseTests._tgs_reqs* U??FF ^!++--F E>>E%!%!6!6!8!8}*7799 (** 55"-*F3655EE#2#--&1#2#&6  55".%{3655E%!&  ("3":!; .:NN!% !@@$9A;;N 566  >>&,77L!%!8!89B9N"P"P  $6$:$*J$4$/11I*)T::I#8 %)%9 "KKLI# %) "K >-/?@F  6!9NLL!N5L  ! YN 22J)")"01-#9)%!%!? .+%#!'#&?%!-)E!5%'93))<(():/3/5/406d=Z?d>Z@d?ZAd@ZBdAZCdBZDdCZEdDZFdEZGdFZHdGZIdHZJdIZKdJZLdKZMdLZNdMZOdNZPdOZQdPZRdQZSdRZTdSZUdTZVdUZWdVZXdWZYdXZZdYZ[dZZ\d[Z]d\Z^d]Z_d^Z`d_Zad`ZbdaZcdbZddcZeddZfdeZgdfZhdgZidhZjdiZkdjZldkZmdlZndmZodnZpdoZqdpZrdqZsdrZtdsZudtZvduZwdvZxdwZydxZzdyZ{dzZ|d{Z}d|Z~d}Zd~ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZd„ZdÄZdĄZdńZdƄZdDŽZdȄZdɄZdʄZd˄Zd̄Zd̈́Zd΄ZdτZdЄZdфZd҄ZdӄZdԄZdՄZdքZ ddڄZ ddۄZd܄Zd݄Z ddބZ dd߄ZdZdZ ddZ ddZ ddZ ddZ ddZ ddZxZS) KdcTgsTestscxtt|_t|_dSr)supersetUpglobal_asn1_print do_asn1_printglobal_hexdump do_hexdump)rV __class__s rfrzKdcTgsTests.setUp6s'  .(rhc l|}d}|||\}}|}tf}|t |g}|td|g}|||||} | | | || } | || } |||||| g} | | | | | } || d} | d} |t dg}|t d|g}||||| | |t"d \} }||d | d |d |t(| dd| z|t"| dd| zdS)z| Try and obtain a ticket from the TGS, but supply a cname that differs from that provided to the krbtgt tsttktusrr#rkr9rr Administratorr&F)r1r@rep = {z}, enc_part = {}r=z rep = {%s}r>N) get_samdbcreate_accountrElowerr rCrras_reqcheck_pre_authenticationget_enc_timestamp_pa_dataget_as_rep_keyrUget_as_rep_enc_dataEncryptionKey_import host_dns_nametgs_reqr assertIsNonerNr )rVsamdbr[uc_r-r+r,r.r`r9r enc_part2renc_parts rf9test_tgs_req_cname_does_not_not_match_authenticator_cnamezEKdcTgsTests.test_tgs_req_cname_does_not_not_match_authenticator_cname;sh    %%eY77Q $$&&)*))"9+*77))!(E):*<<kk%u55 %%c***//C88!!"c**kk%ufXkFF C   ,,S#66 '' %(899X))""#*%%))"5..001*33,,ueUFC;K49';;h  H-0SS((( ; = = = C O\C5GHHH     3      rhc |}d}|||\}}|}tf}|t |g}|td|g}|||||} | | | || } | || } |||||| g} | | | | | } || d} | d} |td|g}||||| | ||\} }|| d S) z)Get a ticket to the ldap service rr#rkrrrldap service_credsN)rrrErr rCrrrrrrrUrrrr get_dc_credscheck_tgs_reply)rVrr[rrr-r+r,r.r`r9rrrs rftest_ldap_service_ticketz$KdcTgsTests.test_ldap_service_ticketps   %%eY77Q $$&&)*))"9+*77))!(E):*<<kk%u55 %%c***//C88!!"c**kk%ufXkFF C   ,,S#66 '' %(899X))!5..001*33<< 5",,..&#u++-- //a S!!!!!rhc |}d}|||\}}||d|jj\}}|}t tf}|t|g} |td|g} | | | ||} | | | || } ||| } | | | ||| g} || | d}|| | }||d} |t|g} |t|g} || | ||| || \} }|| | d}|||}||d }|||}|d |}||t3|jd | d ||||jd | d ||||jd | d ||||jd | d ||||jd | d |dS)Nr tsttktmac) account_typer#rkrrrrzauthorization-data@rz},)rr AccountTypeCOMPUTERrErr r rCrrrrrrrUrrrBrrdecode_service_ticket get_pac_data get_objectSidrNstr account_name logon_name domain_nameupn account_sid)rVrr[rdnmcrr-r+r,r.r`r9rrrrpac_datasidrs rf3test_get_ticket_for_host_service_of_machine_accountz?KdcTgsTests.test_get_ticket_for_host_service_of_machine_accounts   &&ui88R%%e[373C3L&NNQ $$&&)*:;))"9+*77))!(E):*<<kk%u55 %%c***//C88!!"c**kk%ufXkFF C   X,,S#66 '' %(899))"+*))"??$$%*'',, 5",,..&#u'h S!!!X--b&99$$X.B%CDD  ++****EE2  OO   % & & &"ssHH - / / /  OO     "ssHH - / / /  LLNN  "ssHH - / / /   LL"ssHH - / / /    "ssHH - / / / / /rhcV|}|}||}||}||||||}||}||dSr)get_client_credsget_service_credsget_tgtget_ticket_pacrM_make_tgs_requestrV client_credsrrtpacrs rf test_requestzKdcTgsTests.test_requests,,.. ..00 ll<((!!#&& S!!!'' mSII!!&)) S!!!!!rhcd|}|}||d}||}||||||dd}||d}||dS)NF pac_requestrrzrz)rrrrrMrrrs rftest_request_no_paczKdcTgsTests.test_request_no_pacs,,.. ..00 lls##%%,,)2- ..00  --// &&((%////22"+3% ll<*8,C*81:'2 44  -)4)"+#  % % % % %rhc |}||jjd|i}|}|}|}|d|}|t|g}d}| ||t|||} | ||| |t|||dSr) rrrrrrBrErrCrrrrrs rf&test_request_enterprise_canon_case_macz2KdcTgsTests.test_request_enterprise_canon_case_mac^s"##%%,,)2- ..00  --// &&((..00%////22"+3% ll<*8,C*81:'2 44  -)4)"+#  % % % % %rhc ~|}||jjd|i}|}|}|}|d|}d}|||t||}| ||||t||dSNrrrri)rrrr:) rrrrrrBrErrr rVrrrr[r-rr:rts rf test_request_enterprise_no_canonz,KdcTgsTests.test_request_enterprise_no_canon~s##%%,,).- ..00  --// &&((%//// ll<*8,C1:'2 44  -)4"+#  % % % % %rhc |}||jjd|i}|}|}|}|d|}d}|||t||}| ||||t||dSr) rrrrrrBrErrrrrs rf%test_request_enterprise_no_canon_casez1KdcTgsTests.test_request_enterprise_no_canon_cases##%%,,).