testprogs/blackbox/dbcheck-links.sh

   1 #!/bin/sh
   2
   3 if [ $# -lt 1 ]; then
   4         cat <<EOF
   5 Usage: dbcheck-links.sh PREFIX RELEASE
   6 EOF
   7         exit 1
   8 fi
   9
  10 PREFIX_ABS="$1"
  11 RELEASE="$2"
  12 shift 2
  13
  14 . $(dirname $0)/subunit.sh
  15
  16 . $(dirname $0)/common_test_fns.inc
  17 . $(dirname $0)/common-links.sh
  18
  19 failed=0
  20
  21 if [ ! -x $samba_undump ] || [ ! -d $release_dir ]; then
  22         subunit_start_test $RELEASE
  23         subunit_skip_test $RELEASE <<EOF
  24 no test provision
  25 EOF
  26
  27         subunit_start_test "tombstones_expunge"
  28         subunit_skip_test "tombstones_expunge" <<EOF
  29 no test provision
  30 EOF
  31
  32         exit 0
  33 fi
  34
  35 dbcheck()
  36 {
  37         tmpfile=$PREFIX_ABS/$RELEASE/expected-dbcheck-link-output${1}.txt.tmp
  38         tmpldif1=$PREFIX_ABS/$RELEASE/expected-dbcheck-output${1}2.txt.tmp1
  39
  40         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --scope=base -b '' | grep highestCommittedUSN >$tmpldif1
  41
  42         $PYTHON $BINDIR/samba-tool dbcheck -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb $3 --fix --yes >$tmpfile
  43         if [ "$?" != "$2" ]; then
  44                 return 1
  45         fi
  46         sort $tmpfile | grep -v "^INFO:" >$tmpfile.sorted
  47         sort $release_dir/expected-dbcheck-link-output${1}.txt >$tmpfile.expected
  48         diff -u $tmpfile.sorted $tmpfile.expected
  49         if [ "$?" != "0" ]; then
  50                 return 1
  51         fi
  52
  53         tmpldif2=$PREFIX_ABS/$RELEASE/expected-dbcheck-output${1}2.txt.tmp2
  54         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --scope=base -b '' | grep highestCommittedUSN >$tmpldif2
  55
  56         diff -u $tmpldif1 $tmpldif2
  57         if [ "$?" != "0" ]; then
  58                 return 1
  59         fi
  60 }
  61
  62 dbcheck_dangling()
  63 {
  64         dbcheck "" "1" "--selftest-check-expired-tombstones"
  65         return $?
  66 }
  67
  68 dbcheck_one_way()
  69 {
  70         dbcheck "_one_way" "0" "CN=Configuration,DC=release-4-5-0-pre1,DC=samba,DC=corp --selftest-check-expired-tombstones"
  71         return $?
  72 }
  73
  74 dbcheck_clean()
  75 {
  76         tmpldif1=$PREFIX_ABS/$RELEASE/expected-dbcheck-output2.txt.tmp1
  77
  78         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --scope=base -b '' | grep highestCommittedUSN >$tmpldif1
  79
  80         $PYTHON $BINDIR/samba-tool dbcheck -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb
  81         if [ "$?" != "0" ]; then
  82                 return 1
  83         fi
  84         tmpldif2=$PREFIX_ABS/$RELEASE/expected-dbcheck-output2.txt.tmp2
  85         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --scope=base -b '' | grep highestCommittedUSN >$tmpldif2
  86
  87         diff -u $tmpldif1 $tmpldif2
  88         if [ "$?" != "0" ]; then
  89                 return 1
  90         fi
  91 }
  92
  93 check_expected_after_links()
  94 {
  95         tmpldif=$PREFIX_ABS/$RELEASE/expected-links-after-link-dbcheck.ldif.tmp
  96         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(|(cn=swimmers)(cn=leaders)(cn=helpers))' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --sorted member >$tmpldif
  97         diff -u $tmpldif $release_dir/expected-links-after-link-dbcheck.ldif
  98         if [ "$?" != "0" ]; then
  99                 return 1
 100         fi
 101 }
 102
 103 check_expected_after_deleted_links()
 104 {
 105         tmpldif=$PREFIX_ABS/$RELEASE/expected-deleted-links-after-link-dbcheck.ldif.tmp
 106         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(|(cn=swimmers)(cn=leaders)(cn=helpers))' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --reveal --sorted member >$tmpldif
 107         diff -u $tmpldif $release_dir/expected-deleted-links-after-link-dbcheck.ldif
 108         if [ "$?" != "0" ]; then
 109                 return 1
 110         fi
 111 }
 112
 113 check_expected_after_objects()
 114 {
 115         tmpldif=$PREFIX_ABS/$RELEASE/expected-objects-after-link-dbcheck.ldif.tmp
 116         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(|(samaccountname=fred)(samaccountname=ddg)(samaccountname=usg)(samaccountname=user1)(samaccountname=user1x)(samaccountname=user2))' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --reveal --sorted samAccountName | grep sAMAccountName >$tmpldif
 117         diff -u $tmpldif $release_dir/expected-objects-after-link-dbcheck.ldif
 118         if [ "$?" != "0" ]; then
 119                 return 1
 120         fi
 121 }
 122
 123 duplicate_member()
 124 {
 125         # We use an existing group so we have a stable GUID in the
 126         # dbcheck output
 127         LDIF1=$(TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb -b 'CN=Enterprise Admins,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp' --scope=base --reveal --extended-dn member)
 128         DN=$(echo "${LDIF1}" | grep '^dn: ')
 129         MSG=$(echo "${LDIF1}" | grep -v '^dn: ' | grep -v '^#' | grep -v '^$')
 130         ldif=$PREFIX_ABS/${RELEASE}/duplicate-member-multi.ldif
 131         {
 132                 echo "${DN}"
 133                 echo "changetype: modify"
 134                 echo "replace: member"
 135                 echo "${MSG}"
 136                 echo "${MSG}" | sed -e 's!RMD_LOCAL_USN=[1-9][0-9]*!RMD_LOCAL_USN=0!'
 137         } >$ldif
 138
 139         TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif
 140         if [ "$?" != "0" ]; then
 141                 return 1
 142         fi
 143 }
 144
 145 dbcheck_duplicate_member()
 146 {
 147         dbcheck "_duplicate_member" "1" "--selftest-check-expired-tombstones"
 148         return $?
