lib/tls: Change default supported TLS versions.
[Samba.git] / selftest / target / Samba3.pm
blob9af8faa8f881796862872973454b1e05352b0b6f
1 #!/usr/bin/perl
2 # Bootstrap Samba and run a number of tests against it.
3 # Copyright (C) 2005-2007 Jelmer Vernooij <jelmer@samba.org>
4 # Published under the GNU GPL, v3 or later.
6 package Samba3;
8 use strict;
9 use Cwd qw(abs_path);
10 use FindBin qw($RealBin);
11 use POSIX;
12 use target::Samba;
14 sub have_ads($) {
15 my ($self) = @_;
16 my $found_ads = 0;
17 my $smbd_build_options = Samba::bindir_path($self, "smbd") . " -b|";
18 open(IN, $smbd_build_options) or die("Unable to run $smbd_build_options: $!");
20 while (<IN>) {
21 if (/WITH_ADS/) {
22 $found_ads = 1;
25 close IN;
27 # If we were not built with ADS support, pretend we were never even available
28 print "smbd does not have ADS support\n" unless $found_ads;
29 return $found_ads;
32 # return smb.conf parameters applicable to @path, based on the underlying
33 # filesystem type
34 sub get_fs_specific_conf($$)
36 my ($self, $path) = @_;
37 my $mods = "";
38 my $stat_out = `stat --file-system $path` or return "";
40 if ($stat_out =~ m/Type:\s+btrfs/) {
41 $mods .= "btrfs ";
44 if ($mods) {
45 return "vfs objects = $mods";
48 return undef;
51 sub new($$) {
52 my ($classname, $bindir, $srcdir, $server_maxtime) = @_;
53 my $self = { vars => {},
54 bindir => $bindir,
55 srcdir => $srcdir,
56 server_maxtime => $server_maxtime
58 bless $self;
59 return $self;
62 sub teardown_env($$)
64 my ($self, $envvars) = @_;
65 my $count = 0;
67 # This should cause smbd to terminate gracefully
68 close($envvars->{STDIN_PIPE});
70 my $smbdpid = $envvars->{SMBD_TL_PID};
71 my $nmbdpid = $envvars->{NMBD_TL_PID};
72 my $winbinddpid = $envvars->{WINBINDD_TL_PID};
74 # This should give it time to write out the gcov data
75 until ($count > 20) {
76 my $smbdchild = Samba::cleanup_child($smbdpid, "smbd");
77 my $nmbdchild = Samba::cleanup_child($nmbdpid, "nmbd");
78 my $winbinddchild = Samba::cleanup_child($winbinddpid, "winbindd");
79 if ($smbdchild == -1
80 && $nmbdchild == -1
81 && $winbinddchild == -1) {
82 last;
84 sleep(1);
85 $count++;
88 if ($count <= 20 && kill(0, $smbdpid, $nmbdpid, $winbinddpid) == 0) {
89 return;
92 $self->stop_sig_term($smbdpid);
93 $self->stop_sig_term($nmbdpid);
94 $self->stop_sig_term($winbinddpid);
96 $count = 0;
97 until ($count > 10) {
98 my $smbdchild = Samba::cleanup_child($smbdpid, "smbd");
99 my $nmbdchild = Samba::cleanup_child($nmbdpid, "nmbd");
100 my $winbinddchild = Samba::cleanup_child($winbinddpid, "winbindd");
101 if ($smbdchild == -1
102 && $nmbdchild == -1
103 && $winbinddchild == -1) {
104 last;
106 sleep(1);
107 $count++;
110 if ($count <= 10 && kill(0, $smbdpid, $nmbdpid, $winbinddpid) == 0) {
111 return;
114 warn("timelimit process did not quit on SIGTERM, sending SIGKILL");
115 $self->stop_sig_kill($smbdpid);
116 $self->stop_sig_kill($nmbdpid);
117 $self->stop_sig_kill($winbinddpid);
119 return 0;
122 sub getlog_env_app($$$)
124 my ($self, $envvars, $name) = @_;
126 my $title = "$name LOG of: $envvars->{NETBIOSNAME}\n";
127 my $out = $title;
129 open(LOG, "<".$envvars->{$name."_TEST_LOG"});
131 seek(LOG, $envvars->{$name."_TEST_LOG_POS"}, SEEK_SET);
132 while (<LOG>) {
133 $out .= $_;
135 $envvars->{$name."_TEST_LOG_POS"} = tell(LOG);
136 close(LOG);
138 return "" if $out eq $title;
140 return $out;
143 sub getlog_env($$)
145 my ($self, $envvars) = @_;
146 my $ret = "";
148 $ret .= $self->getlog_env_app($envvars, "SMBD");
149 $ret .= $self->getlog_env_app($envvars, "NMBD");
150 $ret .= $self->getlog_env_app($envvars, "WINBINDD");
152 return $ret;
155 sub check_env($$)
157 my ($self, $envvars) = @_;
159 my $childpid = waitpid(-1, WNOHANG);
161 # TODO ...
162 return 1;
165 sub setup_env($$$)
167 my ($self, $envname, $path) = @_;
169 $ENV{ENVNAME} = $envname;
171 if (defined($self->{vars}->{$envname})) {
172 return $self->{vars}->{$envname};
175 if ($envname eq "nt4_dc") {
176 return $self->setup_nt4_dc("$path/nt4_dc");
177 } elsif ($envname eq "nt4_dc_schannel") {
178 return $self->setup_nt4_dc_schannel("$path/nt4_dc_schannel");
179 } elsif ($envname eq "simpleserver") {
180 return $self->setup_simpleserver("$path/simpleserver");
181 } elsif ($envname eq "fileserver") {
182 return $self->setup_fileserver("$path/fileserver");
183 } elsif ($envname eq "maptoguest") {
184 return $self->setup_maptoguest("$path/maptoguest");
185 } elsif ($envname eq "ktest") {
186 return $self->setup_ktest("$path/ktest");
187 } elsif ($envname eq "nt4_member") {
188 if (not defined($self->{vars}->{nt4_dc})) {
189 if (not defined($self->setup_nt4_dc("$path/nt4_dc"))) {
190 return undef;
193 return $self->setup_nt4_member("$path/nt4_member", $self->{vars}->{nt4_dc});
194 } else {
195 return "UNKNOWN";
199 sub setup_nt4_dc($$)
201 my ($self, $path) = @_;
203 print "PROVISIONING NT4 DC...";
205 my $nt4_dc_options = "
206 domain master = yes
207 domain logons = yes
208 lanman auth = yes
210 rpc_server:epmapper = external
211 rpc_server:spoolss = external
212 rpc_server:lsarpc = external
213 rpc_server:samr = external
214 rpc_server:netlogon = external
215 rpc_server:register_embedded_np = yes
216 rpc_server:FssagentRpc = external
218 rpc_daemon:epmd = fork
219 rpc_daemon:spoolssd = fork
220 rpc_daemon:lsasd = fork
221 rpc_daemon:fssd = fork
222 fss: sequence timeout = 1
225 my $vars = $self->provision($path,
226 "LOCALNT4DC2",
227 "localntdc2pass",
228 $nt4_dc_options);
230 $vars or return undef;
232 if (not $self->check_or_start($vars, "yes", "yes", "yes")) {
233 return undef;
236 $vars->{DC_SERVER} = $vars->{SERVER};
237 $vars->{DC_SERVER_IP} = $vars->{SERVER_IP};
238 $vars->{DC_SERVER_IPV6} = $vars->{SERVER_IPV6};
239 $vars->{DC_NETBIOSNAME} = $vars->{NETBIOSNAME};
240 $vars->{DC_USERNAME} = $vars->{USERNAME};
241 $vars->{DC_PASSWORD} = $vars->{PASSWORD};
243 $self->{vars}->{nt4_dc} = $vars;
245 return $vars;
248 sub setup_nt4_dc_schannel($$)
250 my ($self, $path) = @_;
252 print "PROVISIONING NT4 DC WITH SERVER SCHANNEL ...";
254 my $pdc_options = "
255 domain master = yes
256 domain logons = yes
257 lanman auth = yes
259 rpc_server:epmapper = external
260 rpc_server:spoolss = external
261 rpc_server:lsarpc = external
262 rpc_server:samr = external
263 rpc_server:netlogon = external
264 rpc_server:register_embedded_np = yes
266 rpc_daemon:epmd = fork
267 rpc_daemon:spoolssd = fork
268 rpc_daemon:lsasd = fork
270 server schannel = yes
273 my $vars = $self->provision($path,
274 "LOCALNT4DC9",
275 "localntdc9pass",
276 $pdc_options);
278 $vars or return undef;