- ..00  --// &&((..00%//// ll<*8,C1:'2 44  -)4"+#  % % % % %rhc ~|}||jjd|i}|}|}|}|d|}d}|||t||}| ||||t||dSr) rrrrrrBrErrrrs rf$test_request_enterprise_no_canon_macz0KdcTgsTests.test_request_enterprise_no_canon_macs##%%,,)2- ..00  --// &&((%//// ll<*8,C1:'2 44  -)4"+#  % % % % %rhc |}||jjd|i}|}|}|}|d|}d}|||t||}| ||||t||dSr) rrrrrrBrErrrrrs rf)test_request_enterprise_no_canon_case_macz5KdcTgsTests.test_request_enterprise_no_canon_case_macs##%%,,)2- ..00  --// &&((..00%//// ll<*8,C1:'2 44  -)4"+#  % % % % %rhct||jjddi}|}||}||}||||||}||}||dS)Nno_auth_data_requiredTrrrrrrrrMrrs rf!test_client_no_auth_data_requiredz-KdcTgsTests.test_client_no_auth_data_requireds,,).)40-22 ..00 ll<((!!#&& S!!!'' mSII!!&)) S!!!!!rhcz||jjddi}|}||}||}||||||dd}||}||dS)Nr TrFrr rs rf(test_no_pac_client_no_auth_data_requiredz4KdcTgsTests.test_no_pac_client_no_auth_data_requireds,,).)40-22 ..00 ll<((!!#&& S!!!'' mS49d(LL!!&)) S!!!!!rhc||}||jjddi}||}||}||||||d}||d}||dS)Nr TrFr rrrrrrrMrrrs rf"test_service_no_auth_data_requiredz.KdcTgsTests.test_service_no_auth_data_requireds,,.. --)2)40.22 ll<((!!#&& S!!!'' mS38(::!!&U!;; #rhc|}||jjddi}||d}||}||||||dd}||d}||dS)Nr TrFrrrrrs rf)test_no_pac_service_no_auth_data_requiredz5KdcTgsTests.test_no_pac_service_no_auth_data_requireds,,.. --)2)40.22 ll!!mmE"" c! ,,,,,rhc|}||d}||dddddS)NT renewablerrXr{r|r}r6r7 _renew_tgtr9s rftest_renew_reqzKdcTgsTests.test_renew_reqsX!!mmETm22 A)-59-1  3 3 3 3 3rhc|}||d}||dddddS)NTinvalidrr>r6r7 _validate_tgtr9s rftest_validate_reqzKdcTgsTests.test_validate_reqsZ!!mmE4m00 3q,08<04  6 6 6 6 6rhc|}||}|||ddSr3)r6r7 _s4u2selfr9s rftest_s4u2self_reqzKdcTgsTests.test_s4u2self_reqs@!!mmE"" sE!44444rhc|}||}|||ddSr3r6r7 _user2userr9s rftest_user2user_reqzKdcTgsTests.test_user2user_reqs@!!mmE"" U155555rhc|}||}|||ddSr3)r6r7_fastr9s rf test_fast_reqzKdcTgsTests.test_fast_reqs@!!mmE"" 3a 00000rhc|}||d}||tdSNTrCr4)r6r7r8rr9s rftest_tgs_req_invalidz KdcTgsTests.test_tgs_req_invalidsB!!mmE4m00 c/ :::::rhc|}||d}|||tdSrS)r6r7rIrr9s rftest_s4u2self_req_invalidz%KdcTgsTests.test_s4u2self_req_invalidsD!!mmE4m00 sE/BBBBBrhc|}||d}|||tdSrS)r6r7rMrr9s rftest_user2user_req_invalidz&KdcTgsTests.test_user2user_req_invalidsD!!mmE4m00 U?CCCCCrhc|}||d}|||t|dS)NTrCrXr5)r6r7rPrrr9s rftest_fast_req_invalidz!KdcTgsTests.test_fast_req_invalids`!!mmE4m00 3o"&"7"7"9"9  ; ; ; ; ;rhc|}||d}||tdS)NT)remove_requester_sidr4r6r7r8rr9s rftest_tgs_req_no_requester_sidz)KdcTgsTests.test_tgs_req_no_requester_sidsC!!mmEm== c*= >>>>>rhc|}||d}||ddddS)NT)remove_pac_attrsrFrXrzr{r5r9s rftest_tgs_req_no_pac_attrsz%KdcTgsTests.test_tgs_req_no_pac_attrssT!!mmEDm99 c!',  . . . . .rhc|dd}||dd}||tdS)NTreplication_allowedrevealed_to_rodc) from_rodcr]r4r^r9s rf'test_tgs_req_from_rodc_no_requester_sidz3KdcTgsTests.test_tgs_req_from_rodc_no_requester_sidsSD15 77mmETmMM c*= >>>>>rhc|dd}||dd}||ddddS)NTre)rhrarFrbr5r9s rf#test_tgs_req_from_rodc_no_pac_attrsz/KdcTgsTests.test_tgs_req_from_rodc_no_pac_attrssdD15 77mmETDmII c!',  . . . . .rhc|}||d}||tdSNT remove_pacr4r^r9s rftest_tgs_no_paczKdcTgsTests.test_tgs_no_pacsC!!mmEdm33 c*= >>>>>rhc|}||dd}||tdS)NT)r=ror4r6r7r@rr9s rftest_renew_no_paczKdcTgsTests.test_renew_no_pacsE!!mmETdmCC ,?@@@@@rhc|}||dd}||tdS)NT)rDror4r6r7rFrr9s rftest_validate_no_pacz KdcTgsTests.test_validate_no_pacsH!!mmE4DmAA 3/BCCCCCrhc|}||d}|||tddS)NTrnFrXr@r6r7rIrr9s rftest_s4u2self_no_pacz KdcTgsTests.test_s4u2self_no_pacsU!!mmEdm33 sE&9$)  + + + + +rhc|}||d}|||tdSrmr6r7rMrr9s rftest_user2user_no_pacz!KdcTgsTests.test_user2user_no_pacsE!!mmEdm33 U3FGGGGGrhc|}||d}|||t|dS)NTrnrZr6r7rPrrr9s rftest_fast_no_paczKdcTgsTests.test_fast_no_pacsa!!mmEdm33 3.A"&"7"7"9"9  ; ; ; ; ;rhc|}||dd}||tdSNTroallow_empty_authdatar4r^r9s rftest_tgs_authdata_no_pacz$KdcTgsTests.test_tgs_authdata_no_pacsE!!mmEdmNN c*= >>>>>rhc|}||ddd}||tdS)NT)r=rorr4rrr9s rftest_renew_authdata_no_pacz&KdcTgsTests.test_renew_authdata_no_pacsO!!mmETd1577 ,?@@@@@rhc|}||ddd}||tdS)NT)rDrorr4rur9s rftest_validate_authdata_no_pacz)KdcTgsTests.test_validate_authdata_no_pacsR!!mmE4D1577 3/BCCCCCrhc|}||dd}|||tddS)NTrFrxryr9s rftest_s4u2self_authdata_no_pacz)KdcTgsTests.test_s4u2self_authdata_no_pacsW!!mmEdmNN sE&9$)  + + + + +rhc|}||dd}|||tdSrr|r9s rftest_user2user_authdata_no_pacz*KdcTgsTests.test_user2user_authdata_no_pacsG!!mmEdmNN U3FGGGGGrhc|}||dd}|||t|dS)NTrrZrr9s rftest_fast_authdata_no_pacz%KdcTgsTests.test_fast_authdata_no_pacsc!!mmEdmNN 3.A"&"7"7"9"9  ; ; ; ; ;rhc|}|}|||}||tdSNnew_ridr4r6_get_existing_ridr7r8rrVrW existing_ridrts rftest_tgs_sid_mismatch_existingz*KdcTgsTests.test_tgs_sid_mismatch_existingsT!!