2 # This script generates a list of testsuites that should be run as part of
3 # the Samba 4 test suite.
5 # The output of this script is parsed by selftest.pl, which then decides
6 # which of the tests to actually run. It will, for example, skip all tests
7 # listed in selftest/skip or only run a subset during "make quicktest".
9 # The idea is that this script outputs all of the tests of Samba 4, not
10 # just those that are known to pass, and list those that should be skipped
11 # or are known to fail in selftest/skip or selftest/knownfail. This makes it
12 # very easy to see what functionality is still missing in Samba 4 and makes
13 # it possible to run the testsuite against other servers, such as Samba 3 or
14 # Windows that have a different set of features.
16 # The syntax for a testsuite is "-- TEST --" on a single line, followed
17 # by the name of the test, the environment it needs and the command to run, all
18 # three separated by newlines. All other lines in the output are considered
22 sys
.path
.insert(0, os
.path
.join(os
.path
.dirname(__file__
), "../../selftest"))
23 import selftesthelpers
24 from selftesthelpers
import *
26 print >>sys
.stderr
, "OPTIONS %s" % " ".join(smbtorture4_options
)
28 def plansmbtorture4testsuite(name
, env
, options
, modname
=None):
29 return selftesthelpers
.plansmbtorture4testsuite(name
, env
, options
,
30 target
='samba4', modname
=modname
)
32 samba4srcdir
= source4dir()
33 samba4bindir
= bindir()
34 validate
= os
.getenv("VALIDATE", "")
36 validate_list
= [validate
]
40 nmblookup4
= binpath('nmblookup4')
41 smbclient4
= binpath('smbclient4')
43 bbdir
= os
.path
.join(srcdir(), "testprogs/blackbox")
45 # Simple tests for LDAP and CLDAP
46 for auth_type
in ['', '-k no', '-k yes']:
47 for auth_level
in ['--option=clientldapsaslwrapping=plain', '--sign', '--encrypt']:
48 creds
= '-U"$USERNAME%$PASSWORD"'
49 options
= creds
+ ' ' + auth_type
+ ' ' + auth_level
50 plantestsuite("samba4.ldb.ldap with options %r(ad_dc_ntvfs)" % options
, "ad_dc_ntvfs", "%s/test_ldb.sh ldap $SERVER %s" % (bbdir
, options
))
52 # see if we support ADS on the Samba3 side
54 config_h
= os
.environ
["CONFIG_H"]
56 config_h
= os
.path
.join(samba4bindir
, "default/include/config.h")
58 # check available features
60 f
= open(config_h
, 'r')
63 config_hash
= dict((x
[0], ' '.join(x
[1:]))
64 for x
in map(lambda line
: line
.strip().split(' ')[1:],
65 filter(lambda line
: (line
[0:7] == '#define') and (len(line
.split(' ')) > 2), lines
)))
69 have_tls_support
= ("ENABLE_GNUTLS" in config_hash
)
70 have_heimdal_support
= ("SAMBA4_USES_HEIMDAL" in config_hash
)
73 for options
in ['-U"$USERNAME%$PASSWORD"']:
74 plantestsuite("samba4.ldb.ldaps with options %s(ad_dc_ntvfs)" % options
, "ad_dc_ntvfs",
75 "%s/test_ldb.sh ldaps $SERVER_IP %s" % (bbdir
, options
))
78 '--simple-bind-dn=$USERNAME@$REALM --password=$PASSWORD',
81 'SERVER_IP': '$SERVER_IP',
82 'SERVER_NAME': '$SERVER',
83 'SERVER.REALM': '$SERVER.$REALM',
85 tls_verify_options
= [
86 '--option="tlsverifypeer=no_check"',
87 '--option="tlsverifypeer=ca_only"',
88 '--option="tlsverifypeer=ca_and_name_if_available"',
89 '--option="tlsverifypeer=ca_and_name"',
90 '--option="tlsverifypeer=as_strict_as_possible"',
93 # we use :local for fl2008r2dc because of the self-signed certificate
94 for env
in ["ad_dc_ntvfs", "fl2008r2dc:local"]:
95 for peer_key
in peer_options
.keys():
96 peer_val
= peer_options
[peer_key
]
97 for creds
in creds_options
:
98 for tls_verify
in tls_verify_options
:
99 options
= creds
+ ' ' + tls_verify
100 plantestsuite("samba4.ldb.simple.ldaps with options %s %s(%s)" % (
101 peer_key
, options
, env
), env
,
102 "%s/test_ldb_simple.sh ldaps %s %s" % (bbdir
, peer_val
, options
))
104 # test all "ldap server require strong auth" combinations
105 for env
in ["ad_dc_ntvfs", "fl2008r2dc", "fl2003dc"]:
106 options
= '--simple-bind-dn="$USERNAME@$REALM" --password="$PASSWORD"'
107 plantestsuite("samba4.ldb.simple.ldap with SIMPLE-BIND %s(%s)" % (options
, env
),
108 env
, "%s/test_ldb_simple.sh ldap $SERVER %s" % (bbdir
, options
))
110 options
+= ' --option="tlsverifypeer=no_check"'
111 plantestsuite("samba4.ldb.simple.ldaps with SIMPLE-BIND %s(%s)" % (options
, env
),
112 env
, "%s/test_ldb_simple.sh ldaps $SERVER %s" % (bbdir
, options
))
115 '--option=clientldapsaslwrapping=plain',
120 for auth_option
in auth_options
:
121 options
= '-U"$USERNAME%$PASSWORD"' + ' ' + auth_option
122 plantestsuite("samba4.ldb.simple.ldap with SASL-BIND %s(%s)" % (options
, env
),
123 env
, "%s/test_ldb_simple.sh ldap $SERVER %s" % (bbdir
, options
))
125 options
= '-U"$USERNAME%$PASSWORD" --option="tlsverifypeer=no_check"'
126 plantestsuite("samba4.ldb.simple.ldaps with SASL-BIND %s(%s)" % (options
, env
),
