2 # This script generates a list of testsuites that should be run as part of
3 # the Samba 4 test suite.
5 # The output of this script is parsed by selftest.pl, which then decides
6 # which of the tests to actually run. It will, for example, skip all tests
7 # listed in selftest/skip or only run a subset during "make quicktest".
9 # The idea is that this script outputs all of the tests of Samba 4, not
10 # just those that are known to pass, and list those that should be skipped
11 # or are known to fail in selftest/skip or selftest/knownfail. This makes it
12 # very easy to see what functionality is still missing in Samba 4 and makes
13 # it possible to run the testsuite against other servers, such as Samba 3 or
14 # Windows that have a different set of features.
16 # The syntax for a testsuite is "-- TEST --" on a single line, followed
17 # by the name of the test, the environment it needs and the command to run, all
18 # three separated by newlines. All other lines in the output are considered
22 sys
.path
.insert(0, os
.path
.join(os
.path
.dirname(__file__
), "../../selftest"))
23 import selftesthelpers
24 from selftesthelpers
import *
26 print >>sys
.stderr
, "OPTIONS %s" % " ".join(smbtorture4_options
)
28 def plansmbtorture4testsuite(name
, env
, options
, modname
=None):
29 return selftesthelpers
.plansmbtorture4testsuite(name
, env
, options
,
30 target
='samba4', modname
=modname
)
32 samba4srcdir
= source4dir()
33 samba4bindir
= bindir()
34 validate
= os
.getenv("VALIDATE", "")
36 validate_list
= [validate
]
40 nmblookup4
= binpath('nmblookup4')
41 smbclient4
= binpath('smbclient4')
43 bbdir
= os
.path
.join(srcdir(), "testprogs/blackbox")
45 # Simple tests for LDAP and CLDAP
46 for auth_type
in ['', '-k no', '-k yes']:
47 for auth_level
in ['--option=clientldapsaslwrapping=plain', '--sign', '--encrypt']:
48 creds
= '-U"$USERNAME%$PASSWORD"'
49 options
= creds
+ ' ' + auth_type
+ ' ' + auth_level
50 plantestsuite("samba4.ldb.ldap with options %r(ad_dc_ntvfs)" % options
, "ad_dc_ntvfs", "%s/test_ldb.sh ldap $SERVER %s" % (bbdir
, options
))
52 # see if we support ADS on the Samba3 side
54 config_h
= os
.environ
["CONFIG_H"]
56 config_h
= os
.path
.join(samba4bindir
, "default/include/config.h")
58 # check available features
60 f
= open(config_h
, 'r')
63 config_hash
= dict((x
[0], ' '.join(x
[1:]))
64 for x
in map(lambda line
: line
.strip().split(' ')[1:],
65 filter(lambda line
: (line
[0:7] == '#define') and (len(line
.split(' ')) > 2), lines
)))
69 have_tls_support
= ("ENABLE_GNUTLS" in config_hash
)
70 have_heimdal_support
= ("SAMBA4_USES_HEIMDAL" in config_hash
)
71 have_jansson_support
= ("HAVE_JANSSON" in config_hash
)
74 for options
in ['-U"$USERNAME%$PASSWORD"']:
75 plantestsuite("samba4.ldb.ldaps with options %s(ad_dc_ntvfs)" % options
, "ad_dc_ntvfs",
76 "%s/test_ldb.sh ldaps $SERVER_IP %s" % (bbdir
, options
))
79 '--simple-bind-dn=$USERNAME@$REALM --password=$PASSWORD',
82 'SERVER_IP': '$SERVER_IP',
83 'SERVER_NAME': '$SERVER',
84 'SERVER.REALM': '$SERVER.$REALM',
86 tls_verify_options
= [
87 '--option="tlsverifypeer=no_check"',
88 '--option="tlsverifypeer=ca_only"',
89 '--option="tlsverifypeer=ca_and_name_if_available"',
90 '--option="tlsverifypeer=ca_and_name"',
91 '--option="tlsverifypeer=as_strict_as_possible"',
94 # we use :local for fl2008r2dc because of the self-signed certificate
95 for env
in ["ad_dc_ntvfs", "fl2008r2dc:local"]:
96 for peer_key
in peer_options
.keys():
97 peer_val
= peer_options
[peer_key
]
98 for creds
in creds_options
:
99 for tls_verify
in tls_verify_options
:
100 options
= creds
+ ' ' + tls_verify
101 plantestsuite("samba4.ldb.simple.ldaps with options %s %s(%s)" % (
102 peer_key
, options
, env
), env
,
103 "%s/test_ldb_simple.sh ldaps %s %s" % (bbdir
, peer_val
, options
))
105 # test all "ldap server require strong auth" combinations
106 for env
in ["ad_dc_ntvfs", "fl2008r2dc", "fl2003dc"]:
107 options
= '--simple-bind-dn="$USERNAME@$REALM" --password="$PASSWORD"'
108 plantestsuite("samba4.ldb.simple.ldap with SIMPLE-BIND %s(%s)" % (options
, env
),
109 env
, "%s/test_ldb_simple.sh ldap $SERVER %s" % (bbdir
, options
))
111 options
+= ' --option="tlsverifypeer=no_check"'
112 plantestsuite("samba4.ldb.simple.ldaps with SIMPLE-BIND %s(%s)" % (options
, env
),
113 env
, "%s/test_ldb_simple.sh ldaps $SERVER %s" % (bbdir
, options
))
116 '--option=clientldapsaslwrapping=plain',
121 for auth_option
in auth_options
:
122 options
= '-U"$USERNAME%$PASSWORD"' + ' ' + auth_option
123 plantestsuite("samba4.ldb.simple.ldap with SASL-BIND %s(%s)" % (options
, env
),
124 env
, "%s/test_ldb_simple.sh ldap $SERVER %s" % (bbdir
, options
))
126 options
= '-U"$USERNAME%$PASSWORD" --option="tlsverifypeer=no_check"'
127 plantestsuite("samba4.ldb.simple.ldaps with SASL-BIND %s(%s)" % (options
, env
),
128 env
, "%s/test_ldb_simple.sh ldaps $SERVER %s" % (bbdir
, options
))
130 for options
in ['-U"$USERNAME%$PASSWORD"']:
131 plantestsuite("samba4.ldb.ldapi with options %s(ad_dc_ntvfs:local)" % options
, "ad_dc_ntvfs:local",
132 "%s/test_ldb.sh ldapi $PREFIX_ABS/ad_dc_ntvfs/private/ldapi %s" % (bbdir
, options
))
134 for t
in smbtorture4_testsuites("ldap."):
135 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '-U"$USERNAME%$PASSWORD" //$SERVER_IP/_none_')
137 ldbdir
= os
.path
.join(srcdir(), "lib/ldb")
138 # Don't run LDB tests when using system ldb, as we won't have ldbtest installed
139 if os
.path
.exists(os
.path
.join(samba4bindir
, "ldbtest")):
140 plantestsuite("ldb.base", "none", "%s/tests/test-tdb-subunit.sh %s" % (ldbdir
, samba4bindir
))
142 skiptestsuite("ldb.base", "Using system LDB, ldbtest not available")
146 # add tests to this list as they start passing, so we test
147 # that they stay passing
148 ncacn_np_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.altercontext", "rpc.netlogon", "rpc.netlogon.admin", "rpc.handles", "rpc.samsync", "rpc.samba3-sessionkey", "rpc.samba3-getusername", "rpc.samba3-lsa", "rpc.samba3-bind", "rpc.samba3-netlogon", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext"]
149 ncalrpc_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.altercontext", "rpc.netlogon", "rpc.netlogon.admin", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext"]
150 drs_rpc_tests
= smbtorture4_testsuites("drs.rpc")
151 ncacn_ip_tcp_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.drsuapi", "rpc.drsuapi_w2k8", "rpc.netlogon", "rpc.netlogon.admin", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext", "rpc.samr.passwords.validate"] + drs_rpc_tests
152 slow_ncacn_np_tests
= ["rpc.samlogon", "rpc.samr", "rpc.samr.users", "rpc.samr.large-dc", "rpc.samr.users.privileges", "rpc.samr.passwords", "rpc.samr.passwords.pwdlastset", "rpc.samr.passwords.lockout", "rpc.samr.passwords.badpwdcount"]
153 slow_ncacn_ip_tcp_tests
= ["rpc.cracknames"]
155 all_rpc_tests
= ncalrpc_tests
+ ncacn_np_tests
+ ncacn_ip_tcp_tests
+ slow_ncacn_np_tests
+ slow_ncacn_ip_tcp_tests
+ ["rpc.lsa.secrets", "rpc.pac", "rpc.samba3-sharesec", "rpc.countcalls"]
157 # Make sure all tests get run
158 rpc_tests
= smbtorture4_testsuites("rpc.")
