sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-08 05:57:51 +03:00
Code
samba-mirror/python/samba/tests/sddl.py

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

495 lines
24 KiB
Python
Raw Normal View History

torture: Move sddl tests to python This kind of test is better hosted in python than in C. More lines, but the ones in source4/libcli/security/tests/sddl.c were preeetty long... Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-04-16 17:32:27 +02:00
# Unix SMB/CIFS implementation.
# Copyright (C) Volker Lendecke <vl@samba.org> 2021
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
"""Tests for samba.dcerpc.security"""
from samba.dcerpc import security
pytest:sddl: split each string into it's own test This of course allows for fine-grained knownfails. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 15:59:32 +12:00
from samba.tests import TestCase, DynamicTestCase
pytest/sddl: rework to allow multiple lists, no early stop The test will fail right now because it makes round trip assertions. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-14 01:00:18 +12:00
from samba.colour import c_RED, c_GREEN
torture: Move sddl tests to python This kind of test is better hosted in python than in C. More lines, but the ones in source4/libcli/security/tests/sddl.c were preeetty long... Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-04-16 17:32:27 +02:00
pytest:sddl: split each string into it's own test This of course allows for fine-grained knownfails. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 15:59:32 +12:00
class SddlDecodeEncodeBase(TestCase):
maxDiff = 10000
@classmethod
def setUpDynamicTestCases(cls):
cls.domain_sid = security.dom_sid("S-1-2-3-4")
seen = set()
for pair in cls.strings:
if isinstance(pair, str):
pair = (pair, pair)
if pair in seen:
print(f"seen {pair} after {len(seen)}")
seen.add(pair)
sddl, canonical = pair
name = sddl
if len(name) > 120:
name = f"{name[:100]}+{len(name) - 100}-more-characters"
cls.generate_dynamic_test('test_sddl', name, sddl, canonical)
def _test_sddl_with_args(self, s, canonical):
try:
sd1 = security.descriptor.from_sddl(s, self.domain_sid)
except (TypeError, ValueError) as e:
self.fail(f"raised {e}")
sddl = sd1.as_sddl(self.domain_sid)
sd2 = security.descriptor.from_sddl(sddl, self.domain_sid)
self.assertEqual(sd1, sd2)
self.assertEqual(sddl, canonical)
@DynamicTestCase
class SddlNonCanonical(SddlDecodeEncodeBase):
"""These ones are transformed in the round trip into a preferred
synonym. For example "S:D:" is accepted as input, but only "D:S:
will be output.
"""
name = "non_canonical"
strings = [
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
# format is (original, canonical); after passing through an SD
# object, the SDDL will look like the canonical version.
("D:(A;;CC;;;BA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)",
"D:(A;;CC;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;LCRPLORC;;;AU)"),
torture: Move sddl tests to python This kind of test is better hosted in python than in C. More lines, but the ones in source4/libcli/security/tests/sddl.c were preeetty long... Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-04-16 17:32:27 +02:00
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
(("D:(A;;RP;;;WD)"
"(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ED)"
"(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;ED)"
"(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;ED)"
"(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;BA)"
"(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;BA)"
"(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;BA)"
"(A;;RPLCLORC;;;AU)"
"(A;;RPWPCRLCLOCCRCWDWOSW;;;BO)"
"(A;CI;RPWPCRLCLOCCRCWDWOSDSW;;;BA)"
"(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY)"
"(A;CI;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;ES)"
"(A;CI;LC;;;RU)"
"(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;;RP;c7407360-20bf-11d0-a768-00aa006e0529;;RU)"
"(OA;CIIO;RPLCLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU)"
"(A;;RPRC;;;RU)"
"(OA;CIIO;RPLCLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(A;;LCRPLORC;;;ED)"
"(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)"
"(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)"
"(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)"
"(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)"
"(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)"