--// mmE>>>>rhc|}|}||d|}||tdSNT)r=rr4r6rr7r@rrs rf test_renew_sid_mismatch_existingz,KdcTgsTests.test_renew_sid_mismatch_existing!sV!!--// mmET>>>>rhc|}|}|||d}||ddSNF)rcan_modify_requester_sidrr4r6rr7r8rs rf%test_logon_info_sid_mismatch_existingz1KdcTgsTests.test_logon_info_sid_mismatch_existingJs]!!--// mmE<5:<< c! ,,,,,rhc|}|}|||d}||tdSNT)rr]r4rrs rf*test_logon_info_only_sid_mismatch_existingz6KdcTgsTests.test_logon_info_only_sid_mismatch_existingQs^!!--// mmE<1577 c*= >>>>>rhc|}|}|||}||tdSrr6_get_non_existent_ridr7r8rrVrWnonexistent_ridrts rf!test_tgs_sid_mismatch_nonexistingz-KdcTgsTests.test_tgs_sid_mismatch_nonexistingYsT!!4466mmE?m;; c*= >>>>>rhc|}|}||d|}||tdSrr6rr7r@rrs rf#test_renew_sid_mismatch_nonexistingz/KdcTgsTests.test_renew_sid_mismatch_nonexisting_s^!!4466mmET$355 ,?@@@@@rhc|}|}||d|}||tdSrr6rr7rFrrs rf&test_validate_sid_mismatch_nonexistingz2KdcTgsTests.test_validate_sid_mismatch_nonexistingfsa!!4466mmE4$355 3/BCCCCCrhc|}|}|||}|||tdSrr6rr7rIrrs rf&test_s4u2self_sid_mismatch_nonexistingz2KdcTgsTests.test_s4u2self_sid_mismatch_nonexistingmsc!!4466mmE?m;; sE&9  ; ; ; ; ;rhc|}|}|||}|||tdSrr6rr7rMrrs rf'test_user2user_sid_mismatch_nonexistingz3KdcTgsTests.test_user2user_sid_mismatch_nonexistingtsc!!4466mmE?m;; U':  < < < < >>>>rhc|}|}|||d}||ddSrr6rr7r8rs rf(test_logon_info_sid_mismatch_nonexistingz4KdcTgsTests.test_logon_info_sid_mismatch_nonexistings]!!4466mmE?5:<< c! ,,,,,rhc|}|}|||d}||tdSrrrs rf-test_logon_info_only_sid_mismatch_nonexistingz9KdcTgsTests.test_logon_info_only_sid_mismatch_nonexistings^!!4466mmE?1577 c*= >>>>>rhc|dd}||d}||ddSNTrerhrr4r5r9s rftest_tgs_rodc_revealedz"KdcTgsTests.test_tgs_rodc_revealedsPD15 77mmETm22 c! ,,,,,rhc|dd}||dd}||ddddS)NTrer=rhrFrXr{r}r?r9s rftest_renew_rodc_revealedz$KdcTgsTests.test_renew_rodc_revealedseD15 77mmETTmBB A).-1  3 3 3 3 3rhc|dd}||dd}||ddddS)NTrerDrhrFrrEr9s rftest_validate_rodc_revealedz'KdcTgsTests.test_validate_rodc_revealedsgD15 77mmE44m@@ 3q,104  6 6 6 6 6rhc|dd}||d}|||tdSNTrerr4)r6r7rIrr9s rftest_s4u2self_rodc_revealedz'KdcTgsTests.test_s4u2self_rodc_revealedseD15 77mmETm22 sE&A  C C C C Crhc|dd}||d}|||ddSrrLr9s rftest_user2user_rodc_revealedz(KdcTgsTests.test_user2user_rodc_revealedsRD15 77mmETm22 U155555rhc|dd}|dd}||d|}||tdSNTrerhrr4rrs rf#test_tgs_rodc_sid_mismatch_existingz/KdcTgsTests.test_tgs_rodc_sid_mismatch_existingstD15 77--$?C.EE mmET>>>>rhc|dd}|dd}||dd|}||tdSNTre)r=rhrr4rrs rf%test_renew_rodc_sid_mismatch_existingz1KdcTgsTests.test_renew_rodc_sid_mismatch_existings~D15 77--$?C.EE mmETT$022 ,?@@@@@rhc|dd}|dd}||dd|}||tdSNTre)rDrhrr4rrs rf(test_validate_rodc_sid_mismatch_existingz4KdcTgsTests.test_validate_rodc_sid_mismatch_existingsD15 77--$8<.>> mmE44$022 3/BCCCCCrhc|dd}|dd}||d|}|||tdSrrrs rf(test_s4u2self_rodc_sid_mismatch_existingz4KdcTgsTests.test_s4u2self_rodc_sid_mismatch_existingsvD15 77--$?C.EE mmET>>>>rhc|dd}|dd}||d|d}||ddSNTreF)rhrrrr4rrs rf.test_tgs_rodc_logon_info_sid_mismatch_existingz:KdcTgsTests.test_tgs_rodc_logon_info_sid_mismatch_existings}D15 77--$?C.EE mmET<5:<< c! ,,,,,rhc|dd}|dd}||d|d}||tdSNTre)rhrr]r4rrs rf3test_tgs_rodc_logon_info_only_sid_mismatch_existingz?KdcTgsTests.test_tgs_rodc_logon_info_only_sid_mismatch_existings~D15 77--$?C.EE mmET<1577 c*= >>>>>rhc|dd}|}||d|}||tdSrrrs rf&test_tgs_rodc_sid_mismatch_nonexistingz2KdcTgsTests.test_tgs_rodc_sid_mismatch_nonexistingsdD15 774466mmET?mKK c*= >>>>>rhc|dd}|}||dd|}||tdSrrrs rf(test_renew_rodc_sid_mismatch_nonexistingz4KdcTgsTests.test_renew_rodc_sid_mismatch_nonexistingsnD15 774466mmETT$355 ,?