159 auto_rpc_tests
= filter(lambda t
: t
not in all_rpc_tests
, rpc_tests
)
161 for bindoptions
in ["seal,padcheck"] + validate_list
+ ["bigendian"]:
162 for transport
in ["ncalrpc", "ncacn_np", "ncacn_ip_tcp"]:
164 if transport
== "ncalrpc":
165 tests
= ncalrpc_tests
166 env
= "ad_dc_ntvfs:local"
167 elif transport
== "ncacn_np":
168 tests
= ncacn_np_tests
169 elif transport
== "ncacn_ip_tcp":
170 tests
= ncacn_ip_tcp_tests
172 raise AssertionError("invalid transport %r"% transport
)
174 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s on %s with %s" % (t
, transport
, bindoptions
))
175 plansmbtorture4testsuite('rpc.samba3-sharesec', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=torture:share=tmp'], "samba4.rpc.samba3.sharesec on %s with %s" % (transport
, bindoptions
))
177 #Plugin S4 DC tests (confirms named pipe auth forwarding). This can be expanded once kerberos is supported in the plugin DC
179 for bindoptions
in ["seal,padcheck"] + validate_list
+ ["bigendian"]:
180 for t
in ncacn_np_tests
:
182 transport
= "ncacn_np"
183 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s with %s" % (t
, bindoptions
))
185 for bindoptions
in [""] + validate_list
+ ["bigendian"]:
186 for t
in auto_rpc_tests
:
187 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ["$SERVER[%s]" % bindoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s with %s" % (t
, bindoptions
))
190 plansmbtorture4testsuite(t
, "ad_dc_ntvfs:local", ["$SERVER[%s]" % bindoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.%s" % t
)
192 for transport
in ["ncacn_np", "ncacn_ip_tcp"]:
194 if transport
== "ncacn_np":
195 tests
= slow_ncacn_np_tests
196 elif transport
== "ncacn_ip_tcp":
197 tests
= slow_ncacn_ip_tcp_tests
199 raise AssertionError("Invalid transport %r" % transport
)
202 if t
== 'rpc.cracknames':
204 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
,bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s on %s with %s" % (t
, transport
, bindoptions
))
206 # Tests for the DFS referral calls implementation
207 for t
in smbtorture4_testsuites("dfs."):
208 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
209 plansmbtorture4testsuite(t
, "ad_dc", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
211 # Tests for the NET API (net.api.become.dc tested below against all the roles)
212 net_tests
= filter(lambda x
: "net.api.become.dc" not in x
, smbtorture4_testsuites("net."))
214 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '$SERVER[%s] -U$USERNAME%%$PASSWORD -W$DOMAIN' % validate
)
216 # Tests for session keys and encryption of RPC pipes
217 # FIXME: Integrate these into a single smbtorture test
219 transport
= "ncacn_np"
220 for env
in ["ad_dc_ntvfs", "nt4_dc"]:
222 "-k no --option=usespnego=yes",
223 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no",
224 "-k no --option=usespnego=yes --option=ntlmssp_client:56bit=yes",
225 "-k no --option=usespnego=yes --option=ntlmssp_client:56bit=no",
226 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=yes",
227 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=no",
228 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes",
229 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no",
230 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=yes",
231 "-k no --option=usespnego=no --option=clientntlmv2auth=yes",
232 "-k no --option=gensec:spnego=no --option=clientntlmv2auth=yes",
233 "-k no --option=usespnego=no"]:
234 name
= "rpc.lsa.secrets on %s with with %s" % (transport
, ntlmoptions
)
235 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
), ntlmoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.%s" % name
)
236 plantestsuite("samba.blackbox.pdbtest(%s)" % env
, "%s:local" % env
, [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest", smbclient4
, '$SMB_CONF_PATH', configuration
])
238 gpo
= smbtorture4_testsuites("gpo.")
240 plansmbtorture4testsuite(t
, 'ad_dc:local', ['//$SERVER/sysvol', '-U$USERNAME%$PASSWORD'])
242 transports
= ["ncacn_np", "ncacn_ip_tcp"]
244 #Kerberos varies between functional levels, so it is important to check this on all of them
245 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc", "ad_dc"]:
246 transport
= "ncacn_np"
247 plansmbtorture4testsuite('rpc.pac', env
, ["%s:$SERVER[]" % (transport
, ), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.pac on %s" % (transport
,))
248 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=gensec:target_hostname=$NETBIOSNAME', 'rpc.lsa.secrets'], "samba4.rpc.lsa.secrets on %s with Kerberos" % (transport
,))
249 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=clientusespnegoprincipal=yes", '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use target principal" % (transport
,))
250 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=dcom/$NETBIOSNAME]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal dcom" % (transport
,))
251 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=$NETBIOSNAME\$]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal dollar" % (transport
,))
252 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=$NETBIOSNAME]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal" % (transport
,))
253 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=gensec:fake_gssapi_krb5=yes", '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use Samba3 style login" % transport
)
254 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=gensec:fake_gssapi_krb5=yes", '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME', '--option=gensec_krb5:send_authenticator_checksum=false'], "samba4.rpc.lsa.secrets on %s with Kerberos - use raw-krb5-no-authenticator-checksum style login" % transport
)
255 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=clientusespnegoprincipal=yes", '--option=gensec:fake_gssapi_krb5=yes', '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use Samba3 style login, use target principal" % transport
)
257 # Winreg tests test bulk Kerberos encryption of DCE/RPC
258 # We test rpc.winreg here too, because the winreg interface if
259 # handled by the source3/rpc_server code.
260 for bindoptions
in ["connect", "packet", "krb5", "krb5,packet", "krb5,sign", "krb5,seal", "spnego", "spnego,packet", "spnego,sign", "spnego,seal"]:
261 plansmbtorture4testsuite('rpc.winreg', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.winreg on %s with %s" % (transport
, bindoptions
))
263 for transport
in transports
:
264 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[]" % (transport
,), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s" % (transport
, ))
266 # Echo tests test bulk Kerberos encryption of DCE/RPC
267 for bindoptions
in ["connect", "krb5", "krb5,sign", "krb5,seal", "spnego", "spnego,sign", "spnego,seal"] + validate_list
+ ["padcheck", "bigendian", "bigendian,seal"]:
268 echooptions
= "--option=socket:testnonblock=True --option=torture:quick=yes -k yes"
269 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), echooptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s with %s and %s" % (transport
, bindoptions
, echooptions
))
270 plansmbtorture4testsuite("net.api.become.dc", env
, '$SERVER[%s] -U$USERNAME%%$PASSWORD -W$DOMAIN' % validate
)
272 for bindoptions
in ["sign", "seal"]:
273 plansmbtorture4testsuite('rpc.backupkey', "ad_dc_ntvfs", ["ncacn_np:$SERVER[%s]" % ( bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.backupkey with %s" % (bindoptions
))
275 for transport
in transports
:
276 for bindoptions
in ["sign", "seal"]:
278 "--option=ntlmssp_client:ntlm2=yes --option=torture:quick=yes",
279 "--option=ntlmssp_client:ntlm2=no --option=torture:quick=yes",
280 "--option=ntlmssp_client:ntlm2=yes --option=ntlmssp_client:128bit=no --option=torture:quick=yes",
281 "--option=ntlmssp_client:ntlm2=no --option=ntlmssp_client:128bit=no --option=torture:quick=yes",
282 "--option=ntlmssp_client:ntlm2=yes --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
283 "--option=ntlmssp_client:ntlm2=no --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
284 "--option=clientntlmv2auth=yes --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
285 "--option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:keyexchange=yes --option=torture:quick=yes",
286 "--option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes"]:
287 if transport
== "ncalrpc":
288 env
= "ad_dc_ntvfs:local"
291 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), ntlmoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s with %s and %s" % (transport
, bindoptions
, ntlmoptions
))
293 plansmbtorture4testsuite('rpc.echo', "ad_dc_ntvfs", ['ncacn_np:$SERVER[smb2]', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on ncacn_np over smb2")
294 for env
in ["ad_dc", "nt4_dc"]:
295 plansmbtorture4testsuite('rpc.echo', env
, ['60a15ec5-4de8-11d7-a637-005056a20182@ncacn_np:$SERVER[]', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=torture:quick=yes'], "samba4.rpc.echo on ncacn_np with object")
296 plansmbtorture4testsuite('rpc.echo', env
, ['60a15ec5-4de8-11d7-a637-005056a20182@ncacn_ip_tcp:$SERVER[]', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=torture:quick=yes'], "samba4.rpc.echo on ncacn_ip_tcp with object")
298 plansmbtorture4testsuite('ntp.signd', "ad_dc_ntvfs:local", ['ncacn_np:$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.ntp.signd")
300 nbt_tests
= smbtorture4_testsuites("nbt.")