280 if (not $self->check_or_start($vars, "yes", "yes", "yes")) {
281 return undef;
284 $vars->{DC_SERVER} = $vars->{SERVER};
285 $vars->{DC_SERVER_IP} = $vars->{SERVER_IP};
286 $vars->{DC_SERVER_IPV6} = $vars->{SERVER_IPV6};
287 $vars->{DC_NETBIOSNAME} = $vars->{NETBIOSNAME};
288 $vars->{DC_USERNAME} = $vars->{USERNAME};
289 $vars->{DC_PASSWORD} = $vars->{PASSWORD};
291 $self->{vars}->{nt4_dc_schannel} = $vars;
293 return $vars;
296 sub setup_nt4_member($$$)
298 my ($self, $prefix, $nt4_dc_vars) = @_;
299 my $count = 0;
300 my $rc;
302 print "PROVISIONING MEMBER...";
304 my $member_options = "
305 security = domain
306 server signing = on
307 dbwrap_tdb_mutexes:* = yes
309 my $ret = $self->provision($prefix,
310 "LOCALNT4MEMBER3",
311 "localnt4member3pass",
312 $member_options);
314 $ret or return undef;
316 my $nmblookup = Samba::bindir_path($self, "nmblookup");
317 do {
318 print "Waiting for the LOGON SERVER registration ...\n";
319 $rc = system("$nmblookup $ret->{CONFIGURATION} $ret->{DOMAIN}\#1c");
320 if ($rc != 0) {
321 sleep(1);
323 $count++;
324 } while ($rc != 0 && $count < 10);
325 if ($count == 10) {
326 print "NMBD not reachable after 10 retries\n";
327 teardown_env($self, $ret);
328 return 0;
331 my $net = Samba::bindir_path($self, "net");
332 my $cmd = "";
333 $cmd .= "SOCKET_WRAPPER_DEFAULT_IFACE=\"$ret->{SOCKET_WRAPPER_DEFAULT_IFACE}\" ";
334 $cmd .= "$net join $ret->{CONFIGURATION} $nt4_dc_vars->{DOMAIN} member";
335 $cmd .= " -U$nt4_dc_vars->{USERNAME}\%$nt4_dc_vars->{PASSWORD}";
337 if (system($cmd) != 0) {
338 warn("Join failed\n$cmd");
339 return undef;
342 if (not $self->check_or_start($ret, "yes", "yes", "yes")) {
343 return undef;
346 $ret->{DC_SERVER} = $nt4_dc_vars->{SERVER};
347 $ret->{DC_SERVER_IP} = $nt4_dc_vars->{SERVER_IP};
348 $ret->{DC_SERVER_IPV6} = $nt4_dc_vars->{SERVER_IPV6};
349 $ret->{DC_NETBIOSNAME} = $nt4_dc_vars->{NETBIOSNAME};
350 $ret->{DC_USERNAME} = $nt4_dc_vars->{USERNAME};
351 $ret->{DC_PASSWORD} = $nt4_dc_vars->{PASSWORD};
353 return $ret;
356 sub setup_admember($$$$)
358 my ($self, $prefix, $dcvars) = @_;
360 # If we didn't build with ADS, pretend this env was never available
361 if (not $self->have_ads()) {
362 return "UNKNOWN";
365 print "PROVISIONING S3 AD MEMBER...";
367 my $member_options = "
368 security = ads
369 server signing = on
370 workgroup = $dcvars->{DOMAIN}
371 realm = $dcvars->{REALM}
374 my $ret = $self->provision($prefix,
375 "LOCALADMEMBER",
376 "loCalMemberPass",
377 $member_options,
378 $dcvars->{SERVER_IP},
379 $dcvars->{SERVER_IPV6});
381 $ret or return undef;
383 close(USERMAP);
384 $ret->{DOMAIN} = $dcvars->{DOMAIN};
385 $ret->{REALM} = $dcvars->{REALM};
387 my $ctx;
388 my $prefix_abs = abs_path($prefix);
389 $ctx = {};
390 $ctx->{krb5_conf} = "$prefix_abs/lib/krb5.conf";
391 $ctx->{domain} = $dcvars->{DOMAIN};
392 $ctx->{realm} = $dcvars->{REALM};
393 $ctx->{dnsname} = lc($dcvars->{REALM});
394 $ctx->{kdc_ipv4} = $dcvars->{SERVER_IP};
395 $ctx->{kdc_ipv6} = $dcvars->{SERVER_IPV6};
396 Samba::mk_krb5_conf($ctx, "");
398 $ret->{KRB5_CONFIG} = $ctx->{krb5_conf};
400 my $net = Samba::bindir_path($self, "net");
401 my $cmd = "";
402 $cmd .= "SOCKET_WRAPPER_DEFAULT_IFACE=\"$ret->{SOCKET_WRAPPER_DEFAULT_IFACE}\" ";
403 if (defined($ret->{RESOLV_WRAPPER_CONF})) {
404 $cmd .= "RESOLV_WRAPPER_CONF=\"$ret->{RESOLV_WRAPPER_CONF}\" ";
405 } else {
406 $cmd .= "RESOLV_WRAPPER_HOSTS=\"$ret->{RESOLV_WRAPPER_HOSTS}\" ";
408 $cmd .= "KRB5_CONFIG=\"$ret->{KRB5_CONFIG}\" ";
409 $cmd .= "$net join $ret->{CONFIGURATION}";
410 $cmd .= " -U$dcvars->{USERNAME}\%$dcvars->{PASSWORD}";
412 if (system($cmd) != 0) {
413 warn("Join failed\n$cmd");
414 return undef;
417 # We need world access to this share, as otherwise the domain
418 # administrator from the AD domain provided by Samba4 can't
419 # access the share for tests.
420 chmod 0777, "$prefix/share";
422 if (not $self->check_or_start($ret, "yes", "yes", "yes")) {
423 return undef;
426 $ret->{DC_SERVER} = $dcvars->{SERVER};
427 $ret->{DC_SERVER_IP} = $dcvars->{SERVER_IP};
428 $ret->{DC_SERVER_IPV6} = $dcvars->{SERVER_IPV6};
429 $ret->{DC_NETBIOSNAME} = $dcvars->{NETBIOSNAME};
430 $ret->{DC_USERNAME} = $dcvars->{USERNAME};
431 $ret->{DC_PASSWORD} = $dcvars->{PASSWORD};
433 # Special case, this is called from Samba4.pm but needs to use the Samba3 check_env and get_log_env
434 $ret->{target} = $self;
436 return $ret;
439 sub setup_admember_rfc2307($$$$)
441 my ($self, $prefix, $dcvars) = @_;
443 # If we didn't build with ADS, pretend this env was never available
444 if (not $self->have_ads()) {
445 return "UNKNOWN";
448 print "PROVISIONING S3 AD MEMBER WITH idmap_rfc2307 config...";
450 my $member_options = "
451 security = ads
452 server signing = on
453 workgroup = $dcvars->{DOMAIN}
454 realm = $dcvars->{REALM}
455 idmap config $dcvars->{DOMAIN} : backend = rfc2307
456 idmap config $dcvars->{DOMAIN} : range = 2000000-2999999
457 idmap config $dcvars->{DOMAIN} : ldap_server = ad
458 idmap config $dcvars->{DOMAIN} : bind_path_user = ou=idmap,dc=samba,dc=example,dc=com
459 idmap config $dcvars->{DOMAIN} : bind_path_group = ou=idmap,dc=samba,dc=example,dc=com
462 my $ret = $self->provision($prefix,
463 "RFC2307MEMBER",
464 "loCalMemberPass",
465 $member_options,
466 $dcvars->{SERVER_IP},
467 $dcvars->{SERVER_IPV6});
469 $ret or return undef;
471 close(USERMAP);
472 $ret->{DOMAIN} = $dcvars->{DOMAIN};
473 $ret->{REALM} = $dcvars->{REALM};
475 my $ctx;
476 my $prefix_abs = abs_path($prefix);
477 $ctx = {};
478 $ctx->{krb5_conf} = "$prefix_abs/lib/krb5.conf";
479 $ctx->{domain} = $dcvars->{DOMAIN};
480 $ctx->{realm} = $dcvars->{REALM};
481 $ctx->{dnsname} = lc($dcvars->{REALM});
482 $ctx->{kdc_ipv4} = $dcvars->{SERVER_IP};
483 $ctx->{kdc_ipv6} = $dcvars->{SERVER_IPV6};
484 Samba::mk_krb5_conf($ctx, "");
486 $ret->{KRB5_CONFIG} = $ctx->{krb5_conf};
488 my $net = Samba::bindir_path($self, "net");
489 my $cmd = "";
490 $cmd .= "SOCKET_WRAPPER_DEFAULT_IFACE=\"$ret->{SOCKET_WRAPPER_DEFAULT_IFACE}\" ";
491 if (defined($ret->{RESOLV_WRAPPER_CONF})) {
492 $cmd .= "RESOLV_WRAPPER_CONF=\"$ret->{RESOLV_WRAPPER_CONF}\" ";
493 } else {
494 $cmd .= "RESOLV_WRAPPER_HOSTS=\"$ret->{RESOLV_WRAPPER_HOSTS}\" ";
496 $cmd .= "KRB5_CONFIG=\"$ret->{KRB5_CONFIG}\" ";
497 $cmd .= "$net join $ret->{CONFIGURATION}";
498 $cmd .= " -U$dcvars->{USERNAME}\%$dcvars->{PASSWORD}";
500 if (system($cmd) != 0) {
501 warn("Join failed\n$cmd");
502 return undef;
505 # We need world access to this share, as otherwise the domain
506 # administrator from the AD domain provided by Samba4 can't
507 # access the share for tests.
