nsswitch/tests/test_wbinfo.sh

   1 #!/bin/sh
   2 # Blackbox test for wbinfo
   3 if [ $# -lt 4 ]; then
   4         cat <<EOF
   5 Usage: test_wbinfo.sh DOMAIN USERNAME PASSWORD TARGET
   6 EOF
   7         exit 1
   8 fi
   9
  10 DOMAIN=$1
  11 USERNAME=$2
  12 PASSWORD=$3
  13 TARGET=$4
  14 shift 4
  15
  16 failed=0
  17 samba4bindir="$BINDIR"
  18 wbinfo="$VALGRIND $samba4bindir/wbinfo"
  19
  20 . $(dirname $0)/../../testprogs/blackbox/subunit.sh
  21
  22 testfail()
  23 {
  24         name="$1"
  25         shift
  26         cmdline="$*"
  27         echo "test: $name"
  28         $cmdline
  29         status=$?
  30         if [ x$status = x0 ]; then
  31                 echo "failure: $name"
  32         else
  33                 echo "success: $name"
  34         fi
  35         return $status
  36 }
  37
  38 knownfail()
  39 {
  40         name="$1"
  41         shift
  42         cmdline="$*"
  43         echo "test: $name"
  44         $cmdline
  45         status=$?
  46         if [ x$status = x0 ]; then
  47                 echo "failure: $name [unexpected success]"
  48                 status=1
  49         else
  50                 echo "knownfail: $name"
  51                 status=0
  52         fi
  53         return $status
  54 }
  55
  56 KRB5CCNAME_PATH="$PREFIX/test_wbinfo_krb5ccache"
  57 rm -f $KRB5CCNAME_PATH
  58
  59 KRB5CCNAME="FILE:$KRB5CCNAME_PATH"
  60 export KRB5CCNAME
  61
  62 # List users
  63 testit "wbinfo -u against $TARGET" $wbinfo -u || failed=$(expr $failed + 1)
  64 # List groups
  65 testit "wbinfo -g against $TARGET" $wbinfo -g || failed=$(expr $failed + 1)
  66 # Convert netbios name to IP
  67 # Does not work yet
  68 testit "wbinfo -N against $TARGET" $wbinfo -N $NETBIOSNAME || failed=$(expr $failed + 1)
  69 # Convert IP to netbios name
  70 # Does not work yet
  71 testit "wbinfo -I against $TARGET" $wbinfo -I $SERVER_IP || failed=$(expr $failed + 1)
  72
  73 # Convert name to SID
  74 testit "wbinfo -n against $TARGET" $wbinfo -n "$DOMAIN/$USERNAME" || failed=$(expr $failed + 1)
  75 admin_sid=$($wbinfo -n "$DOMAIN/$USERNAME" | cut -d " " -f1)
  76 echo "$DOMAIN/$USERNAME resolved to $admin_sid"
  77
  78 testit "wbinfo -s $admin_sid against $TARGET" $wbinfo -s $admin_sid || failed=$(expr $failed + 1)
  79 admin_name=$($wbinfo -s $admin_sid | cut -d " " -f1 | tr a-z A-Z)
  80 echo "$admin_sid resolved to $admin_name"
  81
  82 tested_name=$(echo $DOMAIN/$USERNAME | tr a-z A-Z)
  83
  84 echo "test: wbinfo -s check for sane mapping"
  85 if test x$admin_name != x$tested_name; then
  86         echo "$admin_name does not match $tested_name"
  87         echo "failure: wbinfo -s check for sane mapping"
  88         failed=$(expr $failed + 1)
  89 else
  90         echo "success: wbinfo -s check for sane mapping"
  91 fi
  92
  93 while read SID; do
  94         read NAME
  95
  96         testit "wbinfo -s $SID against $TARGET" $wbinfo -s $SID || failed=$(expr $failed + 1)
  97
  98         RESOLVED_NAME=$($wbinfo -s $SID | tr a-z A-Z)
  99         echo "$SID resolved to $RESOLVED_NAME"
 100