127 env
, "%s/test_ldb_simple.sh ldaps $SERVER %s" % (bbdir
, options
))
129 for options
in ['-U"$USERNAME%$PASSWORD"']:
130 plantestsuite("samba4.ldb.ldapi with options %s(ad_dc_ntvfs:local)" % options
, "ad_dc_ntvfs:local",
131 "%s/test_ldb.sh ldapi $PREFIX_ABS/ad_dc_ntvfs/private/ldapi %s" % (bbdir
, options
))
133 for t
in smbtorture4_testsuites("ldap."):
134 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '-U"$USERNAME%$PASSWORD" //$SERVER_IP/_none_')
136 ldbdir
= os
.path
.join(srcdir(), "lib/ldb")
137 # Don't run LDB tests when using system ldb, as we won't have ldbtest installed
138 if os
.path
.exists(os
.path
.join(samba4bindir
, "ldbtest")):
139 plantestsuite("ldb.base", "none", "%s/tests/test-tdb-subunit.sh %s" % (ldbdir
, samba4bindir
))
141 skiptestsuite("ldb.base", "Using system LDB, ldbtest not available")
145 # add tests to this list as they start passing, so we test
146 # that they stay passing
147 ncacn_np_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.altercontext", "rpc.netlogon", "rpc.netlogon.admin", "rpc.handles", "rpc.samsync", "rpc.samba3-sessionkey", "rpc.samba3-getusername", "rpc.samba3-lsa", "rpc.samba3-bind", "rpc.samba3-netlogon", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext"]
148 ncalrpc_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.altercontext", "rpc.netlogon", "rpc.netlogon.admin", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext"]
149 drs_rpc_tests
= smbtorture4_testsuites("drs.rpc")
150 ncacn_ip_tcp_tests
= ["rpc.schannel", "rpc.join", "rpc.lsa", "rpc.dssetup", "rpc.drsuapi", "rpc.drsuapi_w2k8", "rpc.netlogon", "rpc.netlogon.admin", "rpc.asyncbind", "rpc.lsalookup", "rpc.lsa-getuser", "rpc.schannel2", "rpc.authcontext", "rpc.samr.passwords.validate"] + drs_rpc_tests
151 slow_ncacn_np_tests
= ["rpc.samlogon", "rpc.samr", "rpc.samr.users", "rpc.samr.large-dc", "rpc.samr.users.privileges", "rpc.samr.passwords", "rpc.samr.passwords.pwdlastset", "rpc.samr.passwords.lockout", "rpc.samr.passwords.badpwdcount"]
152 slow_ncacn_ip_tcp_tests
= ["rpc.cracknames"]
154 all_rpc_tests
= ncalrpc_tests
+ ncacn_np_tests
+ ncacn_ip_tcp_tests
+ slow_ncacn_np_tests
+ slow_ncacn_ip_tcp_tests
+ ["rpc.lsa.secrets", "rpc.pac", "rpc.samba3-sharesec", "rpc.countcalls"]
156 # Make sure all tests get run
157 rpc_tests
= smbtorture4_testsuites("rpc.")
158 auto_rpc_tests
= filter(lambda t
: t
not in all_rpc_tests
, rpc_tests
)
160 for bindoptions
in ["seal,padcheck"] + validate_list
+ ["bigendian"]:
161 for transport
in ["ncalrpc", "ncacn_np", "ncacn_ip_tcp"]:
163 if transport
== "ncalrpc":
164 tests
= ncalrpc_tests
165 env
= "ad_dc_ntvfs:local"
166 elif transport
== "ncacn_np":
167 tests
= ncacn_np_tests
168 elif transport
== "ncacn_ip_tcp":
169 tests
= ncacn_ip_tcp_tests
171 raise AssertionError("invalid transport %r"% transport
)
173 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s on %s with %s" % (t
, transport
, bindoptions
))
174 plansmbtorture4testsuite('rpc.samba3-sharesec', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=torture:share=tmp'], "samba4.rpc.samba3.sharesec on %s with %s" % (transport
, bindoptions
))
176 #Plugin S4 DC tests (confirms named pipe auth forwarding). This can be expanded once kerberos is supported in the plugin DC
178 for bindoptions
in ["seal,padcheck"] + validate_list
+ ["bigendian"]:
179 for t
in ncacn_np_tests
:
181 transport
= "ncacn_np"
182 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s with %s" % (t
, bindoptions
))
184 for bindoptions
in [""] + validate_list
+ ["bigendian"]:
185 for t
in auto_rpc_tests
:
186 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ["$SERVER[%s]" % bindoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s with %s" % (t
, bindoptions
))
189 plansmbtorture4testsuite(t
, "ad_dc_ntvfs:local", ["$SERVER[%s]" % bindoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.%s" % t
)
191 for transport
in ["ncacn_np", "ncacn_ip_tcp"]:
193 if transport
== "ncacn_np":
194 tests
= slow_ncacn_np_tests
195 elif transport
== "ncacn_ip_tcp":
196 tests
= slow_ncacn_ip_tcp_tests
198 raise AssertionError("Invalid transport %r" % transport
)
201 if t
== 'rpc.cracknames':
203 plansmbtorture4testsuite(t
, env
, ["%s:$SERVER[%s]" % (transport
,bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.%s on %s with %s" % (t
, transport
, bindoptions
))
205 # Tests for the DFS referral calls implementation
206 for t
in smbtorture4_testsuites("dfs."):
207 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
208 plansmbtorture4testsuite(t
, "ad_dc", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
210 # Tests for the NET API (net.api.become.dc tested below against all the roles)
211 net_tests
= filter(lambda x
: "net.api.become.dc" not in x
, smbtorture4_testsuites("net."))