@@@@@rhc|dd}|}||dd|}||tdSrrrs rf+test_validate_rodc_sid_mismatch_nonexistingz7KdcTgsTests.test_validate_rodc_sid_mismatch_nonexisting!sqD15 774466mmE44$355 3/BCCCCCrhc|dd}|}||d|}|||tdSrrrs rf+test_s4u2self_rodc_sid_mismatch_nonexistingz7KdcTgsTests.test_s4u2self_rodc_sid_mismatch_nonexisting)sfD15 774466mmET?mKK sE2EFFFFFrhc|dd}|}||d|}|||tdSrrrs rf,test_user2user_rodc_sid_mismatch_nonexistingz8KdcTgsTests.test_user2user_rodc_sid_mismatch_nonexisting0ssD15 774466mmET?mKK U':  < < < < >>>>rhc|dd}|}||d|d}||ddSrrrs rf1test_tgs_rodc_logon_info_sid_mismatch_nonexistingz=KdcTgsTests.test_tgs_rodc_logon_info_sid_mismatch_nonexistingIsmD15 774466mmET?5:<< c! ,,,,,rhc|dd}|}||d|d}||tdSrrrs rf6test_tgs_rodc_logon_info_only_sid_mismatch_nonexistingzBKdcTgsTests.test_tgs_rodc_logon_info_only_sid_mismatch_nonexistingQsnD15 774466mmET?1577 c*= >>>>>rhc|d}||d}||tdSNTrfrr4r^r9s rftest_tgs_rodc_not_revealedz&KdcTgsTests.test_tgs_rodc_not_revealed[sGD99mmETm22 c*= >>>>>rhc|d}||dd}||tdS)NTrrr4rrr9s rftest_renew_rodc_not_revealedz(KdcTgsTests.test_renew_rodc_not_revealedasID99mmETTmBB ,?@@@@@rhc|d}||dd}||tdS)NTrrr4rur9s rftest_validate_rodc_not_revealedz+KdcTgsTests.test_validate_rodc_not_revealedfsLD99mmE44m@@ 3/BCCCCCrhc|d}||d}|||tdSrryr9s rftest_s4u2self_rodc_not_revealedz+KdcTgsTests.test_s4u2self_rodc_not_revealedksID99mmETm22 sE2EFFFFFrhc|d}||d}|||tdSrr|r9s rf test_user2user_rodc_not_revealedz,KdcTgsTests.test_user2user_rodc_not_revealedpsID99mmETm22 U3FGGGGGrhc|dd}||d}|||tdSr)r6r7_remove_rodc_partial_secretsr8rr9s rf test_tgs_rodc_no_partial_secretsz,KdcTgsTests.test_tgs_rodc_no_partial_secretswsbD15 77mmETm22 ))+++ c. 99999rhc|dd}||dd}|||tdSNTrerr4)r6r7rr@rr9s rf"test_renew_rodc_no_partial_secretsz.KdcTgsTests.test_renew_rodc_no_partial_secrets~sdD15 77mmETTmBB ))+++ N;;;;;rhc|dd}||dd}|||tdSNTrerr4)r6r7rrFrr9s rf%test_validate_rodc_no_partial_secretsz1KdcTgsTests.test_validate_rodc_no_partial_secretssgD15 77mmE44m@@ ))+++ 3~>>>>>rhc|dd}||d}||||tdSr)r6r7rrIrr9s rf%test_s4u2self_rodc_no_partial_secretsz1KdcTgsTests.test_s4u2self_rodc_no_partial_secretssdD15 77mmETm22 ))+++ sE.AAAAArhc|dd}||d}||||tdSr)r6r7rrMrr9s rf&test_user2user_rodc_no_partial_secretsz2KdcTgsTests.test_user2user_rodc_no_partial_secretssdD15 77mmETm22 ))+++ U>BBBBBrhc|dd}||d}||||t|dSNTrerrZ)r6r7rrPrrr9s rf!test_fast_rodc_no_partial_secretsz-KdcTgsTests.test_fast_rodc_no_partial_secretssD15 77mmETm22 ))+++ 3n"&"7"7"9"9  ; ; ; ; ;rhc|dd}||d}|||tdSr)r6r7_remove_rodc_krbtgt_linkr8rr9s rftest_tgs_rodc_no_krbtgt_linkz(KdcTgsTests.test_tgs_rodc_no_krbtgt_linksbD15 77mmETm22 %%''' c. 99999rhc|dd}||dd}|||tdSr)r6r7r,r@rr9s rftest_renew_rodc_no_krbtgt_linkz*KdcTgsTests.test_renew_rodc_no_krbtgt_linksdD15 77mmETTmBB %%''' N;;;;;rhc|dd}||dd}|||tdSr")r6r7r,rFrr9s rf!test_validate_rodc_no_krbtgt_linkz-KdcTgsTests.test_validate_rodc_no_krbtgt_linksgD15 77mmE44m@@ %%''' 3~>>>>>rhc|dd}||d}||||tdSr)r6r7r,rIrr9s rf!test_s4u2self_rodc_no_krbtgt_linkz-KdcTgsTests.test_s4u2self_rodc_no_krbtgt_linksdD15 77mmETm22 %%''' sE.AAAAArhc|dd}||d}||||tdSr)r6r7r,rMrr9s rf"test_user2user_rodc_no_krbtgt_linkz.KdcTgsTests.test_user2user_rodc_no_krbtgt_linksdD15 77mmETm22 %%''' U>BBBBBrhc|dd}||d}||||t|dSr))r6r7r,rPrrr9s rftest_fast_rodc_no_krbtgt_linkz)KdcTgsTests.test_fast_rodc_no_krbtgt_linksD15 77mmETm22 %%''' 3n"&"7"7"9"9  ; ; ; ; ;rhc|d}||d}||tdSNTrgrr4r^r9s rftest_tgs_rodc_not_allowedz%KdcTgsTests.test_tgs_rodc_not_allowedsG66mmETm22 c*= >>>>>rhc|d}||dd}||tdS)NTr:rr4rrr9s rftest_renew_rodc_not_allowedz'KdcTgsTests.test_renew_rodc_not_allowedsI66mmETTmBB ,?@@@@@rhc|d}||dd}||tdS)NTr:rr4rur9s rftest_validate_rodc_not_allowedz*KdcTgsTests.test_validate_rodc_not_allowedsL66mmE44m@@ 3/BCCCCCrhc|d}||d}|||tdSr9ryr9s rftest_s4u2self_rodc_not_allowedz*KdcTgsTests.test_s4u2self_rodc_not_allowedsI66mmETm22 sE2EFFFFFrhc|d}||d}|||tdSr9r|r9s rftest_user2user_rodc_not_allowedz+KdcTgsTests.test_user2user_rodc_not_allowedsI66mmETm22 U3FGGGGGrhc|d}||d}|||t|dS)NTr:rrZrr9s rftest_fast_rodc_not_allowedz&KdcTgsTests.test_fast_rodc_not_allowedse66mmETm22 3.A"&"7"7"9"9  ; ; ; ; ;rhc|dd}||d}||tdSNTreplication_deniedrgrr4r^r9s rftest_tgs_rodc_deniedz KdcTgsTests.test_tgs_rodc_deniedsQ415 77mmETm22 c*= >>>>>rhc|dd}||dd}||tdS)NTrHrr4rrr9s rftest_renew_rodc_deniedz"KdcTgsTests.test_renew_rodc_deniedsS415 77mmETTmBB ,?