wintest/test-s4-howto.py

   1 #!/usr/bin/env python
   2
   3 '''automated testing of the steps of the Samba4 HOWTO'''
   4
   5 import sys, os
   6 import optparse
   7 import wintest
   8
   9 def check_prerequesites(t):
  10     t.info("Checking prerequesites")
  11     t.setvar('HOSTNAME', t.cmd_output("hostname -s").strip())
  12     if os.getuid() != 0:
  13         raise Exception("You must run this script as root")
  14     t.putenv("KRB5_CONFIG", '${PREFIX}/private/krb5.conf')
  15     t.run_cmd('ifconfig ${INTERFACE} ${INTERFACE_IP} up')
  16
  17
  18 def build_s4(t):
  19     '''build samba4'''
  20     t.info('Building s4')
  21     t.chdir('${SOURCETREE}/source4')
  22     t.putenv('CC', 'ccache gcc')
  23     t.run_cmd('make reconfigure || ./configure --enable-auto-reconfigure --enable-developer --prefix=${PREFIX} -C')
  24     t.run_cmd('make -j')
  25     t.run_cmd('rm -rf ${PREFIX}')
  26     t.run_cmd('make -j install')
  27
  28
  29 def provision_s4(t, func_level="2008", interface=None):
  30     '''provision s4 as a DC'''
  31     t.info('Provisioning s4')
  32     t.chdir('${PREFIX}')
  33     t.del_files(["var", "etc", "private"])
  34     options=' --function-level=%s -d${DEBUGLEVEL}' % func_level
  35     if interface:
  36         options += ' --option=interfaces=%s' % interface
  37         options += ' --host-ip=%s' % interface
  38     t.run_cmd('sbin/provision --realm=${LCREALM} --domain=${DOMAIN} --adminpass=${PASSWORD1} --server-role="domain controller"' + options)
  39     t.run_cmd('bin/samba-tool newuser testallowed ${PASSWORD1}')
  40     t.run_cmd('bin/samba-tool newuser testdenied ${PASSWORD1}')
  41     t.run_cmd('bin/samba-tool group addmembers "Allowed RODC Password Replication Group" testallowed')
  42
  43
  44 def start_s4(t, interface=None):
  45     '''startup samba4'''
  46     t.info('Starting Samba4')
  47     t.chdir("${PREFIX}")
  48     t.run_cmd('killall -9 -q samba smbd nmbd winbindd', checkfail=False)
  49     t.run_cmd(['sbin/samba',
  50              '--option', 'panic action=gnome-terminal -e "gdb --pid %PID%"',
  51              '--option', 'interfaces=%s' % interface])
  52     t.port_wait("localhost", 139)
  53
  54
  55 def test_smbclient(t):
  56     '''test smbclient'''
  57     t.info('Testing smbclient')
  58     t.chdir('${PREFIX}')
  59     t.cmd_contains("bin/smbclient --version", ["Version 4.0"])
  60     t.retry_cmd('bin/smbclient -L localhost -U%', ["netlogon", "sysvol", "IPC Service"])
  61     child = t.pexpect_spawn('bin/smbclient //localhost/netlogon -Uadministrator%${PASSWORD1}')
  62     child.expect("smb:")
  63     child.sendline("dir")
  64     child.expect("blocks available")
  65     child.sendline("mkdir testdir")
  66     child.expect("smb:")
  67     child.sendline("cd testdir")
  68     child.expect('testdir')
  69     child.sendline("cd ..")
  70     child.sendline("rmdir testdir")
  71
  72
  73 def create_shares(t):
  74     '''create some test shares'''
  75     t.info("Adding test shares")
  76     t.chdir('${PREFIX}')
  77     t.write_file("etc/smb.conf", '''
  78 [test]
  79        path = ${PREFIX}/test
  80        read only = no
  81 [profiles]
  82        path = ${PREFIX}/var/profiles
  83        read only = no
  84     ''',
  85                  mode='a')
  86     t.run_cmd("mkdir -p test")
  87     t.run_cmd("mkdir -p var/profiles")
  88
  89
  90 def restart_bind(t):
  91     '''restart the test environment version of bind'''
  92     t.info("Restarting bind9")
  93     t.putenv('KEYTAB_FILE', '${PREFIX}/private/dns.keytab')
  94     t.putenv('KRB5_KTNAME', '${PREFIX}/private/dns.keytab')
  95     t.chdir('${PREFIX}')
  96     t.run_cmd("mkdir -p var/named/data")
  97     t.run_cmd("chown -R ${BIND_USER} var/named")
  98
  99     nameserver = t.get_nameserver()
 100     if nameserver == t.getvar('INTERFACE_IP'):
 101         raise RuntimeError("old /etc/resolv.conf must not contain %s as a nameserver, this will create loops with the generated dns configuration")
 102     t.setvar('DNSSERVER', nameserver)
 103
 104     t.write_file("etc/named.conf", '''
 105 options {
 106         listen-on port 53 { ${INTERFACE_IP}; };
