2 # This script generates a list of testsuites that should be run as part of
3 # the Samba 4 test suite.
5 # The output of this script is parsed by selftest.pl, which then decides
6 # which of the tests to actually run. It will, for example, skip all tests
7 # listed in selftest/skip or only run a subset during "make quicktest".
9 # The idea is that this script outputs all of the tests of Samba 4, not
10 # just those that are known to pass, and list those that should be skipped
11 # or are known to fail in selftest/skip or selftest/knownfail. This makes it
12 # very easy to see what functionality is still missing in Samba 4 and makes
13 # it possible to run the testsuite against other servers, such as Samba 3 or
14 # Windows that have a different set of features.
16 # The syntax for a testsuite is "-- TEST --" on a single line, followed
17 # by the name of the test, the environment it needs and the command to run, all
18 # three separated by newlines. All other lines in the output are considered
22 sys
.path
.insert(0, os
.path
.join(os
.path
.dirname(__file__
), "../../selftest"))
23 import selftesthelpers
24 from selftesthelpers
import *
26 print >>sys
.stderr
, "OPTIONS %s" % " ".join(smbtorture4_options
)
28 def plansmbtorture4testsuite(name
, env
, options
, modname
=None):
29 return selftesthelpers
.plansmbtorture4testsuite(name
, env
, options
,
30 target
='samba4', modname
=modname
)
32 samba4srcdir
= source4dir()
33 samba4bindir
= bindir()
34 validate
= os
.getenv("VALIDATE", "")
36 validate_list
= [validate
]
40 nmblookup4
= binpath('nmblookup4')
41 smbclient4
= binpath('smbclient4')
43 bbdir
= os
.path
.join(srcdir(), "testprogs/blackbox")
45 # Simple tests for LDAP and CLDAP
46 for auth_type
in ['', '-k no', '-k yes']:
47 for auth_level
in ['--option=clientldapsaslwrapping=plain', '--sign', '--encrypt']:
48 creds
= '-U"$USERNAME%$PASSWORD"'
49 options
= creds
+ ' ' + auth_type
+ ' ' + auth_level
50 plantestsuite("samba4.ldb.ldap with options %r(ad_dc_ntvfs)" % options
, "ad_dc_ntvfs", "%s/test_ldb.sh ldap $SERVER %s" % (bbdir
, options
))
52 # see if we support ADS on the Samba3 side
54 config_h
= os
.environ
["CONFIG_H"]
56 config_h
= os
.path
.join(samba4bindir
, "default/include/config.h")
58 # check available features
60 f
= open(config_h
, 'r')
63 config_hash
= dict((x
[0], ' '.join(x
[1:]))
64 for x
in map(lambda line
: line
.strip().split(' ')[1:],
65 filter(lambda line
: (line
[0:7] == '#define') and (len(line
.split(' ')) > 2), lines
)))
69 have_tls_support
= ("ENABLE_GNUTLS" in config_hash
)
70 have_heimdal_support
= ("SAMBA4_USES_HEIMDAL" in config_hash
)
73 for options
in ['-U"$USERNAME%$PASSWORD"']:
74 plantestsuite("samba4.ldb.ldaps with options %s(ad_dc_ntvfs)" % options
, "ad_dc_ntvfs",
75 "%s/test_ldb.sh ldaps $SERVER_IP %s" % (bbdir
, options
))
78 '--simple-bind-dn=$USERNAME@$REALM --password=$PASSWORD',
81 'SERVER_IP': '$SERVER_IP',
82 'SERVER_NAME': '$SERVER',
83 'SERVER.REALM': '$SERVER.$REALM',
85 tls_verify_options
= [
86 '--option="tlsverifypeer=no_check"',
87 '--option="tlsverifypeer=ca_only"',
88 '--option="tlsverifypeer=ca_and_name_if_available"',
89 '--option="tlsverifypeer=ca_and_name"',
90 '--option="tlsverifypeer=as_strict_as_possible"',
93 # we use :local for fl2008r2dc because of the self-signed certificate
94 for env
in ["ad_dc_ntvfs", "fl2008r2dc:local"]:
95 for peer_key
in peer_options
.keys():
96 peer_val
= peer_options
[peer_key
]
97 for creds
in creds_options
:
98 for tls_verify
in tls_verify_options
:
99 options
= creds
+ ' ' + tls_verify
100 plantestsuite("samba4.ldb.simple.ldaps with options %s %s(%s)" % (
101 peer_key
, options
, env
), env
,
102 "%s/test_ldb_simple.sh ldaps %s %s" % (bbdir
, peer_val
, options
))
104 # test all "ldap server require strong auth" combinations
105 for env
in ["ad_dc_ntvfs", "fl2008r2dc", "fl2003dc"]:
106 options
= '--simple-bind-dn="$USERNAME@$REALM" --password="$PASSWORD"'
107 plantestsuite("samba4.ldb.simple.ldap with SIMPLE-BIND %s(%s)" % (options
, env
),
108 env
, "%s/test_ldb_simple.sh ldap $SERVER %s" % (bbdir
, options
))
110 options
+= ' --option="tlsverifypeer=no_check"'
111 plantestsuite("samba4.ldb.simple.ldaps with SIMPLE-BIND %s(%s)" % (options
, env
),
112 env
, "%s/test_ldb_simple.sh ldaps $SERVER %s" % (bbdir
, options
))
115 '--option=clientldapsaslwrapping=plain',
120 for auth_option
in auth_options
:
121 options
= '-U"$USERNAME%$PASSWORD"' + ' ' + auth_option
122 plantestsuite("samba4.ldb.simple.ldap with SASL-BIND %s(%s)" % (options
, env
),
123 env
, "%s/test_ldb_simple.sh ldap $SERVER %s" % (bbdir
, options
))
125 options
= '-U"$USERNAME%$PASSWORD" --option="tlsverifypeer=no_check"'
126 plantestsuite("samba4.ldb.simple.ldaps with SASL-BIND %s(%s)" % (options