@@@@@rhc|dd}||dd}||tdS)NTrHrr4rur9s rftest_validate_rodc_deniedz%KdcTgsTests.test_validate_rodc_deniedsV415 77mmE44m@@ 3/BCCCCCrhc|dd}||d}|||tdSrGryr9s rftest_s4u2self_rodc_deniedz%KdcTgsTests.test_s4u2self_rodc_deniedsS415 77mmETm22 sE2EFFFFFrhc|dd}||d}|||tdSrGr|r9s rftest_user2user_rodc_deniedz&KdcTgsTests.test_user2user_rodc_denied sS415 77mmETm22 U3FGGGGGrhc|dd}||d}|||t|dS)NTrHrrZrr9s rftest_fast_rodc_deniedz!KdcTgsTests.test_fast_rodc_deniedso415 77mmETm22 3.A"&"7"7"9"9  ; ; ; ; ;rhc|ddd}||d}||tdSNTrfrIrgrr4r^r9s rftest_tgs_rodc_allowed_deniedz(KdcTgsTests.test_tgs_rodc_allowed_deniedsVD3715 77mmETm22 c*= >>>>>rhc|ddd}||dd}||tdS)NTrWrr4rrr9s rftest_renew_rodc_allowed_deniedz*KdcTgsTests.test_renew_rodc_allowed_denied sXD3715 77mmETTmBB ,?@@@@@rhc|ddd}||dd}||tdS)NTrWrr4rur9s rf!test_validate_rodc_allowed_deniedz-KdcTgsTests.test_validate_rodc_allowed_denied's[D3715 77mmE44m@@ 3/BCCCCCrhc|ddd}||d}|||tdSrVryr9s rf!test_s4u2self_rodc_allowed_deniedz-KdcTgsTests.test_s4u2self_rodc_allowed_denied.sXD3715 77mmETm22 sE2EFFFFFrhc|ddd}||d}|||tdSrVr|r9s rf"test_user2user_rodc_allowed_deniedz.KdcTgsTests.test_user2user_rodc_allowed_denied5sXD3715 77mmETm22 U3FGGGGGrhc|ddd}||d}|||t|dS)NTrWrrZrr9s rftest_fast_rodc_allowed_deniedz)KdcTgsTests.test_fast_rodc_allowed_denied<stD3715 77mmETm22 3.A"&"7"7"9"9  ; ; ; ; ;rhc|}||tjj}||t tfdtj dSNr*T)rXr@rs) r6r7rEnctypeRC4r8rrr NT_STATUS_INSUFFICIENT_RESOURCESr9s rf test_tgs_rc4zKdcTgsTests.test_tgs_rc4Esj!!mmE)#'&.&O  Q Q Q Q Qrhc|}||dtjj}||t tfddddS)NT)r=r+r>)r6r7rrerfr@rrr9s rftest_renew_rc4zKdcTgsTests.test_renew_rc4Msh!!mmET9LmMM _->-@)-59-1  3 3 3 3 3rhc|}||dtjj}||t tfddddS)NT)rDr+r>)r6r7rrerfrFrrr9s rftest_validate_rc4zKdcTgsTests.test_validate_rc4Vsj!!mmE4w7JmKK 30A0C,08<04  6 6 6 6 6rhc|}||tjj}|||t tfdtj dSrd) r6r7rrerfrIrrrrgr9s rftest_s4u2self_rc4zKdcTgsTests.test_s4u2self_rc4_sm!!mmE)*8  : : : : :rhc|}||}|}|||}|||t t fdSr)r6r7rrrIrrrs rftest_s4u2self_service_ticketz(KdcTgsTests.test_s4u2self_service_ticket-s~!!mmE""..00 00mDD ~u'5~&F  H H H H Hrhc|}||}|}|||}|||t t fdSr)r6r7rrrMrrrs rftest_user2user_service_ticketz)KdcTgsTests.test_user2user_service_ticket7s~!!mmE""..00 00mDD (8.'I  K K K K Krhc|}||}|}|||}|||t t fdSr)r6r7rrrPrrrs rftest_fast_service_ticketz$KdcTgsTests.test_fast_service_ticketBs!!mmE""..00 00mDD >5#1#>#@  A A A A Arhcb|}||dddddSNTrrzr{r|r6rrVrWs rftest_pac_attrs_nonezKdcTgsTests.test_pac_attrs_noneMC!! U $&*26  8 8 8 8 8rhcb|}||dddddS)NFTrrrs rftest_pac_attrs_falsez KdcTgsTests.test_pac_attrs_falseTsC!! U $&*27  9 9 9 9 9rhcb|}||dddddSrrrs rftest_pac_attrs_truezKdcTgsTests.test_pac_attrs_true[rrhc|}||dddd}||d}||ddddddSNTrr<rrXrzr{r|r}r6rrr@r9s rftest_pac_attrs_renew_nonez%KdcTgsTests.test_pac_attrs_renew_noneb!!ll5d&*,08<>>sd33 A#')-59-1  3 3 3 3 3rhc|}||dddd}||d}||ddddddS)NFTrr<rrrr9s rftest_pac_attrs_renew_falsez&KdcTgsTests.test_pac_attrs_renew_falseps!!ll5e&*,08=??sd33 A#')-5:-1  3 3 3 3 3rhc|}||dddd}||d}||ddddddSrrr9s rftest_pac_attrs_renew_truez%KdcTgsTests.test_pac_attrs_renew_true~rrhc|dd}||dddd}||dd}||dddddSNTrerrhr=rFrXrzr{r}rr9s rftest_pac_attrs_rodc_renew_nonez*KdcTgsTests.test_pac_attrs_rodc_renew_noneD15 77ll5d&*,08<>>sddCC A#').-1  3 3 3 3 3rhc|dd}||dddd}||dd}||dddddS)NTreFrrrrrr9s rftest_pac_attrs_rodc_renew_falsez+KdcTgsTests.test_pac_attrs_rodc_renew_falsesD15 77ll5e&*,08=??sddCC A#').-1  3 3 3 3 3rhc|dd}||dddd}||dd}||dddddSrrr9s rftest_pac_attrs_rodc_renew_truez*KdcTgsTests.test_pac_attrs_rodc_renew_truerrhc|}||dddd}||dd}||dddddSNTrr=rarFrrr9s rf!test_pac_attrs_missing_renew_nonez-KdcTgsTests.test_pac_attrs_missing_renew_none!!ll5d&*,08<>>sd0466 A#').-1  3 3 3 3 3rhc|}||dddd}||dd}||dddddS)NFTrrrrrr9s rf"test_pac_attrs_missing_renew_falsez.KdcTgsTests.test_pac_attrs_missing_renew_falses!!ll5e&*,08=??sd0466 A#').-1  3 3 3 3 3rhc|}||dddd}||dd}||dddddSrrr9s rf!test_pac_attrs_missing_renew_truez-KdcTgsTests.test_pac_attrs_missing_renew_truerrhc|dd}||dddd}||ddd}||dddddSNTrerrhr=rarFrrr9s rf&test_pac_attrs_missing_rodc_renew_nonez2KdcTgsTests.test_pac_attrs_missing_rodc_renew_noneD15 77ll5d&*,08<>>sdd0466 A#').-1  3 3 3 3 3rhc|dd}||dddd}||ddd}||dddddS)NTreFrrrrrr9s rf'test_pac_attrs_missing_rodc_renew_falsez3KdcTgsTests.test_pac_attrs_missing_rodc_renew_falsesD15 77ll5e&*,08=??sdd0466 A#').