302 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", "//$SERVER/_none_ -U\"$USERNAME%$PASSWORD\"")
304 # Tests against the NTVFS POSIX backend
305 ntvfsargs
= ["--option=torture:sharedelay=100000", "--option=torture:oplocktimeout=3", "--option=torture:writetimeupdatedelay=500000"]
307 # Filter smb2 tests that should not run against ad_dc_ntvfs
308 smb2_s3only
= ["smb2.change_notify_disabled", "smb2.dosmode", "smb2.credits", "smb2.kernel-oplocks"]
309 smb2
= [x
for x
in smbtorture4_testsuites("smb2.") if x
not in smb2_s3only
]
311 #The QFILEINFO-IPC test needs to be on ipc$
312 raw
= filter(lambda x
: "raw.qfileinfo.ipc" not in x
, smbtorture4_testsuites("raw."))
313 base
= smbtorture4_testsuites("base.")
315 netapi
= smbtorture4_testsuites("netapi.")
317 libsmbclient
= smbtorture4_testsuites("libsmbclient.")
319 for t
in base
+ raw
+ smb2
+ netapi
+ libsmbclient
:
320 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$SERVER/tmp', '-U$USERNAME%$PASSWORD'] + ntvfsargs
)
322 plansmbtorture4testsuite("raw.qfileinfo.ipc", "ad_dc_ntvfs", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
324 for t
in smbtorture4_testsuites("rap."):
325 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '//$SERVER/IPC\$ -U$USERNAME%$PASSWORD')
327 # Tests against the NTVFS CIFS backend
329 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$NETBIOSNAME/cifs', '-U$USERNAME%$PASSWORD', '--kerberos=yes'] + ntvfsargs
, modname
="samba4.ntvfs.cifs.krb5.%s" % t
)
331 # Test NTVFS CIFS backend with S4U2Self and S4U2Proxy
333 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$NETBIOSNAME/cifs', '-U$USERNAME%$PASSWORD', '--kerberos=no'] + ntvfsargs
, "samba4.ntvfs.cifs.ntlm.%s" % t
)
334 plansmbtorture4testsuite(t
, "rpc_proxy", ['//$NETBIOSNAME/cifs_to_dc', '-U$DC_USERNAME%$DC_PASSWORD', '--kerberos=yes'] + ntvfsargs
, "samba4.ntvfs.cifs.krb5.%s" % t
)
335 plansmbtorture4testsuite(t
, "rpc_proxy", ['//$NETBIOSNAME/cifs_to_dc', '-U$DC_USERNAME%$DC_PASSWORD', '--kerberos=no'] + ntvfsargs
, "samba4.ntvfs.cifs.ntlm.%s" % t
)
337 plansmbtorture4testsuite('echo.udp', 'ad_dc_ntvfs:local', '//$SERVER/whatever')
340 for t
in smbtorture4_testsuites("local."):
341 #The local.resolve test needs a name to look up using real system (not emulated) name routines
342 plansmbtorture4testsuite(t
, "none", "ncalrpc:localhost")
344 # Confirm these tests with the system iconv too
345 for t
in ["local.convert_string_handle", "local.convert_string", "local.ndr"]:
346 options
= "ncalrpc: --option='iconv:use_builtin_handlers=false'"
347 plansmbtorture4testsuite(t
, "none", options
,
348 modname
="samba4.%s.system.iconv" % t
)
350 tdbtorture4
= binpath("tdbtorture")
351 if os
.path
.exists(tdbtorture4
):
352 plantestsuite("tdb.stress", "none", valgrindify(tdbtorture4
))
354 skiptestsuite("tdb.stress", "Using system TDB, tdbtorture not available")
356 plansmbtorture4testsuite("drs.unit", "none", "ncalrpc:")
359 for f
in sorted(os
.listdir(os
.path
.join(samba4srcdir
, "../pidl/tests"))):
360 if f
.endswith(".pl"):
361 planperltestsuite("pidl.%s" % f
[:-3], os
.path
.normpath(os
.path
.join(samba4srcdir
, "../pidl/tests", f
)))
364 plantestsuite_loadlist("samba.tests.dns", "fl2003dc:local", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
365 plantestsuite_loadlist("samba.tests.dns", "rodc:local", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
366 plantestsuite_loadlist("samba.tests.dns", "vampire_dc:local", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
368 plantestsuite_loadlist("samba.tests.dns_forwarder", "fl2003dc:local", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns_forwarder.py"), '$SERVER', '$SERVER_IP', '$DNS_FORWARDER1', '$DNS_FORWARDER2', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
370 plantestsuite_loadlist("samba.tests.dns_tkey", "fl2008r2dc", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns_tkey.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
371 plantestsuite_loadlist("samba.tests.dns_wildcard", "ad_dc", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns_wildcard.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
372 for t
in smbtorture4_testsuites("dns_internal."):
373 plansmbtorture4testsuite(t
, "ad_dc_ntvfs:local", '//$SERVER/whavever')
376 for t
in smbtorture4_testsuites("dlz_bind9."):
377 #The dlz_bind9 tests needs to look at the DNS database
378 plansmbtorture4testsuite(t
, "chgdcpass:local", ["ncalrpc:$SERVER", '-U$USERNAME%$PASSWORD'])
380 planpythontestsuite("nt4_dc", "samba.tests.libsmb_samba_internal");
383 # tests that interact directly with the command-line tools rather than using
384 # the API. These mainly test that the various command-line options of commands
387 for env
in ["ad_member", "s4member", "ad_dc_ntvfs", "chgdcpass"]:
388 plantestsuite("samba4.blackbox.smbclient(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba4srcdir
, "utils/tests/test_smbclient.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', smbclient4
])
390 plantestsuite("samba4.blackbox.samba_tool(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(samba4srcdir
, "utils/tests/test_samba_tool.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', smbclient4
])
391 plantestsuite("samba4.blackbox.net_rpc_user(ad_dc)", "ad_dc", [os
.path
.join(bbdir
, "test_net_rpc_user.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN'])
393 if have_heimdal_support
:
394 for env
in ["ad_dc_ntvfs", "ad_dc"]:
395 plantestsuite("samba4.blackbox.pkinit(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(bbdir
, "test_pkinit_heimdal.sh"), '$SERVER', 'pkinit', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX/%s' % env
, "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
396 plantestsuite("samba4.blackbox.pkinit_pac(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(bbdir
, "test_pkinit_pac_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX/%s' % env
, "aes256-cts-hmac-sha1-96", configuration
])
397 plantestsuite("samba4.blackbox.kinit(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
398 plantestsuite("samba4.blackbox.kinit(fl2000dc:local)", "fl2000dc:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "arcfour-hmac-md5", smbclient4
, configuration
])
399 plantestsuite("samba4.blackbox.kinit(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
400 plantestsuite("samba4.blackbox.kinit_trust(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_kinit_trusts_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "forest", "aes256-cts-hmac-sha1-96"])
401 plantestsuite("samba4.blackbox.kinit_trust(fl2003dc:local)", "fl2003dc:local", [os
.path
.join(bbdir
, "test_kinit_trusts_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "external", "arcfour-hmac-md5"])
402 plantestsuite("samba4.blackbox.export.keytab(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_export_keytab_heimdal.sh"), '$SERVER', '$USERNAME', '$REALM', '$DOMAIN', "$PREFIX", smbclient4
])
403 plantestsuite("samba4.blackbox.kpasswd(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_kpasswd_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', "$PREFIX/ad_dc_ntvfs"])
405 plantestsuite("samba4.blackbox.kinit(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_kinit_mit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', smbclient4
, configuration
])