508 chmod 0777, "$prefix/share";
510 if (not $self->check_or_start($ret, "yes", "yes", "yes")) {
511 return undef;
514 $ret->{DC_SERVER} = $dcvars->{SERVER};
515 $ret->{DC_SERVER_IP} = $dcvars->{SERVER_IP};
516 $ret->{DC_SERVER_IPV6} = $dcvars->{SERVER_IPV6};
517 $ret->{DC_NETBIOSNAME} = $dcvars->{NETBIOSNAME};
518 $ret->{DC_USERNAME} = $dcvars->{USERNAME};
519 $ret->{DC_PASSWORD} = $dcvars->{PASSWORD};
521 # Special case, this is called from Samba4.pm but needs to use the Samba3 check_env and get_log_env
522 $ret->{target} = $self;
524 return $ret;
527 sub setup_simpleserver($$)
529 my ($self, $path) = @_;
531 print "PROVISIONING simple server...";
533 my $prefix_abs = abs_path($path);
535 my $simpleserver_options = "
536 lanman auth = yes
537 vfs objects = xattr_tdb streams_depot
539 [vfs_aio_fork]
540 path = $prefix_abs/share
541 vfs objects = aio_fork
542 read only = no
543 vfs_aio_fork:erratic_testing_mode=yes
546 my $vars = $self->provision($path,
547 "LOCALSHARE4",
548 "local4pass",
549 $simpleserver_options);
551 $vars or return undef;
553 if (not $self->check_or_start($vars, "yes", "no", "yes")) {
554 return undef;
557 $self->{vars}->{simpleserver} = $vars;
559 return $vars;
562 sub setup_fileserver($$)
564 my ($self, $path) = @_;
565 my $prefix_abs = abs_path($path);
566 my $srcdir_abs = abs_path($self->{srcdir});
568 print "PROVISIONING file server ...\n";
570 my @dirs = ();
572 mkdir($prefix_abs, 0777);
574 my $share_dir="$prefix_abs/share";
576 # Create share directory structure
577 my $lower_case_share_dir="$share_dir/lower-case";
578 push(@dirs, $lower_case_share_dir);
580 my $lower_case_share_dir_30000="$share_dir/lower-case-30000";
581 push(@dirs, $lower_case_share_dir_30000);
583 my $dfree_share_dir="$share_dir/dfree";
584 push(@dirs, $dfree_share_dir);
586 my $fileserver_options = "
587 [lowercase]
588 path = $lower_case_share_dir
589 comment = smb username is [%U]
590 case sensitive = True
591 default case = lower
592 preserve case = no
593 short preserve case = no
594 [lowercase-30000]
595 path = $lower_case_share_dir_30000
596 comment = smb username is [%U]
597 case sensitive = True
598 default case = lower
599 preserve case = no
600 short preserve case = no
601 [dfree]
602 path = $dfree_share_dir
603 comment = smb username is [%U]
604 dfree command = $srcdir_abs/testprogs/blackbox/dfree.sh
607 my $vars = $self->provision($path,
608 "FILESERVER",
609 "fileserver_secret",
610 $fileserver_options,
611 undef,
612 undef,
615 $vars or return undef;
617 if (not $self->check_or_start($vars, "yes", "no", "yes")) {
618 return undef;
621 $self->{vars}->{fileserver} = $vars;
623 mkdir($_, 0777) foreach(@dirs);
625 ## Create case sensitive lower case share dir
626 foreach my $file ('a'..'z') {
627 my $full_path = $lower_case_share_dir . '/' . $file;
628 open my $fh, '>', $full_path;
629 # Add some content to file
630 print $fh $full_path;
631 close $fh;
634 for (my $file = 1; $file < 51; ++$file) {
635 my $full_path = $lower_case_share_dir . '/' . $file;
636 open my $fh, '>', $full_path;
637 # Add some content to file
638 print $fh $full_path;
639 close $fh;
642 # Create content for 30000 share
643 foreach my $file ('a'..'z') {
644 my $full_path = $lower_case_share_dir_30000 . '/' . $file;
645 open my $fh, '>', $full_path;
646 # Add some content to file
647 print $fh $full_path;
648 close $fh;
651 for (my $file = 1; $file < 30001; ++$file) {
652 my $full_path = $lower_case_share_dir_30000 . '/' . $file;
653 open my $fh, '>', $full_path;
654 # Add some content to file
655 print $fh $full_path;
656 close $fh;
659 return $vars;
662 sub setup_ktest($$$)
664 my ($self, $prefix) = @_;
666 # If we didn't build with ADS, pretend this env was never available
667 if (not $self->have_ads()) {
668 return "UNKNOWN";
671 print "PROVISIONING server with security=ads...";
673 my $ktest_options = "
674 workgroup = KTEST
675 realm = ktest.samba.example.com
676 security = ads
677 username map = $prefix/lib/username.map
678 server signing = required
681 my $ret = $self->provision($prefix,
682 "LOCALKTEST6",
683 "localktest6pass",
684 $ktest_options);
686 $ret or return undef;
688 my $ctx;
689 my $prefix_abs = abs_path($prefix);
690 $ctx = {};
691 $ctx->{krb5_conf} = "$prefix_abs/lib/krb5.conf";
692 $ctx->{domain} = "KTEST";
693 $ctx->{realm} = "KTEST.SAMBA.EXAMPLE.COM";
694 $ctx->{dnsname} = lc($ctx->{realm});
695 $ctx->{kdc_ipv4} = "0.0.0.0";
696 $ctx->{kdc_ipv6} = "::";
697 Samba::mk_krb5_conf($ctx, "");
699 $ret->{KRB5_CONFIG} = $ctx->{krb5_conf};
701 open(USERMAP, ">$prefix/lib/username.map") or die("Unable to open $prefix/lib/username.map");
702 print USERMAP "
703 $ret->{USERNAME} = KTEST\\Administrator
705 close(USERMAP);
707 #This is the secrets.tdb created by 'net ads join' from Samba3 to a
708 #Samba4 DC with the same parameters as are being used here. The
709 #domain SID is S-1-5-21-1071277805-689288055-3486227160
711 system("cp $self->{srcdir}/source3/selftest/ktest-secrets.tdb $prefix/private/secrets.tdb");
712 chmod 0600, "$prefix/private/secrets.tdb";
714 #Make sure there's no old ntdb file.
715 system("rm -f $prefix/private/secrets.ntdb");
717 #This uses a pre-calculated krb5 credentials cache, obtained by running Samba4 with:
718 # "--option=kdc:service ticket lifetime=239232" "--option=kdc:user ticket lifetime=239232" "--option=kdc:renewal lifetime=239232"
720 #and having in krb5.conf:
721 # ticket_lifetime = 799718400
722 # renew_lifetime = 799718400
724 # The commands for the -2 keytab where were:
725 # kinit administrator@KTEST.SAMBA.EXAMPLE.COM
726 # kvno host/localktest6@KTEST.SAMBA.EXAMPLE.COM
727 # kvno cifs/localktest6@KTEST.SAMBA.EXAMPLE.COM
728 # kvno host/LOCALKTEST6@KTEST.SAMBA.EXAMPLE.COM
729 # kvno cifs/LOCALKTEST6@KTEST.SAMBA.EXAMPLE.COM
731 # and then for the -3 keytab, I did
733 # net changetrustpw; kdestroy and the same again.