 149 }
 150
 151 check_expected_after_duplicate_links()
 152 {
 153         tmpldif=$PREFIX_ABS/$RELEASE/expected-duplicates-after-link-dbcheck.ldif.tmp
 154         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(|(cn=administrator)(cn=enterprise admins))' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --sorted memberOf member >$tmpldif
 155         diff -u $tmpldif $release_dir/expected-duplicates-after-link-dbcheck.ldif
 156         if [ "$?" != "0" ]; then
 157                 return 1
 158         fi
 159 }
 160
 161 missing_link_sid_corruption()
 162 {
 163         # Step1: add user "missingsidu1"
 164         #
 165         ldif=$PREFIX_ABS/${RELEASE}/missing_link_sid_corruption1.ldif
 166         cat >$ldif <<EOF
 167 dn: CN=missingsidu1,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp
 168 changetype: add
 169 objectclass: user
 170 samaccountname: missingsidu1
 171 objectGUID: 0da8f25e-d110-11e8-80b7-3c970ec68461
 172 objectSid: S-1-5-21-4177067393-1453636373-93818738-771
 173 EOF
 174
 175         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 176         if [ "$?" != "0" ]; then
 177                 echo "ldbmodify returned:\n$out"
 178                 return 1
 179         fi
 180
 181         # Step2: add user "missingsidu2"
 182         #
 183         ldif=$PREFIX_ABS/${RELEASE}/missing_link_sid_corruption2.ldif
 184         cat >$ldif <<EOF
 185 dn: CN=missingsidu2,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp
 186 changetype: add
 187 objectclass: user
 188 samaccountname: missingsidu2
 189 objectGUID: 66eb8f52-d110-11e8-ab9b-3c970ec68461
 190 objectSid: S-1-5-21-4177067393-1453636373-93818738-772
 191 EOF
 192
 193         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 194         if [ "$?" != "0" ]; then
 195                 echo "ldbmodify returned:\n$out"
 196                 return 1
 197         fi
 198
 199         # Step3: add group "missingsidg3" and add users as members
 200         #
 201         ldif=$PREFIX_ABS/${RELEASE}/missing_link_sid_corruption3.ldif
 202         cat >$ldif <<EOF
 203 dn: CN=missingsidg3,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp
 204 changetype: add
 205 objectclass: group
 206 samaccountname: missingsidg3
 207 objectGUID: fd992424-d114-11e8-bb36-3c970ec68461
 208 objectSid: S-1-5-21-4177067393-1453636373-93818738-773
 209 member: CN=missingsidu1,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp
 210 member: CN=missingsidu2,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp
 211 EOF
 212
 213         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 214         if [ "$?" != "0" ]; then
 215                 echo "ldbmodify returned:\n$out"
 216                 return 1
 217         fi
 218
 219         # Step4: remove one user again, so that we have one deleted link
 220         #
 221         ldif=$PREFIX_ABS/${RELEASE}/missing_link_sid_corruption4.ldif
 222         cat >$ldif <<EOF
 223 dn: CN=missingsidg3,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp
 224 changetype: modify
 225 delete: member
 226 member: CN=missingsidu1,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp
 227 EOF
 228
 229         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 230         if [ "$?" != "0" ]; then
 231                 echo "ldbmodify returned:\n$out"
 232                 return 1
 233         fi
 234
 235         #
 236         # Step5: remove the SIDS from the links
 237         #
 238         LDIF1=$(TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb -b 'CN=missingsidg3,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp' --scope=base --reveal --extended-dn --show-binary member)
 239         DN=$(echo "${LDIF1}" | grep '^dn: ')
 240         MSG=$(echo "${LDIF1}" | grep -v '^dn: ' | grep -v '^#' | grep -v '^$')
 241         ldif=$PREFIX_ABS/${RELEASE}/missing_link_sid_corruption5.ldif
 242         {
 243                 echo "${DN}"
 244                 echo "changetype: modify"
 245                 echo "replace: member"
 246                 #echo "${MSG}"
 247                 echo "${MSG}" | sed \
 248                         -e 's!<SID=S-1-5-21-4177067393-1453636373-93818738-771>;!!g' \
 249                         -e 's!<SID=S-1-5-21-4177067393-1453636373-93818738-772>;!!g' \
 250                         -e 's!RMD_ADDTIME=[1-9][0-9]*!RMD_ADDTIME=123456789000000000!g' \
 251                         -e 's!RMD_CHANGETIME=[1-9][0-9]*!RMD_CHANGETIME=123456789000000000!g' |
 252                         cat
 253         } >$ldif
 254
 255         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 256         if [ "$?" != "0" ]; then
 257                 echo "ldbmodify returned:\n$out"
 258                 return 1
 259         fi
 260
 261         return 0
 262 }
 263
 264 dbcheck_missing_link_sid_corruption()
 265 {
 266         dbcheck "-missing-link-sid-corruption" "1" "--selftest-check-expired-tombstones"
 267         return $?
 268 }
 269
 270 add_lost_deleted_user1()
 271 {
 272         ldif=$PREFIX_ABS/${RELEASE}/add_lost_deleted_user1.ldif
 273         cat >$ldif <<EOF
 274 dn: CN=fred\0ADEL:2301a64c-1234-5678-851e-12d4a711cfb4,OU=removed,DC=release-4-5-0-pre1,DC=samba,DC=corp
 275 objectClass: top
 276 objectClass: person
 277 objectClass: organizationalPerson
 278 objectClass: user
 279 instanceType: 4
 280 whenCreated: 20160629043638.0Z
 281 uSNCreated: 3740
 282 objectGUID: 2301a64c-1234-5678-851e-12d4a711cfb4
 283 objectSid: S-1-5-21-4177067393-1453636373-93818738-1011
 284 sAMAccountName: fred
 285 userAccountControl: 512
 286 isDeleted: TRUE
 287 lastKnownParent: <GUID=f28216e9-1234-5678-8b2d-6bb229563b62>;OU=removed,DC=rel
 288  ease-4-5-0-pre1,DC=samba,DC=corp
 289 isRecycled: TRUE
 290 cn:: ZnJlZApERUw6MjMwMWE2NGMtMTIzNC01Njc4LTg1MWUtMTJkNGE3MTFjZmI0
 291 name:: ZnJlZApERUw6MjMwMWE2NGMtMTIzNC01Njc4LTg1MWUtMTJkNGE3MTFjZmI0
 292 replPropertyMetaData:: AQAAAAAAAAAXAAAAAAAAAAAAAAABAAAAVuGDDQMAAACjlkROuH+XT4o
 293  z0jjbi14tnA4AAAAAAACcDgAAAAAAAAMAAAACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4A
 294  AAAAAACiDgAAAAAAAAEAAgABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAA
 295  AAAAAIAAgABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAADAAAgABAA
 296  AAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAABkBAgABAAAAVuGDDQMAAAC
 297  jlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAAEACQACAAAAV+GDDQMAAACjlkROuH+XT4oz
 298  0jjbi14tog4AAAAAAACiDgAAAAAAAAgACQADAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tng4AA
 299  AAAAACeDgAAAAAAABAACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAA
 300  AAABkACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAFoACQABAAA
 301  AVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAAAAF4ACQABAAAAVuGDDQMAAACj
 302  lkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAAAAGAACQADAAAAV+GDDQMAAACjlkROuH+XT4oz0
 303  jjbi14tog4AAAAAAACiDgAAAAAAAGIACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAA
 304  AAAACiDgAAAAAAAH0ACQABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAA
 305  AAJIACQABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAJ8ACQACAAAA
 306  V+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAN0ACQABAAAAVuGDDQMAAACjl
 307  kROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAC4BCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0j
 308  jbi14tog4AAAAAAACiDgAAAAAAAJACCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAA
 309  AAACiDgAAAAAAAA0DCQABAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAA
 310  AA4DCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAAoICQABAAAAV
 311  +GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAA==
 312 whenChanged: 20160629043639.0Z
 313 uSNChanged: 3746
 314 nTSecurityDescriptor:: AQAXjBQAAAAwAAAATAAAAMQAAAABBQAAAAAABRUAAACB/fj4FbukVnK
 315  PlwUAAgAAAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFAAIAAAQAeAACAAAAB1o4ACAAAAADAAAAvjsO
 316  8/Cf0RG2AwAA+ANnwaV6lr/mDdARooUAqgAwSeIBAQAAAAAAAQAAAAAHWjgAIAAAAAMAAAC/Ow7z8
 317  J/REbYDAAD4A2fBpXqWv+YN0BGihQCqADBJ4gEBAAAAAAABAAAAAAQA1AcsAAAAAAAkAP8BDwABBQ
 318  AAAAAABRUAAACB/fj4FbukVnKPlwUAAgAAAAAUAP8BDwABAQAAAAAABRIAAAAAABgA/wEPAAECAAA
 319  AAAAFIAAAACQCAAAAABQAlAACAAEBAAAAAAAFCgAAAAUAKAAAAQAAAQAAAFMacqsvHtARmBkAqgBA
 320  UpsBAQAAAAAABQoAAAAFACgAAAEAAAEAAABUGnKrLx7QEZgZAKoAQFKbAQEAAAAAAAUKAAAABQAoA
 321  AABAAABAAAAVhpyqy8e0BGYGQCqAEBSmwEBAAAAAAAFCgAAAAUAKAAwAAAAAQAAAIa4tXdKlNERrr
 322  0AAPgDZ8EBAQAAAAAABQoAAAAFACgAMAAAAAEAAACylVfkVZTREa69AAD4A2fBAQEAAAAAAAUKAAA
 323  ABQAoADAAAAABAAAAs5VX5FWU0RGuvQAA+ANnwQEBAAAAAAAFCgAAAAUAOAAQAAAAAQAAAPiIcAPh
 324  CtIRtCIAoMlo+TkBBQAAAAAABRUAAACB/fj4FbukVnKPlwUpAgAABQA4ABAAAAABAAAAAEIWTMAg0
 325  BGnaACqAG4FKQEFAAAAAAAFFQAAAIH9+PgVu6RWco+XBSkCAAAFADgAEAAAAAEAAABAwgq8qXnQEZ
 326  AgAMBPwtTPAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFKQIAAAAAFAAAAAIAAQEAAAAAAAULAAAABQA
 327  oABAAAAABAAAAQi+6WaJ50BGQIADAT8LTzwEBAAAAAAAFCwAAAAUAKAAQAAAAAQAAAIa4tXdKlNER
 328  rr0AAPgDZ8EBAQAAAAAABQsAAAAFACgAEAAAAAEAAACzlVfkVZTREa69AAD4A2fBAQEAAAAAAAULA
 329  AAABQAoABAAAAABAAAAVAGN5Pi80RGHAgDAT7lgUAEBAAAAAAAFCwAAAAUAKAAAAQAAAQAAAFMacq
 330  svHtARmBkAqgBAUpsBAQAAAAAAAQAAAAAFADgAEAAAAAEAAAAQICBfpXnQEZAgAMBPwtTPAQUAAAA
 331  AAAUVAAAAgf34+BW7pFZyj5cFKQIAAAUAOAAwAAAAAQAAAH96lr/mDdARooUAqgAwSeIBBQAAAAAA
 332  BRUAAACB/fj4FbukVnKPlwUFAgAABQAsABAAAAABAAAAHbGpRq5gWkC36P+KWNRW0gECAAAAAAAFI
 333  AAAADACAAAFACwAMAAAAAEAAAAcmrZtIpTREa69AAD4A2fBAQIAAAAAAAUgAAAAMQIAAAUALAAwAA
 334  AAAQAAAGK8BVjJvShEpeKFag9MGF4BAgAAAAAABSAAAAAxAgAABRo8ABAAAAADAAAAAEIWTMAg0BG
 335  naACqAG4FKRTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAADAAAAAEIWTMAg
 336  0BGnaACqAG4FKbp6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAAAADAAAAECAgX
 337  6V50BGQIADAT8LUzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAADAAAAEC
 338  AgX6V50BGQIADAT8LUz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAAAADAAA
 339  AQMIKvKl50BGQIADAT8LUzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAAD
 340  AAAAQMIKvKl50BGQIADAT8LUz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAA
 341  AADAAAAQi+6WaJ50BGQIADAT8LTzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8AB
 342  AAAAADAAAAQi+6WaJ50BGQIADAT8LTz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo
 343  8ABAAAAADAAAA+IhwA+EK0hG0IgCgyWj5ORTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAA
 344  BRI8ABAAAAADAAAA+IhwA+EK0hG0IgCgyWj5Obp6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqA
 345  gAABRo4ABAAAAADAAAAbZ7Gt8cs0hGFTgCgyYP2CIZ6lr/mDdARooUAqgAwSeIBAQAAAAAABQkAAA
 346  AFGjgAEAAAAAMAAABtnsa3xyzSEYVOAKDJg/YInHqWv+YN0BGihQCqADBJ4gEBAAAAAAAFCQAAAAU
 347  SOAAQAAAAAwAAAG2exrfHLNIRhU4AoMmD9gi6epa/5g3QEaKFAKoAMEniAQEAAAAAAAUJAAAABRos
 348  AJQAAgACAAAAFMwoSDcUvEWbB61vAV5fKAECAAAAAAAFIAAAACoCAAAFGiwAlAACAAIAAACcepa/5
 349  g3QEaKFAKoAMEniAQIAAAAAAAUgAAAAKgIAAAUSLACUAAIAAgAAALp6lr/mDdARooUAqgAwSeIBAg
 350  AAAAAABSAAAAAqAgAABRIoADABAAABAAAA3kfmkW/ZcEuVV9Y/9PPM2AEBAAAAAAAFCgAAAAASJAD
 351  /AQ8AAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFBwIAAAASGAAEAAAAAQIAAAAAAAUgAAAAKgIAAAAS
 352  GAC9AQ8AAQIAAAAAAAUgAAAAIAIAAA==
 353 EOF
 354
 355         out=$(TZ=UTC $ldbadd -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 356         if [ "$?" != "0" ]; then
 357                 echo "ldbadd returned:\n$out"
 358                 return 1
 359         fi
 360
 361         return 0
 362 }
 363
 364 dbcheck_lost_deleted_user1()
 365 {
 366         dbcheck "-lost-deleted-user1" "1" "--selftest-check-expired-tombstones"
 367         return $?
 368 }
 369
 370 remove_lost_deleted_user1()
 371 {
 372         out=$(TZ=UTC $ldbdel -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb "<GUID=2301a64c-1234-5678-851e-12d4a711cfb4>" --show-recycled --relax)
 373         if [ "$?" != "0" ]; then
 374                 echo "ldbdel returned:\n$out"
 375                 return 1
 376         fi
 377
 378         return 0
 379 }
 380
 381 add_lost_deleted_user2()
 382 {
 383         ldif=$PREFIX_ABS/${RELEASE}/add_lost_deleted_user2.ldif
 384         cat >$ldif <<EOF
 385 dn: CN=fred\0ADEL:2301a64c-8765-4321-851e-12d4a711cfb4,CN=LostAndFound,DC=release-4-5-0-pre1,DC=samba,DC=corp
 386 objectClass: top
 387 objectClass: person
 388 objectClass: organizationalPerson
 389 objectClass: user
