Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
__pycache__	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
blackbox	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
dcerpc	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
dns_forwarder_helpers	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
emulate	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
kcc	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
krb5	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
samba_tool	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
__init__.py	22.9 KB	-rw-r--r--	2022-04-26 23:34
audit_log_base.py	6.98 KB	-rw-r--r--	2021-08-09 22:38
audit_log_dsdb.py	24.46 KB	-rw-r--r--	2021-08-09 22:38
audit_log_pass_change.py	12.86 KB	-rw-r--r--	2021-08-09 22:38
auth.py	4.5 KB	-rw-r--r--	2021-08-09 22:38
auth_log.py	65.62 KB	-rw-r--r--	2026-05-22 02:08
auth_log_base.py	5.42 KB	-rw-r--r--	2021-08-09 22:38
auth_log_ncalrpc.py	4.19 KB	-rw-r--r--	2021-08-09 22:38
auth_log_netlogon.py	5.22 KB	-rw-r--r--	2021-08-09 22:38
auth_log_netlogon_bad_creds.py	7.7 KB	-rw-r--r--	2021-08-09 22:38
auth_log_pass_change.py	12.92 KB	-rw-r--r--	2021-08-09 22:38
auth_log_samlogon.py	6.68 KB	-rw-r--r--	2021-08-09 22:38
auth_log_winbind.py	19.13 KB	-rw-r--r--	2021-08-09 22:38
common.py	3.06 KB	-rw-r--r--	2021-08-09 22:38
complex_expressions.py	18.37 KB	-rw-r--r--	2021-08-09 22:38
core.py	2.77 KB	-rw-r--r--	2021-08-09 22:38
cred_opt.py	1.73 KB	-rw-r--r--	2021-08-09 22:38
credentials.py	22.13 KB	-rw-r--r--	2021-08-09 22:38
dckeytab.py	2.11 KB	-rw-r--r--	2021-08-09 22:38
dns.py	84.34 KB	-rw-r--r--	2021-08-09 22:38
dns_aging.py	108.76 KB	-rw-r--r--	2021-08-09 22:38
dns_base.py	14.3 KB	-rw-r--r--	2021-08-09 22:38
dns_forwarder.py	20.95 KB	-rw-r--r--	2021-08-09 22:38
dns_invalid.py	2.66 KB	-rw-r--r--	2021-08-09 22:38
dns_packet.py	7.13 KB	-rw-r--r--	2021-08-09 22:38
dns_tkey.py	7.11 KB	-rw-r--r--	2021-08-09 22:38
dns_wildcard.py	12.89 KB	-rw-r--r--	2021-08-09 22:38
docs.py	18.25 KB	-rw-r--r--	2021-08-09 22:38
domain_backup.py	26.76 KB	-rw-r--r--	2021-08-09 22:38
domain_backup_offline.py	10.01 KB	-rw-r--r--	2021-08-09 22:38
dsdb.py	41.91 KB	-rw-r--r--	2021-08-09 22:38
dsdb_api.py	1.93 KB	-rw-r--r--	2021-11-08 20:23
dsdb_dns.py	2.56 KB	-rw-r--r--	2021-08-09 22:38
dsdb_lock.py	11.63 KB	-rw-r--r--	2021-08-09 22:38
dsdb_schema_attributes.py	8.9 KB	-rw-r--r--	2021-09-09 15:30
encrypted_secrets.py	3.02 KB	-rw-r--r--	2021-08-09 22:38
gensec.py	8.91 KB	-rw-r--r--	2021-08-09 22:38
get_opt.py	2.47 KB	-rw-r--r--	2021-08-09 22:38
getdcname.py	18.52 KB	-rw-r--r--	2021-08-09 22:38
glue.py	3.75 KB	-rw-r--r--	2021-08-09 22:38
gpo.py	80.28 KB	-rw-r--r--	2021-08-09 22:38
gpo_member.py	1.69 KB	-rw-r--r--	2021-08-09 22:38
graph.py	26.45 KB	-rw-r--r--	2021-08-09 22:38
group_audit.py	16.52 KB	-rw-r--r--	2021-08-09 22:38
hostconfig.py	2.14 KB	-rw-r--r--	2021-08-09 22:38
imports.py	1.12 KB	-rw-r--r--	2021-08-09 22:38
join.py	6.71 KB	-rw-r--r--	2021-08-09 22:38
krb5_credentials.py	3.8 KB	-rw-r--r--	2021-08-09 22:38
ldap_raw.py	31.92 KB	-rw-r--r--	2021-08-09 22:38
ldap_referrals.py	3.13 KB	-rw-r--r--	2021-08-09 22:38
ldap_spn.py	34.19 KB	-rw-r--r--	2022-01-31 20:23
ldap_upn_sam_account.py	17.63 KB	-rw-r--r--	2021-11-08 20:23
