source4/scripting/python/samba/torture/torture_samr.py

   1 #!/usr/bin/python
   2
   3 import dcerpc, samr
   4
   5 def test_Connect(pipe):
   6
   7     handle = samr.Connect(pipe)
   8     handle = samr.Connect2(pipe)
   9     handle = samr.Connect3(pipe)
  10     handle = samr.Connect4(pipe)
  11
  12     # WIN2K3 only?
  13
  14     try:
  15         handle = samr.Connect5(pipe)
  16     except dcerpc.NTSTATUS, arg:
  17         if arg[0] != 0xc00000d2L:       # NT_STATUS_NET_WRITE_FAULT
  18             raise
  19
  20     return handle
  21
  22 def test_UserHandle(user_handle):
  23
  24     # QuerySecurity()/SetSecurity()
  25
  26     user_handle.SetSecurity(user_handle.QuerySecurity())
  27
  28     # GetUserPwInfo()
  29
  30     user_handle.GetUserPwInfo()
  31
  32     # GetUserInfo()
  33
  34     for level in [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 16, 17, 20,
  35                   21, 23, 24, 25, 26]:
  36
  37         try:
  38             user_handle.QueryUserInfo(level)
  39             user_handle.QueryUserInfo2(level)
  40         except dcerpc.NTSTATUS, arg:
  41             if arg[0] != 0xc0000003L:   # NT_STATUS_INVALID_INFO_CLASS
  42                 raise
  43
  44     # GetGroupsForUser()
  45
  46     user_handle.GetGroupsForUser()
  47
  48     # TestPrivateFunctionsUser()
  49
  50     try:
  51         user_handle.TestPrivateFunctionsUser()
  52     except dcerpc.NTSTATUS, arg:
  53         if arg[0] != 0xC0000002L:
  54             raise
  55
  56 def test_GroupHandle(group_handle):
  57
  58     # QuerySecurity()/SetSecurity()
  59
  60     group_handle.SetSecurity(group_handle.QuerySecurity())
  61
  62     # QueryGroupInfo()
  63
  64     for level in [1, 2, 3, 4, 5]:
  65         info = group_handle.QueryGroupInfo(level)
  66
  67     # TODO: SetGroupinfo()
  68
  69     # QueryGroupMember()
  70
  71     group_handle.QueryGroupMember()
  72
  73 def test_AliasHandle(alias_handle):
  74
  75     # QuerySecurity()/SetSecurity()
  76
  77     alias_handle.SetSecurity(alias_handle.QuerySecurity())
  78
  79     print alias_handle.GetMembersInAlias()
  80
  81 def test_DomainHandle(name, sid, domain_handle):
  82
  83     print 'testing %s (%s)' % (name, sid)
  84
  85     # QuerySecurity()/SetSecurity()
  86
  87     domain_handle.SetSecurity(domain_handle.QuerySecurity())
  88
  89     # LookupNames(), none mapped
  90
  91     try:
  92         domain_handle.LookupNames(['xxNONAMExx'])
  93     except dcerpc.NTSTATUS, arg:
  94         if arg[0] != 0xc0000073L:
  95             raise dcerpc.NTSTATUS(arg)
  96
  97     # LookupNames(), some mapped
  98
  99     if name != 'Builtin':
 100         domain_handle.LookupNames(['Administrator', 'xxNONAMExx'])
 101
 102     # QueryDomainInfo()/SetDomainInfo()
 103
 104     levels = [1, 2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13]
 105     set_ok = [1, 0, 1, 1, 0, 1, 1, 0, 1,  0,  1,  0]
 106
 107     for i in range(len(levels)):
 108
 109         info = domain_handle.QueryDomainInfo(level = levels[i])
 110
 111         try:
 112             domain_handle.SetDomainInfo(levels[i], info)
 113         except dcerpc.NTSTATUS, arg:
 114             if not (arg[0] == 0xc0000003L and not set_ok[i]):
 115                 raise
 116
 117     # QueryDomainInfo2()
 118
 119     levels = [1, 2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13]
 120
 121     for i in range(len(levels)):
 122         domain_handle.QueryDomainInfo2(level = levels[i])
 123
 124     # EnumDomainUsers
 125
 126     print 'testing users'
 127
 128     users = domain_handle.EnumDomainUsers()
 129     rids = domain_handle.LookupNames(users)
 130
 131     for i in range(len(users)):
 132         test_UserHandle(domain_handle.OpenUser(rids[0][i]))
 133
 134     # QueryDisplayInfo
 135
 136     for i in [1, 2, 3, 4, 5]:
 137         domain_handle.QueryDisplayInfo(level = i)
 138         domain_handle.QueryDisplayInfo2(level = i)
 139         domain_handle.QueryDisplayInfo3(level = i)
 140
 141     # EnumDomainGroups
 142
 143     print 'testing groups'
 144
 145     groups = domain_handle.EnumDomainGroups()
 146     rids = domain_handle.LookupNames(groups)
 147
 148     for i in range(len(groups)):
 149         test_GroupHandle(domain_handle.OpenGroup(rids[0][i]))
 150
 151     # EnumDomainAliases
 152
 153     print 'testing aliases'
 154
 155     aliases = domain_handle.EnumDomainAliases()
 156     rids = domain_handle.LookupNames(aliases)
 157
 158     for i in range(len(aliases)):
 159         test_AliasHandle(domain_handle.OpenAlias(rids[0][i]))
 160
 161     # CreateUser
 162     # CreateUser2
 163     # CreateDomAlias
 164     # RidToSid
 165     # RemoveMemberFromForeignDomain
 166     # CreateDomainGroup
 167     # GetAliasMembership
 168
 169     # GetBootKeyInformation()
 170
 171     try:
 172         domain_handle.GetBootKeyInformation()
 173     except dcerpc.NTSTATUS, arg:
 174         pass
 175
 176     # TestPrivateFunctionsDomain()
 177
 178     try:
 179         domain_handle.TestPrivateFunctionsDomain()
 180     except dcerpc.NTSTATUS, arg:
 181         if arg[0] != 0xC0000002L:
 182             raise
 183
 184 def test_ConnectHandle(connect_handle):
 185
 186     print 'testing connect handle'
 187
 188     # QuerySecurity/SetSecurity
 189
 190     connect_handle.SetSecurity(connect_handle.QuerySecurity())
 191
 192     # Lookup bogus domain
 193
 194     try:
 195         connect_handle.LookupDomain('xxNODOMAINxx')
 196     except dcerpc.NTSTATUS, arg:
 197         if arg[0] != 0xC00000DFL:          # NT_STATUS_NO_SUCH_DOMAIN
 198             raise
 199
 200     # Test all domains
 201
 202     for domain_name in connect_handle.EnumDomains():
 203
 204         connect_handle.GetDomPwInfo(domain_name)
 205         sid = connect_handle.LookupDomain(domain_name)
 206         domain_handle = connect_handle.OpenDomain(sid)
 207
 208         test_DomainHandle(domain_name, sid, domain_handle)
 209
 210     # TODO: Test Shutdown() function
 211
 212 def runtests(binding, creds):
 213
 214     print 'Testing SAMR pipe'
 215
 216     pipe = dcerpc.pipe_connect(binding,
 217             dcerpc.DCERPC_SAMR_UUID, int(dcerpc.DCERPC_SAMR_VERSION), creds)
 218
 219     handle = test_Connect(pipe)
 220     test_ConnectHandle(handle)