Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
__pycache__	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
blackbox	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
dcerpc	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
dns_forwarder_helpers	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
emulate	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
kcc	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
krb5	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
samba_tool	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
__init__.py	22.9 KB	-rw-r--r--	2022-04-26 23:34
audit_log_base.py	6.98 KB	-rw-r--r--	2021-08-09 22:38
audit_log_dsdb.py	24.46 KB	-rw-r--r--	2021-08-09 22:38
audit_log_pass_change.py	12.86 KB	-rw-r--r--	2021-08-09 22:38
auth.py	4.5 KB	-rw-r--r--	2021-08-09 22:38
auth_log.py	65.62 KB	-rw-r--r--	2026-05-22 02:08
auth_log_base.py	5.42 KB	-rw-r--r--	2021-08-09 22:38
auth_log_ncalrpc.py	4.19 KB	-rw-r--r--	2021-08-09 22:38
auth_log_netlogon.py	5.22 KB	-rw-r--r--	2021-08-09 22:38
auth_log_netlogon_bad_creds.py	7.7 KB	-rw-r--r--	2021-08-09 22:38
auth_log_pass_change.py	12.92 KB	-rw-r--r--	2021-08-09 22:38
auth_log_samlogon.py	6.68 KB	-rw-r--r--	2021-08-09 22:38
auth_log_winbind.py	19.13 KB	-rw-r--r--	2021-08-09 22:38
common.py	3.06 KB	-rw-r--r--	2021-08-09 22:38
complex_expressions.py	18.37 KB	-rw-r--r--	2021-08-09 22:38
core.py	2.77 KB	-rw-r--r--	2021-08-09 22:38
cred_opt.py	1.73 KB	-rw-r--r--	2021-08-09 22:38
credentials.py	22.13 KB	-rw-r--r--	2021-08-09 22:38
dckeytab.py	2.11 KB	-rw-r--r--	2021-08-09 22:38
dns.py	84.34 KB	-rw-r--r--	2021-08-09 22:38
dns_aging.py	108.76 KB	-rw-r--r--	2021-08-09 22:38
dns_base.py	14.3 KB	-rw-r--r--	2021-08-09 22:38
dns_forwarder.py	20.95 KB	-rw-r--r--	2021-08-09 22:38
dns_invalid.py	2.66 KB	-rw-r--r--	2021-08-09 22:38
dns_packet.py	7.13 KB	-rw-r--r--	2021-08-09 22:38
dns_tkey.py	7.11 KB	-rw-r--r--	2021-08-09 22:38
dns_wildcard.py	12.89 KB	-rw-r--r--	2021-08-09 22:38
docs.py	18.25 KB	-rw-r--r--	2021-08-09 22:38
domain_backup.py	26.76 KB	-rw-r--r--	2021-08-09 22:38
domain_backup_offline.py	10.01 KB	-rw-r--r--	2021-08-09 22:38
dsdb.py	41.91 KB	-rw-r--r--	2021-08-09 22:38
dsdb_api.py	1.93 KB	-rw-r--r--	2021-11-08 20:23
dsdb_dns.py	2.56 KB	-rw-r--r--	2021-08-09 22:38
dsdb_lock.py	11.63 KB	-rw-r--r--	2021-08-09 22:38
dsdb_schema_attributes.py	8.9 KB	-rw-r--r--	2021-09-09 15:30
encrypted_secrets.py	3.02 KB	-rw-r--r--	2021-08-09 22:38
gensec.py	8.91 KB	-rw-r--r--	2021-08-09 22:38
get_opt.py	2.47 KB	-rw-r--r--	2021-08-09 22:38
getdcname.py	18.52 KB	-rw-r--r--	2021-08-09 22:38
glue.py	3.75 KB	-rw-r--r--	2021-08-09 22:38
gpo.py	80.28 KB	-rw-r--r--	2021-08-09 22:38
gpo_member.py	1.69 KB	-rw-r--r--	2021-08-09 22:38
graph.py	26.45 KB	-rw-r--r--	2021-08-09 22:38
group_audit.py	16.52 KB	-rw-r--r--	2021-08-09 22:38
hostconfig.py	2.14 KB	-rw-r--r--	2021-08-09 22:38
imports.py	1.12 KB	-rw-r--r--	2021-08-09 22:38
join.py	6.71 KB	-rw-r--r--	2021-08-09 22:38
krb5_credentials.py	3.8 KB	-rw-r--r--	2021-08-09 22:38
ldap_raw.py	31.92 KB	-rw-r--r--	2021-08-09 22:38
ldap_referrals.py	3.13 KB	-rw-r--r--	2021-08-09 22:38
ldap_spn.py	34.19 KB	-rw-r--r--	2022-01-31 20:23
