From: Jo Sutton <josutton@catalyst.net.nz>
Date: Tue, 12 Mar 2024 03:24:59 +0000 (+1300)
Subject: python:tests: Use Managed Service Accounts well‐known GUID
X-Git-Tag: tdb-1.4.11~1394
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=86db3056177115a2b443a8b4c6ff8b2b6086d2c8;p=thirdparty%2Fsamba.git

python:tests: Use Managed Service Accounts well‐known GUID

Signed-off-by: Jo Sutton <josutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/python/samba/tests/dckeytab.py b/python/samba/tests/dckeytab.py
index f87b95d9dc5..339190ec3ad 100644
--- a/python/samba/tests/dckeytab.py
+++ b/python/samba/tests/dckeytab.py
@@ -22,7 +22,7 @@ import string
 from samba.net import Net
 from samba import enable_net_export_keytab
 
-from samba import credentials, ntstatus, NTSTATUSError, tests
+from samba import credentials, dsdb, ntstatus, NTSTATUSError, tests
 from samba.dcerpc import krb5ccache, security
 from samba.dsdb import UF_WORKSTATION_TRUST_ACCOUNT
 from samba.ndr import ndr_unpack, ndr_pack
@@ -345,7 +345,10 @@ class DCKeytabTests(TestCaseInTempDir):
         # Create gMSA account
         gmsa_username = "GMSA_K5KeytabTest$"
         gmsa_principal = f"{gmsa_username}@{self.samdb.domain_dns_name().upper()}"
-        gmsa_base_dn = f"CN=Managed Service Accounts,{self.samdb.domain_dn()}"
+        gmsa_base_dn = self.samdb.get_wellknown_dn(
+            self.samdb.get_default_basedn(),
+            dsdb.DS_GUID_MANAGED_SERVICE_ACCOUNTS_CONTAINER,
+        )
         gmsa_user_dn = f"CN={gmsa_username},{gmsa_base_dn}"
 
         msg = self.samdb.search(base="", scope=SCOPE_BASE, attrs=["tokenGroups"])[0]