, env
),
127 env
, "%s/test_ldb_simple.sh ldaps $SERVER %s" % (bbdir
, options
))
129 for options
in ['-U"$USERNAME%$PASSWORD"']:
130 plantestsuite("samba4.ldb.ldapi with options %s(ad_dc_ntvfs:local)" % options
, "ad_dc_ntvfs:local",
131 "%s/test_ldb.sh ldapi $PREFIX_ABS/ad_dc_ntvfs/private/ldapi %s" % (bbdir
, options
))
133 for t
in smbtorture4_testsuites("ldap."):
134 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '-U"$USERNAME%$PASSWORD" //$SERVER_IP/_none_')
136 ldbdir
= os
.path
.join(srcdir(), "lib/ldb")
137 # Don't run LDB tests when using system ldb, as we won't have ldbtest installed
138 if os
.path
.exists(os
.path
.join(samba4bindir
, "ldbtest")):
139 plantestsuite("ldb.base", "none", "%s/tests/test-tdb-subunit.sh %s" % (ldbdir
, samba4bindir
))
141 skiptestsuite("ldb.base", "Using system LDB, ldbtest not available")
145 # add tests to this list as they start passing, so we test
146 # that they stay passing
147 ncacn_np_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.altercontext", "rpc.netlogon", "rpc.netlogon.admin", "rpc.handles", "rpc.samsync", "rpc.samba3-sessionkey", "rpc.samba3-getusername", "rpc.samba3-lsa", "rpc.samba3-bind", "rpc.samba3-netlogon", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext"]
148 ncalrpc_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.altercontext", "rpc.netlogon", "rpc.netlogon.admin", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext"]
149 drs_rpc_tests
= smbtorture4_testsuites("drs.rpc")
150 ncacn_ip_tcp_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.drsuapi", "rpc.drsuapi_w2k8", "rpc.netlogon", "rpc.netlogon.admin", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext", "rpc.samr.passwords.validate"] + drs_rpc_tests
151 slow_ncacn_np_tests
= ["rpc.samlogon", "rpc.samr", "rpc.samr.users", "rpc.samr.large-dc", "rpc.samr.users.privileges", "rpc.samr.passwords", "rpc.samr.passwords.pwdlastset", "rpc.samr.passwords.lockout", "rpc.samr.passwords.badpwdcount"]
152 slow_ncacn_ip_tcp_tests
= ["rpc.cracknames"]
154 all_rpc_tests
= ncalrpc_tests
+ ncacn_np_tests
+ ncacn_ip_tcp_tests
+ slow_ncacn_np_tests
+ slow_ncacn_ip_tcp_tests
+ ["rpc.lsa.secrets", "rpc.pac", "rpc.samba3-sharesec", "rpc.countcalls"]
156 # Make sure all tests get run
157 rpc_tests
= smbtorture4_testsuites("rpc.")
158 auto_rpc_tests
= filter(lambda t
: t
not in all_rpc_tests
, rpc_tests
)
160 for bindoptions
in ["seal,padcheck"] + validate_list
+ ["bigendian"]:
161 for transport
in ["ncalrpc", "ncacn_np", "ncacn_ip_tcp"]:
163 if transport
== "ncalrpc":
164 tests
= ncalrpc_tests
165 env
= "ad_dc_ntvfs:local"
166 elif transport
== "ncacn_np":
167 tests
= ncacn_np_tests
168 elif transport
== "ncacn_ip_tcp":
169 tests
= ncacn_ip_tcp_tests
171 raise AssertionError("invalid transport %r"% transport
)
173 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s on %s with %s" % (t
, transport
, bindoptions
))
174 plansmbtorture4testsuite('rpc.samba3-sharesec', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=torture:share=tmp'], "samba4.rpc.samba3.sharesec on %s with %s" % (transport
, bindoptions
))
176 #Plugin S4 DC tests (confirms named pipe auth forwarding). This can be expanded once kerberos is supported in the plugin DC
178 for bindoptions
in ["seal,padcheck"] + validate_list
+ ["bigendian"]:
179 for t
in ncacn_np_tests
:
181 transport
= "ncacn_np"
182 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s with %s" % (t
, bindoptions
))
184 for bindoptions
in [""] + validate_list
+ ["bigendian"]:
185 for t
in auto_rpc_tests
:
186 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ["$SERVER[%s]" % bindoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s with %s" % (t
, bindoptions
))
189 plansmbtorture4testsuite(t
, "ad_dc_ntvfs:local", ["$SERVER[%s]" % bindoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.%s" % t
)
191 for transport
in ["ncacn_np", "ncacn_ip_tcp"]:
193 if transport
== "ncacn_np":
194 tests
= slow_ncacn_np_tests
195 elif transport
== "ncacn_ip_tcp":
196 tests
= slow_ncacn_ip_tcp_tests
198 raise AssertionError("Invalid transport %r" % transport
)
201 if t
== 'rpc.cracknames':
203 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
,bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s on %s with %s" % (t
, transport
, bindoptions
))
205 # Tests for the DFS referral calls implementation
206 for t
in smbtorture4_testsuites("dfs."):
207 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
208 plansmbtorture4testsuite(t
, "ad_dc", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
210 # Tests for the NET API (net.api.become.dc tested below against all the roles)
211 net_tests
= filter(lambda x
: "net.api.become.dc" not in x
, smbtorture4_testsuites("net."))