libsmb.py	4.26 KB	-rw-r--r--	2021-08-09 22:38
loadparm.py	3.25 KB	-rw-r--r--	2021-08-09 22:38
lsa_string.py	2.22 KB	-rw-r--r--	2021-08-09 22:38
messaging.py	4.97 KB	-rw-r--r--	2021-08-09 22:38
ndr.py	4.09 KB	-rw-r--r--	2021-08-09 22:38
net_join.py	2.29 KB	-rw-r--r--	2021-08-09 22:38
net_join_no_spnego.py	3.46 KB	-rw-r--r--	2021-08-09 22:38
netbios.py	2.08 KB	-rw-r--r--	2021-08-09 22:38
netcmd.py	5.32 KB	-rw-r--r--	2021-08-09 22:38
netlogonsvc.py	2.43 KB	-rw-r--r--	2021-08-09 22:38
ntacls.py	3.68 KB	-rw-r--r--	2021-08-09 22:38
ntacls_backup.py	6.58 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth.py	13.08 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth_base.py	8.5 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth_krb5.py	3.63 KB	-rw-r--r--	2021-08-09 22:38
ntlmdisabled.py	3.01 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind.py	2.52 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind_chauthtok.py	1.56 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind_warn_pwd_expire.py	2.01 KB	-rw-r--r--	2021-08-09 22:38
param.py	3.58 KB	-rw-r--r--	2021-08-09 22:38
password_hash.py	12.43 KB	-rw-r--r--	2021-08-09 22:38
password_hash_fl2003.py	7.34 KB	-rw-r--r--	2021-08-09 22:38
password_hash_fl2008.py	7.89 KB	-rw-r--r--	2021-08-09 22:38
password_hash_gpgme.py	11.88 KB	-rw-r--r--	2021-08-09 22:38
password_hash_ldap.py	4.85 KB	-rw-r--r--	2021-08-09 22:38
password_quality.py	2.15 KB	-rw-r--r--	2021-08-09 22:38
password_test.py	1.94 KB	-rw-r--r--	2021-08-09 22:38
policy.py	1.17 KB	-rw-r--r--	2021-08-09 22:38
posixacl.py	38.89 KB	-rw-r--r--	2021-08-09 22:38
prefork_restart.py	16 KB	-rw-r--r--	2021-08-09 22:38
process_limits.py	2.95 KB	-rw-r--r--	2021-08-09 22:38
provision.py	6.35 KB	-rw-r--r--	2021-08-09 22:38
pso.py	11.23 KB	-rw-r--r--	2021-08-09 22:38
py_credentials.py	14.82 KB	-rw-r--r--	2021-08-09 22:38
registry.py	2.5 KB	-rw-r--r--	2021-08-09 22:38
s3_net_join.py	2.63 KB	-rw-r--r--	2021-10-27 21:53
s3idmapdb.py	1.95 KB	-rw-r--r--	2021-08-09 22:38
s3param.py	1.75 KB	-rw-r--r--	2021-08-09 22:38
s3passdb.py	5.66 KB	-rw-r--r--	2021-08-09 22:38
s3registry.py	1.82 KB	-rw-r--r--	2021-08-09 22:38
s3windb.py	1.48 KB	-rw-r--r--	2021-08-09 22:38
samba3sam.py	48.45 KB	-rw-r--r--	2021-08-09 22:38
samba_upgradedns_lmdb.py	2.56 KB	-rw-r--r--	2021-08-09 22:38
samdb.py	2.51 KB	-rw-r--r--	2021-08-09 22:38
samdb_api.py	5.41 KB	-rw-r--r--	2021-08-09 22:38
sddl.py	8.86 KB	-rw-r--r--	2021-08-09 22:38
security.py	6.25 KB	-rw-r--r--	2021-08-09 22:38
segfault.py	7 KB	-rw-r--r--	2021-10-27 21:53
smb-notify.py	18.85 KB	-rw-r--r--	2021-08-09 22:38
smb.py	9.47 KB	-rw-r--r--	2021-08-09 22:38
smbd_base.py	1.76 KB	-rw-r--r--	2021-08-09 22:38
smbd_fuzztest.py	3.5 KB	-rw-r--r--	2021-08-09 22:38
source.py	8.74 KB	-rw-r--r--	2021-08-09 22:38
strings.py	3.89 KB	-rw-r--r--	2021-08-09 22:38
subunitrun.py	2.33 KB	-rw-r--r--	2021-08-09 22:38
tdb_util.py	1.76 KB	-rw-r--r--	2021-08-09 22:38
upgrade.py	1.36 KB	-rw-r--r--	2021-08-09 22:38
upgradeprovision.py	6.65 KB	-rw-r--r--	2021-08-09 22:38
upgradeprovisionneeddc.py	7.49 KB	-rw-r--r--	2021-08-09 22:38
usage.py	12.98 KB	-rw-r--r--	2026-05-22 02:08
xattr.py	5.27 KB	-rw-r--r--	2021-08-09 22:38