406 plantestsuite("samba4.blackbox.kinit(fl2000dc:local)", "fl2000dc:local", [os
.path
.join(bbdir
, "test_kinit_mit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', smbclient4
, configuration
])
407 plantestsuite("samba4.blackbox.kinit(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_kinit_mit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', smbclient4
, configuration
])
408 plantestsuite("samba4.blackbox.kinit_trust(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_kinit_trusts_mit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "forest"])
409 plantestsuite("samba4.blackbox.kinit_trust(fl2003dc:local)", "fl2003dc:local", [os
.path
.join(bbdir
, "test_kinit_trusts_mit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "external"])
410 plantestsuite("samba4.blackbox.export.keytab(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_export_keytab_mit.sh"), '$SERVER', '$USERNAME', '$REALM', '$DOMAIN', "$PREFIX", smbclient4
])
411 plantestsuite("samba4.blackbox.kpasswd(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_kpasswd_mit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', "$PREFIX/ad_dc_ntvfs"])
413 plantestsuite("samba4.blackbox.trust_ntlm", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_trust_ntlm.sh"), '$SERVER_IP', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', 'forest', 'auto', 'NT_STATUS_LOGON_FAILURE'])
414 plantestsuite("samba4.blackbox.trust_ntlm", "fl2003dc:local", [os
.path
.join(bbdir
, "test_trust_ntlm.sh"), '$SERVER_IP', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', 'external', 'auto', 'NT_STATUS_LOGON_FAILURE'])
415 plantestsuite("samba4.blackbox.trust_ntlm", "ad_member:local", [os
.path
.join(bbdir
, "test_trust_ntlm.sh"), '$SERVER_IP', '$USERNAME', '$PASSWORD', '$SERVER', '$SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$REALM', '$DOMAIN', 'member', 'auto', 'NT_STATUS_LOGON_FAILURE'])
416 plantestsuite("samba4.blackbox.trust_ntlm", "nt4_member:local", [os
.path
.join(bbdir
, "test_trust_ntlm.sh"), '$SERVER_IP', '$USERNAME', '$PASSWORD', '$SERVER', '$SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$DOMAIN', '$DOMAIN', 'member', 'auto', 'NT_STATUS_LOGON_FAILURE'])
418 plantestsuite("samba4.blackbox.trust_utils(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_trust_utils.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "forest"])
419 plantestsuite("samba4.blackbox.trust_utils(fl2003dc:local)", "fl2003dc:local", [os
.path
.join(bbdir
, "test_trust_utils.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "external"])
420 plantestsuite("samba4.blackbox.ktpass(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(bbdir
, "test_ktpass.sh"), '$PREFIX/ad_dc_ntvfs'])
421 plantestsuite("samba4.blackbox.password_settings(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_password_settings.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', "$PREFIX/ad_dc_ntvfs"])
422 plantestsuite("samba4.blackbox.cifsdd(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "client/tests/test_cifsdd.sh"), '$SERVER', '$USERNAME', '$PASSWORD', "$DOMAIN"])
423 plantestsuite("samba4.blackbox.nmblookup(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "utils/tests/test_nmblookup.sh"), '$NETBIOSNAME', '$NETBIOSALIAS', '$SERVER', '$SERVER_IP', nmblookup4
])
424 plantestsuite("samba4.blackbox.locktest(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_locktest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', '$PREFIX'])
425 plantestsuite("samba4.blackbox.masktest", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_masktest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', '$PREFIX'])
426 plantestsuite("samba4.blackbox.gentest(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_gentest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', "$PREFIX"])
427 plantestsuite("samba4.blackbox.rfc2307_mapping(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(samba4srcdir
, "../nsswitch/tests/test_rfc2307_mapping.sh"), '$DOMAIN', '$USERNAME', '$PASSWORD', "$SERVER", "$UID_RFC2307TEST", "$GID_RFC2307TEST", configuration
])
428 plantestsuite("samba4.blackbox.chgdcpass", "chgdcpass", [os
.path
.join(bbdir
, "test_chgdcpass.sh"), '$SERVER', "CHGDCPASS\$", '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", '$SELFTEST_PREFIX/chgdcpass', smbclient4
])
429 plantestsuite("samba4.blackbox.samba_upgradedns(chgdcpass:local)", "chgdcpass:local", [os
.path
.join(bbdir
, "test_samba_upgradedns.sh"), '$SERVER', '$REALM', '$PREFIX', '$SELFTEST_PREFIX/chgdcpass'])
430 plantestsuite("samba4.blackbox.net_ads(ad_dc:client)", "ad_dc:client", [os
.path
.join(bbdir
, "test_net_ads.sh"), '$DC_SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$PREFIX_ABS'])
431 plantestsuite("samba4.blackbox.client_etypes_all(ad_dc:client)", "ad_dc:client", [os
.path
.join(bbdir
, "test_client_etypes.sh"), '$DC_SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$PREFIX_ABS', 'all', '17_18_23'])
432 plantestsuite("samba4.blackbox.client_etypes_legacy(ad_dc:client)", "ad_dc:client", [os
.path
.join(bbdir
, "test_client_etypes.sh"), '$DC_SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$PREFIX_ABS', 'legacy', '23'])
433 plantestsuite("samba4.blackbox.client_etypes_strong(ad_dc:client)", "ad_dc:client", [os
.path
.join(bbdir
, "test_client_etypes.sh"), '$DC_SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$PREFIX_ABS', 'strong', '17_18'])
434 plantestsuite("samba4.blackbox.net_ads_dns(ad_member:local)", "ad_member:local", [os
.path
.join(bbdir
, "test_net_ads_dns.sh"), '$DC_SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$REALM', '$USERNAME', '$PASSWORD'])
435 plantestsuite_loadlist("samba4.rpc.echo against NetBIOS alias", "ad_dc_ntvfs", [valgrindify(smbtorture4
), "$LISTOPT", "$LOADLIST", 'ncacn_np:$NETBIOSALIAS', '-U$DOMAIN/$USERNAME%$PASSWORD', 'rpc.echo'])
437 # Tests using the "Simple" NTVFS backend
438 for t
in ["base.rw1"]:
439 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ["//$SERVER/simple", '-U$USERNAME%$PASSWORD'], modname
="samba4.ntvfs.simple.%s" % t
)
441 # Domain S4member Tests
442 plansmbtorture4testsuite('rpc.echo', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.echo against s4member server with local creds")
443 plansmbtorture4testsuite('rpc.echo', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'], "samba4.rpc.echo against s4member server with domain creds")
444 plansmbtorture4testsuite('rpc.samr', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr against s4member server with local creds")
445 plansmbtorture4testsuite('rpc.samr.users', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr.users against s4member server with local creds",)
446 plansmbtorture4testsuite('rpc.samr.passwords', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr.passwords against s4member server with local creds")
447 plantestsuite("samba4.blackbox.smbclient against s4member server with local creds", "s4member", [os
.path
.join(samba4srcdir
, "client/tests/test_smbclient.sh"), '$NETBIOSNAME', '$USERNAME', '$PASSWORD', '$NETBIOSNAME', '$PREFIX', smbclient4
])
450 plansmbtorture4testsuite("rpc.echo", "rpc_proxy", ['ncacn_ip_tcp:$NETBIOSNAME', '-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'], modname
="samba4.rpc.echo against rpc proxy with domain creds")