735 # This creates a credential cache with a very long lifetime (2036 at
736 # at 2011-04), and shows that running 'net changetrustpw' does not
737 # break existing logins (for the secrets.tdb method at least).
740 $ret->{KRB5_CCACHE}="FILE:$prefix/krb5_ccache";
742 system("cp $self->{srcdir}/source3/selftest/ktest-krb5_ccache-2 $prefix/krb5_ccache-2");
743 chmod 0600, "$prefix/krb5_ccache-2";
745 system("cp $self->{srcdir}/source3/selftest/ktest-krb5_ccache-3 $prefix/krb5_ccache-3");
746 chmod 0600, "$prefix/krb5_ccache-3";
748 # We need world access to this share, as otherwise the domain
749 # administrator from the AD domain provided by ktest can't
750 # access the share for tests.
751 chmod 0777, "$prefix/share";
753 if (not $self->check_or_start($ret, "yes", "no", "yes")) {
754 return undef;
756 return $ret;
759 sub setup_maptoguest($$)
761 my ($self, $path) = @_;
763 print "PROVISIONING maptoguest...";
765 my $options = "
766 map to guest = bad user
769 my $vars = $self->provision($path,
770 "maptoguest",
771 "maptoguestpass",
772 $options);
774 $vars or return undef;
776 if (not $self->check_or_start($vars, "yes", "no", "yes")) {
777 return undef;
780 $self->{vars}->{s3maptoguest} = $vars;
782 return $vars;
785 sub stop_sig_term($$) {
786 my ($self, $pid) = @_;
787 kill("USR1", $pid) or kill("ALRM", $pid) or warn("Unable to kill $pid: $!");
790 sub stop_sig_kill($$) {
791 my ($self, $pid) = @_;
792 kill("ALRM", $pid) or warn("Unable to kill $pid: $!");
795 sub write_pid($$$)
797 my ($env_vars, $app, $pid) = @_;
799 open(PID, ">$env_vars->{PIDDIR}/timelimit.$app.pid");
800 print PID $pid;
801 close(PID);
804 sub read_pid($$)
806 my ($env_vars, $app) = @_;
808 open(PID, "<$env_vars->{PIDDIR}/timelimit.$app.pid");
809 my $pid = <PID>;
810 close(PID);
811 return $pid;
814 sub check_or_start($$$$$) {
815 my ($self, $env_vars, $nmbd, $winbindd, $smbd) = @_;
817 # use a pipe for stdin in the child processes. This allows
818 # those processes to monitor the pipe for EOF to ensure they
819 # exit when the test script exits
820 pipe(STDIN_READER, $env_vars->{STDIN_PIPE});
822 unlink($env_vars->{NMBD_TEST_LOG});
823 print "STARTING NMBD...";
824 my $pid = fork();
825 if ($pid == 0) {
826 open STDOUT, ">$env_vars->{NMBD_TEST_LOG}";
827 open STDERR, '>&STDOUT';
829 SocketWrapper::set_default_iface($env_vars->{SOCKET_WRAPPER_DEFAULT_IFACE});
831 $ENV{KRB5_CONFIG} = $env_vars->{KRB5_CONFIG};
832 $ENV{SELFTEST_WINBINDD_SOCKET_DIR} = $env_vars->{SELFTEST_WINBINDD_SOCKET_DIR};
833 $ENV{NMBD_SOCKET_DIR} = $env_vars->{NMBD_SOCKET_DIR};
835 $ENV{NSS_WRAPPER_PASSWD} = $env_vars->{NSS_WRAPPER_PASSWD};
836 $ENV{NSS_WRAPPER_GROUP} = $env_vars->{NSS_WRAPPER_GROUP};
837 $ENV{NSS_WRAPPER_HOSTS} = $env_vars->{NSS_WRAPPER_HOSTS};
838 $ENV{NSS_WRAPPER_HOSTNAME} = $env_vars->{NSS_WRAPPER_HOSTNAME};
839 $ENV{NSS_WRAPPER_MODULE_SO_PATH} = $env_vars->{NSS_WRAPPER_MODULE_SO_PATH};
840 $ENV{NSS_WRAPPER_MODULE_FN_PREFIX} = $env_vars->{NSS_WRAPPER_MODULE_FN_PREFIX};
842 $ENV{ENVNAME} = "$ENV{ENVNAME}.nmbd";
844 if ($nmbd ne "yes") {
845 $SIG{USR1} = $SIG{ALRM} = $SIG{INT} = $SIG{QUIT} = $SIG{TERM} = sub {
846 my $signame = shift;
847 print("Skip nmbd received signal $signame");
848 exit 0;
850 sleep($self->{server_maxtime});
851 exit 0;
854 $ENV{MAKE_TEST_BINARY} = Samba::bindir_path($self, "nmbd");
855 my @optargs = ("-d0");
856 if (defined($ENV{NMBD_OPTIONS})) {
857 @optargs = split(/ /, $ENV{NMBD_OPTIONS});
859 my @preargs = (Samba::bindir_path($self, "timelimit"), $self->{server_maxtime});
860 if(defined($ENV{NMBD_VALGRIND})) {
861 @preargs = split(/ /, $ENV{NMBD_VALGRIND});
863 my @args = ("-F", "--no-process-group",
864 "-s", $env_vars->{SERVERCONFFILE},
865 "-l", $env_vars->{LOGDIR});
866 if (not defined($ENV{NMBD_DONT_LOG_STDOUT})) {
867 push(@args, "--log-stdout");
870 close($env_vars->{STDIN_PIPE});
871 open STDIN, ">&", \*STDIN_READER or die "can't dup STDIN_READER to STDIN: $!";
873 exec(@preargs, $ENV{MAKE_TEST_BINARY}, @args, @optargs)
874 or die("Unable to start $ENV{MAKE_TEST_BINARY}: $!");
876 $env_vars->{NMBD_TL_PID} = $pid;
877 write_pid($env_vars, "nmbd", $pid);
878 print "DONE\n";
880 unlink($env_vars->{WINBINDD_TEST_LOG});
881 print "STARTING WINBINDD...";
882 $pid = fork();
883 if ($pid == 0) {
884 open STDOUT, ">$env_vars->{WINBINDD_TEST_LOG}";
885 open STDERR, '>&STDOUT';
887 SocketWrapper::set_default_iface($env_vars->{SOCKET_WRAPPER_DEFAULT_IFACE});
889 $ENV{KRB5_CONFIG} = $env_vars->{KRB5_CONFIG};
890 $ENV{SELFTEST_WINBINDD_SOCKET_DIR} = $env_vars->{SELFTEST_WINBINDD_SOCKET_DIR};
891 $ENV{NMBD_SOCKET_DIR} = $env_vars->{NMBD_SOCKET_DIR};
893 $ENV{NSS_WRAPPER_PASSWD} = $env_vars->{NSS_WRAPPER_PASSWD};
894 $ENV{NSS_WRAPPER_GROUP} = $env_vars->{NSS_WRAPPER_GROUP};
895 $ENV{NSS_WRAPPER_HOSTS} = $env_vars->{NSS_WRAPPER_HOSTS};
896 $ENV{NSS_WRAPPER_HOSTNAME} = $env_vars->{NSS_WRAPPER_HOSTNAME};
897 $ENV{NSS_WRAPPER_MODULE_SO_PATH} = $env_vars->{NSS_WRAPPER_MODULE_SO_PATH};
898 $ENV{NSS_WRAPPER_MODULE_FN_PREFIX} = $env_vars->{NSS_WRAPPER_MODULE_FN_PREFIX};
899 if (defined($env_vars->{RESOLV_WRAPPER_CONF})) {
900 $ENV{RESOLV_WRAPPER_CONF} = $env_vars->{RESOLV_WRAPPER_CONF};
901 } else {
902 $ENV{RESOLV_WRAPPER_HOSTS} = $env_vars->{RESOLV_WRAPPER_HOSTS};
905 $ENV{ENVNAME} = "$ENV{ENVNAME}.winbindd";
907 if ($winbindd ne "yes") {
908 $SIG{USR1} = $SIG{ALRM} = $SIG{INT} = $SIG{QUIT} = $SIG{TERM} = sub {
909 my $signame = shift;
910 print("Skip winbindd received signal $signame");
911 exit 0;
913 sleep($self->{server_maxtime});
914 exit 0;
917 $ENV{MAKE_TEST_BINARY} = Samba::bindir_path($self, "winbindd");
918 my @optargs = ("-d0");
919 if (defined($ENV{WINBINDD_OPTIONS})) {
920 @optargs = split(/ /, $ENV{WINBINDD_OPTIONS});
922 my @preargs = (Samba::bindir_path($self, "timelimit"), $self->{server_maxtime});
923 if(defined($ENV{WINBINDD_VALGRIND})) {
924 @preargs = split(/ /, $ENV{WINBINDD_VALGRIND});
926 my @args = ("-F", "--no-process-group",
927 "-s", $env_vars->{SERVERCONFFILE},
928 "-l", $env_vars->{LOGDIR});
929 if (not defined($ENV{WINBINDD_DONT_LOG_STDOUT})) {
930 push(@args, "--stdout");
933 close($env_vars->{STDIN_PIPE});