 101         echo "test: wbinfo -s $SID against $TARGET"
 102         if test x"$RESOLVED_NAME" != x"$NAME"; then
 103                 echo "$RESOLVED_NAME does not match $NAME"
 104                 echo "failure: wbinfo -s $SID against $TARGET"
 105                 failed=$(expr $failed + 1)
 106         else
 107                 echo "success: wbinfo -s $SID against $TARGET"
 108         fi
 109 done <<EOF
 110 S-1-1-0
 111 /EVERYONE 5
 112 S-1-3-1
 113 /CREATOR GROUP 5
 114 S-1-5-1
 115 NT AUTHORITY/DIALUP 5
 116 EOF
 117
 118 testit "wbinfo -n on the returned name against $TARGET" $wbinfo -n $admin_name || failed=$(expr $failed + 1)
 119 test_sid=$($wbinfo -n $tested_name | cut -d " " -f1)
 120
 121 echo "test: wbinfo -n check for sane mapping"
 122 if test x$admin_sid != x$test_sid; then
 123         echo "$admin_sid does not match $test_sid"
 124         echo "failure: wbinfo -n check for sane mapping"
 125         failed=$(expr $failed + 1)
 126 else
 127         echo "success: wbinfo -n check for sane mapping"
 128 fi
 129
 130 echo "test: wbinfo -n NT Authority/Authenticated Users"
 131 $wbinfo -n "NT Authority/Authenticated Users"
 132 if [ $? -ne 0 ]; then
 133         echo "failure: wbinfo -n NT Authority/Authenticated Users"
 134         failed=$(expr $failed + 1)
 135 else
 136         echo "success: wbinfo -n NT Authority/Authenticated Users"
 137 fi
 138
 139 echo "test: wbinfo --group-info NT Authority/Authenticated Users"
 140 $wbinfo --group-info "NT Authority/Authenticated Users"
 141 if [ $? -ne 0 ]; then
 142         echo "failure: wbinfo --group-info NT Authority/Authenticated Users"
 143         failed=$(expr $failed + 1)
 144 else
 145         echo "success: wbinfo --group-info NT Authority/Authenticated Users"
 146 fi
 147
 148 testit "wbinfo -U against $TARGET" $wbinfo -U 30000 || failed=$(expr $failed + 1)
 149
 150 echo "test: wbinfo -U check for sane mapping"
 151 sid_for_30000=$($wbinfo -U 30000)
 152 if test x$sid_for_30000 != "xS-1-22-1-30000"; then
 153         echo "uid 30000 mapped to $sid_for_30000, not S-1-22-1-30000"
 154         echo "failure: wbinfo -U check for sane mapping"
 155         failed=$(expr $failed + 1)
 156 else
 157         echo "success: wbinfo -U check for sane mapping"
 158 fi
 159
 160 admin_uid=$($wbinfo -S $admin_sid)
 161
 162 testit "wbinfo -G against $TARGET" $wbinfo -G 30000 || failed=$(expr $failed + 1)
 163
 164 echo "test: wbinfo -G check for sane mapping"
 165 sid_for_30000=$($wbinfo -G 30000)
 166 if test x$sid_for_30000 != "xS-1-22-2-30000"; then
 167         echo "gid 30000 mapped to $sid_for_30000, not S-1-22-2-30000"
 168         echo "failure: wbinfo -G check for sane mapping"
 169         failed=$(expr $failed + 1)
 170 else
 171         echo "success: wbinfo -G check for sane mapping"
 172 fi
 173
 174 testit "wbinfo -S against $TARGET" $wbinfo -S "S-1-22-1-30000" || failed=$(expr $failed + 1)
 175
 176 echo "test: wbinfo -S check for sane mapping"
 177 uid_for_sid=$($wbinfo -S S-1-22-1-30000)
 178 if test 0$uid_for_sid -ne 30000; then
 179         echo "S-1-22-1-30000 mapped to $uid_for_sid, not 30000"
