Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
__pycache__	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
blackbox	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
dcerpc	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
dns_forwarder_helpers	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
emulate	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
kcc	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
krb5	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
samba_tool	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
__init__.py	22.9 KB	-rw-r--r--	2022-04-26 23:34
audit_log_base.py	6.98 KB	-rw-r--r--	2021-08-09 22:38
audit_log_dsdb.py	24.46 KB	-rw-r--r--	2021-08-09 22:38
audit_log_pass_change.py	12.86 KB	-rw-r--r--	2021-08-09 22:38
auth.py	4.5 KB	-rw-r--r--	2021-08-09 22:38
auth_log.py	65.62 KB	-rw-r--r--	2026-05-22 02:08
auth_log_base.py	5.42 KB	-rw-r--r--	2021-08-09 22:38
auth_log_ncalrpc.py	4.19 KB	-rw-r--r--	2021-08-09 22:38
auth_log_netlogon.py	5.22 KB	-rw-r--r--	2021-08-09 22:38
auth_log_netlogon_bad_creds.py	7.7 KB	-rw-r--r--	2021-08-09 22:38
auth_log_pass_change.py	12.92 KB	-rw-r--r--	2021-08-09 22:38
auth_log_samlogon.py	6.68 KB	-rw-r--r--	2021-08-09 22:38
auth_log_winbind.py	19.13 KB	-rw-r--r--	2021-08-09 22:38
common.py	3.06 KB	-rw-r--r--	2021-08-09 22:38
complex_expressions.py	18.37 KB	-rw-r--r--	2021-08-09 22:38
core.py	2.77 KB	-rw-r--r--	2021-08-09 22:38
cred_opt.py	1.73 KB	-rw-r--r--	2021-08-09 22:38
credentials.py	22.13 KB	-rw-r--r--	2021-08-09 22:38
dckeytab.py	2.11 KB	-rw-r--r--	2021-08-09 22:38
dns.py	84.34 KB	-rw-r--r--	2021-08-09 22:38
dns_aging.py	108.76 KB	-rw-r--r--	2021-08-09 22:38
dns_base.py	14.3 KB	-rw-r--r--	2021-08-09 22:38
dns_forwarder.py	20.95 KB	-rw-r--r--	2021-08-09 22:38
dns_invalid.py	2.66 KB	-rw-r--r--	2021-08-09 22:38
dns_packet.py	7.13 KB	-rw-r--r--	2021-08-09 22:38
dns_tkey.py	7.11 KB	-rw-r--r--	2021-08-09 22:38
dns_wildcard.py	12.89 KB	-rw-r--r--	2021-08-09 22:38
docs.py	18.25 KB	-rw-r--r--	2021-08-09 22:38
domain_backup.py	26.76 KB	-rw-r--r--	2021-08-09 22:38
domain_backup_offline.py	10.01 KB	-rw-r--r--	2021-08-09 22:38
dsdb.py	41.91 KB	-rw-r--r--	2021-08-09 22:38
dsdb_api.py	1.93 KB	-rw-r--r--	2021-11-08 20:23
dsdb_dns.py	2.56 KB	-rw-r--r--	2021-08-09 22:38
dsdb_lock.py	11.63 KB	-rw-r--r--	2021-08-09 22:38
dsdb_schema_attributes.py	8.9 KB	-rw-r--r--	2021-09-09 15:30
encrypted_secrets.py	3.02 KB	-rw-r--r--	2021-08-09 22:38
gensec.py	8.91 KB	-rw-r--r--	2021-08-09 22:38
get_opt.py	2.47 KB	-rw-r--r--	2021-08-09 22:38
getdcname.py	18.52 KB	-rw-r--r--	2021-08-09 22:38
glue.py	3.75 KB	-rw-r--r--	2021-08-09 22:38
gpo.py	80.28 KB	-rw-r--r--	2021-08-09 22:38
gpo_member.py	1.69 KB	-rw-r--r--	2021-08-09 22:38
graph.py	26.45 KB	-rw-r--r--	2021-08-09 22:38
group_audit.py	16.52 KB	-rw-r--r--	2021-08-09 22:38
hostconfig.py	2.14 KB	-rw-r--r--	2021-08-09 22:38
imports.py	1.12 KB	-rw-r--r--	2021-08-09 22:38
join.py	6.71 KB	-rw-r--r--	2021-08-09 22:38
krb5_credentials.py	3.8 KB	-rw-r--r--	2021-08-09 22:38
ldap_raw.py	31.92 KB	-rw-r--r--	2021-08-09 22:38
ldap_referrals.py	3.13 KB	-rw-r--r--	2021-08-09 22:38
ldap_spn.py	34.19 KB	-rw-r--r--	2022-01-31 20:23
ldap_upn_sam_account.py	17.63 KB	-rw-r--r--	2021-11-08 20:23