"(OA;CIIO;RPLCLORC;;4828CC14-1437-45bc-9B07-AD6F015E5F28;RU)"
"(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;RU)"
"(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;AU)"
"(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED)"
"(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED)"
"(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED)"
"(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;NO)"
"(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)"
"(OA;;CR;e2a36dc9-ae17-47c3-b58b-be34c55ba633;;SU)"
"(OA;;CR;280f369c-67c7-438e-ae98-1d46f3c6f541;;AU)"
"(OA;;CR;ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501;;AU)"
"(OA;;CR;05c74c5e-4deb-43b4-bd9f-86664c2a7fd5;;AU)"
"S:(AU;SA;WDWOWP;;;WD)"),
("D:(A;;RP;;;WD)"
"(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ED)"
"(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;ED)"
"(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;ED)"
"(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;BA)"
"(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;BA)"
"(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;BA)"
"(A;;LCRPLORC;;;AU)"
"(A;;CCLCSWRPWPLOCRRCWDWO;;;BO)"
"(A;CI;CCLCSWRPWPLOCRSDRCWDWO;;;BA)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;ES)"
"(A;CI;LC;;;RU)"
"(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(OA;;RP;c7407360-20bf-11d0-a768-00aa006e0529;;RU)"
"(OA;CIIO;LCRPLORC;;bf967a9c-0de6-11d0-a285-00aa003049e2;RU)"
"(A;;RPRC;;;RU)"
"(OA;CIIO;LCRPLORC;;bf967aba-0de6-11d0-a285-00aa003049e2;RU)"
"(A;;LCRPLORC;;;ED)"
"(OA;CIIO;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)"
"(OA;CIIO;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)"
"(OA;CIIO;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)"
"(OA;CIIO;RP;4c164200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)"
"(OA;CIIO;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)"
"(OA;CIIO;LCRPLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)"
"(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;RU)"
"(OA;;RP;b8119fd0-04f6-4762-ab7a-4986c76b3f9a;;AU)"
"(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa003049e2;ED)"
"(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-a285-00aa003049e2;ED)"
"(OA;CIIO;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a86-0de6-11d0-a285-00aa003049e2;ED)"
"(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;NO)"
"(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)"
"(OA;;CR;e2a36dc9-ae17-47c3-b58b-be34c55ba633;;SU)"
"(OA;;CR;280f369c-67c7-438e-ae98-1d46f3c6f541;;AU)"
"(OA;;CR;ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501;;AU)"
"(OA;;CR;05c74c5e-4deb-43b4-bd9f-86664c2a7fd5;;AU)"
"S:(AU;SA;WPWDWO;;;WD)")),
torture: Move sddl tests to python This kind of test is better hosted in python than in C. More lines, but the ones in source4/libcli/security/tests/sddl.c were preeetty long... Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-04-16 17:32:27 +02:00
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;BO)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)"
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
"(A;;WPRPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
"(A;;RPCRLCLORCSDDT;;;CO)"
"(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)"
"(A;;RPLCLORC;;;AU)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)"
"(A;;CCDC;;;PS)"
"(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)"
"(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;SY)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)"
"(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)"
"(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;AO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPDTLOCRSDRC;;;CO)"
"(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)"
"(A;;LCRPLORC;;;AU)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)"
"(A;;CCDC;;;PS)"
"(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)"
"(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;SY)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)"
"(OA;;RPWP;77b5b886-944a-11d1-aebd-0000f80367c1;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)"
"(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;S-1-5-32-560)")),
("D:(A;;RPLCLORC;;;BO)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)",
"D:(A;;LCRPLORC;;;BO)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;LCRPLORC;;;AU)"),
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