213 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '$SERVER[%s] -U$USERNAME%%$PASSWORD -W$DOMAIN' % validate
)
215 # Tests for session keys and encryption of RPC pipes
216 # FIXME: Integrate these into a single smbtorture test
218 transport
= "ncacn_np"
219 for env
in ["ad_dc_ntvfs", "nt4_dc"]:
221 "-k no --option=usespnego=yes",
222 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no",
223 "-k no --option=usespnego=yes --option=ntlmssp_client:56bit=yes",
224 "-k no --option=usespnego=yes --option=ntlmssp_client:56bit=no",
225 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=yes",
226 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=no",
227 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes",
228 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no",
229 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=yes",
230 "-k no --option=usespnego=no --option=clientntlmv2auth=yes",
231 "-k no --option=gensec:spnego=no --option=clientntlmv2auth=yes",
232 "-k no --option=usespnego=no"]:
233 name
= "rpc.lsa.secrets on %s with with %s" % (transport
, ntlmoptions
)
234 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
), ntlmoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.%s" % name
)
235 plantestsuite("samba.blackbox.pdbtest(%s)" % env
, "%s:local" % env
, [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest", smbclient4
, '$SMB_CONF_PATH', configuration
])
236 plantestsuite("samba.blackbox.pdbtest.winbind(%s)" % env
, "%s:local" % env
, [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest2", smbclient4
, '$SMB_CONF_PATH', configuration
+ " --option='authmethods=wbc'"])
238 plantestsuite("samba.blackbox.pdbtest.s4winbind(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest3", smbclient4
, '$SMB_CONF_PATH', configuration
+ " --option='authmethods=samba4:winbind'"])
239 plantestsuite("samba.blackbox.pdbtest.s4winbind_wbclient(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest4", smbclient4
, '$SMB_CONF_PATH', configuration
+ " --option='authmethods=samba4:winbind_wbclient'"])
241 transports
= ["ncacn_np", "ncacn_ip_tcp"]
243 #Kerberos varies between functional levels, so it is important to check this on all of them
244 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc", "ad_dc"]:
245 transport
= "ncacn_np"
246 plansmbtorture4testsuite('rpc.pac', env
, ["%s:$SERVER[]" % (transport
, ), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.pac on %s" % (transport
,))
247 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=gensec:target_hostname=$NETBIOSNAME', 'rpc.lsa.secrets'], "samba4.rpc.lsa.secrets on %s with Kerberos" % (transport
,))
248 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=clientusespnegoprincipal=yes", '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use target principal" % (transport
,))
249 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=dcom/$NETBIOSNAME]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal dcom" % (transport
,))
250 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=$NETBIOSNAME\$]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal dollar" % (transport
,))
251 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=$NETBIOSNAME]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal" % (transport
,))
252 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=gensec:fake_gssapi_krb5=yes", '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use Samba3 style login" % transport
)
253 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=gensec:fake_gssapi_krb5=yes", '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME', '--option=gensec_krb5:send_authenticator_checksum=false'], "samba4.rpc.lsa.secrets on %s with Kerberos - use raw-krb5-no-authenticator-checksum style login" % transport
)
254 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=clientusespnegoprincipal=yes", '--option=gensec:fake_gssapi_krb5=yes', '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use Samba3 style login, use target principal" % transport
)
256 # Winreg tests test bulk Kerberos encryption of DCE/RPC
257 # We test rpc.winreg here too, because the winreg interface if
258 # handled by the source3/rpc_server code.
259 for bindoptions
in ["connect", "krb5", "krb5,sign", "krb5,seal", "spnego", "spnego,sign", "spnego,seal"]:
260 plansmbtorture4testsuite('rpc.winreg', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.winreg on %s with %s" % (transport
, bindoptions
))
262 for transport
in transports
:
263 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[]" % (transport
,), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s" % (transport
, ))
265 # Echo tests test bulk Kerberos encryption of DCE/RPC
266 for bindoptions
in ["connect", "krb5", "krb5,sign", "krb5,seal", "spnego", "spnego,sign", "spnego,seal"] + validate_list
+ ["padcheck", "bigendian", "bigendian,seal"]:
267 echooptions
= "--option=socket:testnonblock=True --option=torture:quick=yes -k yes"
268 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), echooptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s with %s and %s" % (transport
, bindoptions
, echooptions
))
269 plansmbtorture4testsuite("net.api.become.dc", env
, '$SERVER[%s] -U$USERNAME%%$PASSWORD -W$DOMAIN' % validate
)
271 for bindoptions
in ["sign", "seal"]:
272 plansmbtorture4testsuite('rpc.backupkey', "ad_dc_ntvfs", ["ncacn_np:$SERVER[%s]" % ( bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.backupkey with %s" % (bindoptions
))
274 for transport
in transports
:
275 for bindoptions
in ["sign", "seal"]:
277 "--option=ntlmssp_client:ntlm2=yes --option=torture:quick=yes",
278 "--option=ntlmssp_client:ntlm2=no --option=torture:quick=yes",
279 "--option=ntlmssp_client:ntlm2=yes --option=ntlmssp_client:128bit=no --option=torture:quick=yes",
280 "--option=ntlmssp_client:ntlm2=no --option=ntlmssp_client:128bit=no --option=torture:quick=yes",
281 "--option=ntlmssp_client:ntlm2=yes --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
282 "--option=ntlmssp_client:ntlm2=no --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
283 "--option=clientntlmv2auth=yes --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
284 "--option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:keyexchange=yes --option=torture:quick=yes",
285 "--option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes"]:
286 if transport
== "ncalrpc":
287 env
= "ad_dc_ntvfs:local"
290 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), ntlmoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s with %s and %s" % (transport
, bindoptions
, ntlmoptions
))
292 plansmbtorture4testsuite('rpc.echo', "ad_dc_ntvfs", ['ncacn_np:$SERVER[smb2]', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on ncacn_np over smb2")
294 plansmbtorture4testsuite('ntp.signd', "ad_dc_ntvfs:local", ['ncacn_np:$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.ntp.signd")
296 nbt_tests
= smbtorture4_testsuites("nbt.")