213 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '$SERVER[%s] -U$USERNAME%%$PASSWORD -W$DOMAIN' % validate
)
215 # Tests for session keys and encryption of RPC pipes
216 # FIXME: Integrate these into a single smbtorture test
218 transport
= "ncacn_np"
219 for env
in ["ad_dc_ntvfs", "nt4_dc"]:
221 "-k no --option=usespnego=yes",
222 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no",
223 "-k no --option=usespnego=yes --option=ntlmssp_client:56bit=yes",
224 "-k no --option=usespnego=yes --option=ntlmssp_client:56bit=no",
225 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=yes",
226 "-k no --option=usespnego=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=no",
227 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes",
228 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no",
229 "-k no --option=usespnego=yes --option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:56bit=yes",
230 "-k no --option=usespnego=no --option=clientntlmv2auth=yes",
231 "-k no --option=gensec:spnego=no --option=clientntlmv2auth=yes",
232 "-k no --option=usespnego=no"]:
233 name
= "rpc.lsa.secrets on %s with with %s" % (transport
, ntlmoptions
)
234 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
), ntlmoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.%s" % name
)
235 plantestsuite("samba.blackbox.pdbtest(%s)" % env
, "%s:local" % env
, [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest", smbclient4
, '$SMB_CONF_PATH', configuration
])
236 plantestsuite("samba.blackbox.pdbtest.winbind(%s)" % env
, "%s:local" % env
, [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest2", smbclient4
, '$SMB_CONF_PATH', configuration
+ " --option='authmethods=wbc'"])
238 plantestsuite("samba.blackbox.pdbtest.s4winbind(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest3", smbclient4
, '$SMB_CONF_PATH', configuration
+ " --option='authmethods=samba4:winbind'"])
239 plantestsuite("samba.blackbox.pdbtest.s4winbind_wbclient(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_pdbtest.sh"), '$SERVER', "$PREFIX", "pdbtest4", smbclient4
, '$SMB_CONF_PATH', configuration
+ " --option='authmethods=samba4:winbind_wbclient'"])
241 transports
= ["ncacn_np", "ncacn_ip_tcp"]
243 #Kerberos varies between functional levels, so it is important to check this on all of them
244 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc", "ad_dc"]:
245 transport
= "ncacn_np"
246 plansmbtorture4testsuite('rpc.pac', env
, ["%s:$SERVER[]" % (transport
, ), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.pac on %s" % (transport
,))
247 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--option=gensec:target_hostname=$NETBIOSNAME', 'rpc.lsa.secrets'], "samba4.rpc.lsa.secrets on %s with Kerberos" % (transport
,))
248 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=clientusespnegoprincipal=yes", '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use target principal" % (transport
,))
249 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=dcom/$NETBIOSNAME]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal dcom" % (transport
,))
250 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=$NETBIOSNAME\$]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal dollar" % (transport
,))
251 plansmbtorture4testsuite('rpc.lsa.secrets', env
, ["%s:$SERVER[target_principal=$NETBIOSNAME]" % (transport
, ), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.lsa.secrets on %s with Kerberos - netbios name principal" % (transport
,))
252 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=gensec:fake_gssapi_krb5=yes", '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use Samba3 style login" % transport
)
253 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=gensec:fake_gssapi_krb5=yes", '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME', '--option=gensec_krb5:send_authenticator_checksum=false'], "samba4.rpc.lsa.secrets on %s with Kerberos - use raw-krb5-no-authenticator-checksum style login" % transport
)
254 plansmbtorture4testsuite('rpc.lsa.secrets.none*', env
, ["%s:$SERVER" % transport
, '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', "--option=clientusespnegoprincipal=yes", '--option=gensec:fake_gssapi_krb5=yes', '--option=gensec:gssapi_krb5=no', '--option=gensec:target_hostname=$NETBIOSNAME'], "samba4.rpc.lsa.secrets on %s with Kerberos - use Samba3 style login, use target principal" % transport
)
256 # Winreg tests test bulk Kerberos encryption of DCE/RPC
257 # We test rpc.winreg here too, because the winreg interface if
258 # handled by the source3/rpc_server code.
259 for bindoptions
in ["connect", "krb5", "krb5,sign", "krb5,seal", "spnego", "spnego,sign", "spnego,seal"]:
260 plansmbtorture4testsuite('rpc.winreg', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), '-k', 'yes', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.winreg on %s with %s" % (transport
, bindoptions
))
262 for transport
in transports
:
263 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[]" % (transport
,), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s" % (transport
, ))
265 # Echo tests test bulk Kerberos encryption of DCE/RPC
266 for bindoptions
in ["connect", "krb5", "krb5,sign", "krb5,seal", "spnego", "spnego,sign", "spnego,seal"] + validate_list
+ ["padcheck", "bigendian", "bigendian,seal"]:
267 echooptions
= "--option=socket:testnonblock=True --option=torture:quick=yes -k yes"
268 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), echooptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s with %s and %s" % (transport
, bindoptions
, echooptions
))
269 plansmbtorture4testsuite("net.api.become.dc", env
, '$SERVER[%s] -U$USERNAME%%$PASSWORD -W$DOMAIN' % validate
)
271 for bindoptions
in ["sign", "seal"]:
272 plansmbtorture4testsuite('rpc.backupkey', "ad_dc_ntvfs", ["ncacn_np:$SERVER[%s]" % ( bindoptions
), '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.backupkey with %s" % (bindoptions
))
274 for transport
in transports
:
275 for bindoptions
in ["sign", "seal"]:
277 "--option=ntlmssp_client:ntlm2=yes --option=torture:quick=yes",
278 "--option=ntlmssp_client:ntlm2=no --option=torture:quick=yes",
279 "--option=ntlmssp_client:ntlm2=yes --option=ntlmssp_client:128bit=no --option=torture:quick=yes",
280 "--option=ntlmssp_client:ntlm2=no --option=ntlmssp_client:128bit=no --option=torture:quick=yes",
281 "--option=ntlmssp_client:ntlm2=yes --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
282 "--option=ntlmssp_client:ntlm2=no --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
283 "--option=clientntlmv2auth=yes --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes",
284 "--option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:keyexchange=yes --option=torture:quick=yes",
285 "--option=clientntlmv2auth=yes --option=ntlmssp_client:128bit=no --option=ntlmssp_client:keyexchange=no --option=torture:quick=yes"]:
286 if transport
== "ncalrpc":
287 env
= "ad_dc_ntvfs:local"
290 plansmbtorture4testsuite('rpc.echo', env
, ["%s:$SERVER[%s]" % (transport
, bindoptions
), ntlmoptions
, '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on %s with %s and %s" % (transport
, bindoptions
, ntlmoptions
))
292 plansmbtorture4testsuite('rpc.echo', "ad_dc_ntvfs", ['ncacn_np:$SERVER[smb2]', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.rpc.echo on ncacn_np over smb2")
294 plansmbtorture4testsuite('ntp.signd', "ad_dc_ntvfs:local", ['ncacn_np:$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], "samba4.ntp.signd")
296 nbt_tests
= smbtorture4_testsuites("nbt.")