(("D:(A;;WPCRCCDCLCLORCWOWDSDDTSWRP;;;BO)"
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)"
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
"(A;;RPWPCRCCDCLCLORCWOWDSDSWDT;;;SY)"
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
"(A;;RPCRLCLORCSDDT;;;CO)"
"(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)"
"(A;;RPLCLORC;;;AU)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)"
"(A;;CCDC;;;PS)"
"(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)"
"(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;SY)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)"
"(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)"
"(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;SU)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;AO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPDTLOCRSDRC;;;CO)"
"(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)"
"(A;;LCRPLORC;;;AU)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)"
"(A;;CCDC;;;PS)"
"(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)"
"(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;SY)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)"
"(OA;;RPWP;77b5b886-944a-11d1-aebd-0000f80367c1;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)"
"(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;SU)")),
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;BO)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPLCLORC;;;AU)",
"D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPLORC;;;AU)")),
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
(("D:(A;;;;;BO)"
"(A;;;;;AO)"
"(A;;;;;SY)"
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
"(A;;RPCRLCLORCSDDT;;;CO)"
"(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)"
"(A;;RPLCLORC;;;AU)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)"
"(A;;CCDC;;;PS)"
"(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)"
"(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;SY)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)"
"(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)"
"(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;SU)"),
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
("D:(A;;;;;BO)"
"(A;;;;;AO)"
"(A;;;;;SY)"
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
"(A;;LCRPDTLOCRSDRC;;;CO)"
"(OA;;WP;4c164200-20c0-11d0-a768-00aa006e0529;;CO)"
"(A;;LCRPLORC;;;AU)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)"
"(A;;CCDC;;;PS)"
"(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)"
"(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;SY)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;PS)"
"(OA;;RPWP;77b5b886-944a-11d1-aebd-0000f80367c1;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;PS)"
"(OA;;SW;72e39547-7b18-11d1-adef-00c04fd8d5cd;;CO)"
"(OA;;SW;f3a64788-5306-11d1-a9c5-0000f80367c1;;CO)"
"(OA;;WP;3e0abfd0-126a-11d0-a060-00aa006c33ed;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;5f202010-79a5-11d0-9020-00c04fc2d4cf;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967950-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;WP;bf967953-0de6-11d0-a285-00aa003049e2;bf967a86-0de6-11d0-a285-00aa003049e2;CO)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;SU)")),
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
("D:(A;;RPLCLORC;;;AU)",
"D:(A;;LCRPLORC;;;AU)"),
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;BO)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPLCLORC;;;AU)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)"
"(A;;RPLCLORC;;;PS)"
"(OA;;CR;ab721a55-1e2f-11d0-9819-00aa0040529b;;AU)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;SU)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPLORC;;;AU)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;AO)"
"(A;;LCRPLORC;;;PS)"
"(OA;;CR;ab721a55-1e2f-11d0-9819-00aa0040529b;;AU)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;SU)")),
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;BO)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPLCLORC;;;AU)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;CO)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPLORC;;;AU)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;CO)")),
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;BO)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPLCLORC;;;AU)S:(AU;SA;CRWP;;;WD)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPLORC;;;AU)S:(AU;SA;WPCR;;;WD)")),