 390 instanceType: 4
 391 whenCreated: 20160629043638.0Z
 392 uSNCreated: 3740
 393 objectGUID: 2301a64c-8765-4321-851e-12d4a711cfb4
 394 objectSid: S-1-5-21-4177067393-1453636373-93818738-1001
 395 sAMAccountName: fred
 396 userAccountControl: 512
 397 isDeleted: TRUE
 398 lastKnownParent: OU=removed,DC=release-4-5-0-pre1,DC=samba,DC=corp
 399 isRecycled: TRUE
 400 cn:: ZnJlZApERUw6MjMwMWE2NGMtODc2NS00MzIxLTg1MWUtMTJkNGE3MTFjZmI0
 401 name:: ZnJlZApERUw6MjMwMWE2NGMtODc2NS00MzIxLTg1MWUtMTJkNGE3MTFjZmI0
 402 replPropertyMetaData:: AQAAAAAAAAAXAAAAAAAAAAAAAAABAAAAVuGDDQMAAACjlkROuH+XT4o
 403  z0jjbi14tnA4AAAAAAACcDgAAAAAAAAMAAAACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4A
 404  AAAAAACiDgAAAAAAAAEAAgABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAA
 405  AAAAAIAAgABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAADAAAgABAA
 406  AAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAABkBAgABAAAAVuGDDQMAAAC
 407  jlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAAEACQAEAAAAePOWEgMAAACjlkROuH+XT4oz
 408  0jjbi14tvA4AAAAAAAC8DgAAAAAAAAgACQADAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tng4AA
 409  AAAAACeDgAAAAAAABAACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAA
 410  AAABkACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAFoACQABAAA
 411  AVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAAAAF4ACQABAAAAVuGDDQMAAACj
 412  lkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAAAAGAACQADAAAAV+GDDQMAAACjlkROuH+XT4oz0
 413  jjbi14tog4AAAAAAACiDgAAAAAAAGIACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAA
 414  AAAACiDgAAAAAAAH0ACQABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAA
 415  AAJIACQABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAJ8ACQACAAAA
 416  V+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAN0ACQABAAAAVuGDDQMAAACjl
 417  kROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAC4BCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0j
 418  jbi14tog4AAAAAAACiDgAAAAAAAJACCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAA
 419  AAACiDgAAAAAAAA0DCQADAAAAePOWEgMAAACjlkROuH+XT4oz0jjbi14tvQ4AAAAAAAC9DgAAAAAA
 420  AA4DCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAAoICQABAAAAV
 421  +GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAA==
 422 whenChanged: 20160629043639.0Z
 423 uSNChanged: 3746
 424 nTSecurityDescriptor:: AQAXjBQAAAAwAAAATAAAAMQAAAABBQAAAAAABRUAAACB/fj4FbukVnK
 425  PlwUAAgAAAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFAAIAAAQAeAACAAAAB1o4ACAAAAADAAAAvjsO
 426  8/Cf0RG2AwAA+ANnwaV6lr/mDdARooUAqgAwSeIBAQAAAAAAAQAAAAAHWjgAIAAAAAMAAAC/Ow7z8
 427  J/REbYDAAD4A2fBpXqWv+YN0BGihQCqADBJ4gEBAAAAAAABAAAAAAQA1AcsAAAAAAAkAP8BDwABBQ
 428  AAAAAABRUAAACB/fj4FbukVnKPlwUAAgAAAAAUAP8BDwABAQAAAAAABRIAAAAAABgA/wEPAAECAAA
 429  AAAAFIAAAACQCAAAAABQAlAACAAEBAAAAAAAFCgAAAAUAKAAAAQAAAQAAAFMacqsvHtARmBkAqgBA
 430  UpsBAQAAAAAABQoAAAAFACgAAAEAAAEAAABUGnKrLx7QEZgZAKoAQFKbAQEAAAAAAAUKAAAABQAoA
 431  AABAAABAAAAVhpyqy8e0BGYGQCqAEBSmwEBAAAAAAAFCgAAAAUAKAAwAAAAAQAAAIa4tXdKlNERrr
 432  0AAPgDZ8EBAQAAAAAABQoAAAAFACgAMAAAAAEAAACylVfkVZTREa69AAD4A2fBAQEAAAAAAAUKAAA
 433  ABQAoADAAAAABAAAAs5VX5FWU0RGuvQAA+ANnwQEBAAAAAAAFCgAAAAUAOAAQAAAAAQAAAPiIcAPh
 434  CtIRtCIAoMlo+TkBBQAAAAAABRUAAACB/fj4FbukVnKPlwUpAgAABQA4ABAAAAABAAAAAEIWTMAg0
 435  BGnaACqAG4FKQEFAAAAAAAFFQAAAIH9+PgVu6RWco+XBSkCAAAFADgAEAAAAAEAAABAwgq8qXnQEZ
 436  AgAMBPwtTPAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFKQIAAAAAFAAAAAIAAQEAAAAAAAULAAAABQA
 437  oABAAAAABAAAAQi+6WaJ50BGQIADAT8LTzwEBAAAAAAAFCwAAAAUAKAAQAAAAAQAAAIa4tXdKlNER
 438  rr0AAPgDZ8EBAQAAAAAABQsAAAAFACgAEAAAAAEAAACzlVfkVZTREa69AAD4A2fBAQEAAAAAAAULA
 439  AAABQAoABAAAAABAAAAVAGN5Pi80RGHAgDAT7lgUAEBAAAAAAAFCwAAAAUAKAAAAQAAAQAAAFMacq
 440  svHtARmBkAqgBAUpsBAQAAAAAAAQAAAAAFADgAEAAAAAEAAAAQICBfpXnQEZAgAMBPwtTPAQUAAAA
 441  AAAUVAAAAgf34+BW7pFZyj5cFKQIAAAUAOAAwAAAAAQAAAH96lr/mDdARooUAqgAwSeIBBQAAAAAA
 442  BRUAAACB/fj4FbukVnKPlwUFAgAABQAsABAAAAABAAAAHbGpRq5gWkC36P+KWNRW0gECAAAAAAAFI
 443  AAAADACAAAFACwAMAAAAAEAAAAcmrZtIpTREa69AAD4A2fBAQIAAAAAAAUgAAAAMQIAAAUALAAwAA
 444  AAAQAAAGK8BVjJvShEpeKFag9MGF4BAgAAAAAABSAAAAAxAgAABRo8ABAAAAADAAAAAEIWTMAg0BG
 445  naACqAG4FKRTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAADAAAAAEIWTMAg
 446  0BGnaACqAG4FKbp6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAAAADAAAAECAgX
 447  6V50BGQIADAT8LUzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAADAAAAEC
 448  AgX6V50BGQIADAT8LUz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAAAADAAA
 449  AQMIKvKl50BGQIADAT8LUzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAAD
 450  AAAAQMIKvKl50BGQIADAT8LUz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAA
 451  AADAAAAQi+6WaJ50BGQIADAT8LTzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8AB
 452  AAAAADAAAAQi+6WaJ50BGQIADAT8LTz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo
 453  8ABAAAAADAAAA+IhwA+EK0hG0IgCgyWj5ORTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAA
 454  BRI8ABAAAAADAAAA+IhwA+EK0hG0IgCgyWj5Obp6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqA
 455  gAABRo4ABAAAAADAAAAbZ7Gt8cs0hGFTgCgyYP2CIZ6lr/mDdARooUAqgAwSeIBAQAAAAAABQkAAA
 456  AFGjgAEAAAAAMAAABtnsa3xyzSEYVOAKDJg/YInHqWv+YN0BGihQCqADBJ4gEBAAAAAAAFCQAAAAU
 457  SOAAQAAAAAwAAAG2exrfHLNIRhU4AoMmD9gi6epa/5g3QEaKFAKoAMEniAQEAAAAAAAUJAAAABRos
 458  AJQAAgACAAAAFMwoSDcUvEWbB61vAV5fKAECAAAAAAAFIAAAACoCAAAFGiwAlAACAAIAAACcepa/5
 459  g3QEaKFAKoAMEniAQIAAAAAAAUgAAAAKgIAAAUSLACUAAIAAgAAALp6lr/mDdARooUAqgAwSeIBAg
 460  AAAAAABSAAAAAqAgAABRIoADABAAABAAAA3kfmkW/ZcEuVV9Y/9PPM2AEBAAAAAAAFCgAAAAASJAD
 461  /AQ8AAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFBwIAAAASGAAEAAAAAQIAAAAAAAUgAAAAKgIAAAAS
 462  GAC9AQ8AAQIAAAAAAAUgAAAAIAIAAA==
 463 EOF
 464
 465         out=$(TZ=UTC $ldbadd -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 466         if [ "$?" != "0" ]; then
 467                 echo "ldbadd returned:\n$out"
 468                 return 1
 469         fi
 470
 471         return 0
 472 }
 473
 474 dbcheck_lost_deleted_user2()
 475 {
 476         dbcheck "-lost-deleted-user2" "1" "--selftest-check-expired-tombstones"
 477         return $?