298 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", "//$SERVER/_none_ -U\"$USERNAME%$PASSWORD\"")
300 # Tests against the NTVFS POSIX backend
301 ntvfsargs
= ["--option=torture:sharedelay=100000", "--option=torture:oplocktimeout=3", "--option=torture:writetimeupdatedelay=500000"]
303 # Filter smb2 tests that should not run against ad_dc_ntvfs
304 smb2_s3only
= ["smb2.change_notify_disabled", "smb2.dosmode"]
305 smb2
= [x
for x
in smbtorture4_testsuites("smb2.") if x
not in smb2_s3only
]
307 #The QFILEINFO-IPC test needs to be on ipc$
308 raw
= filter(lambda x
: "raw.qfileinfo.ipc" not in x
, smbtorture4_testsuites("raw."))
309 base
= smbtorture4_testsuites("base.")
311 netapi
= smbtorture4_testsuites("netapi.")
313 libsmbclient
= smbtorture4_testsuites("libsmbclient.")
315 for t
in base
+ raw
+ smb2
+ netapi
+ libsmbclient
:
316 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$SERVER/tmp', '-U$USERNAME%$PASSWORD'] + ntvfsargs
)
318 plansmbtorture4testsuite("raw.qfileinfo.ipc", "ad_dc_ntvfs", '//$SERVER/ipc\$ -U$USERNAME%$PASSWORD')
320 for t
in smbtorture4_testsuites("rap."):
321 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", '//$SERVER/IPC\$ -U$USERNAME%$PASSWORD')
323 # Tests against the NTVFS CIFS backend
325 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$NETBIOSNAME/cifs', '-U$USERNAME%$PASSWORD', '--kerberos=yes'] + ntvfsargs
, modname
="samba4.ntvfs.cifs.krb5.%s" % t
)
327 # Test NTVFS CIFS backend with S4U2Self and S4U2Proxy
329 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ['//$NETBIOSNAME/cifs', '-U$USERNAME%$PASSWORD', '--kerberos=no'] + ntvfsargs
, "samba4.ntvfs.cifs.ntlm.%s" % t
)
330 plansmbtorture4testsuite(t
, "rpc_proxy", ['//$NETBIOSNAME/cifs_to_dc', '-U$DC_USERNAME%$DC_PASSWORD', '--kerberos=yes'] + ntvfsargs
, "samba4.ntvfs.cifs.krb5.%s" % t
)
331 plansmbtorture4testsuite(t
, "rpc_proxy", ['//$NETBIOSNAME/cifs_to_dc', '-U$DC_USERNAME%$DC_PASSWORD', '--kerberos=no'] + ntvfsargs
, "samba4.ntvfs.cifs.ntlm.%s" % t
)
333 plansmbtorture4testsuite('echo.udp', 'ad_dc_ntvfs:local', '//$SERVER/whatever')
336 for t
in smbtorture4_testsuites("local."):
337 #The local.resolve test needs a name to look up using real system (not emulated) name routines
338 plansmbtorture4testsuite(t
, "none", "ncalrpc:localhost")
340 # Confirm these tests with the system iconv too
341 for t
in ["local.convert_string_handle", "local.convert_string", "local.ndr"]:
342 options
= "ncalrpc: --option='iconv:use_builtin_handlers=false'"
343 plansmbtorture4testsuite(t
, "none", options
,
344 modname
="samba4.%s.system.iconv" % t
)
346 tdbtorture4
= binpath("tdbtorture")
347 if os
.path
.exists(tdbtorture4
):
348 plantestsuite("tdb.stress", "none", valgrindify(tdbtorture4
))
350 skiptestsuite("tdb.stress", "Using system TDB, tdbtorture not available")
352 plansmbtorture4testsuite("drs.unit", "none", "ncalrpc:")
355 for f
in sorted(os
.listdir(os
.path
.join(samba4srcdir
, "../pidl/tests"))):
356 if f
.endswith(".pl"):
357 planperltestsuite("pidl.%s" % f
[:-3], os
.path
.normpath(os
.path
.join(samba4srcdir
, "../pidl/tests", f
)))
360 plantestsuite_loadlist("samba.tests.dns", "fl2003dc:local", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
362 plantestsuite_loadlist("samba.tests.dns_forwarder", "fl2003dc:local", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns_forwarder.py"), '$SERVER', '$SERVER_IP', '$DNS_FORWARDER1', '$DNS_FORWARDER2', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
364 plantestsuite_loadlist("samba.tests.dns_tkey", "fl2008r2dc", [python
, os
.path
.join(srcdir(), "python/samba/tests/dns_tkey.py"), '$SERVER', '$SERVER_IP', '--machine-pass', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
366 for t
in smbtorture4_testsuites("dns_internal."):
367 plansmbtorture4testsuite(t
, "ad_dc_ntvfs:local", '//$SERVER/whavever')
370 for t
in smbtorture4_testsuites("dlz_bind9."):
371 #The dlz_bind9 tests needs to look at the DNS database
372 plansmbtorture4testsuite(t
, "chgdcpass:local", ["ncalrpc:$SERVER", '-U$USERNAME%$PASSWORD'])
374 planpythontestsuite("nt4_dc", "samba.tests.libsmb_samba_internal");
377 # tests that interact directly with the command-line tools rather than using
378 # the API. These mainly test that the various command-line options of commands
381 for env
in ["ad_member", "s4member", "ad_dc_ntvfs", "chgdcpass"]:
382 plantestsuite("samba4.blackbox.smbclient(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba4srcdir
, "utils/tests/test_smbclient.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', smbclient4
])
384 plantestsuite("samba4.blackbox.samba_tool(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(samba4srcdir
, "utils/tests/test_samba_tool.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', smbclient4
])
386 if have_heimdal_support
:
387 plantestsuite("samba4.blackbox.pkinit(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_pkinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX/ad_dc_ntvfs', "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
388 plantestsuite("samba4.blackbox.kinit(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
389 plantestsuite("samba4.blackbox.kinit(fl2000dc:local)", "fl2000dc:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "arcfour-hmac-md5", smbclient4
, configuration
])
390 plantestsuite("samba4.blackbox.kinit(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_kinit_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", smbclient4
, configuration
])
391 plantestsuite("samba4.blackbox.kinit_trust(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_kinit_trusts_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "forest", "aes256-cts-hmac-sha1-96"])
392 plantestsuite("samba4.blackbox.kinit_trust(fl2003dc:local)", "fl2003dc:local", [os
