CVE-2019-14833: Use utf8 characters in the unacceptable password

This shows that the "check password script" handling has a bug.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12438
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/selftest/knownfail.d/unacceptable-passwords b/selftest/knownfail.d/unacceptable-passwords
new file mode 100644 (file)
index 0000000..75fa2fc
--- /dev/null
+++ b/selftest/knownfail.d/unacceptable-passwords
@@ -0,0 +1 @@
+^samba.tests.samba_tool.user_check_password_script.samba.tests.samba_tool.user_check_password_script.UserCheckPwdTestCase.test_checkpassword_unacceptable\(chgdcpass:local\)
\ No newline at end of file

diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm
index 9df9e84ff63e97b11e6d31f6b212f2d99a50fe0a..1310e2ff09f984622647720f0d082d74ba6e2a1e 100755 (executable)
--- a/selftest/target/Samba4.pm
+++ b/selftest/target/Samba4.pm
@@ -1882,7 +1882,7 @@ sub provision_chgdcpass($$)
        print "PROVISIONING CHGDCPASS...\n";
        # This environment disallows the use of this password
        # (and also removes the default AD complexity checks)
-       my $unacceptable_password = "widk3Dsle32jxdBdskldsk55klASKQ";
+       my $unacceptable_password = "Paßßword-widk3Dsle32jxdBdskldsk55klASKQ";
        my $extra_smb_conf = "
        check password script = $self->{srcdir}/selftest/checkpassword_arg1.sh ${unacceptable_password}
        allow dcerpc auth level connect:lsarpc = yes