 478 }
 479
 480 add_lost_deleted_user3()
 481 {
 482         ldif=$PREFIX_ABS/${RELEASE}/add_lost_deleted_user3.ldif
 483         cat >$ldif <<EOF
 484 dn: CN=fred\0ADEL:2301a64c-1122-5566-851e-12d4a711cfb4,OU=removed,DC=release-4-5-0-pre1,DC=samba,DC=corp
 485 objectClass: top
 486 objectClass: person
 487 objectClass: organizationalPerson
 488 objectClass: user
 489 instanceType: 4
 490 whenCreated: 20160629043638.0Z
 491 uSNCreated: 3740
 492 objectGUID: 2301a64c-1122-5566-851e-12d4a711cfb4
 493 objectSid: S-1-5-21-4177067393-1453636373-93818738-1010
 494 sAMAccountName: fred
 495 userAccountControl: 512
 496 isDeleted: TRUE
 497 lastKnownParent: <GUID=f28216e9-1234-5678-8b2d-6bb229563b62>;OU=removed,DC=rel
 498  ease-4-5-0-pre1,DC=samba,DC=corp
 499 isRecycled: TRUE
 500 cn:: ZnJlZApERUw6MjMwMWE2NGMtMTEyMi01NTY2LTg1MWUtMTJkNGE3MTFjZmI0
 501 name:: ZnJlZApERUw6MjMwMWE2NGMtMTEyMi01NTY2LTg1MWUtMTJkNGE3MTFjZmI0
 502 replPropertyMetaData:: AQAAAAAAAAAXAAAAAAAAAAAAAAABAAAAVuGDDQMAAACjlkROuH+XT4o
 503  z0jjbi14tnA4AAAAAAACcDgAAAAAAAAMAAAACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4A
 504  AAAAAACiDgAAAAAAAAEAAgABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAA
 505  AAAAAIAAgABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAADAAAgABAA
 506  AAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAABkBAgABAAAAVuGDDQMAAAC
 507  jlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAAEACQACAAAAV+GDDQMAAACjlkROuH+XT4oz
 508  0jjbi14tog4AAAAAAACiDgAAAAAAAAgACQADAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tng4AA
 509  AAAAACeDgAAAAAAABAACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAA
 510  AAABkACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAFoACQABAAA
 511  AVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAAAAF4ACQABAAAAVuGDDQMAAACj
 512  lkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAAAAGAACQADAAAAV+GDDQMAAACjlkROuH+XT4oz0
 513  jjbi14tog4AAAAAAACiDgAAAAAAAGIACQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAA
 514  AAAACiDgAAAAAAAH0ACQABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnQ4AAAAAAACdDgAAAAA
 515  AAJIACQABAAAAVuGDDQMAAACjlkROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAJ8ACQACAAAA
 516  V+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAN0ACQABAAAAVuGDDQMAAACjl
 517  kROuH+XT4oz0jjbi14tnA4AAAAAAACcDgAAAAAAAC4BCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0j
 518  jbi14tog4AAAAAAACiDgAAAAAAAJACCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAA
 519  AAACiDgAAAAAAAA0DCQABAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAA
 520  AA4DCQACAAAAV+GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAAoICQABAAAAV
 521  +GDDQMAAACjlkROuH+XT4oz0jjbi14tog4AAAAAAACiDgAAAAAAAA==
 522 whenChanged: 20160629043639.0Z
 523 uSNChanged: 3746
 524 nTSecurityDescriptor:: AQAXjBQAAAAwAAAATAAAAMQAAAABBQAAAAAABRUAAACB/fj4FbukVnK
 525  PlwUAAgAAAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFAAIAAAQAeAACAAAAB1o4ACAAAAADAAAAvjsO
 526  8/Cf0RG2AwAA+ANnwaV6lr/mDdARooUAqgAwSeIBAQAAAAAAAQAAAAAHWjgAIAAAAAMAAAC/Ow7z8
 527  J/REbYDAAD4A2fBpXqWv+YN0BGihQCqADBJ4gEBAAAAAAABAAAAAAQA1AcsAAAAAAAkAP8BDwABBQ
 528  AAAAAABRUAAACB/fj4FbukVnKPlwUAAgAAAAAUAP8BDwABAQAAAAAABRIAAAAAABgA/wEPAAECAAA
 529  AAAAFIAAAACQCAAAAABQAlAACAAEBAAAAAAAFCgAAAAUAKAAAAQAAAQAAAFMacqsvHtARmBkAqgBA
 530  UpsBAQAAAAAABQoAAAAFACgAAAEAAAEAAABUGnKrLx7QEZgZAKoAQFKbAQEAAAAAAAUKAAAABQAoA
 531  AABAAABAAAAVhpyqy8e0BGYGQCqAEBSmwEBAAAAAAAFCgAAAAUAKAAwAAAAAQAAAIa4tXdKlNERrr
 532  0AAPgDZ8EBAQAAAAAABQoAAAAFACgAMAAAAAEAAACylVfkVZTREa69AAD4A2fBAQEAAAAAAAUKAAA
 533  ABQAoADAAAAABAAAAs5VX5FWU0RGuvQAA+ANnwQEBAAAAAAAFCgAAAAUAOAAQAAAAAQAAAPiIcAPh
 534  CtIRtCIAoMlo+TkBBQAAAAAABRUAAACB/fj4FbukVnKPlwUpAgAABQA4ABAAAAABAAAAAEIWTMAg0
 535  BGnaACqAG4FKQEFAAAAAAAFFQAAAIH9+PgVu6RWco+XBSkCAAAFADgAEAAAAAEAAABAwgq8qXnQEZ
 536  AgAMBPwtTPAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFKQIAAAAAFAAAAAIAAQEAAAAAAAULAAAABQA
 537  oABAAAAABAAAAQi+6WaJ50BGQIADAT8LTzwEBAAAAAAAFCwAAAAUAKAAQAAAAAQAAAIa4tXdKlNER
 538  rr0AAPgDZ8EBAQAAAAAABQsAAAAFACgAEAAAAAEAAACzlVfkVZTREa69AAD4A2fBAQEAAAAAAAULA
 539  AAABQAoABAAAAABAAAAVAGN5Pi80RGHAgDAT7lgUAEBAAAAAAAFCwAAAAUAKAAAAQAAAQAAAFMacq
 540  svHtARmBkAqgBAUpsBAQAAAAAAAQAAAAAFADgAEAAAAAEAAAAQICBfpXnQEZAgAMBPwtTPAQUAAAA
 541  AAAUVAAAAgf34+BW7pFZyj5cFKQIAAAUAOAAwAAAAAQAAAH96lr/mDdARooUAqgAwSeIBBQAAAAAA
 542  BRUAAACB/fj4FbukVnKPlwUFAgAABQAsABAAAAABAAAAHbGpRq5gWkC36P+KWNRW0gECAAAAAAAFI
 543  AAAADACAAAFACwAMAAAAAEAAAAcmrZtIpTREa69AAD4A2fBAQIAAAAAAAUgAAAAMQIAAAUALAAwAA
 544  AAAQAAAGK8BVjJvShEpeKFag9MGF4BAgAAAAAABSAAAAAxAgAABRo8ABAAAAADAAAAAEIWTMAg0BG
 545  naACqAG4FKRTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAADAAAAAEIWTMAg
 546  0BGnaACqAG4FKbp6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAAAADAAAAECAgX
 547  6V50BGQIADAT8LUzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAADAAAAEC
 548  AgX6V50BGQIADAT8LUz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAAAADAAA
 549  AQMIKvKl50BGQIADAT8LUzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8ABAAAAAD
 550  AAAAQMIKvKl50BGQIADAT8LUz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo8ABAAA
 551  AADAAAAQi+6WaJ50BGQIADAT8LTzxTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAABRI8AB
 552  AAAAADAAAAQi+6WaJ50BGQIADAT8LTz7p6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqAgAABRo
 553  8ABAAAAADAAAA+IhwA+EK0hG0IgCgyWj5ORTMKEg3FLxFmwetbwFeXygBAgAAAAAABSAAAAAqAgAA
 554  BRI8ABAAAAADAAAA+IhwA+EK0hG0IgCgyWj5Obp6lr/mDdARooUAqgAwSeIBAgAAAAAABSAAAAAqA
 555  gAABRo4ABAAAAADAAAAbZ7Gt8cs0hGFTgCgyYP2CIZ6lr/mDdARooUAqgAwSeIBAQAAAAAABQkAAA
 556  AFGjgAEAAAAAMAAABtnsa3xyzSEYVOAKDJg/YInHqWv+YN0BGihQCqADBJ4gEBAAAAAAAFCQAAAAU
 557  SOAAQAAAAAwAAAG2exrfHLNIRhU4AoMmD9gi6epa/5g3QEaKFAKoAMEniAQEAAAAAAAUJAAAABRos
 558  AJQAAgACAAAAFMwoSDcUvEWbB61vAV5fKAECAAAAAAAFIAAAACoCAAAFGiwAlAACAAIAAACcepa/5
 559  g3QEaKFAKoAMEniAQIAAAAAAAUgAAAAKgIAAAUSLACUAAIAAgAAALp6lr/mDdARooUAqgAwSeIBAg
 560  AAAAAABSAAAAAqAgAABRIoADABAAABAAAA3kfmkW/ZcEuVV9Y/9PPM2AEBAAAAAAAFCgAAAAASJAD
 561  /AQ8AAQUAAAAAAAUVAAAAgf34+BW7pFZyj5cFBwIAAAASGAAEAAAAAQIAAAAAAAUgAAAAKgIAAAAS
 562  GAC9AQ8AAQIAAAAAAAUgAAAAIAIAAA==
 563 EOF
 564
 565         out=$(TZ=UTC $ldbadd -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 566         if [ "$?" != "0" ]; then
 567                 echo "ldbadd returned:\n$out"
 568                 return 1
 569         fi
 570
 571         return 0
 572 }
 573
 574 dbcheck_lost_deleted_user3()
 575 {
 576         # here we don't pass --selftest-check-expired-tombstones
 577         # as we want to test the default
 578         dbcheck "-lost-deleted-user3" "0" ""
 579         return $?