.path
.join(bbdir
, "test_kinit_trusts_heimdal.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "external", "arcfour-hmac-md5"])
393 plantestsuite("samba4.blackbox.export.keytab(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_export_keytab_heimdal.sh"), '$SERVER', '$USERNAME', '$REALM', '$DOMAIN', "$PREFIX", smbclient4
])
395 plantestsuite("samba4.blackbox.trust_utils(fl2008r2dc:local)", "fl2008r2dc:local", [os
.path
.join(bbdir
, "test_trust_utils.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "forest"])
396 plantestsuite("samba4.blackbox.trust_utils(fl2003dc:local)", "fl2003dc:local", [os
.path
.join(bbdir
, "test_trust_utils.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', '$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', '$PREFIX', "external"])
397 plantestsuite("samba4.blackbox.ktpass(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(bbdir
, "test_ktpass.sh"), '$PREFIX/ad_dc_ntvfs'])
398 plantestsuite("samba4.blackbox.passwords(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(bbdir
, "test_passwords.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', "$PREFIX/ad_dc_ntvfs", smbclient4
])
399 plantestsuite("samba4.blackbox.cifsdd(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "client/tests/test_cifsdd.sh"), '$SERVER', '$USERNAME', '$PASSWORD', "$DOMAIN"])
400 plantestsuite("samba4.blackbox.nmblookup(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "utils/tests/test_nmblookup.sh"), '$NETBIOSNAME', '$NETBIOSALIAS', '$SERVER', '$SERVER_IP', nmblookup4
])
401 plantestsuite("samba4.blackbox.locktest(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_locktest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', '$PREFIX'])
402 plantestsuite("samba4.blackbox.masktest", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_masktest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', '$PREFIX'])
403 plantestsuite("samba4.blackbox.gentest(ad_dc_ntvfs)", "ad_dc_ntvfs", [os
.path
.join(samba4srcdir
, "torture/tests/test_gentest.sh"), '$SERVER', '$USERNAME', '$PASSWORD', '$DOMAIN', "$PREFIX"])
404 plantestsuite("samba4.blackbox.rfc2307_mapping(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", [os
.path
.join(samba4srcdir
, "../nsswitch/tests/test_rfc2307_mapping.sh"), '$DOMAIN', '$USERNAME', '$PASSWORD', "$SERVER", "$UID_RFC2307TEST", "$GID_RFC2307TEST", configuration
])
405 plantestsuite("samba4.blackbox.chgdcpass", "chgdcpass", [os
.path
.join(bbdir
, "test_chgdcpass.sh"), '$SERVER', "CHGDCPASS\$", '$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", '$SELFTEST_PREFIX/chgdcpass', smbclient4
])
406 plantestsuite("samba4.blackbox.samba_upgradedns(chgdcpass:local)", "chgdcpass:local", [os
.path
.join(bbdir
, "test_samba_upgradedns.sh"), '$SERVER', '$REALM', '$PREFIX', '$SELFTEST_PREFIX/chgdcpass'])
407 plantestsuite("samba4.blackbox.net_ads(ad_member:client)", "ad_member:client", [os
.path
.join(bbdir
, "test_net_ads.sh"), '$DC_SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$PREFIX_ABS'])
408 plantestsuite("samba4.blackbox.net_ads_dns(ad_member:local)", "ad_member:local", [os
.path
.join(bbdir
, "test_net_ads_dns.sh"), '$DC_SERVER', '$DC_USERNAME', '$DC_PASSWORD', '$REALM', '$USERNAME', '$PASSWORD'])
409 plantestsuite_loadlist("samba4.rpc.echo against NetBIOS alias", "ad_dc_ntvfs", [valgrindify(smbtorture4
), "$LISTOPT", "$LOADLIST", 'ncacn_np:$NETBIOSALIAS', '-U$DOMAIN/$USERNAME%$PASSWORD', 'rpc.echo'])
411 # Tests using the "Simple" NTVFS backend
412 for t
in ["base.rw1"]:
413 plansmbtorture4testsuite(t
, "ad_dc_ntvfs", ["//$SERVER/simple", '-U$USERNAME%$PASSWORD'], modname
="samba4.ntvfs.simple.%s" % t
)
415 # Domain S4member Tests
416 plansmbtorture4testsuite('rpc.echo', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.echo against s4member server with local creds")
417 plansmbtorture4testsuite('rpc.echo', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'], "samba4.rpc.echo against s4member server with domain creds")
418 plansmbtorture4testsuite('rpc.samr', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr against s4member server with local creds")
419 plansmbtorture4testsuite('rpc.samr.users', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr.users against s4member server with local creds",)
420 plansmbtorture4testsuite('rpc.samr.passwords', "s4member", ['ncacn_np:$NETBIOSNAME', '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], "samba4.rpc.samr.passwords against s4member server with local creds")
421 plantestsuite("samba4.blackbox.smbclient against s4member server with local creds", "s4member", [os
.path
.join(samba4srcdir
, "client/tests/test_smbclient.sh"), '$NETBIOSNAME', '$USERNAME', '$PASSWORD', '$NETBIOSNAME', '$PREFIX', smbclient4
])
424 plansmbtorture4testsuite("rpc.echo", "rpc_proxy", ['ncacn_ip_tcp:$NETBIOSNAME', '-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'], modname
="samba4.rpc.echo against rpc proxy with domain creds")
429 "-k no --option=usespnego=no",
430 "-k no --option=gensec:spengo=no",
432 "-k yes --option=gensec:fake_gssapi_krb5=yes --option=gensec:gssapi_krb5=no"]:
433 for signing
in ["--signing=on", "--signing=required"]:
434 signoptions
= "%s %s" % (mech
, signing
)
435 name
= "smb.signing on with %s" % signoptions
436 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$USERNAME%$PASSWORD'], modname
="samba4.%s" % name
)
440 "-k no --option=usespnego=no",
441 "-k no --option=gensec:spengo=no",
443 signoptions
= "%s --signing=off" % mech
444 name
= "smb.signing disabled on with %s" % signoptions
445 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s domain-creds" % name
)
446 plansmbtorture4testsuite('base.xcopy', "ad_member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s domain-creds" % name
