s4:gensec/gssapi: use gensec_gssapi_max_{input,wrapped}_size() for all backends
[Samba.git] / python / samba / tests / security.py
blobd2938aacb02cd624104797f86546d157c6741787
1 # Unix SMB/CIFS implementation.
2 # Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007
4 # This program is free software; you can redistribute it and/or modify
5 # it under the terms of the GNU General Public License as published by
6 # the Free Software Foundation; either version 3 of the License, or
7 # (at your option) any later version.
9 # This program is distributed in the hope that it will be useful,
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 # GNU General Public License for more details.
14 # You should have received a copy of the GNU General Public License
15 # along with this program. If not, see <http://www.gnu.org/licenses/>.
18 """Tests for samba.dcerpc.security."""
20 import samba.tests
21 from samba.dcerpc import security
23 class SecurityTokenTests(samba.tests.TestCase):
25 def setUp(self):
26 super(SecurityTokenTests, self).setUp()
27 self.token = security.token()
29 def test_is_system(self):
30 self.assertFalse(self.token.is_system())
32 def test_is_anonymous(self):
33 self.assertFalse(self.token.is_anonymous())
35 def test_has_builtin_administrators(self):
36 self.assertFalse(self.token.has_builtin_administrators())
38 def test_has_nt_authenticated_users(self):
39 self.assertFalse(self.token.has_nt_authenticated_users())
41 def test_has_priv(self):
42 self.assertFalse(self.token.has_privilege(security.SEC_PRIV_SHUTDOWN))
44 def test_set_priv(self):
45 self.assertFalse(self.token.has_privilege(security.SEC_PRIV_SHUTDOWN))
46 self.assertFalse(self.token.set_privilege(security.SEC_PRIV_SHUTDOWN))
47 self.assertTrue(self.token.has_privilege(security.SEC_PRIV_SHUTDOWN))
50 class SecurityDescriptorTests(samba.tests.TestCase):
52 def setUp(self):
53 super(SecurityDescriptorTests, self).setUp()
54 self.descriptor = security.descriptor()
56 def test_from_sddl(self):
57 desc = security.descriptor.from_sddl("O:AOG:DAD:(A;;RPWPCCDCLCSWRCWDWOGA;;;S-1-0-0)", security.dom_sid("S-2-0-0"))
58 self.assertEquals(desc.group_sid, security.dom_sid('S-2-0-0-512'))
59 self.assertEquals(desc.owner_sid, security.dom_sid('S-1-5-32-548'))
60 self.assertEquals(desc.revision, 1)
61 self.assertEquals(desc.sacl, None)
62 self.assertEquals(desc.type, 0x8004)
64 def test_from_sddl_invalidsddl(self):
65 self.assertRaises(TypeError,security.descriptor.from_sddl, "foo",security.dom_sid("S-2-0-0"))
67 def test_from_sddl_invalidtype1(self):
68 self.assertRaises(TypeError, security.descriptor.from_sddl, security.dom_sid('S-2-0-0-512'),security.dom_sid("S-2-0-0"))
70 def test_from_sddl_invalidtype2(self):
71 sddl = "O:AOG:DAD:(A;;RPWPCCDCLCSWRCWDWOGA;;;S-1-0-0)"
72 self.assertRaises(TypeError, security.descriptor.from_sddl, sddl,
73 "S-2-0-0")
75 def test_as_sddl(self):
76 text = "O:AOG:DAD:(A;;RPWPCCDCLCSWRCWDWOGA;;;S-1-0-0)"
77 dom = security.dom_sid("S-2-0-0")
78 desc1 = security.descriptor.from_sddl(text, dom)
79 desc2 = security.descriptor.from_sddl(desc1.as_sddl(dom), dom)
80 self.assertEquals(desc1.group_sid, desc2.group_sid)
81 self.assertEquals(desc1.owner_sid, desc2.owner_sid)
82 self.assertEquals(desc1.sacl, desc2.sacl)
83 self.assertEquals(desc1.type, desc2.type)
85 def test_as_sddl_invalid(self):
86 text = "O:AOG:DAD:(A;;RPWPCCDCLCSWRCWDWOGA;;;S-1-0-0)"
87 dom = security.dom_sid("S-2-0-0")
88 desc1 = security.descriptor.from_sddl(text, dom)
89 self.assertRaises(TypeError, desc1.as_sddl,text)
92 def test_as_sddl_no_domainsid(self):
93 dom = security.dom_sid("S-2-0-0")
94 text = "O:AOG:DAD:(A;;RPWPCCDCLCSWRCWDWOGA;;;S-1-0-0)"
95 desc1 = security.descriptor.from_sddl(text, dom)
96 desc2 = security.descriptor.from_sddl(desc1.as_sddl(), dom)
97 self.assertEquals(desc1.group_sid, desc2.group_sid)
98 self.assertEquals(desc1.owner_sid, desc2.owner_sid)
99 self.assertEquals(desc1.sacl, desc2.sacl)
100 self.assertEquals(desc1.type, desc2.type)
102 def test_domsid_nodomsid_as_sddl(self):
103 dom = security.dom_sid("S-2-0-0")
104 text = "O:AOG:DAD:(A;;RPWPCCDCLCSWRCWDWOGA;;;S-1-0-0)"
105 desc1 = security.descriptor.from_sddl(text, dom)
106 self.assertNotEqual(desc1.as_sddl(), desc1.as_sddl(dom))
108 def test_split(self):
109 dom = security.dom_sid("S-2-0-7")
110 self.assertEquals((security.dom_sid("S-2-0"), 7), dom.split())
113 class DomSidTests(samba.tests.TestCase):
115 def test_parse_sid(self):
116 sid = security.dom_sid("S-1-5-21")
117 self.assertEquals("S-1-5-21", str(sid))
119 def test_sid_equal(self):
120 sid1 = security.dom_sid("S-1-5-21")
121 sid2 = security.dom_sid("S-1-5-21")
122 self.assertEquals(sid1, sid1)
123 self.assertEquals(sid1, sid2)
125 def test_random(self):
126 sid = security.random_sid()
127 self.assertTrue(str(sid).startswith("S-1-5-21-"))
129 def test_repr(self):
130 sid = security.random_sid()
131 self.assertTrue(repr(sid).startswith("dom_sid('S-1-5-21-"))
134 class PrivilegeTests(samba.tests.TestCase):
136 def test_privilege_name(self):
137 self.assertEquals("SeShutdownPrivilege",
138 security.privilege_name(security.SEC_PRIV_SHUTDOWN))
140 def test_privilege_id(self):
141 self.assertEquals(security.SEC_PRIV_SHUTDOWN,
142 security.privilege_id("SeShutdownPrivilege"))