298 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", "//$SERVER/_none_ -U\"$USERNAME%$PASSWORD\"")
300 # Tests against the NTVFS POSIX backend
301 ntvfsargs
= ["--option=torture:sharedelay=100000", "--option=torture:oplocktimeout=3", "--option=torture:writetimeupdatedelay=500000"]
303 # smb2.change_notify_disabled must only run against env fileserver-notify-disabled
304 smb2
= filter(lambda x
: "smb2.change_notify_disabled" not in x
, smbtorture4_testsuites("smb2."))
306 #The QFILEINFO-IPC test needs to be on ipc$
307 raw
= filter(lambda x
: "raw.qfileinfo.ipc" not in x
, smbtorture4_testsuites("raw."))
308 base
= smbtorture4_testsuites("base.")
310 netapi
= smbtorture4_testsuites("netapi.")
312 libsmbclient
= smbtorture4_testsuites("libsmbclient.")
314 for t
in base
+ raw
+ smb2
+ netapi
+ libsmbclient
:
315 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$SERVER/tmp', '-U$USERNAME%$PASSWORD'] + ntvfsargs
)
317 plansmbtorture4testsuite("raw.qfileinfo.ipc", "ad_dc_ntvfs", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
319 for t
in smbtorture4_testsuites("rap."):
320 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '//$SERVER/IPC\$ -U$USERNAME%$PASSWORD')
322 # Tests against the NTVFS CIFS backend
324 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$NETBIOSNAME/cifs', '-U$USERNAME%$PASSWORD', '--kerberos=yes'] + ntvfsargs
, modname
="samba4.ntvfs.cifs.krb5.%s" % t
)
326 # Test NTVFS CIFS backend with S4U2Self and S4U2Proxy
328 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$NETBIOSNAME/cifs', '-U$USERNAME%$PASSWORD', '--kerberos=no'] + ntvfsargs
, "samba4.ntvfs.cifs.ntlm.%s" % t
)
329 plansmbtorture4testsuite(t
, "rpc_proxy", ['//$NETBIOSNAME/cifs_to_dc', '-U$DC_USERNAME%$DC_PASSWORD', '--kerberos=yes'] + ntvfsargs
, "samba4.ntvfs.cifs.krb5.%s" % t
)
330 plansmbtorture4testsuite(t
, "rpc_proxy", ['//$NETBIOSNAME/cifs_to_dc', '-U$DC_USERNAME%$DC_PASSWORD', '--kerberos=no'] + ntvfsargs
, "samba4.ntvfs.cifs.ntlm.%s" % t
)
332 plansmbtorture4testsuite('echo.udp', 'ad_dc_ntvfs:local', '//$SERVER/whatever')
335 for t
in smbtorture4_testsuites("local."):
336 #The local.resolve test needs a name to look up using real system (not emulated) name routines
337 plansmbtorture4testsuite(t
, "none", "ncalrpc:localhost")
339 # Confirm these tests with the system iconv too
340 for t
in ["local.convert_string_handle", "local.convert_string", "local.ndr"]:
341 options
= "ncalrpc: --option='iconv:use_builtin_handlers=false'"
342 plansmbtorture4testsuite(t
, "none", options
,
343 modname
="samba4.%s.system.iconv" % t
)
345 tdbtorture4
= binpath("tdbtorture")
346 if os
.path
.exists(tdbtorture4
):
347 plantestsuite("tdb.stress", "none", valgrindify(tdbtorture4
))
349 skiptestsuite("tdb.stress", "Using system TDB, tdbtorture not available")
351 plansmbtorture4testsuite("drs.unit", "none", "ncalrpc:")
354 for f
in sorted(os
.listdir(os
.path
.join(samba4srcdir
, "../pidl/tests"))):
355 if f
.endswith(".pl"):
356 planperltestsuite("pidl.%s" % f
[:-3], os
.path
.normpath(os
.path
.join(samba4srcdir
, "../pidl/tests", f
)))
359 plantestsuite_loadlist("samba.tests.dns", "fl2003dc:local", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
361 plantestsuite_loadlist("samba.tests.dns_forwarder", "fl2003dc:local", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns_forwarder.py"), '$SERVER', '$SERVER_IP', '$DNS_FORWARDER1', '$DNS_FORWARDER2', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
363 plantestsuite_loadlist("samba.tests.dns_tkey", "fl2008r2dc", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns_tkey.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
365 for t
in smbtorture4_testsuites("dns_internal."):
366 plansmbtorture4testsuite(t
, "ad_dc_ntvfs:local", '//$SERVER/whavever')
369 for t
in smbtorture4_testsuites("dlz_bind9."):
370 #The dlz_bind9 tests needs to look at the DNS database
371 plansmbtorture4testsuite(t
, "chgdcpass:local", ["ncalrpc:$SERVER", '-U$USERNAME%$PASSWORD'])
373 planpythontestsuite("nt4_dc", "samba.tests.libsmb_samba_internal");
376 # tests that interact directly with the command-line tools rather than using
377 # the API. These mainly test that the various command-line options of commands
380 for env
in ["ad_member", "s4member", "ad_dc_ntvfs", "chgdcpass"]:
381 plantestsuite("samba4.blackbox.smbclient(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba4srcdir
, "utils/tests/test_smbclient.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', smbclient4
])
383 plantestsuite("samba4.blackbox.samba_tool(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(samba4srcdir
, "utils/tests/test_samba_tool.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', smbclient4
])
385 if have_heimdal_support
:
386 plantestsuite("samba4.blackbox.pkinit(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_pkinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX/ad_dc_ntvfs', "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
387 plantestsuite("samba4.blackbox.kinit(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
388 plantestsuite("samba4.blackbox.kinit(fl2000dc:local)", "fl2000dc:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "arcfour-hmac-md5", smbclient4
, configuration
])
389 plantestsuite("samba4.blackbox.kinit(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
390 plantestsuite("samba4.blackbox.kinit_trust(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_kinit_trusts_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "forest", "aes256-cts-hmac-sha1-96"])