ldap_upn_sam_account.py	17.63 KB	-rw-r--r--	2021-11-08 20:23
libsmb.py	4.26 KB	-rw-r--r--	2021-08-09 22:38
loadparm.py	3.25 KB	-rw-r--r--	2021-08-09 22:38
lsa_string.py	2.22 KB	-rw-r--r--	2021-08-09 22:38
messaging.py	4.97 KB	-rw-r--r--	2021-08-09 22:38
ndr.py	4.09 KB	-rw-r--r--	2021-08-09 22:38
net_join.py	2.29 KB	-rw-r--r--	2021-08-09 22:38
net_join_no_spnego.py	3.46 KB	-rw-r--r--	2021-08-09 22:38
netbios.py	2.08 KB	-rw-r--r--	2021-08-09 22:38
netcmd.py	5.32 KB	-rw-r--r--	2021-08-09 22:38
netlogonsvc.py	2.43 KB	-rw-r--r--	2021-08-09 22:38
ntacls.py	3.68 KB	-rw-r--r--	2021-08-09 22:38
ntacls_backup.py	6.58 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth.py	13.08 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth_base.py	8.5 KB	-rw-r--r--	2021-08-09 22:38
ntlm_auth_krb5.py	3.63 KB	-rw-r--r--	2021-08-09 22:38
ntlmdisabled.py	3.01 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind.py	2.52 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind_chauthtok.py	1.56 KB	-rw-r--r--	2021-08-09 22:38
pam_winbind_warn_pwd_expire.py	2.01 KB	-rw-r--r--	2021-08-09 22:38
param.py	3.58 KB	-rw-r--r--	2021-08-09 22:38
password_hash.py	12.43 KB	-rw-r--r--	2021-08-09 22:38
password_hash_fl2003.py	7.34 KB	-rw-r--r--	2021-08-09 22:38
password_hash_fl2008.py	7.89 KB	-rw-r--r--	2021-08-09 22:38
password_hash_gpgme.py	11.88 KB	-rw-r--r--	2021-08-09 22:38
password_hash_ldap.py	4.85 KB	-rw-r--r--	2021-08-09 22:38
password_quality.py	2.15 KB	-rw-r--r--	2021-08-09 22:38
password_test.py	1.94 KB	-rw-r--r--	2021-08-09 22:38
policy.py	1.17 KB	-rw-r--r--	2021-08-09 22:38
posixacl.py	38.89 KB	-rw-r--r--	2021-08-09 22:38
prefork_restart.py	16 KB	-rw-r--r--	2021-08-09 22:38
process_limits.py	2.95 KB	-rw-r--r--	2021-08-09 22:38
provision.py	6.35 KB	-rw-r--r--	2021-08-09 22:38
pso.py	11.23 KB	-rw-r--r--	2021-08-09 22:38
py_credentials.py	14.82 KB	-rw-r--r--	2021-08-09 22:38
registry.py	2.5 KB	-rw-r--r--	2021-08-09 22:38
s3_net_join.py	2.63 KB	-rw-r--r--	2021-10-27 21:53
s3idmapdb.py	1.95 KB	-rw-r--r--	2021-08-09 22:38
s3param.py	1.75 KB	-rw-r--r--	2021-08-09 22:38
s3passdb.py	5.66 KB	-rw-r--r--	2021-08-09 22:38
s3registry.py	1.82 KB	-rw-r--r--	2021-08-09 22:38
s3windb.py	1.48 KB	-rw-r--r--	2021-08-09 22:38
samba3sam.py	48.45 KB	-rw-r--r--	2021-08-09 22:38
samba_upgradedns_lmdb.py	2.56 KB	-rw-r--r--	2021-08-09 22:38
samdb.py	2.51 KB	-rw-r--r--	2021-08-09 22:38
samdb_api.py	5.41 KB	-rw-r--r--	2021-08-09 22:38
sddl.py	8.86 KB	-rw-r--r--	2021-08-09 22:38
security.py	6.25 KB	-rw-r--r--	2021-08-09 22:38
segfault.py	7 KB	-rw-r--r--	2021-10-27 21:53
smb-notify.py	18.85 KB	-rw-r--r--	2021-08-09 22:38
smb.py	9.47 KB	-rw-r--r--	2021-08-09 22:38
smbd_base.py	1.76 KB	-rw-r--r--	2021-08-09 22:38
smbd_fuzztest.py	3.5 KB	-rw-r--r--	2021-08-09 22:38
source.py	8.74 KB	-rw-r--r--	2021-08-09 22:38
strings.py	3.89 KB	-rw-r--r--	2021-08-09 22:38
subunitrun.py	2.33 KB	-rw-r--r--	2021-08-09 22:38
tdb_util.py	1.76 KB	-rw-r--r--	2021-08-09 22:38
upgrade.py	1.36 KB	-rw-r--r--	2021-08-09 22:38
upgradeprovision.py	6.65 KB	-rw-r--r--	2021-08-09 22:38
upgradeprovisionneeddc.py	7.49 KB	-rw-r--r--	2021-08-09 22:38
usage.py	12.98 KB	-rw-r--r--	2026-05-22 02:08
xattr.py	5.27 KB	-rw-r--r--	2021-08-09 22:38