 180         echo "failure: wbinfo -S check for sane mapping"
 181         failed=$(expr $failed + 1)
 182 else
 183         echo "success: wbinfo -S check for sane mapping"
 184 fi
 185
 186 testfail "wbinfo -S against $TARGET using invalid SID" $wbinfo -S "S-1-22-2-30000" && failed=$(expr $failed + 1)
 187
 188 testit "wbinfo -Y against $TARGET" $wbinfo -Y "S-1-22-2-30000" || failed=$(expr $failed + 1)
 189
 190 echo "test: wbinfo -Y check for sane mapping"
 191 gid_for_sid=$($wbinfo -Y S-1-22-2-30000)
 192 if test 0$gid_for_sid -ne 30000; then
 193         echo "S-1-22-2-30000 mapped to $gid_for_sid, not 30000"
 194         echo "failure: wbinfo -Y check for sane mapping"
 195         failed=$(expr $failed + 1)
 196 else
 197         echo "success: wbinfo -Y check for sane mapping"
 198 fi
 199
 200 testfail "wbinfo -Y against $TARGET using invalid SID" $wbinfo -Y "S-1-22-1-30000" && failed=$(expr $failed + 1)
 201
 202 testit "wbinfo -t against $TARGET" $wbinfo -t || failed=$(expr $failed + 1)
 203
 204 #didn't really work anyway
 205 testit "wbinfo  --trusted-domains against $TARGET" $wbinfo --trusted-domains || failed=$(expr $failed + 1)
 206 testit "wbinfo --all-domains against $TARGET" $wbinfo --all-domains || failed=$(expr $failed + 1)
 207
 208 testit "wbinfo --own-domain against $TARGET" $wbinfo --own-domain || failed=$(expr $failed + 1)
 209
 210 echo "test: wbinfo --own-domain against $TARGET check output"
 211 own_domain=$($wbinfo --own-domain)
 212 if test x$own_domain = x$DOMAIN; then
 213         echo "success: wbinfo --own-domain against $TARGET check output"
 214 else
 215         echo "Own domain reported as $own_domain instead of $DOMAIN"
 216         echo "failure: wbinfo --own-domain against $TARGET check output"
 217         failed=$(expr $failed + 1)
 218 fi
 219
 220 # this does not work
 221 knownfail "wbinfo --sequence against $TARGET" $wbinfo --sequence
 222
 223 # this is stubbed out now
 224 testit "wbinfo -D against $TARGET" $wbinfo -D $DOMAIN || failed=$(expr $failed + 1)
 225
 226 testit "wbinfo -i against $TARGET" $wbinfo -i "$DOMAIN/$USERNAME" || failed=$(expr $failed + 1)
 227
 228 echo "test: wbinfo --group-info against $TARGET"
 229 gid=$($wbinfo --group-info "$DOMAIN/Domain users" | cut -d: -f3)
 230 if test x$? = x0; then
 231         echo "success: wbinfo --group-info against $TARGET"
 232 else
 233         echo "failure: wbinfo --group-info against $TARGET"
 234         failed=$(expr $failed + 1)
 235 fi
 236
 237 test_name="wbinfo -i against $TARGET"
 238 subunit_start_test "$test_name"
 239 passwd_line=$($wbinfo -i "$DOMAIN/$USERNAME")
 240 if test x$? = x0; then
 241         subunit_pass_test "$test_name"
 242 else
 243         subunit_fail_test "$test_name"
 244         failed=$(expr $failed + 1)
 245 fi
 246
 247 test_name="confirm output of wbinfo -i against $TARGET"
 248 subunit_start_test "$test_name"
 249
 250 # The full name (GECOS) is based on name (the RDN, in this case CN)
 251 # and displayName in winbindd_ads, and is based only on displayName in
 252 # winbindd_msrpc and winbindd_rpc.  Allow both versions.
