sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
Code

CVE-2020-25722 selftest: Adjust sam.py test_userAccountControl_computer_add_trust to new reality

Browse Source 
We now enforce that a trust account must be a user.

These can not be added over LDAP anyway, and our C
code in the RPC server gets this right in any case.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14753

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
This commit is contained in:
Andrew Bartlett 2021-10-21 15:06:14 +13:00 committed by Jule Anger
parent 4150264ce0
commit 756f116b0e
2 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
selftest/knownfail.d/uac_objectclass_restrict
View File

@ -4,7 +4,6 @@
# All these tests need to be fixed and the entries here removed
^samba4.sam.python\(.*\).__main__.SamTests.test_userAccountControl_computer_add_0_uac
^samba4.sam.python\(.*\).__main__.SamTests.test_userAccountControl_computer_add_trust
^samba4.sam.python\(.*\).__main__.SamTests.test_userAccountControl_computer_modify
^samba4.sam.python\(.*\).__main__.SamTests.test_userAccountControl_user_modify
^samba4.sam.python\(fl2008r2dc\).__main__.SamTests.test_users_groups\(fl2008r2dc\)

2
source4/dsdb/tests/python/sam.py
View File

@ -2298,7 +2298,7 @@ class SamTests(samba.tests.TestCase):
self.fail()
except LdbError as e72:
(num, _) = e72.args
self.assertEqual(num, ERR_INSUFFICIENT_ACCESS_RIGHTS)
self.assertEqual(num, ERR_OBJECT_CLASS_VIOLATION)
delete_force(self.ldb, "cn=ldaptestcomputer,cn=computers," + self.base_dn)
def test_userAccountControl_computer_modify(self):