libsmb.py	4.26 KB	-rw-r--r--	2021-08-09 22:38
loadparm.py	3.25 KB	-rw-r--r--	2021-08-09 22:38
lsa_string.py	2.22 KB	-rw-r--r--	2021-08-09 22:38
messaging.py	4.97 KB	-rw-r--r--	2021-08-09 22:38
ndr.py	4.09 KB	-rw-r--r--	2021-08-09 22:38
net_join.py	2.29 KB	-rw-r--r--	2021-08-09 22:38
net_join_no_spnego.py	3.46 KB	-rw-r--r--	2021-08-09 22:38
netbios.py	2.08 KB	-rw-r--r--	2021-08-09 22:38
netcmd.py	5.32 KB	-rw-r--r--	2021-08-09 22:38
netlogonsvc.py	2.43 KB	-rw-r--r--	2021-08-09 22:38
ntacls.py	3.68 KB	-rw-r--r--	2021-08-09 22:38
ntacls_backup.py	6.58 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth.py	13.08 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth_base.py	8.5 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth_krb5.py	3.63 KB	-rw-r--r--	2021-08-09 22:38
ntlmdisabled.py	3.01 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind.py	2.52 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind_chauthtok.py	1.56 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind_warn_pwd_expire.py	2.01 KB	-rw-r--r--	2021-08-09 22:38
param.py	3.58 KB	-rw-r--r--	2021-08-09 22:38
password_hash.py	12.43 KB	-rw-r--r--	2021-08-09 22:38
password_hash_fl2003.py	7.34 KB	-rw-r--r--	2021-08-09 22:38
password_hash_fl2008.py	7.89 KB	-rw-r--r--	2021-08-09 22:38
password_hash_gpgme.py	11.88 KB	-rw-r--r--	2021-08-09 22:38
password_hash_ldap.py	4.85 KB	-rw-r--r--	2021-08-09 22:38
password_quality.py	2.15 KB	-rw-r--r--	2021-08-09 22:38
password_test.py	1.94 KB	-rw-r--r--	2021-08-09 22:38
policy.py	1.17 KB	-rw-r--r--	2021-08-09 22:38
posixacl.py	38.89 KB	-rw-r--r--	2021-08-09 22:38
prefork_restart.py	16 KB	-rw-r--r--	2021-08-09 22:38
process_limits.py	2.95 KB	-rw-r--r--	2021-08-09 22:38
provision.py	6.35 KB	-rw-r--r--	2021-08-09 22:38
pso.py	11.23 KB	-rw-r--r--	2021-08-09 22:38
py_credentials.py	14.82 KB	-rw-r--r--	2021-08-09 22:38
registry.py	2.5 KB	-rw-r--r--	2021-08-09 22:38
s3_net_join.py	2.63 KB	-rw-r--r--	2021-10-27 21:53
s3idmapdb.py	1.95 KB	-rw-r--r--	2021-08-09 22:38
s3param.py	1.75 KB	-rw-r--r--	2021-08-09 22:38
s3passdb.py	5.66 KB	-rw-r--r--	2021-08-09 22:38
s3registry.py	1.82 KB	-rw-r--r--	2021-08-09 22:38
s3windb.py	1.48 KB	-rw-r--r--	2021-08-09 22:38
samba3sam.py	48.45 KB	-rw-r--r--	2021-08-09 22:38
samba_upgradedns_lmdb.py	2.56 KB	-rw-r--r--	2021-08-09 22:38
samdb.py	2.51 KB	-rw-r--r--	2021-08-09 22:38
samdb_api.py	5.41 KB	-rw-r--r--	2021-08-09 22:38
sddl.py	8.86 KB	-rw-r--r--	2021-08-09 22:38
security.py	6.25 KB	-rw-r--r--	2021-08-09 22:38
segfault.py	7 KB	-rw-r--r--	2021-10-27 21:53
smb-notify.py	18.85 KB	-rw-r--r--	2021-08-09 22:38
smb.py	9.47 KB	-rw-r--r--	2021-08-09 22:38
smbd_base.py	1.76 KB	-rw-r--r--	2021-08-09 22:38
smbd_fuzztest.py	3.5 KB	-rw-r--r--	2021-08-09 22:38
source.py	8.74 KB	-rw-r--r--	2021-08-09 22:38
strings.py	3.89 KB	-rw-r--r--	2021-08-09 22:38
subunitrun.py	2.33 KB	-rw-r--r--	2021-08-09 22:38
tdb_util.py	1.76 KB	-rw-r--r--	2021-08-09 22:38
upgrade.py	1.36 KB	-rw-r--r--	2021-08-09 22:38
upgradeprovision.py	6.65 KB	-rw-r--r--	2021-08-09 22:38
upgradeprovisionneeddc.py	7.49 KB	-rw-r--r--	2021-08-09 22:38
usage.py	12.98 KB	-rw-r--r--	2026-05-22 02:08
xattr.py	5.27 KB	-rw-r--r--	2021-08-09 22:38

