From: Andrew Bartlett Date: Sun, 26 May 2024 23:53:15 +0000 (+1200) Subject: selftest: Add test that msDS-ExpirePasswordsOnSmartCardOnlyAccounts=TRUE is set X-Git-Tag: tdb-1.4.11~399 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=dee3c7be5846ae7c0952b1ace94dee23241dc794;p=thirdparty%2Fsamba.git selftest: Add test that msDS-ExpirePasswordsOnSmartCardOnlyAccounts=TRUE is set This assures us that the new provision sets the value by default. Signed-off-by: Andrew Bartlett Reviewed-by: Jo Sutton --- diff --git a/python/samba/tests/dsdb_quiet_provision_tests.py b/python/samba/tests/dsdb_quiet_provision_tests.py index 81ef3ceb74f..a7c9fbec83e 100644 --- a/python/samba/tests/dsdb_quiet_provision_tests.py +++ b/python/samba/tests/dsdb_quiet_provision_tests.py @@ -67,3 +67,13 @@ class DsdbQuietProvisionTests(TestCase): expression=f"(&(objectClass = msKds-ProvRootKey)(msKds-UseStartTime<={min_use_start_time}))") self.assertGreater(len(res), 0) + + def test_dsdb_smartcard_expire_set(self): + """In provision we set msDS-ExpirePasswordsOnSmartCardOnlyAccounts: TRUE for a new 2016 provision + """ + dn = self.samdb.get_default_basedn() + res = self.samdb.search(dn, + scope=ldb.SCOPE_BASE, + expression="(msDS-ExpirePasswordsOnSmartCardOnlyAccounts=TRUE)") + + self.assertEqual(len(res), 1) diff --git a/selftest/knownfail.d/smartcard_expire b/selftest/knownfail.d/smartcard_expire new file mode 100644 index 00000000000..ac3821b94c4 --- /dev/null +++ b/selftest/knownfail.d/smartcard_expire @@ -0,0 +1 @@ +^samba.tests.dsdb_quiet_provision_tests.samba.tests.dsdb_quiet_provision_tests.DsdbQuietProvisionTests.test_dsdb_smartcard_expire_set \ No newline at end of file