-1  3 3 3 3 3rhc|dd}||dddd}||ddd}||dddddSrrr9s rf&test_pac_attrs_missing_rodc_renew_truez2KdcTgsTests.test_pac_attrs_missing_rodc_renew_truerrhc|}||dddd}||ddddSNTrrFrbr6rr8r9s rftest_tgs_pac_attrs_nonez#KdcTgsTests.test_tgs_pac_attrs_none f!!ll5d&*,08<>> c!',  . . . . .rhc|}||dddd}||ddddS)NFTrrrbrr9s rftest_tgs_pac_attrs_falsez$KdcTgsTests.test_tgs_pac_attrs_falsesf!!ll5e&*,08=?? c!',  . . . . .rhc|}||dddd}||ddddSrrr9s rftest_tgs_pac_attrs_truez#KdcTgsTests.test_tgs_pac_attrs_true!rrhc|}|}|||}||dd|ddS)NTrrzr~r})r6rrr/r)rVrWrrs rftest_as_requester_sidz!KdcTgsTests.test_as_requester_sid+so!!     77 U $"%*.  0 0 0 0 0rhc |}|}|||}||dd|d}||ddddS)NTrrF)rXrzr})r6rrr/rr8rVrWrrrts rftest_tgs_requester_sidz"KdcTgsTests.test_tgs_requester_sid6s!!     77ll5d&*(+0466 c!+0  2 2 2 2 2rhc @|}|}|||}||dd|d}||d}||dddd|ddS)NTrr<rrXrzr{r|r~r}r6rrr/rrr@rs rftest_tgs_requester_sid_renewz(KdcTgsTests.test_tgs_requester_sid_renewDs!!     77ll5d&*(+0466sd33 A$)-59%(-1  3 3 3 3 3rhcF|dd}|}|||}||dd|d}||dd}||ddd|ddS)NTrerrrFrXrzr{r~r}rrs rf!test_tgs_requester_sid_rodc_renewz-KdcTgsTests.test_tgs_requester_sid_rodc_renewVsD15 77     77ll5d&*(+0466sddCC A$).%(-1  3 3 3 3 3rhcB|}|}|||}||dd|d}||dd}||tdS)NTr)r=r]r4r6rrr/rrr@rrs rf$test_tgs_requester_sid_missing_renewz0KdcTgsTests.test_tgs_requester_sid_missing_renewhs!!     77ll5d&*(+0466sd48:: ,?@@@@@rhcJ|dd}|}|||}||dd|d}||ddd}||tdS)NTrer)rhr=r]r4rrs rf)test_tgs_requester_sid_missing_rodc_renewz5KdcTgsTests.test_tgs_requester_sid_missing_rodc_renewwsD15 77     77ll5d&*(+0466sdd48:: ,?@@@@@rhc @|}|}|||}||dd|d}||d}||dddd|ddS)NTrrCrrr6rrr/rrrFrs rftest_tgs_requester_sid_validatez+KdcTgsTests.test_tgs_requester_sid_validates!!     77ll5d&*(+0466sD11 3qT,08<(+04  6 6 6 6 6rhcF|dd}|}|||}||dd|d}||dd}||ddd|ddS)NTrer)rhrDrFrrrs rf$test_tgs_requester_sid_rodc_validatez0KdcTgsTests.test_tgs_requester_sid_rodc_validatesD15 77     77ll5d&*(+0466sdDAA 3qT,1(+04  6 6 6 6 6rhcB|}|}|||}||dd|d}||dd}||tdS)NTr)rDr]r4r6rrr/rrrFrrs rf'test_tgs_requester_sid_missing_validatez3KdcTgsTests.test_tgs_requester_sid_missing_validates!!     77ll5d&*(+0466sD48:: 3/BCCCCCrhcJ|dd}|}|||}||dd|d}||ddd}||tdS)NTrer)rhrDr]r4rrs rf,test_tgs_requester_sid_missing_rodc_validatez8KdcTgsTests.test_tgs_requester_sid_missing_rodc_validatesD15 77     77ll5d&*(+0466sdD48:: 3/BCCCCCrhc|}||d}||dd}||}||dSNrrTrXrzr6rr8rrMrVrWrtrrs rftest_tgs_pac_request_nonez%KdcTgsTests.test_tgs_pac_request_nonej!!ll5dl33s1FF!!&)) S!!!!!rhc|}||dd}||dd}||d}||dS)NFrrr r)r6rr8rrr s rftest_tgs_pac_request_falsez&KdcTgsTests.test_tgs_pac_request_falsesq!!ll5elEEs1GG!!&U!;; #rhc|}||d}||dd}||}||dSNTrrr r r s rftest_tgs_pac_request_truez%KdcTgsTests.test_tgs_pac_request_truerrhcD|}||d}||d}||ddddd}||dd}||}||dS)NrTr<rrr r6rrr@r8rrMr s rftest_renew_pac_request_nonez'KdcTgsTests.test_renew_pac_request_none!!ll5dl33sd33ooc!/3;?3799 s1FF!!&)) S!!!!!rhcJ|}||dd}||d}||ddddd}||dd}||d}||dS) NFrTr<rrr r)r6rrr@r8rrr s rftest_renew_pac_request_falsez(KdcTgsTests.test_renew_pac_request_falses!!ll5elEEsd33ooc!/3;@3799 s1GG!!&U!;; #rhcD|}||d}||d}||ddddd}||dd}||}||dS)NTrr<rrr rr s rftest_renew_pac_request_truez'KdcTgsTests.test_renew_pac_request_true rrhcJ|dd}||d}||dd}||dddd}||dd}||}||dS NTrerrrFrr rr s rf test_rodc_renew_pac_request_nonez,KdcTgsTests.test_rodc_renew_pac_request_none D15 77ll5dl33sddCCooc!/43799s1FF!!&)) S!!!!!rhcL|dd}||dd}||dd}||dddd}||dd}||}||dS) NTreFrrrrr rr s rf!test_rodc_renew_pac_request_falsez-KdcTgsTests.test_rodc_renew_pac_request_false! sD15 77ll5elEEsddCCooc!/43799s1FF!!&)) S!!!!!rhcJ|dd}||d}||dd}||dddd}||dd}||}||dSrrr s rf test_rodc_renew_pac_request_truez,KdcTgsTests.test_rodc_renew_pac_request_true0 rrhcD|}||d}||d}||ddddd}||dd}||}||dS)NrTrCrrr r6rrrFr8rrMr s rftest_validate_pac_request_nonez*KdcTgsTests.test_validate_pac_request_none? !!ll5dl33sD11  Q426>B6:!<< s1FF!!&)) S!!!!!rhcJ|}||dd}||d}||ddddd}||dd}||d}||dS) NFrTrCrrr r)r6rrrFr8rrr s rftest_validate_pac_request_falsez+KdcTgsTests.test_validate_pac_request_falseN s!!ll5elEEsD11  Q426>C6:!<< s1GG!!&U!;; #rhcD|}||d}||d}||ddddd}||dd}||}||dS)NTrrCrrr r%r s rftest_validate_pac_request_truez*KdcTgsTests.test_validate_pac_request_true] r'rhcJ|dd}||d}||dd}||dddd}||dd}||}||dS NTrerrrFrr r%r s rf#test_rodc_validate_pac_request_nonez/KdcTgsTests.test_rodc_validate_pac_request_nonel D15 77ll5dl33sDDAA  Q4276:!<<s1FF!!