934 open STDIN, ">&", \*STDIN_READER or die "can't dup STDIN_READER to STDIN: $!";
936 exec(@preargs, $ENV{MAKE_TEST_BINARY}, @args, @optargs)
937 or die("Unable to start $ENV{MAKE_TEST_BINARY}: $!");
939 $env_vars->{WINBINDD_TL_PID} = $pid;
940 write_pid($env_vars, "winbindd", $pid);
941 print "DONE\n";
943 unlink($env_vars->{SMBD_TEST_LOG});
944 print "STARTING SMBD...";
945 $pid = fork();
946 if ($pid == 0) {
947 open STDOUT, ">$env_vars->{SMBD_TEST_LOG}";
948 open STDERR, '>&STDOUT';
950 SocketWrapper::set_default_iface($env_vars->{SOCKET_WRAPPER_DEFAULT_IFACE});
952 $ENV{KRB5_CONFIG} = $env_vars->{KRB5_CONFIG};
953 $ENV{SELFTEST_WINBINDD_SOCKET_DIR} = $env_vars->{SELFTEST_WINBINDD_SOCKET_DIR};
954 $ENV{NMBD_SOCKET_DIR} = $env_vars->{NMBD_SOCKET_DIR};
956 $ENV{NSS_WRAPPER_PASSWD} = $env_vars->{NSS_WRAPPER_PASSWD};
957 $ENV{NSS_WRAPPER_GROUP} = $env_vars->{NSS_WRAPPER_GROUP};
958 $ENV{NSS_WRAPPER_HOSTS} = $env_vars->{NSS_WRAPPER_HOSTS};
959 $ENV{NSS_WRAPPER_HOSTNAME} = $env_vars->{NSS_WRAPPER_HOSTNAME};
960 $ENV{NSS_WRAPPER_MODULE_SO_PATH} = $env_vars->{NSS_WRAPPER_MODULE_SO_PATH};
961 $ENV{NSS_WRAPPER_MODULE_FN_PREFIX} = $env_vars->{NSS_WRAPPER_MODULE_FN_PREFIX};
962 if (defined($env_vars->{RESOLV_WRAPPER_CONF})) {
963 $ENV{RESOLV_WRAPPER_CONF} = $env_vars->{RESOLV_WRAPPER_CONF};
964 } else {
965 $ENV{RESOLV_WRAPPER_HOSTS} = $env_vars->{RESOLV_WRAPPER_HOSTS};
968 $ENV{ENVNAME} = "$ENV{ENVNAME}.smbd";
970 if ($smbd ne "yes") {
971 $SIG{USR1} = $SIG{ALRM} = $SIG{INT} = $SIG{QUIT} = $SIG{TERM} = sub {
972 my $signame = shift;
973 print("Skip smbd received signal $signame");
974 exit 0;
976 sleep($self->{server_maxtime});
977 exit 0;
980 $ENV{MAKE_TEST_BINARY} = Samba::bindir_path($self, "smbd");
981 my @optargs = ("-d0");
982 if (defined($ENV{SMBD_OPTIONS})) {
983 @optargs = split(/ /, $ENV{SMBD_OPTIONS});
985 my @preargs = (Samba::bindir_path($self, "timelimit"), $self->{server_maxtime});
986 if(defined($ENV{SMBD_VALGRIND})) {
987 @preargs = split(/ /,$ENV{SMBD_VALGRIND});
989 my @args = ("-F", "--no-process-group",
990 "-s", $env_vars->{SERVERCONFFILE},
991 "-l", $env_vars->{LOGDIR});
992 if (not defined($ENV{SMBD_DONT_LOG_STDOUT})) {
993 push(@args, "--log-stdout");
996 close($env_vars->{STDIN_PIPE});
997 open STDIN, ">&", \*STDIN_READER or die "can't dup STDIN_READER to STDIN: $!";
999 exec(@preargs, $ENV{MAKE_TEST_BINARY}, @args, @optargs)
1000 or die("Unable to start $ENV{MAKE_TEST_BINARY}: $!");
1002 $env_vars->{SMBD_TL_PID} = $pid;
1003 write_pid($env_vars, "smbd", $pid);
1004 print "DONE\n";
1006 close(STDIN_READER);
1008 return $self->wait_for_start($env_vars, $nmbd, $winbindd, $smbd);
1011 sub provision($$$$$$$$)
1013 my ($self, $prefix, $server, $password, $extra_options, $dc_server_ip, $dc_server_ipv6, $no_delete_prefix) = @_;
1016 ## setup the various environment variables we need
1019 my $swiface = Samba::get_interface($server);
1020 my %ret = ();
1021 my $server_ip = "127.0.0.$swiface";
1022 my $server_ipv6 = sprintf("fd00:0000:0000:0000:0000:0000:5357:5f%02x", $swiface);
1023 my $domain = "SAMBA-TEST";
1025 my $unix_name = ($ENV{USER} or $ENV{LOGNAME} or `PATH=/usr/ucb:$ENV{PATH} whoami`);
1026 chomp $unix_name;
1027 my $unix_uid = $>;
1028 my $unix_gids_str = $);
1029 my @unix_gids = split(" ", $unix_gids_str);
1031 my $prefix_abs = abs_path($prefix);
1032 my $bindir_abs = abs_path($self->{bindir});
1034 my @dirs = ();
1036 my $shrdir="$prefix_abs/share";
1037 push(@dirs,$shrdir);
1039 my $libdir="$prefix_abs/lib";
1040 push(@dirs,$libdir);
1042 my $piddir="$prefix_abs/pid";
1043 push(@dirs,$piddir);
1045 my $privatedir="$prefix_abs/private";
1046 push(@dirs,$privatedir);
1048 my $lockdir="$prefix_abs/lockdir";
1049 push(@dirs,$lockdir);
1051 my $eventlogdir="$prefix_abs/lockdir/eventlog";
1052 push(@dirs,$eventlogdir);
1054 my $logdir="$prefix_abs/logs";
1055 push(@dirs,$logdir);
1057 my $driver32dir="$shrdir/W32X86";
1058 push(@dirs,$driver32dir);
1060 my $driver64dir="$shrdir/x64";
1061 push(@dirs,$driver64dir);
1063 my $driver40dir="$shrdir/WIN40";
1064 push(@dirs,$driver40dir);
1066 my $ro_shrdir="$shrdir/root-tmp";
1067 push(@dirs,$ro_shrdir);
1069 my $msdfs_shrdir="$shrdir/msdfsshare";
1070 push(@dirs,$msdfs_shrdir);
1072 my $msdfs_deeppath="$msdfs_shrdir/deeppath";
1073 push(@dirs,$msdfs_deeppath);
1075 my $badnames_shrdir="$shrdir/badnames";
1076 push(@dirs,$badnames_shrdir);
1078 my $lease1_shrdir="$shrdir/SMB2_10";
1079 push(@dirs,$lease1_shrdir);
1081 my $lease2_shrdir="$shrdir/SMB3_00";
1082 push(@dirs,$lease2_shrdir);
1084 my $manglenames_shrdir="$shrdir/manglenames";
1085 push(@dirs,$manglenames_shrdir);
1087 # this gets autocreated by winbindd
1088 my $wbsockdir="$prefix_abs/winbindd";
1089 my $wbsockprivdir="$lockdir/winbindd_privileged";
1091 my $nmbdsockdir="$prefix_abs/nmbd";
1092 unlink($nmbdsockdir);
1095 ## create the test directory layout
1097 die ("prefix_abs = ''") if $prefix_abs eq "";
1098 die ("prefix_abs = '/'") if $prefix_abs eq "/";
1100 mkdir($prefix_abs, 0777);
1101 print "CREATE TEST ENVIRONMENT IN '$prefix'...";
1102 if (not defined($no_delete_prefix) or not $no_delete_prefix) {
1103 system("rm -rf $prefix_abs/*");
1105 mkdir($_, 0777) foreach(@dirs);
1107 my $fs_specific_conf = $self->get_fs_specific_conf($shrdir);
1110 ## lockdir and piddir must be 0755
1112 chmod 0755, $lockdir;
1113 chmod 0755, $piddir;
1117 ## create ro and msdfs share layout
1120 chmod 0755, $ro_shrdir;
1121 my $unreadable_file = "$ro_shrdir/unreadable_file";
1122 unless (open(UNREADABLE_FILE, ">$unreadable_file")) {
1123 warn("Unable to open $unreadable_file");
1124 return undef;
1126 close(UNREADABLE_FILE);
1127 chmod 0600, $unreadable_file;
1129 my $msdfs_target = "$ro_shrdir/msdfs-target";
1130 unless (open(MSDFS_TARGET, ">$msdfs_target")) {
1131 warn("Unable to open $msdfs_target");
1132 return undef;
1134 close(MSDFS_TARGET);
1135 chmod 0666, $msdfs_target;
1136 symlink "msdfs:$server_ip\\ro-tmp,$server_ipv6\\ro-tmp",
1137 "$msdfs_shrdir/msdfs-src1";
1138 symlink "msdfs:$server_ipv6\\ro-tmp", "$msdfs_shrdir/deeppath/msdfs-src2";
1141 ## create bad names in $badnames_shrdir
1143 ## (An invalid name, would be mangled to 8.3).