391 plantestsuite("samba4.blackbox.kinit_trust(fl2003dc:local)", "fl2003dc:local", [os
.path
.join(bbdir
, "test_kinit_trusts_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "external", "arcfour-hmac-md5"])
392 plantestsuite("samba4.blackbox.export.keytab(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_export_keytab_heimdal.sh"), '$SERVER', '$USERNAME', '$REALM', '$DOMAIN', "$PREFIX", smbclient4
])
394 plantestsuite("samba4.blackbox.trust_utils(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_trust_utils.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "forest"])
395 plantestsuite("samba4.blackbox.trust_utils(fl2003dc:local)", "fl2003dc:local", [os
.path
.join(bbdir
, "test_trust_utils.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "external"])
396 plantestsuite("samba4.blackbox.ktpass(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(bbdir
, "test_ktpass.sh"), '$PREFIX/ad_dc_ntvfs'])
397 plantestsuite("samba4.blackbox.passwords(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_passwords.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', "$PREFIX/ad_dc_ntvfs", smbclient4
])
398 plantestsuite("samba4.blackbox.cifsdd(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "client/tests/test_cifsdd.sh"), '$SERVER', '$USERNAME', '$PASSWORD', "$DOMAIN"])
399 plantestsuite("samba4.blackbox.nmblookup(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "utils/tests/test_nmblookup.sh"), '$NETBIOSNAME', '$NETBIOSALIAS', '$SERVER', '$SERVER_IP', nmblookup4
])
400 plantestsuite("samba4.blackbox.locktest(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_locktest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', '$PREFIX'])
401 plantestsuite("samba4.blackbox.masktest", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_masktest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', '$PREFIX'])
402 plantestsuite("samba4.blackbox.gentest(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_gentest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', "$PREFIX"])
403 plantestsuite("samba4.blackbox.rfc2307_mapping(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(samba4srcdir
, "../nsswitch/tests/test_rfc2307_mapping.sh"), '$DOMAIN', '$USERNAME', '$PASSWORD', "$SERVER", "$UID_RFC2307TEST", "$GID_RFC2307TEST", configuration
])
404 plantestsuite("samba4.blackbox.chgdcpass", "chgdcpass", [os
.path
.join(bbdir
, "test_chgdcpass.sh"), '$SERVER', "CHGDCPASS\$", '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", '$SELFTEST_PREFIX/chgdcpass', smbclient4
])
405 plantestsuite("samba4.blackbox.samba_upgradedns(chgdcpass:local)", "chgdcpass:local", [os
.path
.join(bbdir
, "test_samba_upgradedns.sh"), '$SERVER', '$REALM', '$PREFIX', '$SELFTEST_PREFIX/chgdcpass'])
406 plantestsuite("samba4.blackbox.net_ads(ad_member:client)", "ad_member:client", [os
.path
.join(bbdir
, "test_net_ads.sh"), '$DC_SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$PREFIX_ABS'])
407 plantestsuite_loadlist("samba4.rpc.echo against NetBIOS alias", "ad_dc_ntvfs", [valgrindify(smbtorture4
), "$LISTOPT", "$LOADLIST", 'ncacn_np:$NETBIOSALIAS', '-U$DOMAIN/$USERNAME%$PASSWORD', 'rpc.echo'])
409 # Tests using the "Simple" NTVFS backend
410 for t
in ["base.rw1"]:
411 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ["//$SERVER/simple", '-U$USERNAME%$PASSWORD'], modname
="samba4.ntvfs.simple.%s" % t
)
413 # Domain S4member Tests
414 plansmbtorture4testsuite('rpc.echo', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.echo against s4member server with local creds")
415 plansmbtorture4testsuite('rpc.echo', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'], "samba4.rpc.echo against s4member server with domain creds")
416 plansmbtorture4testsuite('rpc.samr', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr against s4member server with local creds")
417 plansmbtorture4testsuite('rpc.samr.users', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr.users against s4member server with local creds",)
418 plansmbtorture4testsuite('rpc.samr.passwords', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr.passwords against s4member server with local creds")
419 plantestsuite("samba4.blackbox.smbclient against s4member server with local creds", "s4member", [os
.path
.join(samba4srcdir
, "client/tests/test_smbclient.sh"), '$NETBIOSNAME', '$USERNAME', '$PASSWORD', '$NETBIOSNAME', '$PREFIX', smbclient4
])
422 plansmbtorture4testsuite("rpc.echo", "rpc_proxy", ['ncacn_ip_tcp:$NETBIOSNAME', '-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'], modname
="samba4.rpc.echo against rpc proxy with domain creds")
427 "-k no --option=usespnego=no",
428 "-k no --option=gensec:spengo=no",
430 "-k yes --option=gensec:fake_gssapi_krb5=yes --option=gensec:gssapi_krb5=no"]:
431 for signing
in ["--signing=on", "--signing=required"]:
432 signoptions
= "%s %s" % (mech
, signing
)
433 name
= "smb.signing on with %s" % signoptions
434 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$USERNAME%$PASSWORD'], modname
="samba4.%s" % name
)
438 "-k no --option=usespnego=no",
439 "-k no --option=gensec:spengo=no",
441 signoptions
= "%s --signing=off" % mech
442 name
= "smb.signing disabled on with %s" % signoptions
443 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s domain-creds" % name
)
444 plansmbtorture4testsuite('base.xcopy', "ad_member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s domain-creds" % name
)
