FcddlZddlZejdddejd<ddlmZddlZddlm Z ddl m Z ddl m Z mZmZmZd Zd ZeGd d e Zed krd Zd ZddlZejdSdS) Nz bin/python1PYTHONUNBUFFERED)DynamicTestCase) KDCBaseTest)KerberosCredentials)AES256_CTS_HMAC_SHA1_96ARCFOUR_HMAC_MD5KDC_ERR_S_PRINCIPAL_UNKNOWN NT_PRINCIPALFceZdZejjejjejjdZddddddZ e fdZ e d Z d Z fd Zdd ZddZdZdZxZS)SpnTests)computerserverrodczldap/{{account}}z&ldap/{{account}}/{netbios_domain_name}z"ldap/{{account}}/{dns_domain_name}zldap/{{account}}/testz'ldap/{{account}}:test/{dns_domain_name})2_part3_part_our_domain3_part_our_realm3_part_not_our_realm3_part_instancecVtd|_dSN)super setUpClass_mock_rodc_creds)cls __class__s \}}|jD]\}}|d|}||f}|jd|g|R ?dS)N_spn_test_spn)test_account_typesitems test_spnsgenerate_dynamic_test)raccount_type_name account_typespn_namespntnametargss rsetUpDynamicTestCaseszSpnTests.setUpDynamicTestCases@s/2/E/K/K/M/M E E + |!$!4!4!6!6 E E ##==*;==%s+))*eDeDDDDD E E Erc||}|||}|t|d}|}||}|}|}| } | |j j } ttf} ||jjurt} nd} ||| } |ddkrW||s|| r-||jjur||jjurt*}|j}d}n d}d}|j}||j|j|j|| |||j||| dd }||d|j|| dS) N/) name_typenames)etyper0F) expected_crealmexpected_cnameexpected_srealmexpected_snameticket_decryption_key check_rep_fncheck_error_fncheck_kdc_private_fnexpected_error_modetgtauthenticator_subkey kdc_options expect_edata)cnamerealmsnameetypes) _get_creds _format_spnPrincipalName_creater splitget_client_credsget_tgt get_samdbdomain_netbios_namedomain_dns_name RandomKey session_keyr1rr AccountTypeSERVERTicketDecryptionKey_from_credscountendswithRODCr generic_check_kdc_errorgeneric_check_kdc_reptgs_exchange_dictcrealmrAsrealmgeneric_check_kdc_private_generic_kdc_exchange)selfr'r) target_credsrC client_credsr=samdbnetbios_domain_namedns_domain_namesubkeyrD ticket_etypedecryption_keyr<r:r9kdc_exchange_dicts r_test_spn_with_argszSpnTests._test_spn_with_argsHs|44 sL11))L03 #*@@,,.. ll<((  #7799//11 566)+;= 4+2 2 22LLL<<  =.. IIcNNQ  \\"566  _55 !(8(??? (8(==="= !9NLL"# !N5L 22J9J "0%)!%!? 3!'3    ""#4)-),).*0 # 2 2 2 2 2rcxtt|_t|_dSr)rsetUpglobal_asn1_print do_asn1_printglobal_hexdump do_hexdump)r]rs rrizSpnTests.setUps'  .(rNc.tfd|S)Nc0|Sr)rF)r)credsr]s rz'SpnTests._format_spns..st//U;;r)map)r]spnsrps` `r _format_spnszSpnTests._format_spnss!;;;;;TBBBrc|}|||}|*|}||}|S)N)rarbaccount)rKformatrLrM get_username)r]r)rpr` account_names rrFzSpnTests._format_spnsy  jjU-F-F-H-H).)>)>)@)@BB   --//L**\*22C rc||j}||jjur3|j}|)||}|t|_n||d|i}|S)Nr))r'opts) rtr$valuesrPrUr_get_mock_rodc_credstypeget_cached_creds)r]r'rsrps rrEzSpnTests._get_credss  !6!6!8!899 4+0 0 0)E}11$77.3T +)))4*E  rc|}|D]@}||j}||jvr|j|A|}t j||j}t j |}t j |jt j d|d<| |t}||||j||j||j||j||j||||j||t jdg}t=|ddd} | | |!||} |"|| |S)NrvservicePrincipalNamezmsDS-KeyVersionNumber)basescopeattrsr)idx)#get_mock_rodc_ctxrxmynameSPNsappendrKldbDnacct_dnMessageMessageElementFLAG_MOD_REPLACEmodifyrguessget_lp set_realmrBupper set_domain domain_name set_password acct_pass set_usernameset_workstationsamnameset_dnset_spnsearch SCOPE_BASEintgetset_kvnoget_keyscreds_set_keys) r]rsrodc_ctxr)r`rodc_dnmsgrpreskvnokeyss rr~zSpnTests._get_mock_rodc_credss))++ * *C**X_*55C(-'' $$S)))  & 011k'""&)&8 M  "'$'$ "#  S#%% DKKMM""" ,,../// -... 8-... 8?+++ h./// W hm$$$ll!$"9!:<<3q6::51:==>> t}}UG,, E4((( rr)__name__ __module__ __qualname__rrPCOMPUTERrQrUr"r$ classmethodrr,rgrirtrFrEr~ __classcell__)rs@rr r +s +4)0', %E@ 7D I$$$$[$ EE[E929292v))))) CCCC    "%%%%%%%rr __main__)sysospathinsertenviron samba.testsrrsamba.tests.krb5.kdc_base_testrsamba.tests.krb5.raw_testcaser"samba.tests.krb5.rfc4120_constantsrr r r rjrlr runittestmainrrrs=( < !$ '''''' 666666======aaaaa{aaaH zNOOOHMOOOOO r