Rename

# Unix SMB/CIFS implementation.
# Copyright (C) Andrew Bartlett <abartlet@samba.org> 2019
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

"""
    auth logging tests that exercise winbind
"""

import json
import os
import time

from samba.auth import system_session
from samba.credentials import Credentials
from samba.common import get_string, get_bytes
from samba.dcerpc.messaging import AUTH_EVENT_NAME, MSG_AUTH_LOG
from samba.dsdb import UF_NORMAL_ACCOUNT
from samba.messaging import Messaging
from samba.param import LoadParm
from samba.samdb import SamDB
from samba.tests import delete_force, BlackboxProcessError, BlackboxTestCase
from samba.tests.auth_log_base import AuthLogTestBase

USER_NAME = "WBALU"

class AuthLogTestsWinbind(AuthLogTestBase, BlackboxTestCase):

#
    # Helper function to watch for authentication messages on the
    # Domain Controller.
    #
    def dc_watcher(self):

(r1, w1) = os.pipe()
        pid = os.fork()
        if pid != 0:
            # Parent process return the result socket to the caller.
            return r1

# Load the lp context for the Domain Controller, rather than the
        # member server.
        config_file = os.environ["DC_SERVERCONFFILE"]
        lp_ctx = LoadParm()
        lp_ctx.load(config_file)

#
        # Is the message a SamLogon authentication?
        def is_sam_logon(m):
            if m is None:
                return False
            msg = json.loads(m)
            return (
                msg["type"] == "Authentication" and
                msg["Authentication"]["serviceDescription"] == "SamLogon")

#
        # Handler function for received authentication messages.
        def message_handler(context, msgType, src, message):
            # Print the message to help debugging the tests.
            # as it's a JSON message it does not look like a sub-unit message.
            print(message)
            self.dc_msgs.append(message)

# Set up a messaging context to listen for authentication events on
        # the domain controller.
        msg_ctx = Messaging((1,), lp_ctx=lp_ctx)
        msg_ctx.irpc_add_name(AUTH_EVENT_NAME)
        msg_handler_and_context = (message_handler, None)
        msg_ctx.register(msg_handler_and_context, msg_type=MSG_AUTH_LOG)

# Wait for the SamLogon message.
        # As there could be other SamLogon's in progress we need to collect
        # all the SamLogons and let the caller match them to the session.
        self.dc_msgs = []
        start_time = time.time()
        while (time.time() - start_time < 1):
            msg_ctx.loop_once(0.1)

# Only interested in SamLogon messages, filter out the rest
        msgs = list(filter(is_sam_logon, self.dc_msgs))
        if msgs:
            for m in msgs:
                os.write(w1, get_bytes(m+"\n"))
        else:
            os.write(w1, get_bytes("None\n"))
        os.close(w1)

msg_ctx.deregister(msg_handler_and_context, msg_type=MSG_AUTH_LOG)
        msg_ctx.irpc_remove_name(AUTH_EVENT_NAME)

os._exit(0)