455 "-k no --option=usespnego=no",
456 "-k no --option=gensec:spengo=no",
458 "-k yes --option=gensec:fake_gssapi_krb5=yes --option=gensec:gssapi_krb5=no"]:
459 for signing
in ["--signing=on", "--signing=required"]:
460 signoptions
= "%s %s" % (mech
, signing
)
461 name
= "smb.signing on with %s" % signoptions
462 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$USERNAME%$PASSWORD'], modname
="samba4.%s" % name
)
466 "-k no --option=usespnego=no",
467 "-k no --option=gensec:spengo=no",
469 signoptions
= "%s --signing=off" % mech
470 name
= "smb.signing disabled on with %s" % signoptions
471 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s domain-creds" % name
)
472 plansmbtorture4testsuite('base.xcopy', "ad_member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s domain-creds" % name
)
473 plansmbtorture4testsuite('base.xcopy', "ad_dc", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$USERNAME%$PASSWORD'], "samba4.%s" % name
)
474 plansmbtorture4testsuite('base.xcopy', "ad_dc",
475 ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s administrator" % name
)
477 plantestsuite("samba4.blackbox.bogusdomain", "ad_member", ["testprogs/blackbox/bogus.sh", "$NETBIOSNAME", "xcopy_share", '$USERNAME', '$PASSWORD', '$DC_USERNAME', '$DC_PASSWORD', smbclient4
])
480 "-k no --option=usespnego=no",
481 "-k no --option=gensec:spengo=no"]:
482 signoptions
= "%s --signing=off" % mech
483 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], modname
="samba4.smb.signing on with %s local-creds" % signoptions
)
485 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=yes', '-U%'], modname
="samba4.smb.signing --signing=yes anon")
486 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=required', '-U%'], modname
="samba4.smb.signing --signing=required anon")
487 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=no', '-U%'], modname
="samba4.smb.signing --signing=no anon")
490 wb_opts_default
= ["--option=\"torture:strict mode=no\"", "--option=\"torture:timelimit=1\"", "--option=\"torture:winbindd_separator=/\"", "--option=\"torture:winbindd_netbios_name=$SERVER\"", "--option=\"torture:winbindd_netbios_domain=$DOMAIN\""]
492 winbind_ad_client_tests
= smbtorture4_testsuites("winbind.struct") + smbtorture4_testsuites("winbind.pac")
493 winbind_wbclient_tests
= smbtorture4_testsuites("winbind.wbclient")
494 for env
in ["ad_dc", "s4member", "ad_member", "nt4_member"]:
495 wb_opts
= wb_opts_default
[:]
496 if env
in ["ad_member"]:
497 wb_opts
+= ["--option=\"torture:winbindd_domain_without_prefix=$DOMAIN\""]
498 for t
in winbind_ad_client_tests
:
499 plansmbtorture4testsuite(t
, "%s:local" % env
, wb_opts
+ ['//$SERVER/tmp', '--realm=$REALM', '--machine-pass', '--option=torture:addc=$DC_SERVER'])
501 for env
in ["nt4_dc", "fl2003dc"]:
502 for t
in winbind_wbclient_tests
:
503 plansmbtorture4testsuite(t
, "%s:local" % env
, '//$SERVER/tmp -U$DC_USERNAME%$DC_PASSWORD')
505 for env
in ["nt4_dc", "nt4_member", "ad_dc", "ad_member", "s4member", "chgdcpass", "rodc"]:
506 tests
= ["--ping", "--separator",
510 "--domain-info=BUILTIN",
511 "--domain-info=$DOMAIN",
513 "--online-status --domain=BUILTIN",
514 "--online-status --domain=$DOMAIN",
515 "--check-secret --domain=$DOMAIN",
516 "--change-secret --domain=$DOMAIN",
517 "--check-secret --domain=$DOMAIN",
518 "--online-status --domain=$DOMAIN",
521 "--name-to-sid=$DC_USERNAME",
522 "--name-to-sid=$DOMAIN/$DC_USERNAME",
523 "--user-info=$DOMAIN/$DC_USERNAME",
524 "--user-groups=$DOMAIN/$DC_USERNAME",
525 "--authenticate=$DOMAIN/$DC_USERNAME%$DC_PASSWORD",
530 plantestsuite("samba.wbinfo_simple.(%s:local).%s" % (env
, t
), "%s:local" % env
, [os
.path
.join(srcdir(), "nsswitch/tests/test_wbinfo_simple.sh"), t
])
533 "samba.wbinfo_sids2xids.(%s:local)" % env
, "%s:local" % env
,
534 [os
.path
.join(samba3srcdir
, "script/tests/test_wbinfo_sids2xids.sh")])
537 "samba.ntlm_auth.diagnostics(%s:local)" % env
, "%s:local" % env
,
538 [os
.path
.join(samba3srcdir
, "script/tests/test_ntlm_auth_diagnostics.sh"), ntlm_auth3
, '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', configuration
])
540 plantestsuite("samba.ntlm_auth.(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba3srcdir
, "script/tests/test_ntlm_auth_s3.sh"), valgrindify(python
), samba3srcdir
, ntlm_auth3
, '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', configuration
])
542 for env
in ["s4member_dflt_domain", "s4member"]:
543 for cmd
in ["id", "getent"]:
544 users
= ["$DC_USERNAME", "$DC_USERNAME@$REALM"]
545 if env
== "s4member":
546 users
= ["$DOMAIN/$DC_USERNAME", "$DC_USERNAME@$REALM"]
548 plantestsuite("samba4.winbind.dom_name_parse.cmd", env
, "%s/dom_parse.sh %s %s" % (bbdir
,cmd
,usr
))
550 nsstest4
= binpath("nsstest")
551 for env
in ["ad_dc:local", "s4member:local", "nt4_dc:local", "ad_member:local", "nt4_member:local"]:
552 if os
.path
.exists(nsstest4
):
553 plantestsuite("samba.nss.test using winbind(%s)" % env
, env
, [os
.path
.join(bbdir
, "nsstest.sh"), nsstest4
, os
.path
.join(samba4bindir
, "shared/libnss_wrapper_winbind.so.2")])
555 skiptestsuite("samba.nss.test using winbind(%s)" % env
, "nsstest not available")
557 subunitrun
= valgrindify(python
) + " " + os
.path
.join(samba4srcdir
, "scripting/bin/subunitrun")
558 if extra_python
is not None:
559 subunitrun3
= valgrindify(extra_python
) + " " + os
.path
.join(samba4srcdir
, "scripting/bin/subunitrun")
560 def planoldpythontestsuite(env
, module
, name
=None, extra_path
=[], environ
={}, extra_args
=[], py3_compatible
=False):
561 environ
= dict(environ
)
562 py_path
= list(extra_path
)
564 environ
["PYTHONPATH"] = ":".join(["$PYTHONPATH"] + py_path
)
565 args
= ["%s=%s" % item
for item
in environ
.iteritems()]
566 args
+= [subunitrun
, "$LISTOPT", "$LOADLIST", module
]
570 plantestsuite_loadlist(name
, env
, args
)
571 if py3_compatible
and extra_python
is not None:
572 args
[0] = subunitrun3
573 plantestsuite_loadlist(name
, env
, args
)
576 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.gensec", extra_args
=['-U"$USERNAME%$PASSWORD"'], py3_compatible
=True)
577 planoldpythontestsuite("none", "simple", extra_path
=["%s/lib/tdb/python/tests" % srcdir()], name
="tdb.python")
578 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.sam")
579 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dsdb")
580 planpythontestsuite("none", "samba.tests.dsdb_lock")
581 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.bare")
582 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.unix")
583 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.srvsvc")
584 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.timecmd")
585 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.join")
588 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc"]:
589 planpythontestsuite(env
+ ":local", "samba.tests.samba_tool.fsmo")
592 for env
in ["ad_dc:local", "ad_dc_ntvfs:local", "fl2000dc:local", "fl2003dc:local", "fl2008r2dc:local"]:
593 plantestsuite("samba.tests.samba_tool.edit", env
, [os
.path
.join(srcdir(), "python/samba/tests/samba_tool/edit.sh"), '$SERVER', '$USERNAME', '$PASSWORD'])
595 # We run this test against both AD DC implemetnations because it is
596 # the only test we have of GPO get/set behaviour, and this involves
597 # the file server as well as the LDAP server.
