1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
# -*- coding: utf-8 -*-
# Copyright: (c) 2020, Jordan Borean (@jborean93) <jborean93@gmail.com>
# MIT License (see LICENSE or https://opensource.org/licenses/MIT)
import pytest
import spnego
import spnego._gss
from spnego._context import GSSMech
from spnego._negotiate import NegotiateProxy
from spnego._spnego import NegState, NegTokenInit, NegTokenResp
from spnego.exceptions import BadMechanismError, InvalidTokenError
def test_token_rejected(ntlm_cred):
c = spnego.client(ntlm_cred[0], ntlm_cred[1], options=spnego.NegotiateOptions.use_negotiate)
c.step()
token_resp = NegTokenResp(neg_state=NegState.reject).pack()
with pytest.raises(InvalidTokenError, match="Received SPNEGO rejection with no token error message"):
c.step(token_resp)
def test_token_invalid_input(ntlm_cred):
c = spnego.client(ntlm_cred[0], ntlm_cred[1], options=spnego.NegotiateOptions.use_negotiate)
c.step()
with pytest.raises(InvalidTokenError, match="Failed to unpack input token"):
c.step(b"\x00")
def test_token_no_common_mechs(ntlm_cred):
c = spnego.client(ntlm_cred[0], ntlm_cred[1], options=spnego.NegotiateOptions.use_negotiate)
with pytest.raises(BadMechanismError, match="Unable to negotiate common mechanism"):
c.step(NegTokenInit(mech_types=["1.2.3.4"]).pack())
def test_token_acceptor_first(ntlm_cred):
c = spnego.client(ntlm_cred[0], ntlm_cred[1], options=spnego.NegotiateOptions.use_negotiate)
s = spnego.server(options=spnego.NegotiateOptions.use_negotiate)
assert getattr(c, "_mech_list", None) == []
assert getattr(s, "_mech_list", None) == []
token1 = s.step()
assert isinstance(token1, bytes)
assert not c.complete
assert not s.complete
assert getattr(c, "_mech_list", None) == []
assert GSSMech.ntlm.value in getattr(s, "_mech_list", [])
negotiate = c.step(token1)
assert isinstance(negotiate, bytes)
assert not c.complete
assert not s.complete
assert getattr(c, "_mech_list", None) == [GSSMech.ntlm.value]
assert GSSMech.ntlm.value in getattr(s, "_mech_list", [])
challenge = s.step(negotiate)
assert isinstance(challenge, bytes)
assert not c.complete
assert not s.complete
authenticate = c.step(challenge)
assert isinstance(authenticate, bytes)
assert not c.complete
assert not s.complete
mech_list_mic = s.step(authenticate)
assert isinstance(mech_list_mic, bytes)
assert not c.complete
assert s.complete
final_token = c.step(mech_list_mic)
assert final_token is None
assert c.complete
assert s.complete
@pytest.mark.skipif("ntlm" not in spnego._sspi.SSPIProxy.available_protocols(), reason="Requires SSPI library")
def test_iov_available_sspi():
assert NegotiateProxy.iov_available()
@pytest.mark.skipif(not spnego._gss.HAS_GSSAPI, reason="Requires the gssapi library to be installed for testing")
def test_iov_available_gssapi():
assert NegotiateProxy.iov_available() == spnego._gss.GSSAPIProxy.iov_available()
|
