nsswitch/tests/test_idmap_rid.sh

   1 #!/bin/sh
   2 #
   3 # Test id mapping with various SIDs and idmap_rid
   4 #
   5
   6 if [ $# -lt 1 ]; then
   7         echo Usage: $0 DOMAIN RANGE_START
   8         exit 1
   9 fi
  10
  11 DOMAIN="$1"
  12 RANGE_START="$2"
  13
  14 wbinfo="$VALGRIND $BINDIR/wbinfo"
  15 failed=0
  16
  17 . `dirname $0`/../../testprogs/blackbox/subunit.sh
  18
  19 DOMAIN_SID=$($wbinfo -n "$DOMAIN/" | cut -f 1 -d " ")
  20 if [ $? -ne 0 ] ; then
  21     echo "Could not find domain SID" | subunit_fail_test "test_idmap_rid"
  22     exit 1
  23 fi
  24
  25 # Find an unused uid and SID
  26 RID=66666
  27 MAX_RID=77777
  28 while true ; do
  29     id $RID
  30     if [ $? -ne 0 ] ; then
  31         SID="$DOMAIN_SID-$RID"
  32         $wbinfo -s $SID
  33         if [ $? -ne 0 ] ; then
  34             break
  35         fi
  36     fi
  37     RID=$(expr $RID + 1)
  38     if [ $RID -eq $MAX_RID ] ; then
  39         echo "Could not find free SID" | subunit_fail_test "test_idmap_rid"
  40         exit 1
  41     fi
  42 done
  43
  44 #
  45 # Test 1: Using non-existing SID to check backend returns a mapping
  46 #
  47
  48 EXPECTED_ID=$(expr $RID + $RANGE_START)
  49 out="$($wbinfo --sids-to-unix-ids=$SID)"
  50 echo "wbinfo returned: \"$out\", expecting \"$SID -> uid/gid $EXPECTED_ID\""
  51 test "$out" = "$SID -> uid/gid $EXPECTED_ID"
  52 ret=$?
  53 testit "Unknown RID from primary domain returns a mapping" test $ret -eq 0 || failed=$(expr $failed + 1)
  54
  55 #
  56 # Test 2: Using bogus SID with bad domain part to check idmap backend does not generate a mapping
  57 #
  58
  59 SID=S-1-5-21-1111-2222-3333-666
  60 out="$($wbinfo --sids-to-unix-ids=$SID)"
  61 echo "wbinfo returned: \"$out\", expecting \"$SID -> unmapped\""
  62 test "$out" = "$SID -> unmapped"
  63 ret=$?
  64 testit "Bogus SID returns unmapped" test $ret -eq 0 || failed=$(expr $failed + 1)
  65
  66 #
  67 # Test 3: ID_TYPE_BOTH mappings for group
  68 #
  69
  70 GROUP="$DOMAIN/Domain Users"
  71 GROUP_SID=$($wbinfo --name-to-sid="$GROUP" | sed -e 's/ .*//')
  72
  73 uid=$($wbinfo --sid-to-uid=$GROUP_SID)
  74 ret=$?
  75 testit "ID_TYPE_BOTH group map to uid succeeds" test $ret -eq 0 ||\
  76         failed=$(expr $failed + 1)
  77 testit "ID_TYPE_BOTH group map to uid has result" test -n $uid ||\
  78         failed=$(expr $failed + 1)
  79
  80 gid=$($wbinfo --sid-to-gid=$GROUP_SID)
  81 ret=$?
  82 testit "ID_TYPE_BOTH group map to gid succeeds" test $ret -eq 0 ||\
  83         failed=$(expr $failed + 1)
  84 testit "ID_TYPE_BOTH group map to gid has result" test -n $gid ||\
  85         failed=$(expr $failed + 1)
  86
  87 testit "ID_TYPE_BOTH group uid equals gid" test $uid -eq $gid ||\
  88         failed=$(expr $failed + 1)
  89
  90 group_pw="$DOMAIN/domain users:*:$uid:$gid::/home/$DOMAIN/domain users:/bin/false"
  91
  92 out=$(getent passwd "$GROUP")
  93 ret=$?
  94 testit "getpwnam for ID_TYPE_BOTH group succeeds" test $ret -eq 0 ||\
  95         failed=$(expr $failed + 1)
  96
  97 test "$out" = "$group_pw"
  98 ret=$?
  99 testit "getpwnam for ID_TYPE_BOTH group output" test $ret -eq 0 ||\
 100         failed=$(expr $failed + 1)
 101
 102 out=$(getent passwd $uid)
 103 ret=$?
