sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Code
79342a8411
samba-mirror/python/samba/tests/bin/cepces-submit

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

19 lines
639 B
Plaintext
Raw Normal View History

gpo: Test Certificate Auto Enrollment Policy Signed-off-by: David Mulder <dmulder@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-07-02 23:44:43 +03:00
#!/usr/bin/python3
import optparse
import os, sys, re
sys.path.insert(0, "bin/python")
if __name__ == "__main__":
parser = optparse.OptionParser('cepces-submit [options]')
parser.add_option('--server')
gpo: Certificate Auto Enrollment default Kerberos auth Certificate Auto Enrollment uses Kerberos to authenticate to AD. If someone configures their cepces.conf to use a different default authentication, then samba-gpupdate fails. Force Kerberos auth from samba-gpupdate. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2022-04-04 19:33:15 +03:00
parser.add_option('--auth')
gpo: Test Certificate Auto Enrollment Policy Signed-off-by: David Mulder <dmulder@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-07-02 23:44:43 +03:00
(opts, args) = parser.parse_args()
assert opts.server is not None
gpo: Certificate Auto Enrollment default Kerberos auth Certificate Auto Enrollment uses Kerberos to authenticate to AD. If someone configures their cepces.conf to use a different default authentication, then samba-gpupdate fails. Force Kerberos auth from samba-gpupdate. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
2022-04-04 19:33:15 +03:00
assert opts.auth == 'Kerberos'
gpo: Test Certificate Auto Enrollment Policy Signed-off-by: David Mulder <dmulder@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-07-02 23:44:43 +03:00
if 'CERTMONGER_OPERATION' in os.environ and \
os.environ['CERTMONGER_OPERATION'] == 'GET-SUPPORTED-TEMPLATES':
gp: Test adding new cert templates enforces changes Ensure that cepces-submit reporting additional templates and re-applying will enforce the updated policy. Signed-off-by: Gabriel Nagy <gabriel.nagy@canonical.com> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: David Mulder <dmulder@samba.org>
2023-08-18 17:16:23 +03:00
templates = os.environ.get('CEPCES_SUBMIT_SUPPORTED_TEMPLATES', 'Machine').split(',')
print('\n'.join(templates)) # Report the requested templates
Copy Permalink