598 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.gpo")
599 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.gpo")
601 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.processes")
602 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.user")
603 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.user_wdigest")
604 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.user")
605 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.user_virtualCryptSHA")
606 planpythontestsuite("chgdcpass:local", "samba.tests.samba_tool.user_check_password_script")
607 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.group")
608 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.ntacl")
609 planpythontestsuite("none", "samba.tests.samba_tool.provision_password_check")
610 planpythontestsuite("none", "samba.tests.samba_tool.help")
612 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.sites")
613 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.dnscmd")
615 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.rpcecho")
616 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.registry", extra_args
=['-U"$USERNAME%$PASSWORD"'])
617 planoldpythontestsuite("ad_dc_ntvfs", "samba.tests.dcerpc.dnsserver", extra_args
=['-U"$USERNAME%$PASSWORD"'])
618 planoldpythontestsuite("ad_dc", "samba.tests.dcerpc.dnsserver", extra_args
=['-U"$USERNAME%$PASSWORD"'])
619 planoldpythontestsuite("ad_dc", "samba.tests.dcerpc.raw_protocol", extra_args
=['-U"$USERNAME%$PASSWORD"'])
620 if have_jansson_support
and have_heimdal_support
:
621 planoldpythontestsuite("ad_dc:local", "samba.tests.auth_log", extra_args
=['-U"$USERNAME%$PASSWORD"'],
622 environ
={'CLIENT_IP': '127.0.0.11',
623 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
624 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.auth_log", extra_args
=['-U"$USERNAME%$PASSWORD"'],
625 environ
={'CLIENT_IP': '127.0.0.11',
626 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
627 planoldpythontestsuite("ad_dc:local", "samba.tests.auth_log_pass_change", extra_args
=['-U"$USERNAME%$PASSWORD"'],
628 environ
={'CLIENT_IP': '127.0.0.11',
629 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
630 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.auth_log_pass_change", extra_args
=['-U"$USERNAME%$PASSWORD"'],
631 environ
={'CLIENT_IP': '127.0.0.11',
632 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
633 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.auth_log_ncalrpc", extra_args
=['-U"$USERNAME%$PASSWORD"'])
634 planoldpythontestsuite("ad_dc:local", "samba.tests.auth_log_ncalrpc", extra_args
=['-U"$USERNAME%$PASSWORD"'])
635 planoldpythontestsuite("ad_dc:local", "samba.tests.auth_log_samlogon",
636 extra_args
=['-U"$USERNAME%$PASSWORD"'],
637 environ
={'CLIENT_IP': '127.0.0.11',
638 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
639 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.auth_log_samlogon",
640 extra_args
=['-U"$USERNAME%$PASSWORD"'],
641 environ
={'CLIENT_IP': '127.0.0.11',
642 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
643 planoldpythontestsuite("ad_dc:local", "samba.tests.auth_log_netlogon",
644 extra_args
=['-U"$USERNAME%$PASSWORD"'],
645 environ
={'CLIENT_IP': '127.0.0.11',
646 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
647 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.auth_log_netlogon",
648 extra_args
=['-U"$USERNAME%$PASSWORD"'],
649 environ
={'CLIENT_IP': '127.0.0.11',
650 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
651 planoldpythontestsuite("ad_dc:local",
652 "samba.tests.auth_log_netlogon_bad_creds",
653 extra_args
=['-U"$USERNAME%$PASSWORD"'],
654 environ
={'CLIENT_IP': '127.0.0.11',
655 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
656 planoldpythontestsuite("ad_dc_ntvfs:local",
657 "samba.tests.auth_log_netlogon_bad_creds",
658 extra_args
=['-U"$USERNAME%$PASSWORD"'],
659 environ
={'CLIENT_IP': '127.0.0.11',
660 'SOCKET_WRAPPER_DEFAULT_IFACE': 11})
661 planoldpythontestsuite("ad_dc",
662 "samba.tests.net_join_no_spnego",
663 extra_args
=['-U"$USERNAME%$PASSWORD"'])
664 planoldpythontestsuite("ad_dc",
665 "samba.tests.net_join",
666 extra_args
=['-U"$USERNAME%$PASSWORD"'])
667 # Need to test the password hashing in multiple environments to ensure that
668 # all the possible options are covered
670 # ad_dc:local functional_level >= 2008, gpg keys available
671 planoldpythontestsuite("ad_dc:local",
672 "samba.tests.password_hash_gpgme",
673 extra_args
=['-U"$USERNAME%$PASSWORD"'])
674 # ad_dc_ntvfs:local functional level >= 2008, gpg keys not available
675 planoldpythontestsuite("ad_dc_ntvfs:local",
676 "samba.tests.password_hash_fl2008",
677 extra_args
=['-U"$USERNAME%$PASSWORD"'])
678 # fl2003dc:local functional level < 2008, gpg keys not available
679 planoldpythontestsuite("fl2003dc:local",
680 "samba.tests.password_hash_fl2003",
681 extra_args
=['-U"$USERNAME%$PASSWORD"'])
682 # ad_dc: wDigest values over ldap
683 planoldpythontestsuite("ad_dc",
684 "samba.tests.password_hash_ldap",
685 extra_args
=['-U"$USERNAME%$PASSWORD"'])
687 # ensure default provision (ad_dc) and join (vampire_dc)
688 # encrypt secret values on disk.
689 planoldpythontestsuite("ad_dc:local",
690 "samba.tests.encrypted_secrets",
691 extra_args
=['-U"$USERNAME%$PASSWORD"'])
692 planoldpythontestsuite("vampire_dc:local",
693 "samba.tests.encrypted_secrets",
694 extra_args
=['-U"$USERNAME%$PASSWORD"'])
695 # The fl2000dc environment is provisioned with the --plaintext_secrets option
696 # so this test will fail, which proves the secrets are not being encrypted.
697 # There is an entry in known_fail.d.
698 planoldpythontestsuite("fl2000dc:local",
699 "samba.tests.encrypted_secrets",
700 extra_args
=['-U"$USERNAME%$PASSWORD"'])
702 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.lsa_string")
703 planoldpythontestsuite("ad_dc_ntvfs",
704 "samba.tests.krb5_credentials",
705 extra_args
=['-U"$USERNAME%$PASSWORD"'])
706 for env
in ["ad_dc_ntvfs", "vampire_dc", "promoted_dc"]:
707 planoldpythontestsuite(env
,
708 "samba.tests.py_credentials",
709 extra_args
=['-U"$USERNAME%$PASSWORD"'])
710 planoldpythontestsuite("ad_dc_ntvfs",
711 "samba.tests.emulate.traffic",
712 extra_args
=['-U"$USERNAME%$PASSWORD"'])
713 planoldpythontestsuite("ad_dc_ntvfs",
714 "samba.tests.emulate.traffic_packet",
715 extra_args
=['-U"$USERNAME%$PASSWORD"'])
716 planoldpythontestsuite("ad_dc_ntvfs",
717 "samba.tests.blackbox.traffic_replay",
718 extra_args
=['-U"$USERNAME%$PASSWORD"'])
719 planoldpythontestsuite("ad_dc_ntvfs",
720 "samba.tests.blackbox.traffic_learner",
721 extra_args
=['-U"$USERNAME%$PASSWORD"'])
722 planoldpythontestsuite("ad_dc_ntvfs",
723 "samba.tests.blackbox.traffic_summary",
724 extra_args
=['-U"$USERNAME%$PASSWORD"'])
726 # Want a selection of environments across the process models
728 for env
in ["ad_dc_ntvfs:local", "ad_dc:local",
729 "fl2003dc:local", "fl2008rdc:local",
730 "promoted_dc:local"]:
731 planoldpythontestsuite(env
, "samba.tests.blackbox.smbcontrol")
733 plantestsuite_loadlist("samba4.ldap.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/ldap.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
734 plantestsuite_loadlist("samba4.tokengroups.krb5.python(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/token_group.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '-k', 'yes', '$LOADLIST', '$LISTOPT'])
735 plantestsuite_loadlist("samba4.tokengroups.ntlm.python(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/token_group.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '-k', 'no', '$LOADLIST', '$LISTOPT'])
736 plantestsuite("samba4.sam.python(fl2008r2dc)", "fl2008r2dc", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sam.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN'])
737 plantestsuite("samba4.sam.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sam.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN'])
738 plantestsuite("samba4.user_account_control.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/user_account_control.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN'])
739 planoldpythontestsuite("ad_dc_ntvfs", "dsdb_schema_info",
740 extra_path
=[os
.path
.join(samba4srcdir
, 'dsdb/tests/python')],
741 name
="samba4.schemaInfo.python(ad_dc_ntvfs)",
742 extra_args
=['-U"$DOMAIN/$DC_USERNAME%$DC_PASSWORD"'])