# Remove any DCE/RPC ncacn_np messages
    # these only get triggered once per session, and stripping them out
    # avoids ordering dependencies in the tests
    #
    def filter_messages(self, messages):
        def keep(msg):
            if (msg["type"] == "Authorization" and
                msg["Authorization"]["serviceDescription"] == "DCE/RPC" and
                msg["Authorization"]["authType"] == "ncacn_np"):
                    return False
            else:
                return True

return list(filter(keep, messages))

def setUp(self):
        super(AuthLogTestsWinbind, self).setUp()
        self.domain = os.environ["DOMAIN"]
        self.host = os.environ["SERVER"]
        self.dc = os.environ["DC_SERVER"]
        self.lp = self.get_loadparm()
        self.credentials = self.get_credentials()
        self.session = system_session()

self.ldb = SamDB(
            url="ldap://{0}".format(self.dc),
            session_info=self.session,
            credentials=self.credentials,
            lp=self.lp)
        self.create_user_account()

def tearDown(self):
        super(AuthLogTestsWinbind, self).tearDown()
        delete_force(self.ldb, self.user_dn)

#
    # Create a test user account
    def create_user_account(self):
        self.user_pass = self.random_password()
        self.user_name = USER_NAME
        self.user_dn = "cn=%s,%s" % (self.user_name, self.ldb.domain_dn())

# remove the account if it exists, this will happen if a previous test
        # run failed
        delete_force(self.ldb, self.user_dn)

utf16pw = ('"%s"' % get_string(self.user_pass)).encode('utf-16-le')
        self.ldb.add({
           "dn": self.user_dn,
           "objectclass": "user",
           "sAMAccountName": "%s" % self.user_name,
           "userAccountControl": str(UF_NORMAL_ACCOUNT),
           "unicodePwd": utf16pw})

self.user_creds = Credentials()
        self.user_creds.guess(self.get_loadparm())
        self.user_creds.set_password(self.user_pass)
        self.user_creds.set_username(self.user_name)
        self.user_creds.set_workstation(self.server)

#
    # Check that the domain server received a SamLogon request for the
    # current logon.
    #
    def check_domain_server_authentication(self, pipe, logon_id, description):

messages = os.read(pipe, 8192)
        messages = get_string(messages)
        if len(messages) == 0 or messages == "None":
            self.fail("No Domain server authentication message")

#
        # Look for the SamLogon request matching logon_id
        msg = None
        for message in messages.split("\n"):
            msg = json.loads(get_string(message))
            if logon_id == msg["Authentication"]["logonId"]:
                break
            msg = None

if msg is None:
            self.fail("No Domain server authentication message")

#
        # Validate that message contains the expected data
        #
        self.assertEqual("Authentication", msg["type"])
        self.assertEqual(logon_id, msg["Authentication"]["logonId"])
        self.assertEqual("SamLogon",
                          msg["Authentication"]["serviceDescription"])
        self.assertEqual(description,
                          msg["Authentication"]["authDescription"])

def test_ntlm_auth(self):

def isLastExpectedMessage(msg):
            DESC = "PAM_AUTH, ntlm_auth"
            return (
                msg["type"] == "Authentication" and
                msg["Authentication"]["serviceDescription"] == "winbind" and
                msg["Authentication"]["authDescription"] is not None and
                msg["Authentication"]["authDescription"].startswith(DESC))

pipe = self.dc_watcher()
        COMMAND = "bin/ntlm_auth"
        self.check_run("{0} --username={1} --password={2}".format(
            COMMAND,
            self.credentials.get_username(),
            self.credentials.get_password()),
            msg="ntlm_auth failed")

messages = self.waitForMessages(isLastExpectedMessage)
        messages = self.filter_messages(messages)
        expected_messages = 1
        self.assertEqual(expected_messages,
                          len(messages),
                          "Did not receive the expected number of messages")

# Check the first message it should be an Authentication
        msg = messages[0]
        self.assertEqual("Authentication", msg["type"])
        self.assertTrue(
            msg["Authentication"]["authDescription"].startswith(
                "PAM_AUTH, ntlm_auth,"))
        self.assertEqual("winbind",
                          msg["Authentication"]["serviceDescription"])
        self.assertEqual("Plaintext", msg["Authentication"]["passwordType"])
        # Logon type should be NetworkCleartext
        self.assertEqual(8, msg["Authentication"]["logonType"])
        # Event code should be Successful logon
        self.assertEqual(4624, msg["Authentication"]["eventId"])
        self.assertEqual("unix:", msg["Authentication"]["remoteAddress"])
        self.assertEqual("unix:", msg["Authentication"]["localAddress"])
        self.assertEqual(self.domain, msg["Authentication"]["clientDomain"])
        self.assertEqual("NT_STATUS_OK", msg["Authentication"]["status"])
        self.assertEqual(self.credentials.get_username(),
                          msg["Authentication"]["clientAccount"])
        self.assertEqual(self.credentials.get_domain(),
                          msg["Authentication"]["clientDomain"])
        self.assertTrue(msg["Authentication"]["workstation"] is None)

logon_id = msg["Authentication"]["logonId"]