445 plansmbtorture4testsuite('base.xcopy', "ad_dc", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$USERNAME%$PASSWORD'], "samba4.%s" % name
)
446 plansmbtorture4testsuite('base.xcopy', "ad_dc",
447 ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s administrator" % name
)
449 plantestsuite("samba4.blackbox.bogusdomain", "ad_member", ["testprogs/blackbox/bogus.sh", "$NETBIOSNAME", "xcopy_share", '$USERNAME', '$PASSWORD', '$DC_USERNAME', '$DC_PASSWORD', smbclient4
])
452 "-k no --option=usespnego=no",
453 "-k no --option=gensec:spengo=no"]:
454 signoptions
= "%s --signing=off" % mech
455 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], modname
="samba4.smb.signing on with %s local-creds" % signoptions
)
457 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=yes', '-U%'], modname
="samba4.smb.signing --signing=yes anon")
458 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=required', '-U%'], modname
="samba4.smb.signing --signing=required anon")
459 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=no', '-U%'], modname
="samba4.smb.signing --signing=no anon")
462 wb_opts_default
= ["--option=\"torture:strict mode=no\"", "--option=\"torture:timelimit=1\"", "--option=\"torture:winbindd_separator=/\"", "--option=\"torture:winbindd_netbios_name=$SERVER\"", "--option=\"torture:winbindd_netbios_domain=$DOMAIN\""]
464 winbind_ad_client_tests
= smbtorture4_testsuites("winbind.struct") + smbtorture4_testsuites("winbind.pac")
465 winbind_wbclient_tests
= smbtorture4_testsuites("winbind.wbclient")
466 for env
in ["ad_dc", "ad_dc_ntvfs", "s4member", "ad_member", "nt4_member"]:
467 wb_opts
= wb_opts_default
[:]
468 if env
in ["ad_member"]:
469 wb_opts
+= ["--option=\"torture:winbindd_domain_without_prefix=$DOMAIN\""]
470 for t
in winbind_ad_client_tests
:
471 plansmbtorture4testsuite(t
, "%s:local" % env
, wb_opts
+ ['//$SERVER/tmp', '--realm=$REALM', '--machine-pass', '--option=torture:addc=$DC_SERVER'])
473 for env
in ["nt4_dc", "fl2003dc"]:
474 for t
in winbind_wbclient_tests
:
475 plansmbtorture4testsuite(t
, "%s:local" % env
, '//$SERVER/tmp -U$DC_USERNAME%$DC_PASSWORD')
477 for env
in ["nt4_dc", "nt4_member", "ad_dc", "ad_dc_ntvfs", "ad_member", "s4member", "chgdcpass"]:
478 tests
= ["--ping", "--separator",
482 "--domain-info=BUILTIN",
483 "--domain-info=$DOMAIN",
485 "--online-status --domain=BUILTIN",
486 "--online-status --domain=$DOMAIN",
487 "--check-secret --domain=$DOMAIN",
488 "--change-secret --domain=$DOMAIN",
489 "--check-secret --domain=$DOMAIN",
490 "--online-status --domain=$DOMAIN",
493 "--name-to-sid=$DC_USERNAME",
494 "--name-to-sid=$DOMAIN/$DC_USERNAME",
495 "--user-info=$DOMAIN/$DC_USERNAME",
496 "--user-groups=$DOMAIN/$DC_USERNAME",
497 "--authenticate=$DOMAIN/$DC_USERNAME%$DC_PASSWORD",
502 plantestsuite("samba.wbinfo_simple.(%s:local).%s" % (env
, t
), "%s:local" % env
, [os
.path
.join(srcdir(), "nsswitch/tests/test_wbinfo_simple.sh"), t
])
505 "samba.wbinfo_sids2xids.(%s:local)" % env
, "%s:local" % env
,
506 [os
.path
.join(samba3srcdir
, "script/tests/test_wbinfo_sids2xids.sh")])
509 "samba.ntlm_auth.diagnostics(%s:local)" % env
, "%s:local" % env
,
510 [os
.path
.join(samba3srcdir
, "script/tests/test_ntlm_auth_diagnostics.sh"), ntlm_auth3
, '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', configuration
])
512 plantestsuite("samba.ntlm_auth.(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba3srcdir
, "script/tests/test_ntlm_auth_s3.sh"), valgrindify(python
), samba3srcdir
, ntlm_auth3
, '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', configuration
])
515 nsstest4
= binpath("nsstest")
516 for env
in ["ad_dc:local", "ad_dc_ntvfs:local", "s4member:local", "nt4_dc:local", "ad_member:local", "nt4_member:local"]:
517 if os
.path
.exists(nsstest4
):
518 plantestsuite("samba.nss.test using winbind(%s)" % env
, env
, [os
.path
.join(bbdir
, "nsstest.sh"), nsstest4
, os
.path
.join(samba4bindir
, "shared/libnss_wrapper_winbind.so.2")])
520 skiptestsuite("samba.nss.test using winbind(%s)" % env
, "nsstest not available")
522 subunitrun
= valgrindify(python
) + " " + os
.path
.join(samba4srcdir
, "scripting/bin/subunitrun")
523 def planoldpythontestsuite(env
, module
, name
=None, extra_path
=[], environ
={}, extra_args
=[]):
524 environ
= dict(environ
)
525 py_path
= list(extra_path
)
527 environ
["PYTHONPATH"] = ":".join(["$PYTHONPATH"] + py_path
)
528 args
= ["%s=%s" % item
for item
in environ
.iteritems()]
529 args
+= [subunitrun
, "$LISTOPT", "$LOADLIST", module
]
533 plantestsuite_loadlist(name
, env
, args
)
535 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.gensec", extra_args
=['-U"$USERNAME%$PASSWORD"'])
536 planoldpythontestsuite("none", "simple", extra_path
=["%s/lib/tdb/python/tests" % srcdir()], name
="tdb.python")
537 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.sam")
538 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dsdb")
539 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.bare")
540 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.unix")
541 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.srvsvc")
542 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.timecmd")
543 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.join")
546 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc"]:
547 planpythontestsuite(env
+ ":local", "samba.tests.samba_tool.fsmo")
549 # We run this test against both AD DC implemetnations because it is
550 # the only test we have of GPO get/set behaviour, and this involves
551 # the file server as well as the LDAP server.