1144 my $badname_target = "$badnames_shrdir/\340|\231\216\377\177";
1145 unless (open(BADNAME_TARGET, ">$badname_target")) {
1146 warn("Unable to open $badname_target");
1147 return undef;
1149 close(BADNAME_TARGET);
1150 chmod 0666, $badname_target;
1152 ## (A bad name, would not be mangled to 8.3).
1153 my $badname_target = "$badnames_shrdir/\240\276\346\327\377\177";
1154 unless (open(BADNAME_TARGET, ">$badname_target")) {
1155 warn("Unable to open $badname_target");
1156 return undef;
1158 close(BADNAME_TARGET);
1159 chmod 0666, $badname_target;
1161 ## (A bad good name).
1162 my $badname_target = "$badnames_shrdir/blank.txt";
1163 unless (open(BADNAME_TARGET, ">$badname_target")) {
1164 warn("Unable to open $badname_target");
1165 return undef;
1167 close(BADNAME_TARGET);
1168 chmod 0666, $badname_target;
1171 ## create mangleable directory names in $manglenames_shrdir
1173 my $manglename_target = "$manglenames_shrdir/foo:bar";
1174 mkdir($manglename_target, 0777);
1176 my $conffile="$libdir/server.conf";
1178 my $nss_wrapper_pl = "$ENV{PERL} $self->{srcdir}/lib/nss_wrapper/nss_wrapper.pl";
1179 my $nss_wrapper_passwd = "$privatedir/passwd";
1180 my $nss_wrapper_group = "$privatedir/group";
1181 my $nss_wrapper_hosts = "$ENV{SELFTEST_PREFIX}/hosts";
1182 my $resolv_conf = "$privatedir/resolv.conf";
1183 my $dns_host_file = "$ENV{SELFTEST_PREFIX}/dns_host_file";
1185 my $mod_printer_pl = "$ENV{PERL} $self->{srcdir}/source3/script/tests/printing/modprinter.pl";
1187 my $fake_snap_pl = "$ENV{PERL} $self->{srcdir}/source3/script/tests/fake_snap.pl";
1189 my @eventlog_list = ("dns server", "application");
1192 ## calculate uids and gids
1195 my ($max_uid, $max_gid);
1196 my ($uid_nobody, $uid_root, $uid_pdbtest, $uid_pdbtest2);
1197 my ($gid_nobody, $gid_nogroup, $gid_root, $gid_domusers, $gid_domadmins);
1199 if ($unix_uid < 0xffff - 4) {
1200 $max_uid = 0xffff;
1201 } else {
1202 $max_uid = $unix_uid;
1205 $uid_root = $max_uid - 1;
1206 $uid_nobody = $max_uid - 2;
1207 $uid_pdbtest = $max_uid - 3;
1208 $uid_pdbtest2 = $max_uid - 4;
1210 if ($unix_gids[0] < 0xffff - 5) {
1211 $max_gid = 0xffff;
1212 } else {
1213 $max_gid = $unix_gids[0];
1216 $gid_nobody = $max_gid - 1;
1217 $gid_nogroup = $max_gid - 2;
1218 $gid_root = $max_gid - 3;
1219 $gid_domusers = $max_gid - 4;
1220 $gid_domadmins = $max_gid - 5;
1223 ## create conffile
1226 unless (open(CONF, ">$conffile")) {
1227 warn("Unable to open $conffile");
1228 return undef;
1230 print CONF "
1231 [global]
1232 netbios name = $server
1233 interfaces = $server_ip/8 $server_ipv6/64
1234 bind interfaces only = yes
1235 panic action = cd $self->{srcdir} && $self->{srcdir}/selftest/gdb_backtrace %d %\$(MAKE_TEST_BINARY)
1236 smbd:suicide mode = yes
1238 workgroup = $domain
1240 private dir = $privatedir
1241 pid directory = $piddir
1242 lock directory = $lockdir
1243 log file = $logdir/log.\%m
1244 log level = 1
1245 debug pid = yes
1246 max log size = 0
1248 state directory = $lockdir
1249 cache directory = $lockdir
1251 passdb backend = tdbsam
1253 time server = yes
1255 add user script = $nss_wrapper_pl --passwd_path $nss_wrapper_passwd --type passwd --action add --name %u --gid $gid_nogroup
1256 add group script = $nss_wrapper_pl --group_path $nss_wrapper_group --type group --action add --name %g
1257 add machine script = $nss_wrapper_pl --passwd_path $nss_wrapper_passwd --type passwd --action add --name %u --gid $gid_nogroup
1258 add user to group script = $nss_wrapper_pl --passwd_path $nss_wrapper_passwd --type member --action add --member %u --name %g --group_path $nss_wrapper_group
1259 delete user script = $nss_wrapper_pl --passwd_path $nss_wrapper_passwd --type passwd --action delete --name %u
1260 delete group script = $nss_wrapper_pl --group_path $nss_wrapper_group --type group --action delete --name %g
1261 delete user from group script = $nss_wrapper_pl --passwd_path $nss_wrapper_passwd --type member --action delete --member %u --name %g --group_path $nss_wrapper_group
1263 addprinter command = $mod_printer_pl -a -s $conffile --
1264 deleteprinter command = $mod_printer_pl -d -s $conffile --
1266 eventlog list = application \"dns server\"
1268 kernel oplocks = no
1269 kernel change notify = no
1270 smb2 leases = yes
1272 logging = file
1273 printing = bsd
1274 printcap name = /dev/null
1276 winbindd socket directory = $wbsockdir
1277 nmbd:socket dir = $nmbdsockdir
1278 idmap config * : range = 100000-200000
1279 winbind enum users = yes
1280 winbind enum groups = yes
1281 winbind separator = /
1283 # min receivefile size = 4000
1285 read only = no
1286 server signing = auto
1288 smbd:sharedelay = 100000
1289 smbd:writetimeupdatedelay = 500000
1290 map hidden = no
1291 map system = no
1292 map readonly = no
1293 store dos attributes = yes
1294 create mask = 755
1295 dos filemode = yes
1296 strict rename = yes
1297 vfs objects = acl_xattr fake_acls xattr_tdb streams_depot
1299 printing = vlp
1300 print command = $bindir_abs/vlp tdbfile=$lockdir/vlp.tdb print %p %s
1301 lpq command = $bindir_abs/vlp tdbfile=$lockdir/vlp.tdb lpq %p
1302 lp rm command = $bindir_abs/vlp tdbfile=$lockdir/vlp.tdb lprm %p %j
1303 lp pause command = $bindir_abs/vlp tdbfile=$lockdir/vlp.tdb lppause %p %j
1304 lp resume command = $bindir_abs/vlp tdbfile=$lockdir/vlp.tdb lpresume %p %j
1305 queue pause command = $bindir_abs/vlp tdbfile=$lockdir/vlp.tdb queuepause %p
1306 queue resume command = $bindir_abs/vlp tdbfile=$lockdir/vlp.tdb queueresume %p
1307 lpq cache time = 0
1308 print notify backchannel = yes
1310 ncalrpc dir = $prefix_abs/ncalrpc
1312 # The samba3.blackbox.smbclient_s3 test uses this to test that
1313 # sending messages works, and that the %m sub works.