&)) S!!!!!rhcL|dd}||dd}||dd}||dddd}||dd}||}||dS) NTreFrrrrr r%r s rf$test_rodc_validate_pac_request_falsez0KdcTgsTests.test_rodc_validate_pac_request_false{ sD15 77ll5elEEsDDAA  Q4276:!<<s1FF!!&)) S!!!!!rhcJ|dd}||d}||dd}||dddd}||dd}||}||dSr-r%r s rf#test_rodc_validate_pac_request_truez/KdcTgsTests.test_rodc_validate_pac_request_true r/rhc|}||d}|||dd}||}||dSr r6rrIrrMr s rftest_s4u2self_pac_request_nonez*KdcTgsTests.test_s4u2self_pac_request_none l!!ll5dl33U1NN!!&)) S!!!!!rhc|}||dd}|||dd}||}||dS)NFrrTr r5r s rftest_s4u2self_pac_request_falsez+KdcTgsTests.test_s4u2self_pac_request_false sn!!ll5elEEU1NN!!&)) S!!!!!rhc|}||d}|||dd}||}||dSrr5r s rftest_s4u2self_pac_request_truez*KdcTgsTests.test_s4u2self_pac_request_true r7rhc|}||d}|||dd}||}||dSr r6rrMrrMr s rftest_user2user_pac_request_nonez+KdcTgsTests.test_user2user_pac_request_none l!!ll5dl33eA$OO!!&)) S!!!!!rhc|}||dd}|||dd}||d}||dS)NFrrTr rr=r s rf test_user2user_pac_request_falsez,KdcTgsTests.test_user2user_pac_request_false s}!!ll5elEEeA,0!22!!&T!:: S!!!!!rhc|}||d}|||dd}||}||dSrr=r s rftest_user2user_pac_request_truez+KdcTgsTests.test_user2user_pac_request_true r?rhc6|}||}|}||d}|||d|d}||}||dS)NrrTrXuser_tgtrzr6rr{rMrrMrVrWrt user_credsrFrrs rf$test_user2user_user_pac_request_nonez0KdcTgsTests.test_user2user_user_pac_request_none !!ll5!!))++ << <==eA*2t!EE!!&)) S!!!!!rhc<|}||}|}||dd}|||d|d}||d}||dS)NFrrrEr)r6rr{rMrrrHs rf%test_user2user_user_pac_request_falsez1KdcTgsTests.test_user2user_user_pac_request_false s!!ll5!!))++ << $<OOeA*2u!FF!!&U!;; #rhc6|}||}|}||d}|||d|d}||}||dS)NTrrrErGrHs rf$test_user2user_user_pac_request_truez0KdcTgsTests.test_user2user_user_pac_request_true rKrhc|}||d}|||dd}||}||dSr r6rrPrrMr s rftest_fast_pac_request_nonez&KdcTgsTests.test_fast_pac_request_none l!!ll5dl33CqTJJ!!&)) S!!!!!rhc|}||d}|||dd}||d}||dS)NFrrTr rrQr s rftest_fast_pac_request_falsez'KdcTgsTests.test_fast_pac_request_false s{!!ll5el44Cq'+--!!&T!:: S!!!!!rhc|}||d}|||dd}||}||dSrrQr s rftest_fast_pac_request_truez&KdcTgsTests.test_fast_pac_request_true rSrhc|dd}||d}||d}||dd}||}||dSNTrerrrr r6rrr8rrMr s rftest_tgs_rodc_pac_request_nonez*KdcTgsTests.test_tgs_rodc_pac_request_none D15 77ll5dl33sd33s1FF!!&)) S!!!!!rhc|dd}||dd}||d}||dd}||}||dS)NTreFrrrr rZr s rftest_tgs_rodc_pac_request_falsez+KdcTgsTests.test_tgs_rodc_pac_request_false sD15 77ll5elEEsd33s1FF!!&)) S!!!!!rhc|dd}||d}||d}||dd}||}||dSrYrZr s rftest_tgs_rodc_pac_request_truez*KdcTgsTests.test_tgs_rodc_pac_request_true) r\rhc||jjd}||}|}|}t j|}t j |t j d|d<| || |ttfdS)NF)r use_cachesAMAccountNamer4)rrrrrrldbMessager/MessageElementFLAG_MOD_REPLACEmodifyr8rr)rVrWrtnew_namermsgs rftest_tgs_renamezKdcTgsTests.test_tgs_rename4 s%%43C3H05&77ll5!!((**  k%,,..)) # 28363G3C!E!E   S c+>+F+H  I I I I Irhcl||dd}|d}||d<|S)Nr=Tvaluei@~r(z renew-tillmodify_ticket_flagrG)rVr renew_tills rfrzKdcTgsTests._modify_renewableF sC**8[*MM**-*@@ !+rhcl||dd}|d}||d<|S)NrDTrmir( starttimero)rVr past_times rfrzKdcTgsTests._modify_invalidP sC**8Yd*KK)))@@ )rhFNTc||o||r||||}|||||||||| | | | |  S)N) rtr=rDrhrrorrrrar]r+ cksum_etype) assertFalserrr)rVrr=rDrhrrorrrrar]r+rvrts rfr7zKdcTgsTests._get_tgtZ s .w///  '   g & & &ll<((!!5"7%=-!5# % % %rhc  |r}n} s r  fdnd||}|rd}n-||kr|}n||}tj|i}|rjn |rjnd  fd}n}fd}n}||||||| |S)Nc:|j}|D]}|jtjkr" r|jj} |jj_:|jtjkr| r&|xj dzc_ | |w Q rO|j} }| }|d }tj||_|jtjkr' r%|xj dzc_ | | ||_|S)N-)bufferstyperPAC_TYPE_LOGON_INFOinfoinfo3baseridPAC_TYPE_REQUESTER_SID num_buffersremoverget_domain_sidrdom_sidrPAC_TYPE_ATTRIBUTES_INFO)r pac_buffers pac_buffer logon_info requester_sidr domain_sidnew_sidrrrrar]rVs rf change_sid_fnz.KdcTgsTests._modify_tgt..change_sid_fn s1!k "-;;J!'*EEE".3H.)3)=J8?J,15#G,JJJ/ JOOq0OO'..z::::$05M0,6OM$(NN$4$4E).)=)=)?)?J)3&?&?g&?&?G080@0I0IM-#G,LLL+;OOq0OO'..z:::)  rhc> |}|d<|d<|S)Nr,rr)rr,rflags_modify_fns rfrz*KdcTgsTests._modify_tgt..modify_fn s="..x88H$(-HW%%)/HX&rhc |}|jD]D}|jtjkr-|j}ddd|_E|S)Nz name-stringrr)r|r}rPAC_TYPE_LOGON_NAMErdecoder)rrrrr,s rf modify_pac_fnz.KdcTgsTests._modify_tgt..modify_pac_fn so ,'-,,C"%+EEJ!'