)
447 plansmbtorture4testsuite('base.xcopy', "ad_dc", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$USERNAME%$PASSWORD'], "samba4.%s" % name
)
448 plansmbtorture4testsuite('base.xcopy', "ad_dc",
449 ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$DC_USERNAME%$DC_PASSWORD'], "samba4.%s administrator" % name
)
451 plantestsuite("samba4.blackbox.bogusdomain", "ad_member", ["testprogs/blackbox/bogus.sh", "$NETBIOSNAME", "xcopy_share", '$USERNAME', '$PASSWORD', '$DC_USERNAME', '$DC_PASSWORD', smbclient4
])
454 "-k no --option=usespnego=no",
455 "-k no --option=gensec:spengo=no"]:
456 signoptions
= "%s --signing=off" % mech
457 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', signoptions
, '-U$NETBIOSNAME/$USERNAME%$PASSWORD'], modname
="samba4.smb.signing on with %s local-creds" % signoptions
)
459 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=yes', '-U%'], modname
="samba4.smb.signing --signing=yes anon")
460 plansmbtorture4testsuite('base.xcopy', "ad_dc_ntvfs", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=required', '-U%'], modname
="samba4.smb.signing --signing=required anon")
461 plansmbtorture4testsuite('base.xcopy', "s4member", ['//$NETBIOSNAME/xcopy_share', '-k', 'no', '--signing=no', '-U%'], modname
="samba4.smb.signing --signing=no anon")
464 wb_opts_default
= ["--option=\"torture:strict mode=no\"", "--option=\"torture:timelimit=1\"", "--option=\"torture:winbindd_separator=/\"", "--option=\"torture:winbindd_netbios_name=$SERVER\"", "--option=\"torture:winbindd_netbios_domain=$DOMAIN\""]
466 winbind_ad_client_tests
= smbtorture4_testsuites("winbind.struct") + smbtorture4_testsuites("winbind.pac")
467 winbind_wbclient_tests
= smbtorture4_testsuites("winbind.wbclient")
468 for env
in ["ad_dc", "s4member", "ad_member", "nt4_member"]:
469 wb_opts
= wb_opts_default
[:]
470 if env
in ["ad_member"]:
471 wb_opts
+= ["--option=\"torture:winbindd_domain_without_prefix=$DOMAIN\""]
472 for t
in winbind_ad_client_tests
:
473 plansmbtorture4testsuite(t
, "%s:local" % env
, wb_opts
+ ['//$SERVER/tmp', '--realm=$REALM', '--machine-pass', '--option=torture:addc=$DC_SERVER'])
475 for env
in ["nt4_dc", "fl2003dc"]:
476 for t
in winbind_wbclient_tests
:
477 plansmbtorture4testsuite(t
, "%s:local" % env
, '//$SERVER/tmp -U$DC_USERNAME%$DC_PASSWORD')
479 for env
in ["nt4_dc", "nt4_member", "ad_dc", "ad_member", "s4member", "chgdcpass"]:
480 tests
= ["--ping", "--separator",
484 "--domain-info=BUILTIN",
485 "--domain-info=$DOMAIN",
487 "--online-status --domain=BUILTIN",
488 "--online-status --domain=$DOMAIN",
489 "--check-secret --domain=$DOMAIN",
490 "--change-secret --domain=$DOMAIN",
491 "--check-secret --domain=$DOMAIN",
492 "--online-status --domain=$DOMAIN",
495 "--name-to-sid=$DC_USERNAME",
496 "--name-to-sid=$DOMAIN/$DC_USERNAME",
497 "--user-info=$DOMAIN/$DC_USERNAME",
498 "--user-groups=$DOMAIN/$DC_USERNAME",
499 "--authenticate=$DOMAIN/$DC_USERNAME%$DC_PASSWORD",
504 plantestsuite("samba.wbinfo_simple.(%s:local).%s" % (env
, t
), "%s:local" % env
, [os
.path
.join(srcdir(), "nsswitch/tests/test_wbinfo_simple.sh"), t
])
507 "samba.wbinfo_sids2xids.(%s:local)" % env
, "%s:local" % env
,
508 [os
.path
.join(samba3srcdir
, "script/tests/test_wbinfo_sids2xids.sh")])
511 "samba.ntlm_auth.diagnostics(%s:local)" % env
, "%s:local" % env
,
512 [os
.path
.join(samba3srcdir
, "script/tests/test_ntlm_auth_diagnostics.sh"), ntlm_auth3
, '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', configuration
])
514 plantestsuite("samba.ntlm_auth.(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba3srcdir
, "script/tests/test_ntlm_auth_s3.sh"), valgrindify(python
), samba3srcdir
, ntlm_auth3
, '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', configuration
])
517 nsstest4
= binpath("nsstest")
518 for env
in ["ad_dc:local", "s4member:local", "nt4_dc:local", "ad_member:local", "nt4_member:local"]:
519 if os
.path
.exists(nsstest4
):
520 plantestsuite("samba.nss.test using winbind(%s)" % env
, env
, [os
.path
.join(bbdir
, "nsstest.sh"), nsstest4
, os
.path
.join(samba4bindir
, "shared/libnss_wrapper_winbind.so.2")])
522 skiptestsuite("samba.nss.test using winbind(%s)" % env
, "nsstest not available")
524 subunitrun
= valgrindify(python
) + " " + os
.path
.join(samba4srcdir
, "scripting/bin/subunitrun")
525 def planoldpythontestsuite(env
, module
, name
=None, extra_path
=[], environ
={}, extra_args
=[]):
526 environ
= dict(environ
)
527 py_path
= list(extra_path
)
529 environ
["PYTHONPATH"] = ":".join(["$PYTHONPATH"] + py_path
)
530 args
= ["%s=%s" % item
for item
in environ
.iteritems()]
531 args
+= [subunitrun
, "$LISTOPT", "$LOADLIST", module
]
535 plantestsuite_loadlist(name
, env
, args
)
537 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.gensec", extra_args
=['-U"$USERNAME%$PASSWORD"'])
538 planoldpythontestsuite("none", "simple", extra_path
=["%s/lib/tdb/python/tests" % srcdir()], name
="tdb.python")
539 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.sam")
540 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dsdb")
541 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.bare")
542 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.unix")
543 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.srvsvc")
544 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.timecmd")
545 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.join")
548 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc"]:
549 planpythontestsuite(env
+ ":local", "samba.tests.samba_tool.fsmo")
551 # We run this test against both AD DC implemetnations because it is
552 # the only test we have of GPO get/set behaviour, and this involves
553 # the file server as well as the LDAP server.