1314 message command = mv %s $shrdir/message.%m
1316 # fsrvp server requires registry shares
1317 registry shares = yes
1319 # Used by RPC SRVSVC tests
1320 add share command = $bindir_abs/smbaddshare
1321 change share command = $bindir_abs/smbchangeshare
1322 delete share command = $bindir_abs/smbdeleteshare
1324 # fruit:copyfile is a global option
1325 fruit:copyfile = yes
1327 # Begin extra options
1328 $extra_options
1329 # End extra options
1331 #Include user defined custom parameters if set
1334 if (defined($ENV{INCLUDE_CUSTOM_CONF})) {
1335 print CONF "\t$ENV{INCLUDE_CUSTOM_CONF}\n";
1338 print CONF "
1339 [tmp]
1340 path = $shrdir
1341 comment = smb username is [%U]
1342 [tmpsort]
1343 path = $shrdir
1344 comment = Load dirsort module
1345 vfs objects = dirsort acl_xattr fake_acls xattr_tdb streams_depot
1346 [tmpenc]
1347 path = $shrdir
1348 comment = encrypt smb username is [%U]
1349 smb encrypt = required
1350 vfs objects = dirsort
1351 [tmpguest]
1352 path = $shrdir
1353 guest ok = yes
1354 [guestonly]
1355 path = $shrdir
1356 guest only = yes
1357 guest ok = yes
1358 [forceuser]
1359 path = $shrdir
1360 force user = $unix_name
1361 guest ok = yes
1362 [forceuser_unixonly]
1363 path = $shrdir
1364 force user = pdbtest
1365 guest ok = yes
1366 [forcegroup]
1367 path = $shrdir
1368 force group = nogroup
1369 guest ok = yes
1370 [ro-tmp]
1371 path = $ro_shrdir
1372 guest ok = yes
1373 [write-list-tmp]
1374 path = $shrdir
1375 read only = yes
1376 write list = $unix_name
1377 [valid-users-tmp]
1378 path = $shrdir
1379 valid users = $unix_name
1380 [msdfs-share]
1381 path = $msdfs_shrdir
1382 msdfs root = yes
1383 msdfs shuffle referrals = yes
1384 guest ok = yes
1385 [hideunread]
1386 copy = tmp
1387 hide unreadable = yes
1388 [tmpcase]
1389 copy = tmp
1390 case sensitive = yes
1391 [hideunwrite]
1392 copy = tmp
1393 hide unwriteable files = yes
1394 [durable]
1395 copy = tmp
1396 kernel share modes = no
1397 kernel oplocks = no
1398 posix locking = no
1399 [fs_specific]
1400 copy = tmp
1401 $fs_specific_conf
1402 [print1]
1403 copy = tmp
1404 printable = yes
1406 [print2]
1407 copy = print1
1408 [print3]
1409 copy = print1
1410 default devmode = no
1411 [lp]
1412 copy = print1
1414 [nfs4acl_simple]
1415 path = $shrdir
1416 comment = smb username is [%U]
1417 nfs4:mode = simple
1418 vfs objects = nfs4acl_xattr xattr_tdb
1420 [nfs4acl_special]
1421 path = $shrdir
1422 comment = smb username is [%U]
1423 nfs4:mode = special
1424 vfs objects = nfs4acl_xattr xattr_tdb
1426 [xcopy_share]
1427 path = $shrdir
1428 comment = smb username is [%U]
1429 create mask = 777
1430 force create mode = 777
1431 [posix_share]
1432 path = $shrdir
1433 comment = smb username is [%U]
1434 create mask = 0777
1435 force create mode = 0
1436 directory mask = 0777
1437 force directory mode = 0
1438 vfs objects = xattr_tdb
1439 [aio]
1440 copy = tmp
1441 aio read size = 1
1442 aio write size = 1
1444 [print\$]
1445 copy = tmp
1447 [vfs_fruit]
1448 path = $shrdir
1449 vfs objects = catia fruit streams_xattr
1450 fruit:ressource = file
1451 fruit:metadata = netatalk
1452 fruit:locking = netatalk
1453 fruit:encoding = native
1455 [badname-tmp]
1456 path = $badnames_shrdir
1457 guest ok = yes
1459 [manglenames_share]
1460 path = $manglenames_shrdir
1461 guest ok = yes
1463 [dynamic_share]
1464 path = $shrdir/%R
1465 guest ok = yes
1467 [fsrvp_share]
1468 path = $shrdir
1469 comment = fake shapshots using rsync
1470 vfs objects = shell_snap shadow_copy2
1471 shell_snap:check path command = $fake_snap_pl --check
1472 shell_snap:create command = $fake_snap_pl --create
1473 shell_snap:delete command = $fake_snap_pl --delete
1474 # a relative path here fails, the snapshot dir is no longer found
1475 shadow:snapdir = $shrdir/.snapshots
1477 close(CONF);
1480 ## create a test account
1483 unless (open(PASSWD, ">$nss_wrapper_passwd")) {
1484 warn("Unable to open $nss_wrapper_passwd");
1485 return undef;
1487 print PASSWD "nobody:x:$uid_nobody:$gid_nobody:nobody gecos:$prefix_abs:/bin/false
1488 $unix_name:x:$unix_uid:$unix_gids[0]:$unix_name gecos:$prefix_abs:/bin/false
1489 pdbtest:x:$uid_pdbtest:$gid_nogroup:pdbtest gecos:$prefix_abs:/bin/false
1490 pdbtest2:x:$uid_pdbtest2:$gid_nogroup:pdbtest gecos:$prefix_abs:/bin/false
1492 if ($unix_uid != 0) {
1493 print PASSWD "root:x:$uid_root:$gid_root:root gecos:$prefix_abs:/bin/false
1496 close(PASSWD);
1498 unless (open(GROUP, ">$nss_wrapper_group")) {
1499 warn("Unable to open $nss_wrapper_group");
1500 return undef;
1502 print GROUP "nobody:x:$gid_nobody:
1503 nogroup:x:$gid_nogroup:nobody
1504 $unix_name-group:x:$unix_gids[0]:
1505 domusers:X:$gid_domusers:
1506 domadmins:X:$gid_domadmins:
1508 if ($unix_gids[0] != 0) {
1509 print GROUP "root:x:$gid_root:
1513 close(GROUP);
1515 ## hosts
1516 my $hostname = lc($server);
1517 unless (open(HOSTS, ">>$nss_wrapper_hosts")) {
1518 warn("Unable to open $nss_wrapper_hosts");
1519 return undef;
1521 print HOSTS "${server_ip} ${hostname}.samba.example.com ${hostname}\n";
1522 print HOSTS "${server_ipv6} ${hostname}.samba.example.com ${hostname}\n";
1523 close(HOSTS);
1525 ## hosts
1526 unless (open(RESOLV_CONF, ">$resolv_conf")) {
1527 warn("Unable to open $resolv_conf");
1528 return undef;
1530 if (defined($dc_server_ip) or defined($dc_server_ipv6)) {
1531 if (defined($dc_server_ip)) {
1532 print RESOLV_CONF "nameserver $dc_server_ip\n";
1534 if (defined($dc_server_ipv6)) {
1535 print RESOLV_CONF "nameserver $dc_server_ipv6\n";
1537 } else {
1538 print RESOLV_CONF "nameserver ${server_ip}\n";
1539 print RESOLV_CONF "nameserver ${server_ipv6}\n";
1541 close(RESOLV_CONF);
1543 foreach my $evlog (@eventlog_list) {
1544 my $evlogtdb = "$eventlogdir/$evlog.tdb";
1545 open(EVENTLOG, ">$evlogtdb") or die("Unable to open $evlogtdb");
1546 close(EVENTLOG);