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSWRP;;;BO)"
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)"
"(A;;RPLCLORC;;;PS)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)"
"(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)"
"(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)"
"(OA;;RPWP;77B5B886-944A-11d1-AEBD-0000F80367C1;;PS)"
"(OA;;RPWP;E45795B2-9455-11d1-AEBD-0000F80367C1;;PS)"
"(OA;;RPWP;E45795B3-9455-11d1-AEBD-0000F80367C1;;PS)"
"(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RD)"
"(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RD)"
"(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RD)"
"(A;;RC;;;AU)"
"(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)"
"(OA;;RP;77B5B886-944A-11d1-AEBD-0000F80367C1;;AU)"
"(OA;;RP;E45795B3-9455-11d1-AEBD-0000F80367C1;;AU)"
"(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)"
"(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RD)"
"(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;SY)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;SU)"
"(OA;;WPRP;6db69a1c-9422-11d1-aebd-0000f80367c1;;SU)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;AO)"
"(A;;LCRPLORC;;;PS)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS)"
"(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS)"
"(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)"
"(OA;;RPWP;77b5b886-944a-11d1-aebd-0000f80367c1;;PS)"
"(OA;;RPWP;e45795b2-9455-11d1-aebd-0000f80367c1;;PS)"
"(OA;;RPWP;e45795b3-9455-11d1-aebd-0000f80367c1;;PS)"
"(OA;;RP;037088f8-0ae1-11d2-b422-00a0c968f939;;RD)"
"(OA;;RP;4c164200-20c0-11d0-a768-00aa006e0529;;RD)"
"(OA;;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;;RD)"
"(A;;RC;;;AU)"
"(OA;;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;;AU)"
"(OA;;RP;77b5b886-944a-11d1-aebd-0000f80367c1;;AU)"
"(OA;;RP;e45795b3-9455-11d1-aebd-0000f80367c1;;AU)"
"(OA;;RP;e48d0154-bcf8-11d1-8702-00c04fb96050;;AU)"
"(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)"
"(OA;;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;;RD)"
"(OA;;RPWP;bf967a7f-0de6-11d0-a285-00aa003049e2;;SY)"
"(OA;;RP;46a9b11d-60ae-405a-b7e8-ff8a58d456d2;;SU)"
"(OA;;RPWP;6db69a1c-9422-11d1-aebd-0000f80367c1;;SU)")),
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)")),
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPLCLORC;;;AU)"
"(A;;LCRPLORC;;;ED)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPLORC;;;AU)"
"(A;;LCRPLORC;;;ED)")),
pytests/sddl: clarify boundaries between sddl cases It is now easier to see where one SD ends and another starts. Best looked at with -b or --word-diff. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-21 13:02:13 +13:00
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
(("D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;BO)"
"(OA;;CCDC;bf967a86-0de6-11d0-a285-00aa003049e2;;AO)"
"(OA;;CCDC;bf967aba-0de6-11d0-a285-00aa003049e2;;AO)"
"(OA;;CCDC;bf967a9c-0de6-11d0-a285-00aa003049e2;;AO)"
"(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)"
"(A;;RPLCLORC;;;AU)"
"(A;;LCRPLORC;;;ED)"
"(OA;;CCDC;4828CC14-1437-45bc-9B07-AD6F015E5F28;;AO)"),
("D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(OA;;CCDC;bf967a86-0de6-11d0-a285-00aa003049e2;;AO)"
"(OA;;CCDC;bf967aba-0de6-11d0-a285-00aa003049e2;;AO)"
"(OA;;CCDC;bf967a9c-0de6-11d0-a285-00aa003049e2;;AO)"
"(OA;;CCDC;bf967aa8-0de6-11d0-a285-00aa003049e2;;PO)"
"(A;;LCRPLORC;;;AU)"
"(A;;LCRPLORC;;;ED)"
"(OA;;CCDC;4828cc14-1437-45bc-9b07-ad6f015e5f28;;AO)")),
torture: Move sddl tests to python This kind of test is better hosted in python than in C. More lines, but the ones in source4/libcli/security/tests/sddl.c were preeetty long... Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-04-16 17:32:27 +02:00
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
(("D:(A;;RPWPCRCCDCLCLORCWOWDSW;;;BO)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPLCLORC;;;AU)"),
("D:(A;;CCDCLCSWRPWPLOCRRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPLORC;;;AU)")),
(("D:(A;CI;RPWPCRCCDCLCLORCWOWDSDDTSW;;;BO)"
"(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)"
"(A;;RPLCLORC;;;AU)"),
("D:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BO)"
"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
"(A;;LCRPLORC;;;AU)")),
("S:D:P", "D:PS:"),
("S:D:", "D:S:"),
# decimal to hex
("D:(A;;123456789;;;LG)",
"D:(A;;0x75bcd15;;;LG)"),
# octal to hex
("D:(A;;01234567;;;LG)",