 253 if test "$TARGET" = "ad_member"; then
 254         expected1_line="$DOMAIN/administrator:*:$admin_uid:$gid:Administrator:/home/$DOMAIN/Domain Users/administrator:/bin/false"
 255         expected2_line="$DOMAIN/administrator:*:$admin_uid:$gid::/home/$DOMAIN/Domain Users/administrator:/bin/false"
 256 else
 257         expected1_line="$DOMAIN/administrator:*:$admin_uid:$gid:Administrator:/home/$DOMAIN/administrator:/bin/false"
 258         expected2_line="$DOMAIN/administrator:*:$admin_uid:$gid::/home/$DOMAIN/administrator:/bin/false"
 259 fi
 260
 261 if test "x$passwd_line" = "x$expected1_line" -o "x$passwd_line" = "x$expected2_line"; then
 262         subunit_pass_test "$test_name"
 263 else
 264         echo "expected '$expected1_line' or '$expected2_line' got '$passwd_line'" | subunit_fail_test "$test_name"
 265         failed=$(expr $failed + 1)
 266 fi
 267
 268 test_name="wbinfo --uid-info against $TARGET"
 269 subunit_start_test "$test_name"
 270 passwd_line=$($wbinfo --uid-info=$admin_uid)
 271 if test x$? = x0; then
 272         subunit_pass_test "$test_name"
 273 else
 274         subunit_fail_test "$test_name"
 275         failed=$(expr $failed + 1)
 276 fi
 277
 278 test_name="confirm output of wbinfo --uid-info against $TARGET"
 279 subunit_start_test "$test_name"
 280 if test "x$passwd_line" = "x$expected1_line" -o "x$passwd_line" = "x$expected2_line"; then
 281         subunit_pass_test "$test_name"
 282 else
 283         echo "expected '$expected1_line' or '$expected2_line' got '$passwd_line'" | subunit_fail_test "$test_name"
 284         failed=$(expr $failed + 1)
 285 fi
 286
 287 testfail "wbinfo --group-info against $TARGET with $USERNAME" $wbinfo --group-info $USERNAME && failed=$(expr $failed + 1)
 288
 289 testit "wbinfo --gid-info against $TARGET" $wbinfo --gid-info $gid || failed=$(expr $failed + 1)
 290
 291 testit "wbinfo -r against $TARGET" $wbinfo -r "$DOMAIN/$USERNAME" || failed=$(expr $failed + 1)
 292
 293 testit "wbinfo --user-domgroups against $TARGET" $wbinfo --user-domgroups $admin_sid || failed=$(expr $failed + 1)
 294
 295 testit "wbinfo --user-sids against $TARGET" $wbinfo --user-sids $admin_sid || failed=$(expr $failed + 1)
 296
 297 testit "wbinfo -a against $TARGET with domain creds" $wbinfo -a "$DOMAIN/$USERNAME"%"$PASSWORD" || failed=$(expr $failed + 1)
 298
 299 testit "wbinfo -a against $TARGET with domain upn creds" $wbinfo -a "$USERNAME@$DOMAIN"%"$PASSWORD" || failed=$(expr $failed + 1)
 300
 301 testit "wbinfo --getdcname against $TARGET" $wbinfo --getdcname=$DOMAIN
 302
 303 testit "wbinfo -p against $TARGET" $wbinfo -p || failed=$(expr $failed + 1)
 304
 305 testit "wbinfo -K against $TARGET with domain creds" $wbinfo --krb5ccname=$KRB5CCNAME --krb5auth="$DOMAIN/$USERNAME"%"$PASSWORD" || failed=$(expr $failed + 1)
 306
 307 testit "wbinfo --separator against $TARGET" $wbinfo --separator || failed=$(expr $failed + 1)
 308
 309 if test "$TARGET" = "ad_member"; then
 310         testit "wbinfo --domain-info=$DOMAIN" $wbinfo --domain-info=$DOMAIN || failed=$(expr $failed + 1)
 311
 312         testit "wbinfo --dc-info=$DOMAIN" $wbinfo --dc-info=$DOMAIN || failed=$(expr $failed + 1)
 313 fi
 314
 315 testit_expect_failure "wbinfo -a against $TARGET with invalid password" $wbinfo -a "$DOMAIN/$USERNAME%InvalidPassword" && failed=$(expr $failed + 1)
 316
 317 testit_expect_failure "wbinfo -K against $TARGET with invalid password" $wbinfo -K "$DOMAIN/$USERNAME%InvalidPassword" && failed=$(expr $failed + 1)
 318
 319 rm -f $KRB5CCNAME_PATH
 320
 321 exit $failed