CVE-2018-16857 tests: Sanity-check password lockout works with default values
authorTim Beale <timbeale@catalyst.net.nz>
Mon, 12 Nov 2018 22:49:56 +0000 (11:49 +1300)
committerKarolin Seeger <kseeger@samba.org>
Wed, 28 Nov 2018 07:22:25 +0000 (08:22 +0100)
commit77de8278e4b467b66a477c09945a9bcc6b08b194
treef0170541e024f47ed7fe1b568991c3d4a4454e8d
parent6ab51b2af90f5dca11b8587b2a16215ab4497069
CVE-2018-16857 tests: Sanity-check password lockout works with default values

Sanity-check that when we use the default lockOutObservationWindow that
user lockout actually works.

The easiest way to do this is to reuse the _test_login_lockout()
test-case, but stop at the point where we wait for the lockout duration
to expire (because we don't want the test to wait 30 mins).

This highlights a problem currently where the default values don't work.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13683

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
selftest/knownfail.d/password_lockout [new file with mode: 0644]
source4/dsdb/tests/python/password_lockout.py
source4/dsdb/tests/python/password_lockout_base.py