 580 }
 581
 582 remove_lost_deleted_user3()
 583 {
 584         out=$(TZ=UTC $ldbdel -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb "<GUID=2301a64c-1122-5566-851e-12d4a711cfb4>" --show-recycled --relax)
 585         if [ "$?" != "0" ]; then
 586                 echo "ldbdel returned:\n$out"
 587                 return 1
 588         fi
 589
 590         return 0
 591 }
 592
 593 forward_link_corruption()
 594 {
 595         #
 596         # Step1: add a duplicate forward link from
 597         # "CN=Enterprise Admins" to "CN=Administrator"
 598         #
 599         LDIF1=$(TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb -b 'CN=Enterprise Admins,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp' --scope=base --reveal --extended-dn member)
 600         DN=$(echo "${LDIF1}" | grep '^dn: ')
 601         MSG=$(echo "${LDIF1}" | grep -v '^dn: ' | grep -v '^#' | grep -v '^$')
 602         ldif=$PREFIX_ABS/${RELEASE}/forward_link_corruption1.ldif
 603         {
 604                 echo "${DN}"
 605                 echo "changetype: modify"
 606                 echo "replace: member"
 607                 echo "${MSG}"
 608                 echo "${MSG}" | sed -e 's!RMD_LOCAL_USN=[1-9][0-9]*!RMD_LOCAL_USN=0!'
 609         } >$ldif
 610
 611         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 612         if [ "$?" != "0" ]; then
 613                 echo "ldbmodify returned:\n$out"
 614                 return 1
 615         fi
 616
 617         #
 618         # Step2: add user "dangling"
 619         #
 620         ldif=$PREFIX_ABS/${RELEASE}/forward_link_corruption2.ldif
 621         cat >$ldif <<EOF
 622 dn: CN=dangling,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp
 623 changetype: add
 624 objectclass: user
 625 samaccountname: dangling
 626 objectGUID: fd8a04ac-cea0-4921-b1a6-c173e1155c22
 627 EOF
 628
 629         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 630         if [ "$?" != "0" ]; then
 631                 echo "ldbmodify returned:\n$out"
 632                 return 1
 633         fi
 634
 635         #
 636         # Step3: add a dangling backlink from
 637         # "CN=dangling" to "CN=Enterprise Admins"
 638         #
 639         ldif=$PREFIX_ABS/${RELEASE}/forward_link_corruption3.ldif
 640         {
 641                 echo "dn: CN=dangling,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp"
 642                 echo "changetype: modify"
 643                 echo "add: memberOf"
 644                 echo "memberOf: <GUID=304ad703-468b-465e-9787-470b3dfd7d75>;<SID=S-1-5-21-4177067393-1453636373-93818738-519>;CN=Enterprise Admins,CN=Users,DC=release-4-5-0-pre1,DC=samba,DC=corp"
 645         } >$ldif
 646
 647         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 648         if [ "$?" != "0" ]; then
 649                 echo "ldbmodify returned:\n$out"
 650                 return 1
 651         fi
 652 }
 653
 654 dbcheck_forward_link_corruption()
 655 {
 656         dbcheck "-forward-link-corruption" "1" "--selftest-check-expired-tombstones"
 657         return $?
 658 }
 659
 660 check_expected_after_dbcheck_forward_link_corruption()
 661 {
 662         tmpldif=$PREFIX_ABS/$RELEASE/expected-after-dbcheck-forward-link-corruption.ldif.tmp
 663         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(|(cn=dangling)(cn=enterprise admins))' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --sorted memberOf member >$tmpldif
 664         diff -u $tmpldif $release_dir/expected-after-dbcheck-forward-link-corruption.ldif
 665         if [ "$?" != "0" ]; then
 666                 return 1
 667         fi
 668 }
 669
 670 oneway_link_corruption()
 671 {
 672         #
 673         # Step1: add  OU "dangling-ou"
 674         #
 675         ldif=$PREFIX_ABS/${RELEASE}/oneway_link_corruption.ldif
 676         cat >$ldif <<EOF
 677 dn: OU=dangling-ou,DC=release-4-5-0-pre1,DC=samba,DC=corp
 678 changetype: add
 679 objectclass: organizationalUnit
 680 objectGUID: 20600e7c-92bb-492e-9552-f3ed7f8a2cad
 681 EOF
 682
 683         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 684         if [ "$?" != "0" ]; then
 685                 echo "ldbmodify returned:\n$out"
 686                 return 1
 687         fi
 688
 689         #
 690         # Step2: add  msExchConfigurationContainer "dangling-msexch"
 691         #
 692         ldif=$PREFIX_ABS/${RELEASE}/oneway_link_corruption2.ldif
 693         cat >$ldif <<EOF
 694 dn: OU=dangling-from,DC=release-4-5-0-pre1,DC=samba,DC=corp
 695 changetype: add
 696 objectclass: organizationalUnit
 697 seeAlso: OU=dangling-ou,DC=release-4-5-0-pre1,DC=samba,DC=corp
 698 EOF
 699
 700         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb $ldif)
 701         if [ "$?" != "0" ]; then
 702                 echo "ldbmodify returned:\n$out"
 703                 return 1
 704         fi
 705
 706         #
 707         # Step3: rename dangling-ou to dangling-ou2
 708         #
 709         # Because this is a one-way link we don't fix it at runtime
 710         #
 711         out=$(TZ=UTC $ldbrename -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb OU=dangling-ou,DC=release-4-5-0-pre1,DC=samba,DC=corp OU=dangling-ou2,DC=release-4-5-0-pre1,DC=samba,DC=corp)
 712         if [ "$?" != "0" ]; then
 713                 echo "ldbmodify returned:\n$out"
 714                 return 1
 715         fi
 716 }
 717
 718 dbcheck_oneway_link_corruption()
 719 {
 720         dbcheck "-oneway-link-corruption" "0" "--selftest-check-expired-tombstones"
 721         return $?