*EEE%/_ "-03::7CC#/ rh)new_ticket_keyrrrrupdate_pac_checksumsr)get_mock_rodc_krbtgt_credsget_krbtgt_credsrHrPAC_TYPE_KDC_CHECKSUMrrr)rVrtr=rDrhrrorr,rrrrar]r+rv krbtgt_creds krbtgt_keyr cksum_keyrrrrs` ` `````` @@rfrzKdcTgsTests._modify_tgt~ s  3::<@@    MM ##&  ?? @KMM -yM  #"4OO  #"2OO"O   2 (I         *M## %'"!5%/'$)) )rhc||tjjfd}||jtjz}tj }|_ tj t|tj d|d<|dS)Nctj}|_tjt jtjd|d<|dS)NuserAccountControl)rdrerrfrrrgrhrjrodc_ctxrodc_dnrs rfadd_rodc_partial_secretszJKdcTgsTests._remove_rodc_partial_secrets..add_rodc_partial_secrets s^+--CCF(+(:H/00$$)&)&C$ % LL     rhr)rget_mock_rodc_ctxrdDnacct_dn addCleanuprrUF_PARTIAL_SECRETS_ACCOUNTrerrfrrgrh)rVruacrjrrrs @@@rfrz(KdcTgsTests._remove_rodc_partial_secrets s  ))++& 011        0111)T-L,LLkmm$'$6 HH  %"%" !  Srhcl||tjjfd}||tj}|_tjgtj d|d< |dS)Nctj}|_tjjtjd|d<|dS)NmsDS-KrbTgtLink)rdrerrf new_krbtgt_dn FLAG_MOD_ADDrhrs rfadd_rodc_krbtgt_linkzBKdcTgsTests._remove_rodc_krbtgt_link..add_rodc_krbtgt_link sV+--CCF%(%7& !&#&#C! " LL     rhr) rrrdrrrrerrfFLAG_MOD_DELETErh)rVrrjrrrs @@@rfr,z$KdcTgsTests._remove_rodc_krbtgt_link s  ))++& 011        ,---kmm!$!3    ""   SrhcN||jj|||ddS)Nrallowed_replication_mockdenied_replication_mockrevealed_to_mock_rodcidrrrr)rVrfrIrgs rfr6zKdcTgsTests._get_creds' s@$$)2,?+=)9 % rhc ||jj|||dd}|}|}|||}t |ddd}|S)Nrzrrr{)rrrrr/rintrsplit) rVrfrIrgr|rother_dn other_sid other_rids rfrzKdcTgsTests._get_existing_rid4 s++)2,?+=)9 ,   %%''&&uh77  ((a00344 rhcN||jjdddddS)NTFrrrrVs rfr{zKdcTgsTests._get_mach_credsJ s>$$)2,0+0)- % rhcdS)Ni?rrs rfrz!KdcTgsTests._get_non_existent_ridT s}rhc h|} |||| |||||||  S)N)rzr{r|r}r~r@rs)rr) rVrtrXrzr{r|r}r~r@rsrYs rfr8zKdcTgsTests._run_tgsW sL--// }} !-)E!5%%+-- -rhc |}ttjd} ||||| ||||| S)Nrenewr:rzr{r|r}r~rrrJrKr rVrtrXrzr{r|r}r~rr:s rfr@zKdcTgsTests._renew_tgth sa,,.. ).w7788 }} #!-)E!5%'' 'rhc |}ttjd} ||||| ||||| S)Nvalidaterrrs rfrFzKdcTgsTests._validate_tgtx sa ,,.. ).z::;; }} #!-)E!5%'' 'rhc  }|}t|g |  fd} || | d||| S)Nr#cJjd}|g|fS)N)namer-tgt_session_keyctype)PA_S4U2Self_creater)_kdc_exchange_dict_callback_dictreq_bodyr9rVrt user_cname user_realms rfgenerate_s4u2self_padataz7KdcTgsTests._s4u2self..generate_s4u2self_padata s<,, # -F 8X% %rhF)r3rmrr@rsrz)r{rBrCrrEr) rVrt tgt_credsrXrzr@rsrIr[rrrs `` @@rfrIzKdcTgsTests._s4u2self s))++ ++-- ..6?[/BB ))++  & & & & & & & &}}S.),60H+0|-<(2 44 4rhc |)|} || }ttjd} ||||| ||||| S)Nzenc-tkt-in-skey)r:rr.rrzrs)r{rrrJrKr) rVrtrrXr.rrFrzrsrIr:s rfrMzKdcTgsTests._user2user sx  --//J||J//H)./@AABB }}X~y)4/2#($*(2-< >> >rhc |}||}|} |||| ||||S)N)rvr5rzr@)r{rrr) rVrvarmor_tgt_credsrXr5rzr@rIrFrYs rfrPzKdcTgsTests._fast sb))++ << ++--// }}X~|'0,:(2*6 88 8rh) FFFNFFTTFFNN)FFFNFFNNTTFFNN)FFF)TNNNNFN)TNNNN)TFN)NNNTN)NTF)rrrrrrrrrrrrrrrrrr r rrrrrr#r(r*r,r!r:rArGrJrNrQrTrVrXr[r_rcrirkrprsrvrzr}rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr r rrrrrrrr r#r%r'r*r-r/r1r3r5r7r;r=r?rArCrErJrLrNrPrRrTrXrZr\r^r`rbrhrjrlrnrprsrwryr}rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr rrrrrrr!r#r&r)r+r.r1r3r6r9r;r>rArCrJrMrOrRrUrWr[r^r`rkrrr7rrr,r6rr{rr8r@rFrIrMrP __classcell__)rs@rfrr4s&))))) 3 3 3 j'"'"'"RF/F/F/P " " "   %%%@%%%@%%%@%%%@%%%4%%%4%%%4%%%4""" """""" 2 2 2 2 2 2 2 2 2555333555 333 1110--- 333666555 666 111 ;;; CCC DDD ;;; ??? ...???...??? AAA DDD +++HHH ;;;??? AAA DDD +++HHH ;;;??? AAA DDD ;;;<<<;;;???---?????? AAADDD;;;<<<;;;???---???--- 333666CCC666???AAADDDGGG<<<;;;???---??????AAADDDGGG<<<;;;???---?????? AAA DDD GGG HHH:::<<<???BBBCCC;;;:::<<<???BBBCCC;;;??? AAA DDD GGG HHH ;;;??? AAA DDD GGG HHH ;;;???AAADDDGGGHHH;;;QQQ333666RRRIII ::: D D DCCC 9 9 9 C C C999FFF****** 6 6 6666$ F F FDDDFFFGGG 7 7 7 : : :HHHKKK A A A888999888 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3......... 0 0 0 2 2 2333$333$ A A AAAA 666$666$ D D DDDD """""" " " "    " " " " " " " " " " " " " " "    " " " " " " " " " " " """"""""""""""""""" " " "    " " """""""""" " " " " " " " " "III$! !&+'+*."'&+!"%"%"%"%L$!# $).*.-1%*). $s)s)s)s)j64(-&+$)    /4-2+0,8GK;? ' ' ' ' =A'+37+/#' '''' DH6:44446@D:>#'>>>>"BG 8 8 8 8 8 8 8 8rhr__main__)3sysospathinsertenvironrdsambarr samba.dcerpcrrsamba.tests.krb5.kcryptotestskrb5rsamba.tests.krb5.kdc_base_testr samba.tests.krb5.raw_testcaser "samba.tests.krb5.rfc4120_constantsr r r rrrrrrrrrrrrrrrrrsamba.tests.krb5.rfc4120_pyasn1rfc4120_pyasn1rJrrr rrunittestmainrrhrfrsm( < !$  ********+***********666666;;;;;;,433333333333q9q9q9q9q9kq9q9q9hJ*8J*8J*8J*8J*8/J*8J*8J*8ZT zNOOOHMOOOOO rh