sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-07-27 07:42:04 +03:00
Code Activity

selftest: add test for new "samba-tool user unlock" command

Browse Source 
Signed-off-by: Björn Baumbach <bb@sernet.de>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>

Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org>
Autobuild-Date(master): Wed Nov  4 00:19:25 UTC 2020 on sn-devel-184
This commit is contained in:
Björn Baumbach
2020-10-29 12:38:51 +01:00
committed by Douglas Bagnall
parent 0bc93500a8
commit a1b021200e
3 changed files with 62 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
python/samba/tests/samba_tool/user.py
View File

@ -800,6 +800,47 @@ sAMAccountName: %s
self._check_posix_user(user)
self.runsubcmd("user", "delete", user["name"])
# Test: samba-tool user unlock
# This test does not verify that the command unlocks the user, it just
# tests the command itself. The unlock test, which unlocks locked users,
# is located in the 'samba4.ldap.password_lockout' test in
# source4/dsdb/tests/python/password_lockout.py
def test_unlock(self):
# try to unlock a nonexistent user, this should fail
nonexistentusername = "userdoesnotexist"
(result, out, err) = self.runsubcmd(
"user", "unlock", nonexistentusername)
self.assertCmdFail(result, "Ensure that unlock nonexistent user fails")
self.assertIn("Failed to unlock user '%s'" % nonexistentusername, err)
self.assertIn("Unable to find user", err)
# try to unlock with insufficient permissions, this should fail
unprivileged_username = "unprivilegedunlockuser"
unlocktest_username = "usertounlock"
self.runsubcmd("user", "add", unprivileged_username, "Passw0rd")
self.runsubcmd("user", "add", unlocktest_username, "Passw0rd")
(result, out, err) = self.runsubcmd(
"user", "unlock", unlocktest_username,
"-H", "ldap://%s" % os.environ["DC_SERVER"],
"-U%s%%%s" % (unprivileged_username,
"Passw0rd"))
self.assertCmdFail(result, "Fail with LDAP_INSUFFICIENT_ACCESS_RIGHTS")
self.assertIn("Failed to unlock user '%s'" % unlocktest_username, err)
self.assertIn("LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS", err)
self.runsubcmd("user", "delete", unprivileged_username)
self.runsubcmd("user", "delete", unlocktest_username)
# run unlock against test users
for user in self.users:
(result, out, err) = self.runsubcmd(
"user", "unlock", user["name"])
self.assertCmdSuccess(result, out, err, "Error running user unlock")
self.assertEqual(err, "", "Shouldn't be any error messages")
def _randomUser(self, base={}):
"""create a user with random attribute values, you can specify base attributes"""
user = {