554 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.gpo")
555 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.gpo")
557 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.processes")
558 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.user")
559 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.samba_tool.group")
560 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.ntacl")
562 planpythontestsuite("ad_dc:local", "samba.tests.samba_tool.sites")
564 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.rpcecho")
565 planoldpythontestsuite("ad_dc_ntvfs:local", "samba.tests.dcerpc.registry", extra_args
=['-U"$USERNAME%$PASSWORD"'])
566 planoldpythontestsuite("ad_dc_ntvfs", "samba.tests.dcerpc.dnsserver", extra_args
=['-U"$USERNAME%$PASSWORD"'])
567 planoldpythontestsuite("ad_dc", "samba.tests.dcerpc.dnsserver", extra_args
=['-U"$USERNAME%$PASSWORD"'])
568 planoldpythontestsuite("ad_dc", "samba.tests.dcerpc.raw_protocol", extra_args
=['-U"$USERNAME%$PASSWORD"'])
569 plantestsuite_loadlist("samba4.ldap.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/ldap.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
570 plantestsuite_loadlist("samba4.tokengroups.python(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/token_group.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
571 plantestsuite("samba4.sam.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sam.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN'])
572 plantestsuite("samba4.user_account_control.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/user_account_control.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN'])
573 planoldpythontestsuite("ad_dc_ntvfs", "dsdb_schema_info",
574 extra_path
=[os
.path
.join(samba4srcdir
, 'dsdb/tests/python')],
575 name
="samba4.schemaInfo.python(ad_dc_ntvfs)",
576 extra_args
=['-U"$DOMAIN/$DC_USERNAME%$DC_PASSWORD"'])
577 plantestsuite_loadlist("samba4.urgent_replication.python(ad_dc_ntvfs)", "ad_dc_ntvfs:local", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/urgent_replication.py"), '$PREFIX_ABS/ad_dc_ntvfs/private/sam.ldb', '$LOADLIST', '$LISTOPT'])
578 plantestsuite_loadlist("samba4.ldap.dirsync.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/dirsync.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
579 plantestsuite_loadlist("samba4.ldap.match_rules.python", "ad_dc_ntvfs", [python
, os
.path
.join(srcdir(), "lib/ldb-samba/tests/match_rules.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
580 plantestsuite_loadlist("samba4.ldap.notification.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/notification.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
581 plantestsuite_loadlist("samba4.ldap.sites.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sites.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
583 plantestsuite_loadlist("samba4.ldap.sort.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sort.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
584 plantestsuite_loadlist("samba4.ldap.vlv.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/vlv.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
586 for env
in ["ad_dc_ntvfs", "fl2000dc", "fl2003dc", "fl2008r2dc"]:
587 plantestsuite_loadlist("samba4.ldap_schema.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/ldap_schema.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
588 plantestsuite("samba4.ldap.possibleInferiors.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/samdb/ldb_modules/tests/possibleinferiors.py"), "ldap://$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN"])
589 plantestsuite_loadlist("samba4.ldap.secdesc.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/sec_descriptor.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
590 plantestsuite_loadlist("samba4.ldap.acl.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/acl.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
591 if env
!= "fl2000dc":
592 # This test makes excessive use of the "userPassword" attribute which
593 # isn't available on DCs with Windows 2000 domain function level -
594 # therefore skip it in that configuration
595 plantestsuite_loadlist("samba4.ldap.passwords.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/passwords.py"), "$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN", '$LOADLIST', '$LISTOPT'])
597 for env
in ["ad_dc_ntvfs"]:
598 # This test takes a lot of time, so we run it against a minimum of
599 # environments, please only add new ones if there's really a
600 # difference we need to test
601 plantestsuite_loadlist("samba4.ldap.password_lockout.python(%s)" % env
, env
, [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/password_lockout.py"), "$SERVER", '-U"$USERNAME%$PASSWORD"', "-W$DOMAIN", "--realm=$REALM", '$LOADLIST', '$LISTOPT'])
603 planpythontestsuite("ad_dc_ntvfs:local", "samba.tests.upgradeprovisionneeddc")
604 planpythontestsuite("ad_dc:local", "samba.tests.posixacl")
605 planpythontestsuite("ad_dc_no_nss:local", "samba.tests.posixacl")
606 plantestsuite_loadlist("samba4.deletetest.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [python
, os
.path
.join(samba4srcdir
, "dsdb/tests/python/deletetest.py"),
607 '$SERVER', '-U"$USERNAME%$PASSWORD"', '--workgroup=$DOMAIN', '$LOADLIST', '$LISTOPT'])
608 plantestsuite("samba4.blackbox.samba3dump", "none", [os
.path
.join(samba4srcdir
, "selftest/test_samba3dump.sh")])
609 plantestsuite("samba4.blackbox.upgrade", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_s3upgrade.sh"), '$PREFIX/provision'])
610 plantestsuite("samba4.blackbox.provision.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_provision.sh"), '$PREFIX/provision'])
611 plantestsuite("samba4.blackbox.upgradeprovision.current", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_upgradeprovision.sh"), '$PREFIX/provision'])
612 plantestsuite("samba4.blackbox.setpassword.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_setpassword.sh"), '$PREFIX/provision'])
613 plantestsuite("samba4.blackbox.newuser.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_newuser.sh"), '$PREFIX/provision'])
614 plantestsuite("samba4.blackbox.group.py", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_group.sh"), '$PREFIX/provision'])
615 plantestsuite("samba4.blackbox.spn.py(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_spn.sh"), '$PREFIX/ad_dc_ntvfs'])
616 plantestsuite_loadlist("samba4.ldap.bind(fl2008r2dc)", "fl2008r2dc", [python