"D:(A;;0x53977;;;LG)"),
# numbers to flags
("D:(A;;16;;;LG)",
"D:(A;;RP;;;LG)"),
("D:(A;;17;;;LG)",
"D:(A;;CCRP;;;LG)"),
("D:(A;;0xff;;;LG)",
"D:(A;;CCDCLCSWRPWPDTLO;;;LG)"),
("D:(A;;0xf01ff;;;LG)",
"D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;LG)"),
("D:(A;;0xe00f0000;;;LG)",
"D:(A;;SDRCWDWOGXGWGR;;;LG)"),
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
# ACL flags
("D:ARPAI(A;;GA;;;SY)", "D:PARAI(A;;GA;;;SY)"),
("D:AIPAR(A;;GA;;;SY)", "D:PARAI(A;;GA;;;SY)"),
("D:PARP(A;;GA;;;SY)", "D:PAR(A;;GA;;;SY)"),
("D:PPPPPPPPPPPP(A;;GA;;;SY)", "D:P(A;;GA;;;SY)"),
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
# hex vs decimal
('D:(A;;CC;;;S-1-21474836480-32-579)',
'D:(A;;CC;;;S-1-0x500000000-32-579)'),
("D:(A;;GA;;;S-1-5000000000-30-40)",
"D:(A;;GA;;;S-1-0x12A05F200-30-40)"),
("D:(A;;GA;;;S-1-0x2-3-4)",
"D:(A;;GA;;;S-1-2-3-4)"),
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
("D:(A;;GA;;;S-1-0x20-3-4)",
"D:(A;;GA;;;S-1-32-3-4)"),
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
("D:(A;;GA;;;S-1-3-0x00000002-3-4)",
"D:(A;;GA;;;S-1-3-2-3-4)"),
("D:(A;;GA;;;S-1-3-0xffffffff-3-4)",
"D:(A;;GA;;;S-1-3-4294967295-3-4)"),
("D:(A;;GA;;;S-1-5-21-0x1-0x2-0x3-513)",
"D:(A;;GA;;;S-1-5-21-1-2-3-513)"),
("D:(A;;GA;;;S-1-5-21-2447931902-1787058256-3961074038-0x4b1)",
"D:(A;;GA;;;S-1-5-21-2447931902-1787058256-3961074038-1201)"),
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
# ambiguous 'D', looks like part of the SID but isn't
("O:S-1-2-0x200D:", "O:S-1-2-512D:"),
("O:S-1-2-0x2D:(A;;GA;;;LG)", "O:S-1-2-2D:(A;;GA;;;LG)"),
]
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
pytest:sddl: split each string into it's own test This of course allows for fine-grained knownfails. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 15:59:32 +12:00
@DynamicTestCase
class SddlCanonical(SddlDecodeEncodeBase):
"""These ones are expected to be returned in exactly the form they
start in. Hence we only have one string for each example.
"""
name = "canonical"
strings = [
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
# derived from GPO acl in provision, "-512D" could be misinterpreted
("O:S-1-5-21-1225132014-296224811-2507946102-512"
"G:S-1-5-21-1225132014-296224811-2507946102-512"
"D:P"),
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
"D:(A;;GA;;;SY)",
"D:(A;;GA;;;RU)",
"D:(A;;GA;;;LG)",
"D:(A;;0x401200a0;;;LG)",
torture: Move sddl tests to python This kind of test is better hosted in python than in C. More lines, but the ones in source4/libcli/security/tests/sddl.c were preeetty long... Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-04-16 17:32:27 +02:00
"D:S:",
pytest:sddl: test empty DACL with flags Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-17 12:19:00 +13:00
"D:PS:",
pytest/sddl: split tests into canonical and non-canonical The examples in the canonical list are already in the form that Windows and Samba will use for that SD. We check the round trip. The examples in the non-canonical list will change in a round trip, so we also give the string we think they should end up as. These have been checked on Windows. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-13 22:18:21 +12:00
'D:(A;;GA;;;RS)',
"S:(AU;SA;CR;;;WD)(AU;SA;CR;;;WD)",
("S:(OU;CISA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)"
"(OU;CISA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)"),
"D:(A;;GA;;;S-1-3-4294967295-3-4)",
"D:(A;;GA;;;S-1-5-21-1-2-3-513)",
"D:(A;;GA;;;S-1-5-21-2447931902-1787058256-3961074038-1201)",
pytest:sddl: tweak some test strings Adding, diversifying, and disambiguating. The leading portion of the test stirngs will soon be used in the test name, and strings that don't differ in the first hundred characters will cause naming clashes. There is no good reason for them all to test the same flags in the same order. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-22 18:11:49 +12:00
"O:S-1-2-512D:",
"D:PARAI(A;;GA;;;SY)",
"D:P(A;;GA;;;LG)(A;;GX;;;AA)",
torture: Move sddl tests to python This kind of test is better hosted in python than in C. More lines, but the ones in source4/libcli/security/tests/sddl.c were preeetty long... Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-04-16 17:32:27 +02:00
]
pytest/sddl: rework to allow multiple lists, no early stop The test will fail right now because it makes round trip assertions. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-14 01:00:18 +12:00
Copy Permalink