744 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dsdb_schema_attributes")
746 plantestsuite_loadlist("samba4.urgent_replication.python(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/urgent_replication.py"), '$PREFIX_ABS/ad_dc_ntvfs/private/sam.ldb', '$LOADLIST', '$LISTOPT'])
747 plantestsuite_loadlist("samba4.ldap.dirsync.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/dirsync.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
748 plantestsuite_loadlist("samba4.ldap.match_rules.python", "ad_dc_ntvfs", [python
, os
.path
.join(srcdir(), "lib/ldb-samba/tests/match_rules.py"), '$PREFIX_ABS/ad_dc_ntvfs/private/sam.ldb', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
749 plantestsuite_loadlist("samba4.ldap.notification.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/notification.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
750 plantestsuite_loadlist("samba4.ldap.sites.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sites.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
752 plantestsuite_loadlist("samba4.ldap.sort.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sort.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
753 plantestsuite_loadlist("samba4.ldap.vlv.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/vlv.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
754 plantestsuite_loadlist("samba4.ldap.linked_attributes.python(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/linked_attributes.py"), '$PREFIX_ABS/ad_dc_ntvfs/private/sam.ldb', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
756 plantestsuite_loadlist("samba4.ldap.rodc.python(rodc)", "rodc",
758 os
.path
.join(samba4srcdir
, "dsdb/tests/python/rodc.py"),
759 '$SERVER', '-U"$USERNAME%$PASSWORD"',
760 '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
762 plantestsuite_loadlist("samba4.ldap.rodc_rwdc.python(rodc)", "rodc:local",
764 os
.path
.join(samba4srcdir
,
765 "dsdb/tests/python/rodc_rwdc.py"),
766 '$SERVER', '$DC_SERVER', '-U"$USERNAME%$PASSWORD"',
767 '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
769 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc"]:
770 plantestsuite_loadlist("samba4.ldap_schema.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/ldap_schema.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
771 plantestsuite("samba4.ldap.possibleInferiors.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/samdb/ldb_modules/tests/possibleinferiors.py"), "ldap://$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN"])
772 plantestsuite_loadlist("samba4.ldap.secdesc.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sec_descriptor.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
773 plantestsuite_loadlist("samba4.ldap.acl.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/acl.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
774 if env
!= "fl2000dc":
775 # This test makes excessive use of the "userPassword" attribute which
776 # isn't available on DCs with Windows 2000 domain function level -
777 # therefore skip it in that configuration
778 plantestsuite_loadlist("samba4.ldap.passwords.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/passwords.py"), "$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN", '$LOADLIST', '$LISTOPT'])
780 for env
in ["ad_dc_ntvfs"]:
781 # This test takes a lot of time, so we run it against a minimum of
782 # environments, please only add new ones if there's really a
783 # difference we need to test
784 plantestsuite_loadlist("samba4.ldap.password_lockout.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/password_lockout.py"), "$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN", "--realm=$REALM", '$LOADLIST', '$LISTOPT'])
785 planoldpythontestsuite(env
, "tombstone_reanimation",
786 name
="samba4.tombstone_reanimation.python",
787 environ
={'TEST_SERVER': '$SERVER', 'TEST_USERNAME': '$USERNAME', 'TEST_PASSWORD': '$PASSWORD'},
788 extra_path
=[os
.path
.join(samba4srcdir
, 'dsdb/tests/python')]
791 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.upgradeprovisionneeddc")
792 planpythontestsuite("ad_dc:local", "samba.tests.posixacl")
793 planpythontestsuite("ad_dc_no_nss:local", "samba.tests.posixacl")
794 plantestsuite_loadlist("samba4.deletetest.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/deletetest.py"),
795 '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
796 plantestsuite("samba4.blackbox.samba3dump", "none", [os
.path
.join(samba4srcdir
, "selftest/test_samba3dump.sh")])
797 plantestsuite("samba4.blackbox.upgrade", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_s3upgrade.sh"), '$PREFIX/provision'])
798 plantestsuite("samba4.blackbox.provision.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_provision.sh"), '$PREFIX/provision'])
799 plantestsuite("samba4.blackbox.supported_features", "none",
800 ["PYTHON=%s" % python
,
801 os
.path
.join(samba4srcdir
,
802 "setup/tests/blackbox_supported_features.sh"),
803 '$PREFIX/provision'])
804 plantestsuite("samba4.blackbox.upgradeprovision.current", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_upgradeprovision.sh"), '$PREFIX/provision'])
805 plantestsuite("samba4.blackbox.setpassword.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_setpassword.sh"), '$PREFIX/provision'])
806 plantestsuite("samba4.blackbox.newuser.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_newuser.sh"), '$PREFIX/provision'])
807 plantestsuite("samba4.blackbox.group.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_group.sh"), '$PREFIX/provision'])
808 plantestsuite("samba4.blackbox.spn.py(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_spn.sh"), '$PREFIX/ad_dc_ntvfs'])
809 plantestsuite_loadlist("samba4.ldap.bind(fl2008r2dc)", "fl2008r2dc", [python
, os
.path
.join(srcdir(), "auth/credentials/tests/bind.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '$LOADLIST', '$LISTOPT'])
811 # This makes sure we test the rid allocation code
812 t
= "rpc.samr.large-dc"
813 plansmbtorture4testsuite(t
, "vampire_dc", ['$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
=("samba4.%s.one" % t
))
814 plansmbtorture4testsuite(t
, "vampire_dc", ['$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.%s.two" % t
)
818 plansmbtorture4testsuite('rpc.echo', env
, ['ncacn_np:$SERVER', "-k", "yes", '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.rpc.echo")
819 plansmbtorture4testsuite('rpc.echo', "%s:local" % env
, ['ncacn_np:$SERVER', "-k", "yes", '-P', '--workgroup=$DOMAIN'], modname
="samba4.rpc.echo")
820 plansmbtorture4testsuite('rpc.echo', "%s:local" % env
, ['ncacn_np:$SERVER', "-k", "no", '-Utestallowed\ account%$DC_PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.rpc.echo.testallowed")
821 plansmbtorture4testsuite('rpc.echo', "%s:local" % env
, ['ncacn_np:$SERVER', "-k", "no", '-Utestdenied%$DC_PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.rpc.echo.testdenied")
822 plantestsuite("samba4.blackbox.smbclient(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba4srcdir
, "utils/tests/test_smbclient.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', smbclient4
])
824 planpythontestsuite("rodc:local", "samba.tests.samba_tool.rodc")
826 plantestsuite("samba.blackbox.rpcclient_samlogon", "rodc:local", [os
.path
.join(samba3srcdir
, "script/tests/test_rpcclient_samlogon.sh"),
827 "$DC_USERNAME", "$DC_PASSWORD", "ncacn_np:$SERVER", configuration
])
829 plantestsuite("samba.blackbox.rpcclient_samlogon_testallowed", "rodc:local", [os
.path
.join(samba3srcdir
, "script/tests/test_rpcclient_samlogon.sh"),
830 "testallowed\ account", "$DC_PASSWORD", "ncacn_np:$SERVER", configuration
])
832 plantestsuite("samba.blackbox.rpcclient_samlogon_testdenied", "rodc:local", [os
.path
.join(samba3srcdir
, "script/tests/test_rpcclient_samlogon.sh"),
833 "testdenied", "$DC_PASSWORD", "ncacn_np:$SERVER", configuration
])
837 plantestsuite("samba4.blackbox.provision-backend", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_provision-backend.sh"), '$PREFIX/provision'])
839 # Test renaming the DC
840 plantestsuite("samba4.blackbox.renamedc.sh", "none", ["PYTHON=%s" % python
, os
.path
.join(bbdir
, "renamedc.sh"), '$PREFIX/provision'])
845 planoldpythontestsuite(env
, "ridalloc_exop",
846 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
847 name
="samba4.drs.ridalloc_exop.python(%s)" % env
,
