sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-06 13:18:07 +03:00
Code
794f125802
samba-mirror/source4/dsdb/tests/python
History
Andrew Bartlett d2a473a7b7 dsdb: Allow password history and password changes without an NT hash 
We now allow this to be via the ENCTYPE_AES256_CTS_HMAC_SHA1_96 hash instead
which allows us to decouple Samba from the unsalted NT hash for
organisations that are willing to take this step (for user accounts).

(History checking is limited to the last three passwords only, as
ntPwdHistory is limited to NT hash values, and the PrimaryKerberosCtr4
package only stores three sets of keys.)

Since we don't store a salt per-key, but only a single salt, the check
will fail for a previous password if the account was renamed prior to a
newer password being set.

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2022-06-26 22:10:29 +00:00
..
testdata pytests: try ldap.modify_order with normal user 2019-05-01 05:32:25 +00:00
acl.py python: Don't use deprecated escape sequences 2022-06-14 07:21:29 +00:00
ad_dc_medley_performance.py python: Fix usage strings 2021-09-04 00:10:37 +00:00
ad_dc_multi_bind.py python: Fix usage strings 2021-09-04 00:10:37 +00:00
ad_dc_performance.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
ad_dc_provision_performance.py PY3: change shebang to python3 in source4/dsdb dir 2018-12-14 14:40:20 +01:00
ad_dc_search_performance.py python: Fix usage strings 2021-09-04 00:10:37 +00:00
asq.py python: Fix usage strings 2021-09-04 00:10:37 +00:00
attr_from_server.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
confidential_attr.py PY3: change shebang to python3 in source4/dsdb dir 2018-12-14 14:40:20 +01:00
deletetest.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
dirsync.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
dsdb_schema_info.py pytests: heed assertEquals deprecation warning en-masse 2020-02-07 10:37:37 +00:00
large_ldap.py tests/krb5/test_ldap.py: Increase maximum threshold for LDAP timeout 2022-06-09 22:49:29 +00:00
ldap_modify_order.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
ldap_schema.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
ldap_syntaxes.py pytests: heed assertEquals deprecation warning en-masse 2020-02-07 10:37:37 +00:00
ldap.py CVE-2020-25722 selftest: Adapt ldap.py tests to new objectClass restrictions 2021-11-09 19:45:33 +00:00
linked_attributes.py selftest: Move self.assertRaisesLdbError() to samba.tests.TestCase 2021-10-04 21:07:31 +00:00
login_basics.py dsdb/tests: add test_login_basics_simple() 2022-03-10 03:16:35 +00:00
ndr_pack_performance.py PY3: change shebang to python3 in source4/dsdb dir 2018-12-14 14:40:20 +01:00
notification.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
password_lockout_base.py selftest: Rework password_lockout_base.py to allow logon_basics test to be run in ad_dc_no_ntlm 2022-05-05 00:27:33 +00:00
password_lockout.py selftest: Rework password_lockout_base.py to allow logon_basics test to be run in ad_dc_no_ntlm 2022-05-05 00:27:33 +00:00
password_settings.py dsdb: Allow password history and password changes without an NT hash 2022-06-26 22:10:29 +00:00
passwords.py tests/passwords: Add tests for password history with simple binds 2022-05-05 00:27:33 +00:00
priv_attrs.py selftest: Check received LDB error code when STRICT_CHECKING=0 2021-11-30 02:42:31 +00:00
rodc_rwdc.py rodc: Add tests for simple BIND alongside NTLMSSP binds 2022-03-10 03:16:35 +00:00
rodc.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
sam.py tests/sam: Ensure that Protected Users group cannot be deleted 2022-03-18 11:55:30 +00:00
sec_descriptor.py python: Don't use deprecated escape sequences 2022-06-14 07:21:29 +00:00
sites.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
sort.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
subtree_rename.py selftest: Move self.assertRaisesLdbError() to samba.tests.TestCase 2021-10-04 21:07:31 +00:00
token_group.py s4:dsdb:tests: Also pass tests if asserted identity is present 2022-04-13 12:59:30 +00:00
tombstone_reanimation.py selftest: Cope with LM hash not being stored in the tombstone_reanimation test 2022-03-17 01:57:38 +00:00
urgent_replication.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00
user_account_control.py CVE-2020-25722 selftest/user_account_control: more work to cope with UAC/objectclass defaults and lock 2021-11-09 19:45:32 +00:00
vlv.py python: remove all 'from __future__ import print_function' 2021-04-28 03:43:34 +00:00