1549 $ENV{NSS_WRAPPER_PASSWD} = $nss_wrapper_passwd;
1550 $ENV{NSS_WRAPPER_GROUP} = $nss_wrapper_group;
1551 $ENV{NSS_WRAPPER_HOSTS} = $nss_wrapper_hosts;
1552 $ENV{NSS_WRAPPER_HOSTNAME} = "${hostname}.samba.example.com";
1553 if ($ENV{SAMBA_DNS_FAKING}) {
1554 $ENV{RESOLV_WRAPPER_CONF} = $resolv_conf;
1555 } else {
1556 $ENV{RESOLV_WRAPPER_HOSTS} = $dns_host_file;
1559 my $cmd = "UID_WRAPPER_ROOT=1 " . Samba::bindir_path($self, "smbpasswd")." -c $conffile -L -s -a $unix_name > /dev/null";
1560 unless (open(PWD, "|$cmd")) {
1561 warn("Unable to set password for test account\n$cmd");
1562 return undef;
1564 print PWD "$password\n$password\n";
1565 unless (close(PWD)) {
1566 warn("Unable to set password for test account\n$cmd");
1567 return undef;
1569 print "DONE\n";
1571 open(DNS_UPDATE_LIST, ">$prefix/dns_update_list") or die("Unable to open $$prefix/dns_update_list");
1572 print DNS_UPDATE_LIST "A $server. $server_ip\n";
1573 print DNS_UPDATE_LIST "AAAA $server. $server_ipv6\n";
1574 close(DNS_UPDATE_LIST);
1576 $ret{SERVER_IP} = $server_ip;
1577 $ret{SERVER_IPV6} = $server_ipv6;
1578 $ret{NMBD_TEST_LOG} = "$prefix/nmbd_test.log";
1579 $ret{NMBD_TEST_LOG_POS} = 0;
1580 $ret{WINBINDD_TEST_LOG} = "$prefix/winbindd_test.log";
1581 $ret{WINBINDD_TEST_LOG_POS} = 0;
1582 $ret{SMBD_TEST_LOG} = "$prefix/smbd_test.log";
1583 $ret{SMBD_TEST_LOG_POS} = 0;
1584 $ret{SERVERCONFFILE} = $conffile;
1585 $ret{CONFIGURATION} ="-s $conffile";
1586 $ret{SERVER} = $server;
1587 $ret{USERNAME} = $unix_name;
1588 $ret{USERID} = $unix_uid;
1589 $ret{DOMAIN} = $domain;
1590 $ret{NETBIOSNAME} = $server;
1591 $ret{PASSWORD} = $password;
1592 $ret{PIDDIR} = $piddir;
1593 $ret{SELFTEST_WINBINDD_SOCKET_DIR} = $wbsockdir;
1594 $ret{WINBINDD_PRIV_PIPE_DIR} = $wbsockprivdir;
1595 $ret{NMBD_SOCKET_DIR} = $nmbdsockdir;
1596 $ret{SOCKET_WRAPPER_DEFAULT_IFACE} = $swiface;
1597 $ret{NSS_WRAPPER_PASSWD} = $nss_wrapper_passwd;
1598 $ret{NSS_WRAPPER_GROUP} = $nss_wrapper_group;
1599 $ret{NSS_WRAPPER_HOSTS} = $nss_wrapper_hosts;
1600 $ret{NSS_WRAPPER_HOSTNAME} = "${hostname}.samba.example.com";
1601 $ret{NSS_WRAPPER_MODULE_SO_PATH} = Samba::nss_wrapper_winbind_so_path($self);
1602 $ret{NSS_WRAPPER_MODULE_FN_PREFIX} = "winbind";
1603 if ($ENV{SAMBA_DNS_FAKING}) {
1604 $ret{RESOLV_WRAPPER_HOSTS} = $dns_host_file;
1605 } else {
1606 $ret{RESOLV_WRAPPER_CONF} = $resolv_conf;
1608 $ret{LOCAL_PATH} = "$shrdir";
1609 $ret{LOGDIR} = $logdir;
1611 return \%ret;
1614 sub wait_for_start($$$$$)
1616 my ($self, $envvars, $nmbd, $winbindd, $smbd) = @_;
1617 my $ret;
1619 if ($nmbd eq "yes") {
1620 my $count = 0;
1622 # give time for nbt server to register its names
1623 print "checking for nmbd\n";
1625 # This will return quickly when things are up, but be slow if we need to wait for (eg) SSL init
1626 my $nmblookup = Samba::bindir_path($self, "nmblookup");
1628 do {
1629 $ret = system("$nmblookup $envvars->{CONFIGURATION} $envvars->{SERVER}");
1630 if ($ret != 0) {
1631 sleep(1);
1632 } else {
1633 system("$nmblookup $envvars->{CONFIGURATION} -U $envvars->{SERVER_IP} __SAMBA__");
1634 system("$nmblookup $envvars->{CONFIGURATION} __SAMBA__");
1635 system("$nmblookup $envvars->{CONFIGURATION} -U 127.255.255.255 __SAMBA__");
1636 system("$nmblookup $envvars->{CONFIGURATION} -U $envvars->{SERVER_IP} $envvars->{SERVER}");
1638 $count++;
1639 } while ($ret != 0 && $count < 10);
1640 if ($count == 10) {
1641 print "NMBD not reachable after 10 retries\n";
1642 teardown_env($self, $envvars);
1643 return 0;
1647 if ($winbindd eq "yes") {
1648 print "checking for winbindd\n";
1649 my $count = 0;
1650 do {
1651 $ret = system("SELFTEST_WINBINDD_SOCKET_DIR=" . $envvars->{SELFTEST_WINBINDD_SOCKET_DIR} . " " . Samba::bindir_path($self, "wbinfo") . " --ping-dc");
1652 if ($ret != 0) {
1653 sleep(2);
1655 $count++;
1656 } while ($ret != 0 && $count < 10);
1657 if ($count == 10) {
1658 print "WINBINDD not reachable after 20 seconds\n";
1659 teardown_env($self, $envvars);
1660 return 0;
1664 if ($smbd eq "yes") {
1665 # make sure smbd is also up set
1666 print "wait for smbd\n";
1668 my $count = 0;
1669 do {
1670 $ret = system(Samba::bindir_path($self, "smbclient") ." $envvars->{CONFIGURATION} -L $envvars->{SERVER} -U% -p 139");
1671 if ($ret != 0) {
1672 sleep(2);
1674 $count++
1675 } while ($ret != 0 && $count < 10);
1676 if ($count == 10) {
1677 print "SMBD failed to start up in a reasonable time (20sec)\n";
1678 teardown_env($self, $envvars);
1679 return 0;
1683 # Ensure we have domain users mapped.
1684 $ret = system(Samba::bindir_path($self, "net") ." $envvars->{CONFIGURATION} groupmap add rid=513 unixgroup=domusers type=domain");
1685 if ($ret != 0) {
1686 return 1;
1688 $ret = system(Samba::bindir_path($self, "net") ." $envvars->{CONFIGURATION} groupmap add rid=512 unixgroup=domadmins type=domain");
1689 if ($ret != 0) {
1690 return 1;
1693 if ($winbindd eq "yes") {
1694 # note: creating builtin groups requires winbindd for the
1695 # unix id allocator
1696 $ret = system("SELFTEST_WINBINDD_SOCKET_DIR=" . $envvars->{SELFTEST_WINBINDD_SOCKET_DIR} . " " . Samba::bindir_path($self, "net") ." $envvars->{CONFIGURATION} sam createbuiltingroup Users");
1697 if ($ret != 0) {
1698 print "Failed to create BUILTIN\\Users group\n";
1699 return 0;
1701 my $count = 0;
1702 do {
1703 system(Samba::bindir_path($self, "net") . " $envvars->{CONFIGURATION} cache flush");
1704 $ret = system("SELFTEST_WINBINDD_SOCKET_DIR=" . $envvars->{SELFTEST_WINBINDD_SOCKET_DIR} . " " . Samba::bindir_path($self, "wbinfo") . " --sid-to-gid=S-1-5-32-545");
1705 if ($ret != 0) {
1706 sleep(2);
1708 $count++;
1709 } while ($ret != 0 && $count < 10);
1710 if ($count == 10) {
1711 print "WINBINDD not reachable after 20 seconds\n";
1712 teardown_env($self, $envvars);
1713 return 0;
1717 print $self->getlog_env($envvars);
1719 return 1;