848 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
849 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
851 for env
in ['vampire_dc', 'promoted_dc']:
852 planoldpythontestsuite("%s:local" % env
, "samba_tool_drs",
853 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
854 name
="samba4.drs.samba_tool_drs.python(%s)" % env
,
855 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
856 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
857 planoldpythontestsuite("%s:local" % env
, "replica_sync",
858 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
859 name
="samba4.drs.replica_sync.python(%s)" % env
,
860 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
861 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
862 planoldpythontestsuite(env
, "delete_object",
863 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
864 name
="samba4.drs.delete_object.python(%s)" % env
,
865 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
866 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
867 planoldpythontestsuite(env
, "fsmo",
868 name
="samba4.drs.fsmo.python(%s)" % env
,
869 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
870 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
871 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
872 planoldpythontestsuite(env
, "repl_move",
873 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
874 name
="samba4.drs.repl_move.python(%s)" % env
,
875 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
876 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
877 planoldpythontestsuite(env
, "getnc_exop",
878 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
879 name
="samba4.drs.getnc_exop.python(%s)" % env
,
880 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
881 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
882 planoldpythontestsuite(env
, "getnc_unpriv",
883 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
884 name
="samba4.drs.getnc_unpriv.python(%s)" % env
,
885 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
886 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
887 planoldpythontestsuite(env
, "linked_attributes_drs",
888 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
889 name
="samba4.drs.linked_attributes_drs.python(%s)" % env
,
890 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
891 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
892 planoldpythontestsuite(env
, "link_conflicts",
893 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
894 name
="samba4.drs.link_conflicts.python(%s)" % env
,
895 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
896 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
898 for env
in ['vampire_dc', 'promoted_dc', 'vampire_2000_dc']:
899 planoldpythontestsuite(env
, "repl_schema",
900 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
901 name
="samba4.drs.repl_schema.python(%s)" % env
,
902 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
903 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
905 # A side-effect of the getncchanges tests is that they will create hundreds of
906 # tombstone objects, so run them last to avoid interferring with (and slowing
907 # down) the other DRS tests
908 for env
in ['vampire_dc', 'promoted_dc']:
909 planoldpythontestsuite(env
, "getncchanges",
910 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
911 name
="samba4.drs.getncchanges.python(%s)" % env
,
912 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
913 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
915 for env
in ['ad_dc_ntvfs']:
916 planoldpythontestsuite(env
, "repl_rodc",
917 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
918 name
="samba4.drs.repl_rodc.python(%s)" % env
,
919 environ
={'DC1': "$DC_SERVER", 'DC2': '$DC_SERVER'},
920 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
921 planoldpythontestsuite(env
, "samba.tests.join",
922 name
="samba.tests.join.python(%s)" % env
,
923 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
924 planoldpythontestsuite(env
, "cracknames",
925 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
926 name
="samba4.drs.cracknames.python(%s)" % env
,
927 environ
={'DC1': "$DC_SERVER", 'DC2': '$DC_SERVER'},
928 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
930 planoldpythontestsuite("chgdcpass:local", "samba.tests.blackbox.samba_dnsupdate",
931 environ
={'DNS_SERVER_IP': '$SERVER_IP'})
933 for env
in ["ad_dc_ntvfs", "s4member", "rodc", "promoted_dc", "ad_dc", "ad_member"]:
934 plantestsuite("samba.blackbox.wbinfo(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba4srcdir
, "../nsswitch/tests/test_wbinfo.sh"), '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', env
])
940 # This test is for users cached at the RODC
941 plansmbtorture4testsuite('krb5.kdc', "rodc", ['ncacn_np:$SERVER_IP', "-k", "yes", '-Utestdenied%$PASSWORD',
942 '--workgroup=$DOMAIN', '--realm=$REALM',
943 '--option=torture:krb5-upn=testdenied_upn@$REALM.upn',
944 '--option=torture:expect_rodc=true'],
945 "samba4.krb5.kdc with account DENIED permission to replicate to an RODC")
946 plansmbtorture4testsuite('krb5.kdc', "rodc", ['ncacn_np:$SERVER_IP', "-k", "yes", '-Utestallowed\ account%$PASSWORD',
947 '--workgroup=$DOMAIN', '--realm=$REALM',
948 '--option=torture:expect_machine_account=true',
949 '--option=torture:krb5-upn=testallowed\ upn@$REALM',
950 '--option=torture:krb5-hostname=testallowed',
951 '--option=torture:expect_rodc=true',
952 '--option=torture:expect_cached_at_rodc=true'],
953 "samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC")
955 # This ensures we have correct behaviour on a server that is not not the PDC emulator
957 plansmbtorture4testsuite('krb5.kdc', env
, ['ncacn_np:$SERVER_IP', "-k", "yes", '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--realm=$REALM'],
958 "samba4.krb5.kdc with specified account")
961 for env
in ["rodc", "promoted_dc", "ad_dc", "fl2000dc", "fl2008r2dc"]:
963 # The machine account is cached at the RODC, as it is the local account
964 extra_options
= ['--option=torture:expect_rodc=true', '--option=torture:expect_cached_at_rodc=true']
968 plansmbtorture4testsuite('krb5.kdc', "%s:local" % env
, ['ncacn_np:$SERVER_IP', "-k", "yes", '-P',
969 '--workgroup=$DOMAIN', '--realm=$REALM',
970 '--option=torture:krb5-hostname=$SERVER',
971 '--option=torture:run_removedollar_test=true',
972 '--option=torture:expect_machine_account=true'] + extra_options
,
973 "samba4.krb5.kdc with machine account")
979 planoldpythontestsuite(env
, "samba.tests.kcc",
980 name
="samba.tests.kcc",
981 environ
={'TEST_SERVER': '$SERVER', 'TEST_USERNAME': '$USERNAME',
982 'TEST_PASSWORD': '$PASSWORD',
985 extra_path
=[os
.path
.join(srcdir(), "samba/python"), ]
988 for env
in [ "simpleserver", "fileserver", "nt4_dc", "ad_dc", "ad_dc_ntvfs", "ad_member"]:
989 planoldpythontestsuite(env
, "netlogonsvc",
990 extra_path
=[os
.path
.join(srcdir(), 'python/samba/tests')],
991 name
="samba.tests.netlogonsvc.python(%s)" % env
)
993 for env
in [ "ktest", "ad_member", "ad_dc_no_ntlm" ]:
994 planoldpythontestsuite(env
, "ntlmdisabled",
995 extra_path
=[os
.path
.join(srcdir(), 'python/samba/tests')],
996 name
="samba.tests.ntlmdisabled.python(%s)" % env
)
998 # Demote the vampire DC, it must be the last test each DC, before the dbcheck
999 for env
in ['vampire_dc', 'promoted_dc', 'rodc']:
1000 plantestsuite("samba4.blackbox.samba_tool_demote(%s)" % env
, env
, [os
.path
.join(samba4srcdir
, "utils/tests/test_demote.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', '$DC_SERVER', '$PREFIX/%s' % env
, smbclient4
])
1002 # TODO: Verifying the databases really should be a part of the
1003 # environment teardown.
1004 # check the databases are all OK. PLEASE LEAVE THIS AS THE LAST TEST
1005 for env
in ["ad_dc_ntvfs", "ad_dc", "fl2000dc", "fl2003dc", "fl2008r2dc", 'vampire_dc', 'promoted_dc']:
1006 plantestsuite("samba4.blackbox.dbcheck(%s)" % env
, env
+ ":local" , ["PYTHON=%s" % python
, os
.path
.join(bbdir
, "dbcheck.sh"), '$PREFIX/provision', configuration
])
1008 # cmocka tests not requiring a specific encironment
1010 plantestsuite("samba4.dsdb.samdb.ldb_modules.unique_object_sids" , "none",
1011 [os
.path
.join(bindir(), "test_unique_object_sids")])
1012 plantestsuite("samba4.dsdb.samdb.ldb_modules.encrypted_secrets", "none",
1013 [os
.path
.join(bindir(), "test_encrypted_secrets")])