5 Commits

Author	SHA1	Message	Date
Andrew Bartlett	dee3c7be58	selftest: Add test that msDS-ExpirePasswordsOnSmartCardOnlyAccounts=TRUE is set ... This assures us that the new provision sets the value by default. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>	2024-06-10 04:27:31 +00:00
Andrew Bartlett	c9370d3ced	selftest: Move some KDS root key tests around to prepare for gMSA server side ... Once we have a gMSA server side the impact of deleting root keys becomes real and so we must do this in a quiet place where it can not impact on other things. Likewise, we want the samba.tests.dsdb_quiet_provision_tests tests to run somewhere that is not doing other things, so we can see what a bare provision will do. We must not allow test ordering inside the file to cause tests that create root keys to run before checking if provision created a usable root key. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>	2024-04-16 03:58:31 +00:00
Andrew Bartlett	06912de3b2	dsdb: Add API tests for new_gkdi_root_key() ... These show that the new root key should be based on the server configuration object, not just hardcoded defaults. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>	2024-03-28 01:50:41 +00:00
Andrew Bartlett	fb219d545b	selftest: Assert that the provision KDS root key is already valid for use ... Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>	2024-03-05 02:54:36 +00:00
Douglas Bagnall	53bf56c62b	pytest:dsdb: check that there is a gkdi root key ... Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-03-01 00:19:45 +00:00