552 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.gpo")
553 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.gpo")
555 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.processes")
556 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.user")
557 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.group")
558 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.ntacl")
560 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.sites")
562 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.rpcecho")
563 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.registry", extra_args
=['-U"$USERNAME%$PASSWORD"'])
564 planoldpythontestsuite("ad_dc_ntvfs", "samba.tests.dcerpc.dnsserver", extra_args
=['-U"$USERNAME%$PASSWORD"'])
565 planoldpythontestsuite("ad_dc", "samba.tests.dcerpc.dnsserver", extra_args
=['-U"$USERNAME%$PASSWORD"'])
566 planoldpythontestsuite("ad_dc", "samba.tests.dcerpc.raw_protocol", extra_args
=['-U"$USERNAME%$PASSWORD"'])
567 plantestsuite_loadlist("samba4.ldap.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/ldap.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
568 plantestsuite_loadlist("samba4.tokengroups.python(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/token_group.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
569 plantestsuite("samba4.sam.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sam.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN'])
570 plantestsuite("samba4.user_account_control.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/user_account_control.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN'])
571 planoldpythontestsuite("ad_dc_ntvfs", "dsdb_schema_info",
572 extra_path
=[os
.path
.join(samba4srcdir
, 'dsdb/tests/python')],
573 name
="samba4.schemaInfo.python(ad_dc_ntvfs)",
574 extra_args
=['-U"$DOMAIN/$DC_USERNAME%$DC_PASSWORD"'])
575 plantestsuite_loadlist("samba4.urgent_replication.python(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/urgent_replication.py"), '$PREFIX_ABS/ad_dc_ntvfs/private/sam.ldb', '$LOADLIST', '$LISTOPT'])
576 plantestsuite_loadlist("samba4.ldap.dirsync.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/dirsync.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
577 plantestsuite_loadlist("samba4.ldap.match_rules.python", "ad_dc_ntvfs", [python
, os
.path
.join(srcdir(), "lib/ldb-samba/tests/match_rules.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
578 plantestsuite_loadlist("samba4.ldap.notification.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/notification.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
579 plantestsuite_loadlist("samba4.ldap.sites.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sites.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
581 plantestsuite_loadlist("samba4.ldap.sort.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sort.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
582 plantestsuite_loadlist("samba4.ldap.vlv.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/vlv.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
584 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc"]:
585 plantestsuite_loadlist("samba4.ldap_schema.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/ldap_schema.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
586 plantestsuite("samba4.ldap.possibleInferiors.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/samdb/ldb_modules/tests/possibleinferiors.py"), "ldap://$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN"])
587 plantestsuite_loadlist("samba4.ldap.secdesc.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sec_descriptor.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
588 plantestsuite_loadlist("samba4.ldap.acl.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/acl.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
589 if env
!= "fl2000dc":
590 # This test makes excessive use of the "userPassword" attribute which
591 # isn't available on DCs with Windows 2000 domain function level -
592 # therefore skip it in that configuration
593 plantestsuite_loadlist("samba4.ldap.passwords.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/passwords.py"), "$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN", '$LOADLIST', '$LISTOPT'])
594 plantestsuite_loadlist("samba4.ldap.password_lockout.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/password_lockout.py"), "$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN", "--realm=$REALM", '$LOADLIST', '$LISTOPT'])
596 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.upgradeprovisionneeddc")
597 planpythontestsuite("ad_dc:local", "samba.tests.posixacl")
598 planpythontestsuite("ad_dc_no_nss:local", "samba.tests.posixacl")
599 plantestsuite_loadlist("samba4.deletetest.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/deletetest.py"),
600 '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
601 plantestsuite("samba4.blackbox.samba3dump", "none", [os
.path
.join(samba4srcdir
, "selftest/test_samba3dump.sh")])
602 plantestsuite("samba4.blackbox.upgrade", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_s3upgrade.sh"), '$PREFIX/provision'])
603 plantestsuite("samba4.blackbox.provision.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_provision.sh"), '$PREFIX/provision'])
604 plantestsuite("samba4.blackbox.upgradeprovision.current", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_upgradeprovision.sh"), '$PREFIX/provision'])
605 plantestsuite("samba4.blackbox.setpassword.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_setpassword.sh"), '$PREFIX/provision'])
606 plantestsuite("samba4.blackbox.newuser.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_newuser.sh"), '$PREFIX/provision'])
607 plantestsuite("samba4.blackbox.group.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_group.sh"), '$PREFIX/provision'])
608 plantestsuite("samba4.blackbox.spn.py(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_spn.sh"), '$PREFIX/ad_dc_ntvfs'])
609 plantestsuite_loadlist("samba4.ldap.bind(fl2008r2dc)", "fl2008r2dc", [python
, os
.path