Rename

# Unix SMB/CIFS implementation.
# Copyright (C) Andrew Bartlett <abartlet@samba.org> 2017
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
"""Tests for DSDB audit logging.
"""

import samba.tests
from samba.messaging import Messaging
from samba.dcerpc.messaging import MSG_AUTH_LOG, AUTH_EVENT_NAME
from samba.param import LoadParm
import time
import json
import os
import re

def getAudit(message):
    if "type" not in message:
        return None

type = message["type"]
    audit = message[type]
    return audit

class AuditLogTestBase(samba.tests.TestCase):

def setUp(self):
        super(AuditLogTestBase, self).setUp()

# connect to the server's messaging bus (we need to explicitly load a
        # different smb.conf here, because in all other respects this test
        # wants to act as a separate remote client)
        server_conf = os.getenv('SERVERCONFFILE')
        if server_conf:
            lp_ctx = LoadParm(filename_for_non_global_lp=server_conf)
        else:
            lp_ctx = self.get_loadparm()
        self.msg_ctx = Messaging((1,), lp_ctx=lp_ctx)
        self.msg_ctx.irpc_add_name(self.event_type)

# Now switch back to using the client-side smb.conf. The tests will
        # use the first interface in the client.conf (we need to strip off
        # the subnet mask portion)
        lp_ctx = self.get_loadparm()
        client_ip_and_mask = lp_ctx.get('interfaces')[0]
        client_ip = client_ip_and_mask.split('/')[0]

# the messaging ctx is the server's view of the world, so our own
        # client IP will be the remoteAddress when connections are logged
        self.remoteAddress = client_ip

#
        # Check the remote address of a message against the one being used
        # for the tests.
        #
        def isRemote(message):
            audit = getAudit(message)
            if audit is None:
                return False

remote = audit["remoteAddress"]
            if remote is None:
                return False

try:
                addr = remote.split(":")
                return addr[1] == self.remoteAddress
            except IndexError:
                return False

def messageHandler(context, msgType, src, message):
            # This does not look like sub unit output and it
            # makes these tests much easier to debug.
            print(message)
            jsonMsg = json.loads(message)
            if ((jsonMsg["type"] == "passwordChange" or
                jsonMsg["type"] == "dsdbChange" or
                jsonMsg["type"] == "groupChange") and
                    isRemote(jsonMsg)):
                context["messages"].append(jsonMsg)
            elif jsonMsg["type"] == "dsdbTransaction":
                context["txnMessage"] = jsonMsg

self.context = {"messages": [], "txnMessage": None}
        self.msg_handler_and_context = (messageHandler, self.context)
        self.msg_ctx.register(self.msg_handler_and_context,
                              msg_type=self.message_type)

self.msg_ctx.irpc_add_name(AUTH_EVENT_NAME)

def authHandler(context, msgType, src, message):
            jsonMsg = json.loads(message)
            if jsonMsg["type"] == "Authorization" and isRemote(jsonMsg):
                # This does not look like sub unit output and it
                # makes these tests much easier to debug.
                print(message)
                context["sessionId"] = jsonMsg["Authorization"]["sessionId"]
                context["serviceDescription"] =\
                    jsonMsg["Authorization"]["serviceDescription"]

self.auth_context = {"sessionId": "", "serviceDescription": ""}
        self.auth_handler_and_context = (authHandler, self.auth_context)
        self.msg_ctx.register(self.auth_handler_and_context,
                              msg_type=MSG_AUTH_LOG)

self.discardMessages()

self.server = os.environ["SERVER"]
        self.connection = None

def tearDown(self):
        self.discardMessages()
        self.msg_ctx.irpc_remove_name(self.event_type)
        self.msg_ctx.irpc_remove_name(AUTH_EVENT_NAME)
        if self.msg_handler_and_context:
            self.msg_ctx.deregister(self.msg_handler_and_context,
                                    msg_type=self.message_type)
        if self.auth_handler_and_context:
            self.msg_ctx.deregister(self.auth_handler_and_context,
                                    msg_type=MSG_AUTH_LOG)

def haveExpected(self, expected, dn):
        if dn is None:
            return len(self.context["messages"]) >= expected
        else:
            received = 0
            for msg in self.context["messages"]:
                audit = getAudit(msg)
                if audit["dn"].lower() == dn.lower():
                    received += 1
                    if received >= expected:
                        return True
            return False

def waitForMessages(self, number, connection=None, dn=None):
        """Wait for all the expected messages to arrive
        The connection is passed through to keep the connection alive
        until all the logging messages have been received.
        """

self.connection = connection

start_time = time.time()
        while not self.haveExpected(number, dn):
            self.msg_ctx.loop_once(0.1)
            if time.time() - start_time > 1:
                self.connection = None
                print("Timed out")
                return []

self.connection = None
        if dn is None:
            return self.context["messages"]

messages = []
        for msg in self.context["messages"]:
            audit = getAudit(msg)
            if audit["dn"].lower() == dn.lower():
                messages.append(msg)
        return messages

# Discard any previously queued messages.
    def discardMessages(self):
        self.msg_ctx.loop_once(0.001)
        while (len(self.context["messages"]) or
               self.context["txnMessage"] is not None):

self.context["messages"] = []
            self.context["txnMessage"] = None
            self.msg_ctx.loop_once(0.001)

GUID_RE = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"

#
    # Is the supplied GUID string correctly formatted
    #
    def is_guid(self, guid):
        return re.match(self.GUID_RE, guid)

def get_session(self):
        return self.auth_context["sessionId"]

def get_service_description(self):
        return self.auth_context["serviceDescription"]