#
        # Now check the Domain server authentication message
        #
        self.check_domain_server_authentication(pipe, logon_id, "interactive")

def test_wbinfo(self):
        def isLastExpectedMessage(msg):
            DESC = "NTLM_AUTH, wbinfo"
            return (
                msg["type"] == "Authentication" and
                msg["Authentication"]["serviceDescription"] == "winbind" and
                msg["Authentication"]["authDescription"] is not None and
                msg["Authentication"]["authDescription"].startswith(DESC))

pipe = self.dc_watcher()
        COMMAND = "bin/wbinfo"
        try:
            self.check_run("{0} -a {1}%{2}".format(
                COMMAND,
                self.credentials.get_username(),
                self.credentials.get_password()),
                msg="ntlm_auth failed")
        except BlackboxProcessError:
            pass

messages = self.waitForMessages(isLastExpectedMessage)
        messages = self.filter_messages(messages)
        expected_messages = 3
        self.assertEqual(expected_messages,
                          len(messages),
                          "Did not receive the expected number of messages")

# The 1st message should be an Authentication against the local
        # password database
        msg = messages[0]
        self.assertEqual("Authentication", msg["type"])
        self.assertTrue(msg["Authentication"]["authDescription"].startswith(
            "PASSDB, wbinfo,"))
        self.assertEqual("winbind",
                          msg["Authentication"]["serviceDescription"])
        # Logon type should be Interactive
        self.assertEqual(2, msg["Authentication"]["logonType"])
        # Event code should be Unsuccessful logon
        self.assertEqual(4625, msg["Authentication"]["eventId"])
        self.assertEqual("unix:", msg["Authentication"]["remoteAddress"])
        self.assertEqual("unix:", msg["Authentication"]["localAddress"])
        self.assertEqual('', msg["Authentication"]["clientDomain"])
        # This is what the existing winbind implementation returns.
        self.assertEqual("NT_STATUS_NO_SUCH_USER",
                          msg["Authentication"]["status"])
        self.assertEqual("NTLMv2", msg["Authentication"]["passwordType"])
        self.assertEqual(self.credentials.get_username(),
                          msg["Authentication"]["clientAccount"])
        self.assertEqual("", msg["Authentication"]["clientDomain"])

logon_id = msg["Authentication"]["logonId"]

# The 2nd message should be a PAM_AUTH with the same logon id as the
        # 1st message
        msg = messages[1]
        self.assertEqual("Authentication", msg["type"])
        self.assertTrue(msg["Authentication"]["authDescription"].startswith(
            "PAM_AUTH"))
        self.assertEqual("winbind",
                          msg["Authentication"]["serviceDescription"])
        self.assertEqual(logon_id, msg["Authentication"]["logonId"])
        # Logon type should be NetworkCleartext
        self.assertEqual(8, msg["Authentication"]["logonType"])
        # Event code should be Unsuccessful logon
        self.assertEqual(4625, msg["Authentication"]["eventId"])
        self.assertEqual("unix:", msg["Authentication"]["remoteAddress"])
        self.assertEqual("unix:", msg["Authentication"]["localAddress"])
        self.assertEqual('', msg["Authentication"]["clientDomain"])
        # This is what the existing winbind implementation returns.
        self.assertEqual("NT_STATUS_NO_SUCH_USER",
                          msg["Authentication"]["status"])
        self.assertEqual(self.credentials.get_username(),
                          msg["Authentication"]["clientAccount"])
        self.assertEqual("", msg["Authentication"]["clientDomain"])