.join(srcdir(), "auth/credentials/tests/bind.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '$LOADLIST', '$LISTOPT'])
611 # This makes sure we test the rid allocation code
612 t
= "rpc.samr.large-dc"
613 plansmbtorture4testsuite(t
, "vampire_dc", ['$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
=("samba4.%s.one" % t
))
614 plansmbtorture4testsuite(t
, "vampire_dc", ['$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.%s.two" % t
)
618 plansmbtorture4testsuite('rpc.echo', env
, ['ncacn_np:$SERVER', "-k", "yes", '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.rpc.echo")
619 plansmbtorture4testsuite('rpc.echo', "%s:local" % env
, ['ncacn_np:$SERVER', "-k", "yes", '-P', '--workgroup=$DOMAIN'], modname
="samba4.rpc.echo")
620 planpythontestsuite("rodc:local", "samba.tests.samba_tool.rodc")
622 plantestsuite("samba4.blackbox.provision-backend", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_provision-backend.sh"), '$PREFIX/provision'])
624 # Test renaming the DC
625 plantestsuite("samba4.blackbox.renamedc.sh", "none", ["PYTHON=%s" % python
, os
.path
.join(bbdir
, "renamedc.sh"), '$PREFIX/provision'])
627 for env
in ['vampire_dc', 'promoted_dc']:
630 planoldpythontestsuite(env
, "samba.tests.blackbox.samba_tool_drs",
631 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
632 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
633 planoldpythontestsuite("%s:local" % env
, "replica_sync",
634 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
635 name
="samba4.drs.replica_sync.python(%s)" % env
,
636 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
637 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
638 planoldpythontestsuite(env
, "delete_object",
639 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
640 name
="samba4.drs.delete_object.python(%s)" % env
,
641 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
642 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
643 planoldpythontestsuite(env
, "fsmo",
644 name
="samba4.drs.fsmo.python(%s)" % env
,
645 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
646 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
647 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
648 planoldpythontestsuite(env
, "repl_schema",
649 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
650 name
="samba4.drs.repl_schema.python(%s)" % env
,
651 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
652 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
653 planoldpythontestsuite(env
, "repl_move",
654 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
655 name
="samba4.drs.repl_move.python(%s)" % env
,
656 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
657 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
658 planoldpythontestsuite(env
, "getnc_exop",
659 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
660 name
="samba4.drs.getnc_exop.python(%s)" % env
,
661 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
662 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
665 for env
in ["ad_dc_ntvfs", "s4member", "rodc", "promoted_dc", "ad_dc", "ad_member"]:
666 plantestsuite("samba.blackbox.wbinfo(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba4srcdir
, "../nsswitch/tests/test_wbinfo.sh"), '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', env
])
672 # This test is for users cached at the RODC
673 plansmbtorture4testsuite('krb5.kdc', "rodc", ['ncacn_np:$SERVER_IP', "-k", "yes", '-Utestdenied%$PASSWORD',
674 '--workgroup=$DOMAIN', '--realm=$REALM',
675 '--option=torture:krb5-upn=testdenied_upn@$REALM.upn',
676 '--option=torture:expect_rodc=true'],
677 "samba4.krb5.kdc with account DENIED permission to replicate to an RODC")
678 plansmbtorture4testsuite('krb5.kdc', "rodc", ['ncacn_np:$SERVER_IP', "-k", "yes", '-Utestallowed\ account%$PASSWORD',
679 '--workgroup=$DOMAIN', '--realm=$REALM',
680 '--option=torture:expect_machine_account=true',
681 '--option=torture:krb5-upn=testallowed\ upn@$REALM',
682 '--option=torture:krb5-hostname=testallowed',
683 '--option=torture:expect_rodc=true',
684 '--option=torture:expect_cached_at_rodc=true'],
685 "samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC")
687 # This ensures we have correct behaviour on a server that is not not the PDC emulator
689 plansmbtorture4testsuite('krb5.kdc', env
, ['ncacn_np:$SERVER_IP', "-k", "yes", '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--realm=$REALM'],
690 "samba4.krb5.kdc with specified account")
693 for env
in ["rodc", "promoted_dc", "ad_dc", "fl2000dc", "fl2008r2dc"]:
695 # The machine account is cached at the RODC, as it is the local account
696 extra_options
= ['--option=torture:expect_rodc=true', '--option=torture:expect_cached_at_rodc=true']
700 plansmbtorture4testsuite('krb5.kdc', "%s:local" % env
, ['ncacn_np:$SERVER_IP', "-k", "yes", '-P',
701 '--workgroup=$DOMAIN', '--realm=$REALM',
702 '--option=torture:krb5-hostname=$SERVER',
703 '--option=torture:run_removedollar_test=true',
704 '--option=torture:expect_machine_account=true'] + extra_options
,
705 "samba4.krb5.kdc with machine account")
711 planoldpythontestsuite(env
, "samba.tests.kcc",
712 name
="samba.tests.kcc",
713 environ
={'TEST_SERVER': '$SERVER', 'TEST_USERNAME': '$USERNAME',
714 'TEST_PASSWORD': '$PASSWORD',
717 extra_path
=[os
.path
.join(srcdir(), "samba/python"), ]
720 # Demote the vampire DC, it must be the last test each DC, before the dbcheck
721 for env
in ['vampire_dc', 'promoted_dc', 'rodc']:
722 plantestsuite("samba4.blackbox.samba_tool_demote(%s)" % env
, env
, [os
.path
.join(samba4srcdir
, "utils/tests/test_demote.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', '$DC_SERVER', '$PREFIX/%s' % env
, smbclient4
])
724 # TODO: Verifying the databases really should be a part of the
725 # environment teardown.
726 # check the databases are all OK. PLEASE LEAVE THIS AS THE LAST TEST
727 for env
in ["ad_dc_ntvfs", "ad_dc", "fl2000dc", "fl2003dc", "fl2008r2dc", 'vampire_dc', 'promoted_dc']:
728 plantestsuite("samba4.blackbox.dbcheck(%s)" % env
, env
+ ":local" , ["PYTHON=%s" % python
, os
.path
.join(bbdir
, "dbcheck.sh"), '$PREFIX/provision', configuration
])