mirror of
https://github.com/samba-team/samba.git
synced 2024-12-22 13:34:15 +03:00
6ac4833678
Signed-off-by: Rob van der Linde <rob@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> [abartlet@samba.org Some python2 style super() calls remain due to being an actual, even if reasonable, behaviour change]
91 lines
3.4 KiB
Python
91 lines
3.4 KiB
Python
# Unix SMB/CIFS implementation.
|
|
#
|
|
# Copyright (C) Catalyst.Net Ltd. 2017
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
"""
|
|
Detect null pointer exception in /source3/smbd/sessetup.c
|
|
"""
|
|
|
|
import samba.tests
|
|
import os
|
|
from samba.net import Net, LIBNET_JOIN_AUTOMATIC
|
|
from samba.credentials import DONT_USE_KERBEROS
|
|
from samba import NTSTATUSError, ntstatus
|
|
import ctypes
|
|
|
|
|
|
class NetJoinNoSpnegoTests(samba.tests.TestCaseInTempDir):
|
|
|
|
def setUp(self):
|
|
super().setUp()
|
|
self.domain = os.environ["DOMAIN"]
|
|
self.server = os.environ["SERVER"]
|
|
self.lp = self.get_loadparm()
|
|
self.lp.set("private dir", self.tempdir)
|
|
self.lp.set("lock dir", self.tempdir)
|
|
self.lp.set("state directory", self.tempdir)
|
|
|
|
def test_net_join_no_spnego(self):
|
|
self.lp.set("client ipc max protocol", "NT1")
|
|
self.lp.set("client use spnego", "no")
|
|
netbios_name = "NetJoinNoSpnego"
|
|
machinepass = "abcdefghij"
|
|
creds = self.insta_creds(template=self.get_credentials(),
|
|
kerberos_state=DONT_USE_KERBEROS)
|
|
|
|
net = Net(creds, self.lp, server=self.server)
|
|
|
|
try:
|
|
(join_password, sid, domain_name) = net.join_member(
|
|
self.domain, netbios_name, LIBNET_JOIN_AUTOMATIC,
|
|
machinepass=machinepass)
|
|
except NTSTATUSError as e:
|
|
code = ctypes.c_uint32(e.args[0]).value
|
|
if code == ntstatus.NT_STATUS_CONNECTION_DISCONNECTED:
|
|
self.fail("Connection failure")
|
|
elif code == ntstatus.NT_STATUS_ACCESS_DENIED:
|
|
return
|
|
else:
|
|
raise
|
|
self.fail("Should have rejected NTLMv2 without SPNEGO")
|
|
|
|
def test_net_join_no_spnego_ntlmv1(self):
|
|
self.lp.set("client ipc max protocol", "NT1")
|
|
self.lp.set("client use spnego", "no")
|
|
self.lp.set("client ntlmv2 auth", "no")
|
|
netbios_name = "NetJoinNoSpnego"
|
|
machinepass = "abcdefghij"
|
|
creds = self.insta_creds(template=self.get_credentials(),
|
|
kerberos_state=DONT_USE_KERBEROS)
|
|
|
|
net = Net(creds, self.lp, server=self.server)
|
|
|
|
# NOTE WELL: We must not run more than one successful
|
|
# net.join_member per file (process), as the shared
|
|
# secrets.ldb handle will be kept between runs.
|
|
try:
|
|
(join_password, sid, domain_name) = net.join_member(
|
|
self.domain, netbios_name, LIBNET_JOIN_AUTOMATIC,
|
|
machinepass=machinepass)
|
|
except NTSTATUSError as e:
|
|
code = ctypes.c_uint32(e.args[0]).value
|
|
if code == ntstatus.NT_STATUS_CONNECTION_DISCONNECTED:
|
|
self.fail("Connection failure")
|
|
raise
|
|
os.unlink(os.path.join(self.tempdir, "secrets.ldb"))
|
|
pass
|