sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00
Code

tests/krb5: Add helper function to modify ticket flags

Browse Source 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Joseph Sutton 2022-02-08 12:15:36 +13:00 committed by Stefan Metzmacher
parent c80cd8c957
commit ded5115f73
3 changed files with 19 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
python/samba/tests/krb5/kdc_base_test.py
View File

@ -1630,6 +1630,20 @@ class KDCBaseTest(RawKerberosTest):
enc_part, asn1Spec=krb5_asn1.EncTicketPart())
return enc_ticket_part
def modify_ticket_flag(self, enc_part, flag, value):
self.assertIsInstance(value, bool)
flag = krb5_asn1.TicketFlags(flag)
pos = len(tuple(flag)) - 1
flags = enc_part['flags']
self.assertLessEqual(pos, len(flags))
new_flags = flags[:pos] + str(int(value)) + flags[pos + 1:]
enc_part['flags'] = new_flags
return enc_part
def get_objectSid(self, samdb, dn):
''' Get the objectSID for a DN
Note: performs an Ldb query.

18
python/samba/tests/krb5/kdc_tgs_tests.py
View File

@ -2419,14 +2419,7 @@ class KdcTgsTests(KDCBaseTest):
def _modify_renewable(self, enc_part):
# Set the renewable flag.
renewable_flag = krb5_asn1.TicketFlags('renewable')
pos = len(tuple(renewable_flag)) - 1
flags = enc_part['flags']
self.assertLessEqual(pos, len(flags))
new_flags = flags[:pos] + '1' + flags[pos + 1:]
enc_part['flags'] = new_flags
enc_part = self.modify_ticket_flag(enc_part, 'renewable', value=True)
# Set the renew-till time to be in the future.
renew_till = self.get_KerberosTime(offset=100 * 60 * 60)
@ -2436,14 +2429,7 @@ class KdcTgsTests(KDCBaseTest):
def _modify_invalid(self, enc_part):
# Set the invalid flag.
invalid_flag = krb5_asn1.TicketFlags('invalid')
pos = len(tuple(invalid_flag)) - 1
flags = enc_part['flags']
self.assertLessEqual(pos, len(flags))
new_flags = flags[:pos] + '1' + flags[pos + 1:]
enc_part['flags'] = new_flags
enc_part = self.modify_ticket_flag(enc_part, 'invalid', value=True)
# Set the ticket start time to be in the past.
past_time = self.get_KerberosTime(offset=-100 * 60 * 60)

17
python/samba/tests/krb5/s4u_tests.py
View File

@ -1336,20 +1336,9 @@ class S4UKerberosTests(KDCBaseTest):
modify_pac_fn=modify_pac_fn)
def set_ticket_forwardable(self, ticket, flag, update_pac_checksums=True):
flag = '1' if flag else '0'
def modify_fn(enc_part):
# Reset the forwardable flag
forwardable_pos = (len(tuple(krb5_asn1.TicketFlags('forwardable')))
- 1)
flags = enc_part['flags']
self.assertLessEqual(forwardable_pos, len(flags))
enc_part['flags'] = (flags[:forwardable_pos] +
flag +
flags[forwardable_pos+1:])
return enc_part
modify_fn = functools.partial(self.modify_ticket_flag,
flag='forwardable',
value=flag)
if update_pac_checksums:
checksum_keys = self.get_krbtgt_checksum_key()