, os
.path
.join(srcdir(), "auth/credentials/tests/bind.py"), '$SERVER', '-U"$USERNAME%$PASSWORD"', '$LOADLIST', '$LISTOPT'])
618 # This makes sure we test the rid allocation code
619 t
= "rpc.samr.large-dc"
620 plansmbtorture4testsuite(t
, "vampire_dc", ['$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
=("samba4.%s.one" % t
))
621 plansmbtorture4testsuite(t
, "vampire_dc", ['$SERVER', '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.%s.two" % t
)
625 plansmbtorture4testsuite('rpc.echo', env
, ['ncacn_np:$SERVER', "-k", "yes", '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN'], modname
="samba4.rpc.echo")
626 plansmbtorture4testsuite('rpc.echo', "%s:local" % env
, ['ncacn_np:$SERVER', "-k", "yes", '-P', '--workgroup=$DOMAIN'], modname
="samba4.rpc.echo")
627 planpythontestsuite("rodc:local", "samba.tests.samba_tool.rodc")
629 plantestsuite("samba4.blackbox.provision-backend", "none", ["PYTHON=%s" % python
, os
.path
.join(samba4srcdir
, "setup/tests/blackbox_provision-backend.sh"), '$PREFIX/provision'])
631 # Test renaming the DC
632 plantestsuite("samba4.blackbox.renamedc.sh", "none", ["PYTHON=%s" % python
, os
.path
.join(bbdir
, "renamedc.sh"), '$PREFIX/provision'])
634 for env
in ['vampire_dc', 'promoted_dc']:
637 planoldpythontestsuite(env
, "samba.tests.blackbox.samba_tool_drs",
638 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
639 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
640 planoldpythontestsuite("%s:local" % env
, "replica_sync",
641 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
642 name
="samba4.drs.replica_sync.python(%s)" % env
,
643 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
644 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
645 planoldpythontestsuite(env
, "delete_object",
646 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
647 name
="samba4.drs.delete_object.python(%s)" % env
,
648 environ
={'DC1': '$DC_SERVER', 'DC2': '$%s_SERVER' % env
.upper()},
649 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
650 planoldpythontestsuite(env
, "fsmo",
651 name
="samba4.drs.fsmo.python(%s)" % env
,
652 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
653 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
654 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
655 planoldpythontestsuite(env
, "repl_schema",
656 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
657 name
="samba4.drs.repl_schema.python(%s)" % env
,
658 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
659 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
660 planoldpythontestsuite(env
, "repl_move",
661 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
662 name
="samba4.drs.repl_move.python(%s)" % env
,
663 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
664 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
665 planoldpythontestsuite(env
, "getnc_exop",
666 extra_path
=[os
.path
.join(samba4srcdir
, 'torture/drs/python')],
667 name
="samba4.drs.getnc_exop.python(%s)" % env
,
668 environ
={'DC1': "$DC_SERVER", 'DC2': '$%s_SERVER' % env
.upper()},
669 extra_args
=['-U$DOMAIN/$DC_USERNAME%$DC_PASSWORD'])
672 planoldpythontestsuite("chgdcpass:local", "samba.tests.blackbox.samba_dnsupdate",
673 environ
={'DNS_SERVER_IP': '$SERVER_IP'})
675 for env
in ["ad_dc_ntvfs", "s4member", "rodc", "promoted_dc", "ad_dc", "ad_member"]:
676 plantestsuite("samba.blackbox.wbinfo(%s:local)" % env
, "%s:local" % env
, [os
.path
.join(samba4srcdir
, "../nsswitch/tests/test_wbinfo.sh"), '$DOMAIN', '$DC_USERNAME', '$DC_PASSWORD', env
])
682 # This test is for users cached at the RODC
683 plansmbtorture4testsuite('krb5.kdc', "rodc", ['ncacn_np:$SERVER_IP', "-k", "yes", '-Utestdenied%$PASSWORD',
684 '--workgroup=$DOMAIN', '--realm=$REALM',
685 '--option=torture:krb5-upn=testdenied_upn@$REALM.upn',
686 '--option=torture:expect_rodc=true'],
687 "samba4.krb5.kdc with account DENIED permission to replicate to an RODC")
688 plansmbtorture4testsuite('krb5.kdc', "rodc", ['ncacn_np:$SERVER_IP', "-k", "yes", '-Utestallowed\ account%$PASSWORD',
689 '--workgroup=$DOMAIN', '--realm=$REALM',
690 '--option=torture:expect_machine_account=true',
691 '--option=torture:krb5-upn=testallowed\ upn@$REALM',
692 '--option=torture:krb5-hostname=testallowed',
693 '--option=torture:expect_rodc=true',
694 '--option=torture:expect_cached_at_rodc=true'],
695 "samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC")
697 # This ensures we have correct behaviour on a server that is not not the PDC emulator
699 plansmbtorture4testsuite('krb5.kdc', env
, ['ncacn_np:$SERVER_IP', "-k", "yes", '-U$USERNAME%$PASSWORD', '--workgroup=$DOMAIN', '--realm=$REALM'],
700 "samba4.krb5.kdc with specified account")
703 for env
in ["rodc", "promoted_dc", "ad_dc", "fl2000dc", "fl2008r2dc"]:
705 # The machine account is cached at the RODC, as it is the local account
706 extra_options
= ['--option=torture:expect_rodc=true', '--option=torture:expect_cached_at_rodc=true']
710 plansmbtorture4testsuite('krb5.kdc', "%s:local" % env
, ['ncacn_np:$SERVER_IP', "-k", "yes", '-P',
711 '--workgroup=$DOMAIN', '--realm=$REALM',
712 '--option=torture:krb5-hostname=$SERVER',
713 '--option=torture:run_removedollar_test=true',
714 '--option=torture:expect_machine_account=true'] + extra_options
,
715 "samba4.krb5.kdc with machine account")
721 planoldpythontestsuite(env
, "samba.tests.kcc",
722 name
="samba.tests.kcc",
723 environ
={'TEST_SERVER': '$SERVER', 'TEST_USERNAME': '$USERNAME',
724 'TEST_PASSWORD': '$PASSWORD',
727 extra_path
=[os
.path
.join(srcdir(), "samba/python"), ]
730 # Demote the vampire DC, it must be the last test each DC, before the dbcheck
731 for env
in ['vampire_dc', 'promoted_dc', 'rodc']:
732 plantestsuite("samba4.blackbox.samba_tool_demote(%s)" % env
, env
, [os
.path
.join(samba4srcdir
, "utils/tests/test_demote.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', '$DC_SERVER', '$PREFIX/%s' % env
, smbclient4
])
734 # TODO: Verifying the databases really should be a part of the
735 # environment teardown.
736 # check the databases are all OK. PLEASE LEAVE THIS AS THE LAST TEST
737 for env
in ["ad_dc_ntvfs", "ad_dc", "fl2000dc", "fl2003dc", "fl2008r2dc", 'vampire_dc', 'promoted_dc']:
738 plantestsuite("samba4.blackbox.dbcheck(%s)" % env
, env
+ ":local" , ["PYTHON=%s" % python
, os
.path
.join(bbdir
, "dbcheck.sh"), '$PREFIX/provision', configuration
])