Rename

# -*- coding: utf-8 -*-
#
# Unix SMB/CIFS implementation.
# Copyright (C) Kamen Mazdrashki <kamenim@samba.org> 2010
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

#
# Usage:
#  export SUBUNITRUN=$samba4srcdir/scripting/bin/subunitrun
#  PYTHONPATH="$PYTHONPATH:$samba4srcdir/dsdb/tests/python" $SUBUNITRUN dsdb_schema_attributes
#

import time
import random

import samba.tests
import ldb
from ldb import SCOPE_BASE, LdbError

class SchemaAttributesTestCase(samba.tests.TestCase):

def setUp(self):
        super(SchemaAttributesTestCase, self).setUp()

self.lp = samba.tests.env_loadparm()
        self.samdb = samba.tests.connect_samdb(self.lp.samdb_url())

# fetch rootDSE
        res = self.samdb.search(base="", expression="", scope=SCOPE_BASE, attrs=["*"])
        self.assertEqual(len(res), 1)
        self.schema_dn = res[0]["schemaNamingContext"][0]
        self.base_dn = res[0]["defaultNamingContext"][0]
        self.forest_level = int(res[0]["forestFunctionality"][0])

def tearDown(self):
        super(SchemaAttributesTestCase, self).tearDown()

def _ldap_schemaUpdateNow(self):
        ldif = """
dn:
changetype: modify
add: schemaUpdateNow
schemaUpdateNow: 1
"""
        self.samdb.modify_ldif(ldif)

def _make_obj_names(self, prefix):
        obj_name = prefix + time.strftime("%s", time.gmtime())
        obj_ldap_name = obj_name.replace("-", "")
        obj_dn = "CN=%s,%s" % (obj_name, self.schema_dn)
        return (obj_name, obj_ldap_name, obj_dn)

def _make_attr_ldif(self, attr_name, attr_dn, sub_oid, extra=None):
        ldif = """
dn: """ + attr_dn + """
objectClass: top
objectClass: attributeSchema
adminDescription: """ + attr_name + """
adminDisplayName: """ + attr_name + """
cn: """ + attr_name + """
attributeId: 1.3.6.1.4.1.7165.4.6.1.8.%d.""" % sub_oid + str(random.randint(1, 100000)) + """
attributeSyntax: 2.5.5.12
omSyntax: 64
instanceType: 4
isSingleValued: TRUE
systemOnly: FALSE
"""