 722 }
 723
 724 check_expected_after_dbcheck_oneway_link_corruption()
 725 {
 726         tmpldif=$PREFIX_ABS/$RELEASE/expected-after-dbcheck-oneway-link-corruption.ldif.tmp
 727         TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(|(ou=dangling-ou)(ou=dangling-ou2)(ou=dangling-from))' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --sorted seeAlso >$tmpldif
 728         diff -u $tmpldif $release_dir/expected-after-dbcheck-oneway-link-corruption.ldif
 729         if [ "$?" != "0" ]; then
 730                 return 1
 731         fi
 732 }
 733
 734 dbcheck_dangling_multi_valued()
 735 {
 736
 737         $PYTHON $BINDIR/samba-tool dbcheck -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --selftest-check-expired-tombstones --fix --yes
 738         if [ "$?" != "1" ]; then
 739                 return 1
 740         fi
 741 }
 742
 743 dangling_multi_valued_check_missing()
 744 {
 745         WORDS=$(TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(samaccountname=dangling-multi2)' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --reveal --sorted msDS-RevealedDSAs | grep msDS-RevealedDSAs | wc -l)
 746         if [ $WORDS -ne 4 ]; then
 747                 echo Got only $WORDS links for dangling-multi2
 748                 return 1
 749         fi
 750         WORDS=$(TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(samaccountname=dangling-multi3)' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --reveal --sorted msDS-RevealedDSAs | grep msDS-RevealedDSAs | wc -l)
 751         if [ $WORDS -ne 4 ]; then
 752                 echo Got only $WORDS links for dangling-multi3
 753                 return 1
 754         fi
 755 }
 756
 757 dangling_multi_valued_check_equal_or_too_many()
 758 {
 759         WORDS=$(TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(samaccountname=dangling-multi1)' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --reveal --sorted msDS-RevealedDSAs | grep msDS-RevealedDSAs | wc -l)
 760         if [ $WORDS -ne 4 ]; then
 761                 echo Got $WORDS links for dangling-multi1
 762                 return 1
 763         fi
 764
 765         WORDS=$(TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(samaccountname=dangling-multi5)' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --reveal --sorted msDS-RevealedDSAs | grep msDS-RevealedDSAs | wc -l)
 766
 767         if [ $WORDS -ne 0 ]; then
 768                 echo Got $WORDS links for dangling-multi5
 769                 return 1
 770         fi
 771
 772         WORDS=$(TZ=UTC $ldbsearch -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb '(samaccountname=Administrator)' --scope=sub -b DC=release-4-5-0-pre1,DC=samba,DC=corp --show-deleted --reveal --sorted msDS-RevealedDSAs | grep msDS-RevealedDSAs | wc -l)
 773
 774         if [ $WORDS -ne 2 ]; then
 775                 echo Got $WORDS links for Administrator
 776                 return 1
 777         fi
 778 }
 779
 780 dangling_link_does_not_prevent_delete()
 781 {
 782
 783         #
 784         # Step1: add user "dangling"
 785         #
 786         ldif=$PREFIX_ABS/${RELEASE}/backlink_can_be_vanished1.ldif
 787         dn='CN=dangling-for-vanish,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp'
 788         cat >$ldif <<EOF
 789 dn: $dn
 790 changetype: add
 791 objectclass: user
 792 samaccountname: dangling-v
 793 objectGUID: fd8a04ac-cea0-4921-b1a6-c173e1155c23
 794 EOF
 795
 796         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 797         if [ "$?" != "0" ]; then
 798                 echo "ldbmodify returned:\n$out"
 799                 return 1
 800         fi
 801
 802         #
 803         # Step2: add a dangling backlink from
 804         # "CN=dangling-for-vanish" to "CN=Enterprise Admins"
 805         #
 806         ldif=$PREFIX_ABS/${RELEASE}/backlink_can_be_vanished2.ldif
 807         {
 808                 echo "dn: $dn"
 809                 echo "changetype: modify"
 810                 echo "add: memberOf"
 811                 echo "memberOf: <GUID=304ad703-468b-465e-9787-470b3dfd7d75>;<SID=S-1-5-21-4177067393-1453636373-93818738-519>;CN=Enterprise Admins,CN=Users,DC=release-4-5-0-pre1,DC=samba,DC=corp"
 812         } >$ldif
 813
 814         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 815         if [ "$?" != "0" ]; then
 816                 echo "ldbmodify returned:\n$out"
 817                 return 1
 818         fi
 819
 820         out=$(TZ=UTC $ldbdel -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb "$dn")
 821         if [ "$?" != "0" ]; then
 822                 echo "ldbdel returned:\n$out"
 823                 return 1
 824         fi
 825 }
 826
 827 dangling_link_to_unknown_does_not_prevent_delete()
 828 {
 829
 830         #
 831         # Step1: add user "dangling"
 832         #
 833         ldif=$PREFIX_ABS/${RELEASE}/backlink_can_be_vanished1.ldif
 834         dn='CN=dangling-for-vanish,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp'
 835         cat >$ldif <<EOF
 836 dn: $dn
 837 changetype: add
 838 objectclass: user
 839 samaccountname: dangling-v
 840 objectGUID: a4090081-ac2a-410c-8924-b255375160e8
 841 EOF
 842
 843         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 844         if [ "$?" != "0" ]; then
 845                 echo "ldbmodify returned:\n$out"
 846                 return 1
 847         fi
 848
 849         #
 850         # Step2: add a dangling backlink from
 851         # "CN=dangling-for-vanish" to "CN=NOT Enterprise Admins"
 852         #
 853         ldif=$PREFIX_ABS/${RELEASE}/backlink_can_be_vanished2.ldif
 854         {
 855                 echo "dn: $dn"
 856                 echo "changetype: modify"
 857                 echo "add: memberOf"
 858                 echo "memberOf: <GUID=09a47bff-0227-44e1-a8e4-63f9e726515d>;<SID=S-1-5-21-4177067393-1453636373-93818738-588>;CN=NOT Enterprise Admins,CN=Users,DC=release-4-5-0-pre1,DC=samba,DC=corp"
 859         } >$ldif
 860
 861         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 862         if [ "$?" != "0" ]; then
 863                 echo "ldbmodify returned:\n$out"
 864                 return 1
 865         fi
 866
 867         out=$(TZ=UTC $ldbdel -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb "$dn")
 868         if [ "$?" != "0" ]; then
 869                 echo "ldbdel returned:\n$out"
 870                 return 1
 871         fi
 872 }
 873
 874 dangling_link_to_known_and_unknown_does_not_prevent_delete()
 875 {
 876
 877         #
 878         # Step1: add user "dangling"
 879         #
 880         ldif=$PREFIX_ABS/${RELEASE}/backlink_can_be_vanished1.ldif
 881         dn='CN=dangling-for-vanish,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp'
 882         cat >$ldif <<EOF
 883 dn: $dn
 884 changetype: add
 885 objectclass: user
 886 samaccountname: dangling-v
 887 objectGUID: 2882ffb1-31c3-485e-a7fc-184dfafc32d4
 888 EOF
 889
 890         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb --relax $ldif)
 891         if [ "$?" != "0" ]; then
 892                 echo "ldbmodify returned:\n$out"
 893                 return 1
 894         fi
 895
 896         #
 897         # Step2: add a dangling backlink from
 898         # "CN=dangling-for-vanish" to "CN=Enterprise Admins",
