sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-10-01 05:44:19 +03:00
Code Activity

tests/krb5: Test that computers (and, by extension, gMSAs) cannot perform interactive logons

Browse Source 
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Jo Sutton
2024-04-26 12:50:51 +12:00
committed by Andrew Bartlett
parent 336a58473a
commit f9cbda9cf0
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
python/samba/tests/krb5/gmsa_tests.py
View File

@@ -1520,6 +1520,22 @@ class GmsaTests(GkdiBaseTest, KDCBaseTest):
validation_level=netlogon.NetlogonValidationSamInfo4,
)
def test_computer_cannot_perform_interactive_logon(self):
self._test_samlogon(
self.get_mach_creds(),
netlogon.NetlogonInteractiveInformation,
expect_error=ntstatus.NT_STATUS_NO_SUCH_USER,
validation_level=netlogon.NetlogonValidationSamInfo4,
)
def test_gmsa_cannot_perform_interactive_logon(self):
self._test_samlogon(
self.gmsa_account(kerberos_enabled=False),
netlogon.NetlogonInteractiveInformation,
expect_error=ntstatus.NT_STATUS_NO_SUCH_USER,
validation_level=netlogon.NetlogonValidationSamInfo4,
)
def _gmsa_can_perform_as_req(self, *, enctype: kcrypto.Enctype) -> None:
self._as_req(self.gmsa_account(), self.get_service_creds(), enctype)