if extra is not None:
            ldif += extra + "\n"

return ldif

def test_AddIndexedAttribute(self):
        # create names for an attribute to add
        (attr_name, attr_ldap_name, attr_dn) = self._make_obj_names("schemaAttributes-IdxAttr-")
        ldif = self._make_attr_ldif(attr_name, attr_dn, 1,
                                    "searchFlags: %d" % samba.dsdb.SEARCH_FLAG_ATTINDEX)

# add the new attribute
        self.samdb.add_ldif(ldif)
        self._ldap_schemaUpdateNow()

# Check @ATTRIBUTES

attr_res = self.samdb.search(base="@ATTRIBUTES", scope=ldb.SCOPE_BASE)

self.assertIn(attr_ldap_name, attr_res[0])
        self.assertEqual(len(attr_res[0][attr_ldap_name]), 1)
        self.assertEqual(str(attr_res[0][attr_ldap_name][0]), "CASE_INSENSITIVE")

# Check @INDEXLIST

idx_res = self.samdb.search(base="@INDEXLIST", scope=ldb.SCOPE_BASE)

self.assertIn(attr_ldap_name, [str(x) for x in idx_res[0]["@IDXATTR"]])

def test_AddUnIndexedAttribute(self):
        # create names for an attribute to add
        (attr_name, attr_ldap_name, attr_dn) = self._make_obj_names("schemaAttributes-UnIdxAttr-")
        ldif = self._make_attr_ldif(attr_name, attr_dn, 2)

# add the new attribute
        self.samdb.add_ldif(ldif)
        self._ldap_schemaUpdateNow()

# Check @ATTRIBUTES

attr_res = self.samdb.search(base="@ATTRIBUTES", scope=ldb.SCOPE_BASE)

self.assertIn(attr_ldap_name, attr_res[0])
        self.assertEqual(len(attr_res[0][attr_ldap_name]), 1)
        self.assertEqual(str(attr_res[0][attr_ldap_name][0]), "CASE_INSENSITIVE")

# Check @INDEXLIST

idx_res = self.samdb.search(base="@INDEXLIST", scope=ldb.SCOPE_BASE)

self.assertNotIn(attr_ldap_name, [str(x) for x in idx_res[0]["@IDXATTR"]])

def test_AddTwoIndexedAttributes(self):
        # create names for an attribute to add
        (attr_name, attr_ldap_name, attr_dn) = self._make_obj_names("schemaAttributes-2IdxAttr-")
        ldif = self._make_attr_ldif(attr_name, attr_dn, 3,
                                    "searchFlags: %d" % samba.dsdb.SEARCH_FLAG_ATTINDEX)

# add the new attribute
        self.samdb.add_ldif(ldif)
        self._ldap_schemaUpdateNow()

# create names for an attribute to add
        (attr_name2, attr_ldap_name2, attr_dn2) = self._make_obj_names("schemaAttributes-Attr-")
        ldif = self._make_attr_ldif(attr_name2, attr_dn2, 4,
                                    "searchFlags: %d" % samba.dsdb.SEARCH_FLAG_ATTINDEX)

# add the new attribute
        self.samdb.add_ldif(ldif)
        self._ldap_schemaUpdateNow()

# Check @ATTRIBUTES

attr_res = self.samdb.search(base="@ATTRIBUTES", scope=ldb.SCOPE_BASE)

self.assertIn(attr_ldap_name, attr_res[0])
        self.assertEqual(len(attr_res[0][attr_ldap_name]), 1)
        self.assertEqual(str(attr_res[0][attr_ldap_name][0]), "CASE_INSENSITIVE")

self.assertIn(attr_ldap_name2, attr_res[0])
        self.assertEqual(len(attr_res[0][attr_ldap_name2]), 1)
        self.assertEqual(str(attr_res[0][attr_ldap_name2][0]), "CASE_INSENSITIVE")