 899         # "CN=dangling-for-vanish" to "CN=NOT Enterprise Admins" and
 900         # back to ourselves
 901         #
 902         ldif=$PREFIX_ABS/${RELEASE}/backlink_can_be_vanished2.ldif
 903         {
 904                 echo "dn: $dn"
 905                 echo "changetype: modify"
 906                 echo "add: memberOf"
 907                 echo "memberOf: <GUID=304ad703-468b-465e-9787-470b3dfd7d75>;<SID=S-1-5-21-4177067393-1453636373-93818738-519>;CN=Enterprise Admins,CN=Users,DC=release-4-5-0-pre1,DC=samba,DC=corp"
 908                 echo "memberOf: <GUID=09a47bff-0227-44e1-a8e4-63f9e726515d>;<SID=S-1-5-21-4177067393-1453636373-93818738-588>;CN=NOT Enterprise Admins,CN=Users,DC=release-4-5-0-pre1,DC=samba,DC=corp"
 909                 echo "memberOf: <GUID=2882ffb1-31c3-485e-a7fc-184dfafc32d4>;CN=dangling-for-vanish,CN=users,DC=release-4-5-0-pre1,DC=samba,DC=corp"
 910         } >$ldif
 911
 912         out=$(TZ=UTC $ldbmodify -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb.d/DC%3DRELEASE-4-5-0-PRE1,DC%3DSAMBA,DC%3DCORP.ldb $ldif)
 913         if [ "$?" != "0" ]; then
 914                 echo "ldbmodify returned:\n$out"
 915                 return 1
 916         fi
 917
 918         out=$(TZ=UTC $ldbdel -H tdb://$PREFIX_ABS/${RELEASE}/private/sam.ldb "$dn")
 919         if [ "$?" != "0" ]; then
 920                 echo "ldbdel returned:\n$out"
 921                 return 1
 922         fi
 923 }
 924
 925 remove_directory $PREFIX_ABS/${RELEASE}
 926
 927 testit $RELEASE undump || failed=$(expr $failed + 1)
 928 testit "add_two_more_users" add_two_more_users || failed=$(expr $failed + 1)
 929 testit "add_four_more_links" add_four_more_links || failed=$(expr $failed + 1)
 930 testit "remove_one_link" remove_one_link || failed=$(expr $failed + 1)
 931 testit "remove_one_user" remove_one_user || failed=$(expr $failed + 1)
 932 testit "move_one_user" move_one_user || failed=$(expr $failed + 1)
 933 testit "add_dangling_link" add_dangling_link || failed=$(expr $failed + 1)
 934 testit "add_dangling_backlink" add_dangling_backlink || failed=$(expr $failed + 1)
 935 testit "add_deleted_dangling_backlink" add_deleted_dangling_backlink || failed=$(expr $failed + 1)
 936 testit "revive_links_on_deleted_group" revive_links_on_deleted_group || failed=$(expr $failed + 1)
 937 testit "revive_backlink_on_deleted_group" revive_backlink_on_deleted_group || failed=$(expr $failed + 1)
 938 testit "add_deleted_target_link" add_deleted_target_link || failed=$(expr $failed + 1)
 939 testit "add_deleted_target_backlink" add_deleted_target_backlink || failed=$(expr $failed + 1)
 940 testit "dbcheck_dangling" dbcheck_dangling || failed=$(expr $failed + 1)
 941 testit "dbcheck_clean" dbcheck_clean || failed=$(expr $failed + 1)
 942 testit "check_expected_after_deleted_links" check_expected_after_deleted_links || failed=$(expr $failed + 1)
 943 testit "check_expected_after_links" check_expected_after_links || failed=$(expr $failed + 1)
 944 testit "check_expected_after_objects" check_expected_after_objects || failed=$(expr $failed + 1)
 945 testit "duplicate_member" duplicate_member || failed=$(expr $failed + 1)
 946 testit "dbcheck_duplicate_member" dbcheck_duplicate_member || failed=$(expr $failed + 1)
 947 testit "check_expected_after_duplicate_links" check_expected_after_duplicate_links || failed=$(expr $failed + 1)
 948 testit "duplicate_clean" dbcheck_clean || failed=$(expr $failed + 1)
 949 testit "forward_link_corruption" forward_link_corruption || failed=$(expr $failed + 1)
 950 testit "dbcheck_forward_link_corruption" dbcheck_forward_link_corruption || failed=$(expr $failed + 1)
 951 testit "check_expected_after_dbcheck_forward_link_corruption" check_expected_after_dbcheck_forward_link_corruption || failed=$(expr $failed + 1)
 952 testit "forward_link_corruption_clean" dbcheck_clean || failed=$(expr $failed + 1)
 953 testit "oneway_link_corruption" oneway_link_corruption || failed=$(expr $failed + 1)
 954 testit "dbcheck_oneway_link_corruption" dbcheck_oneway_link_corruption || failed=$(expr $failed + 1)
 955 testit "check_expected_after_dbcheck_oneway_link_corruption" check_expected_after_dbcheck_oneway_link_corruption || failed=$(expr $failed + 1)
 956 testit "oneway_link_corruption_clean" dbcheck_clean || failed=$(expr $failed + 1)
 957 testit "dangling_one_way_link" dangling_one_way_link || failed=$(expr $failed + 1)
 958 testit "dbcheck_one_way" dbcheck_one_way || failed=$(expr $failed + 1)
 959 testit "dbcheck_clean2" dbcheck_clean || failed=$(expr $failed + 1)
 960 testit "missing_link_sid_corruption" missing_link_sid_corruption || failed=$(expr $failed + 1)
 961 testit "dbcheck_missing_link_sid_corruption" dbcheck_missing_link_sid_corruption || failed=$(expr $failed + 1)
 962 testit "missing_link_sid_clean" dbcheck_clean || failed=$(expr $failed + 1)
 963 testit "add_lost_deleted_user1" add_lost_deleted_user1 || failed=$(expr $failed + 1)
 964 testit "dbcheck_lost_deleted_user1" dbcheck_lost_deleted_user1 || failed=$(expr $failed + 1)
 965 testit "lost_deleted_user1_clean_A" dbcheck_clean || failed=$(expr $failed + 1)
 966 testit "remove_lost_deleted_user1" remove_lost_deleted_user1 || failed=$(expr $failed + 1)
 967 testit "lost_deleted_user1_clean_B" dbcheck_clean || failed=$(expr $failed + 1)
 968 testit "add_lost_deleted_user2" add_lost_deleted_user2 || failed=$(expr $failed + 1)
 969 testit "dbcheck_lost_deleted_user2" dbcheck_lost_deleted_user2 || failed=$(expr $failed + 1)
 970 testit "lost_deleted_user2_clean" dbcheck_clean || failed=$(expr $failed + 1)
 971 testit "add_lost_deleted_user3" add_lost_deleted_user3 || failed=$(expr $failed + 1)
 972 testit "dbcheck_lost_deleted_user3" dbcheck_lost_deleted_user3 || failed=$(expr $failed + 1)
 973 testit "lost_deleted_user3_clean_A" dbcheck_clean || failed=$(expr $failed + 1)
 974 testit "remove_lost_deleted_user3" remove_lost_deleted_user3 || failed=$(expr $failed + 1)
 975 testit "lost_deleted_user3_clean_B" dbcheck_clean || failed=$(expr $failed + 1)
 976 testit "dangling_one_way_dn" dangling_one_way_dn || failed=$(expr $failed + 1)
 977 testit "deleted_one_way_dn" deleted_one_way_dn || failed=$(expr $failed + 1)
 978 testit "dbcheck_clean3" dbcheck_clean || failed=$(expr $failed + 1)
 979 testit "add_dangling_multi_valued" add_dangling_multi_valued || failed=$(expr $failed + 1)
 980 testit "dbcheck_dangling_multi_valued" dbcheck_dangling_multi_valued || failed=$(expr $failed + 1)
 981 testit "dangling_multi_valued_check_missing" dangling_multi_valued_check_missing || failed=$(expr $failed + 1)
 982 testit "dangling_multi_valued_check_equal_or_too_many" dangling_multi_valued_check_equal_or_too_many || failed=$(expr $failed + 1)
 983 # Currently this cannot pass
 984 testit "dbcheck_dangling_multi_valued_clean" dbcheck_clean || failed=$(expr $failed + 1)
 985 testit "dangling_link_does_not_prevent_delete" dangling_link_does_not_prevent_delete || failed=$(expr $failed + 1)
 986 testit "dangling_link_to_unknown_does_not_prevent_delete" dangling_link_to_unknown_does_not_prevent_delete || failed=$(expr $failed + 1)
 987 testit "dangling_link_to_known_and_unknown_does_not_prevent_delete" dangling_link_to_known_and_unknown_does_not_prevent_delete || failed=$(expr $failed + 1)
 988
 989 remove_directory $PREFIX_ABS/${RELEASE}
 990
 991 exit $failed