mirror of
https://github.com/samba-team/samba.git
synced 2025-12-19 12:23:49 +03:00
samba-tool: Test gpo manage vgp sudoers remove command
Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org>
This commit is contained in:
committed by
Jeremy Allison
parent
30e0ba2ed8
commit
430e065fa9
@@ -727,35 +727,6 @@ class GpoCmdTestCase(SambaToolCmdTest):
|
||||
|
||||
self.assertFalse(inf_data.has_section('Kerberos Policy'))
|
||||
|
||||
def test_sudoers_remove(self):
|
||||
lp = LoadParm()
|
||||
lp.load(os.environ['SERVERCONFFILE'])
|
||||
local_path = lp.get('path', 'sysvol')
|
||||
reg_pol = os.path.join(local_path, lp.get('realm').lower(), 'Policies',
|
||||
self.gpo_guid, 'Machine/Registry.pol')
|
||||
|
||||
# Stage the Registry.pol file with test data
|
||||
stage = preg.file()
|
||||
e = preg.entry()
|
||||
e.keyname = b'Software\\Policies\\Samba\\Unix Settings\\Sudo Rights'
|
||||
e.valuename = b'Software\\Policies\\Samba\\Unix Settings'
|
||||
e.type = 1
|
||||
e.data = b'fakeu ALL=(ALL) NOPASSWD: ALL'
|
||||
stage.num_entries = 1
|
||||
stage.entries = [e]
|
||||
ret = stage_file(reg_pol, ndr_pack(stage))
|
||||
self.assertTrue(ret, 'Could not create the target %s' % reg_pol)
|
||||
|
||||
(result, out, err) = self.runsublevelcmd("gpo", ("manage", "sudoers",
|
||||
"remove"), self.gpo_guid,
|
||||
get_string(e.data),
|
||||
"-H", "ldap://%s" %
|
||||
os.environ["SERVER"],
|
||||
"-U%s%%%s" %
|
||||
(os.environ["USERNAME"],
|
||||
os.environ["PASSWORD"]))
|
||||
self.assertCmdSuccess(result, out, err, 'Sudoers remove failed')
|
||||
|
||||
def test_sudoers_add(self):
|
||||
(result, out, err) = self.runsublevelcmd("gpo", ("manage",
|
||||
"sudoers", "add"),
|
||||
@@ -779,6 +750,26 @@ class GpoCmdTestCase(SambaToolCmdTest):
|
||||
os.environ["PASSWORD"]))
|
||||
self.assertIn(sudoer, out, 'The test entry was not found!')
|
||||
|
||||
(result, out, err) = self.runsublevelcmd("gpo", ("manage",
|
||||
"sudoers", "remove"),
|
||||
self.gpo_guid, sudoer,
|
||||
"-H", "ldap://%s" %
|
||||
os.environ["SERVER"],
|
||||
"-U%s%%%s" %
|
||||
(os.environ["USERNAME"],
|
||||
os.environ["PASSWORD"]))
|
||||
self.assertCmdSuccess(result, out, err, 'Sudoers remove failed')
|
||||
|
||||
(result, out, err) = self.runsublevelcmd("gpo", ("manage",
|
||||
"sudoers", "list"),
|
||||
self.gpo_guid, "-H",
|
||||
"ldap://%s" %
|
||||
os.environ["SERVER"],
|
||||
"-U%s%%%s" %
|
||||
(os.environ["USERNAME"],
|
||||
os.environ["PASSWORD"]))
|
||||
self.assertNotIn(sudoer, out, 'The test entry was still found!')
|
||||
|
||||
def test_sudoers_list(self):
|
||||
lp = LoadParm()
|
||||
lp.load(os.environ['SERVERCONFFILE'])
|
||||
|
||||
Reference in New Issue
Block a user