 104 testit "getpwuid for ID_TYPE_BOTH group succeeds" test $ret -eq 0 ||\
 105         failed=$(expr $failed + 1)
 106 test "$out" = "$group_pw"
 107 ret=$?
 108 testit "getpwuid for ID_TYPE_BOTH group output" test $ret -eq 0 ||\
 109         failed=$(expr $failed + 1)
 110
 111 group_gr="$DOMAIN/domain users:x:$gid:"
 112
 113 out=$(getent group "$GROUP")
 114 ret=$?
 115 testit "getgrnam for ID_TYPE_BOTH group succeeds" test $ret -eq 0 ||\
 116         failed=$(expr $failed + 1)
 117 test "$out" = "$group_gr"
 118 ret=$?
 119 testit "getgrnam for ID_TYPE_BOTH group output" test $ret -eq 0 ||\
 120         failed=$(expr $failed + 1)
 121
 122 out=$(getent group "$gid")
 123 ret=$?
 124 testit "getgrgid for ID_TYPE_BOTH group succeeds" test $ret -eq 0 ||\
 125         failed=$(expr $failed + 1)
 126 test "$out" = "$group_gr"
 127 ret=$?
 128 testit "getgrgid for ID_TYPE_BOTH group output" test $ret -eq 0 ||\
 129         failed=$(expr $failed + 1)
 130
 131 #
 132 # Test 4: ID_TYPE_BOTH mappings for user
 133 #
 134
 135 dom_users_gid=$gid
 136
 137 USER="$DOMAIN/Administrator"
 138 USER_SID=$($wbinfo --name-to-sid="$USER" | sed -e 's/ .*//')
 139
 140 uid=$($wbinfo --sid-to-uid=$USER_SID)
 141 ret=$?
 142 testit "ID_TYPE_BOTH user map to uid succeeds" test $ret -eq 0 ||\
 143         failed=$(expr $failed + 1)
 144 testit "ID_TYPE_BOTH user map to uid has result" test -n $uid ||\
 145         failed=$(expr $failed + 1)
 146
 147 gid=$($wbinfo --sid-to-gid=$USER_SID)
 148 ret=$?
 149 testit "ID_TYPE_BOTH user map to gid succeeds" test $ret -eq 0 ||\
 150         failed=$(expr $failed + 1)
 151 testit "ID_TYPE_BOTH user map to gid has result" test -n $gid ||\
 152         failed=$(expr $failed + 1)
 153
 154 testit "ID_TYPE_BOTH user uid equals gid" test $uid -eq $gid ||\
 155         failed=$(expr $failed + 1)
 156
 157 user_pw="$DOMAIN/administrator:*:$uid:$dom_users_gid::/home/$DOMAIN/administrator:/bin/false"
 158
 159 out=$(getent passwd "$USER")
 160 ret=$?
 161 testit "getpwnam for ID_TYPE_BOTH user succeeds" test $ret -eq 0 ||\
 162         failed=$(expr $failed + 1)
 163
 164 test "$out" = "$user_pw"
 165 ret=$?
 166 testit "getpwnam for ID_TYPE_BOTH user output" test $ret -eq 0 ||\
 167         failed=$(expr $failed + 1)
 168
 169 out=$(getent passwd $uid)
 170 ret=$?
 171 testit "getpwuid for ID_TYPE_BOTH user succeeds" test $ret -eq 0 ||\
 172         failed=$(expr $failed + 1)
 173 test "$out" = "$user_pw"
 174 ret=$?
 175 testit "getpwuid for ID_TYPE_BOTH user output" test $ret -eq 0 ||\
 176         failed=$(expr $failed + 1)
 177
 178 user_gr="$DOMAIN/administrator:x:$gid:$DOMAIN/administrator"
 179
 180 out=$(getent group "$USER")
 181 ret=$?
 182 testit "getgrnam for ID_TYPE_BOTH user succeeds" test $ret -eq 0 ||\
 183         failed=$(expr $failed + 1)
 184 test "$out" = "$user_gr"
 185 ret=$?
 186 testit "getgrnam for ID_TYPE_BOTH user output" test $ret -eq 0 ||\
 187         failed=$(expr $failed + 1)
 188
 189 out=$(getent group "$gid")
 190 ret=$?
 191 testit "getgrgid for ID_TYPE_BOTH user succeeds" test $ret -eq 0 ||\
 192         failed=$(expr $failed + 1)
 193 test "$out" = "$user_gr"
 194 ret=$?
 195 testit "getgrgid for ID_TYPE_BOTH user output" test $ret -eq 0 ||\
 196         failed=$(expr $failed + 1)
 197
 198 exit $failed