# Check @INDEXLIST

idx_res = self.samdb.search(base="@INDEXLIST", scope=ldb.SCOPE_BASE)

self.assertIn(attr_ldap_name, [str(x) for x in idx_res[0]["@IDXATTR"]])
        self.assertIn(attr_ldap_name2, [str(x) for x in idx_res[0]["@IDXATTR"]])

def test_modify_at_attributes(self):
        m = {"dn": "@ATTRIBUTES",
             "@TEST_EXTRA": ["HIDDEN"]
             }

msg = ldb.Message.from_dict(self.samdb, m, ldb.FLAG_MOD_ADD)
        self.samdb.modify(msg)

res = self.samdb.search(base="@ATTRIBUTES", scope=ldb.SCOPE_BASE,
                                attrs=["@TEST_EXTRA"])
        self.assertEqual(len(res), 1)
        self.assertEqual(str(res[0].dn), "@ATTRIBUTES")
        self.assertEqual(len(res[0]), 1)
        self.assertTrue("@TEST_EXTRA" in res[0])
        self.assertEqual(len(res[0]["@TEST_EXTRA"]), 1)
        self.assertEqual(str(res[0]["@TEST_EXTRA"][0]), "HIDDEN")

samdb2 = samba.tests.connect_samdb(self.lp.samdb_url())

# We now only update the @ATTRIBUTES when a transaction happens
        # rather than making a read of the DB do writes.
        #
        # This avoids locking issues and is more expected

samdb2.transaction_start()
        samdb2.transaction_commit()

res = self.samdb.search(base="@ATTRIBUTES", scope=ldb.SCOPE_BASE,
                                attrs=["@TEST_EXTRA"])
        self.assertEqual(len(res), 1)
        self.assertEqual(str(res[0].dn), "@ATTRIBUTES")
        self.assertEqual(len(res[0]), 0)
        self.assertFalse("@TEST_EXTRA" in res[0])

def test_modify_at_indexlist(self):
        m = {"dn": "@INDEXLIST",
             "@TEST_EXTRA": ["1"]
             }

msg = ldb.Message.from_dict(self.samdb, m, ldb.FLAG_MOD_ADD)
        self.samdb.modify(msg)

res = self.samdb.search(base="@INDEXLIST", scope=ldb.SCOPE_BASE,
                                attrs=["@TEST_EXTRA"])
        self.assertEqual(len(res), 1)
        self.assertEqual(str(res[0].dn), "@INDEXLIST")
        self.assertEqual(len(res[0]), 1)
        self.assertTrue("@TEST_EXTRA" in res[0])
        self.assertEqual(len(res[0]["@TEST_EXTRA"]), 1)
        self.assertEqual(str(res[0]["@TEST_EXTRA"][0]), "1")

samdb2 = samba.tests.connect_samdb(self.lp.samdb_url())

# We now only update the @INDEXLIST when a transaction happens
        # rather than making a read of the DB do writes.
        #
        # This avoids locking issues and is more expected

samdb2.transaction_start()
        samdb2.transaction_commit()

res = self.samdb.search(base="@INDEXLIST", scope=ldb.SCOPE_BASE,
                                attrs=["@TEST_EXTRA"])
        self.assertEqual(len(res), 1)
        self.assertEqual(str(res[0].dn), "@INDEXLIST")
        self.assertEqual(len(res[0]), 0)
        self.assertFalse("@TEST_EXTRA" in res[0])

def test_modify_fail_of_at_indexlist(self):
        m = {"dn": "@INDEXLIST",
             "@TEST_NOT_EXTRA": ["1"]
             }

msg = ldb.Message.from_dict(self.samdb, m, ldb.FLAG_MOD_DELETE)
        try:
            self.samdb.modify(msg)
            self.fail("modify of @INDEXLIST with a failed constraint should fail")
        except LdbError as err:
            enum = err.args[0]
            self.assertEqual(enum, ldb.ERR_NO_SUCH_ATTRIBUTE)