# The 3rd message should be an NTLM_AUTH
        msg = messages[2]
        self.assertEqual("Authentication", msg["type"])
        self.assertTrue(msg["Authentication"]["authDescription"].startswith(
            "NTLM_AUTH, wbinfo,"))
        self.assertEqual("winbind",
                          msg["Authentication"]["serviceDescription"])
        # Logon type should be Network
        self.assertEqual(3, msg["Authentication"]["logonType"])
        self.assertEqual("NT_STATUS_OK", msg["Authentication"]["status"])
        # Event code should be successful logon
        self.assertEqual(4624, msg["Authentication"]["eventId"])
        self.assertEqual("NTLMv2", msg["Authentication"]["passwordType"])
        self.assertEqual("unix:", msg["Authentication"]["remoteAddress"])
        self.assertEqual("unix:", msg["Authentication"]["localAddress"])
        self.assertEqual(self.credentials.get_username(),
                          msg["Authentication"]["clientAccount"])
        self.assertEqual(self.credentials.get_domain(),
                          msg["Authentication"]["clientDomain"])

logon_id = msg["Authentication"]["logonId"]

#
        # Now check the Domain server authentication message
        #
        self.check_domain_server_authentication(pipe, logon_id, "network")

def test_wbinfo_ntlmv1(self):
        def isLastExpectedMessage(msg):
            DESC = "NTLM_AUTH, wbinfo"
            return (
                msg["type"] == "Authentication" and
                msg["Authentication"]["serviceDescription"] == "winbind" and
                msg["Authentication"]["authDescription"] is not None and
                msg["Authentication"]["authDescription"].startswith(DESC))

pipe = self.dc_watcher()
        COMMAND = "bin/wbinfo"
        try:
            self.check_run("{0} --ntlmv1 -a {1}%{2}".format(
                COMMAND,
                self.credentials.get_username(),
                self.credentials.get_password()),
                msg="ntlm_auth failed")
        except BlackboxProcessError:
            pass

logon_id = msg["Authentication"]["logonId"]

# The 2nd message should be a PAM_AUTH with the same logon id as the
        # 1st message
        msg = messages[1]
        self.assertEqual("Authentication", msg["type"])
        self.assertTrue(msg["Authentication"]["authDescription"].startswith(
            "PAM_AUTH"))
        self.assertEqual("winbind",
                          msg["Authentication"]["serviceDescription"])
        self.assertEqual(logon_id, msg["Authentication"]["logonId"])
        self.assertEqual("Plaintext", msg["Authentication"]["passwordType"])
        # Logon type should be NetworkCleartext
        self.assertEqual(8, msg["Authentication"]["logonType"])
        # Event code should be Unsuccessful logon
        self.assertEqual(4625, msg["Authentication"]["eventId"])
        self.assertEqual("unix:", msg["Authentication"]["remoteAddress"])
        self.assertEqual("unix:", msg["Authentication"]["localAddress"])
        self.assertEqual('', msg["Authentication"]["clientDomain"])
        # This is what the existing winbind implementation returns.
        self.assertEqual("NT_STATUS_NO_SUCH_USER",
                          msg["Authentication"]["status"])
        self.assertEqual(self.credentials.get_username(),
                          msg["Authentication"]["clientAccount"])
        self.assertEqual("", msg["Authentication"]["clientDomain"])

# The 3rd message should be an NTLM_AUTH
        msg = messages[2]
        self.assertEqual("Authentication", msg["type"])
        self.assertTrue(msg["Authentication"]["authDescription"].startswith(
            "NTLM_AUTH, wbinfo,"))
        self.assertEqual("winbind",
                          msg["Authentication"]["serviceDescription"])
        self.assertEqual("NTLMv1",
                          msg["Authentication"]["passwordType"])
        # Logon type should be Network
        self.assertEqual(3, msg["Authentication"]["logonType"])
        self.assertEqual("NT_STATUS_OK", msg["Authentication"]["status"])
        # Event code should be successful logon
        self.assertEqual(4624, msg["Authentication"]["eventId"])
        self.assertEqual("unix:", msg["Authentication"]["remoteAddress"])
        self.assertEqual("unix:", msg["Authentication"]["localAddress"])
        self.assertEqual(self.credentials.get_username(),
                          msg["Authentication"]["clientAccount"])
        self.assertEqual(self.credentials.get_domain(),
                          msg["Authentication"]["clientDomain"])

logon_id = msg["Authentication"]["logonId"]
        #
        # Now check the Domain server authentication message
        #
        self.check_domain_server_authentication(pipe, logon_id, "network")