 107         directory       "${PREFIX}/var/named";
 108         dump-file       "${PREFIX}/var/named/data/cache_dump.db";
 109         pid-file        "${PREFIX}/var/named/named.pid";
 110         statistics-file "${PREFIX}/var/named/data/named_stats.txt";
 111         memstatistics-file "${PREFIX}/var/named/data/named_mem_stats.txt";
 112         allow-query     { ${INTERFACE_NET}; 127.0.0.0/8; };
 113         recursion yes;
 114         tkey-gssapi-credential "DNS/${LCREALM}";
 115         tkey-domain "${REALM}";
 116
 117         forward only;
 118         forwarders {
 119                   ${DNSSERVER};
 120         };
 121
 122 };
 123
 124 key "rndc-key" {
 125         algorithm hmac-md5;
 126         secret "lA/cTrno03mt5Ju17ybEYw==";
 127 };
 128
 129 controls {
 130         inet ${INTERFACE_IP}
 131         allow { 127.0.0.0/8; ${INTERFACE_NET}; } keys { "rndc-key"; };
 132 };
 133
 134 include "${PREFIX}/private/named.conf";
 135 ''')
 136
 137     t.write_file("etc/rndc.conf", '''
 138 # Start of rndc.conf
 139 key "rndc-key" {
 140         algorithm hmac-md5;
 141         secret "lA/cTrno03mt5Ju17ybEYw==";
 142 };
 143
 144 options {
 145         default-key "rndc-key";
 146         default-server  ${INTERFACE_IP};
 147         default-port 953;
 148 };
 149 ''')
 150
 151     t.run_cmd("${RNDC} -c ${PREFIX}/etc/rndc.conf stop", checkfail=False)
 152     t.port_wait("${INTERFACE_IP}", 53, wait_for_fail=True)
 153     t.bind_child = t.run_child("${BIND9} -u ${BIND_USER} -n 1 -c ${PREFIX}/etc/named.conf -g")
 154
 155     t.run_cmd("mv -f /etc/resolv.conf /etc/resolv.conf.wintest-bak")
 156     t.write_file("/etc/resolv.conf", '''
 157 # Generated by wintest, the Samba v Windows automated testing system
 158
 159 nameserver ${INTERFACE_IP}
 160
 161 # your original resolv.conf appears below:
 162
 163 ''')
 164
 165     t.run_cmd('cat /etc/resolv.conf.wintest-bak >> /etc/resolv.conf')
 166
 167     t.resolv_conf_backup = '/etc/resolv.conf.wintest-bak';
 168
 169     t.port_wait("${INTERFACE_IP}", 53)
 170     t.run_cmd("${RNDC} -c ${PREFIX}/etc/rndc.conf flush")
 171     t.run_cmd("${RNDC} -c ${PREFIX}/etc/rndc.conf freeze")
 172     t.run_cmd("${RNDC} -c ${PREFIX}/etc/rndc.conf thaw")
 173
 174
 175 def restore_resolv_conf(t):
 176     '''restore the /etc/resolv.conf after testing is complete'''
 177     if getattr(t, 'resolv_conf_backup', False):
 178         t.run_cmd("mv -f %s /etc/resolv.conf" % t.resolv_conf_backup)
 179
 180
 181 def test_dns(t):
 182     '''test that DNS is OK'''
 183     t.info("Testing DNS")
 184     t.cmd_contains("host -t SRV _ldap._tcp.${LCREALM}.",
 185                  ['_ldap._tcp.${LCREALM} has SRV record 0 100 389 ${HOSTNAME}.${LCREALM}'])
 186     t.cmd_contains("host -t SRV  _kerberos._udp.${LCREALM}.",
 187                  ['_kerberos._udp.${LCREALM} has SRV record 0 100 88 ${HOSTNAME}.${LCREALM}'])
 188     t.cmd_contains("host -t A ${HOSTNAME}.${LCREALM}",
 189                  ['${HOSTNAME}.${LCREALM} has address'])
 190
 191 def test_kerberos(t):
 192     '''test that kerberos is OK'''
 193     t.info("Testing kerberos")
 194     t.run_cmd("kdestroy")
 195     t.kinit("administrator@${REALM}", "${PASSWORD1}")
 196     t.cmd_contains("klist -e", ["Ticket cache", "Default principal", "Valid starting"])
 197
 198
 199 def test_dyndns(t):
 200     '''test that dynamic DNS is working'''
 201     t.chdir('${PREFIX}')
 202     t.run_cmd("sbin/samba_dnsupdate --fail-immediately")
 203     t.run_cmd("${RNDC} -c ${PREFIX}/etc/rndc.conf flush")
 204
 205
 206 def run_winjoin(t, vm):
 207     '''join a windows box to our domain'''
 208     t.setwinvars(vm)
 209
 210     t.info("Joining a windows box to the domain")
 211     t.vm_poweroff("${WIN_VM}", checkfail=False)
 212     t.vm_restore("${WIN_VM}", "${WIN_SNAPSHOT}")
 213     t.ping_wait("${WIN_HOSTNAME}")
 214     child = t.open_telnet("${WIN_HOSTNAME}", "${WIN_USER}", "${WIN_PASS}", set_time=True, set_ip=True)
 215     child.sendline("netdom join ${WIN_HOSTNAME} /Domain:${LCREALM} /PasswordD:${PASSWORD1} /UserD:administrator")
 216     child.expect("The command completed successfully")
 217     child.expect("C:")
 218     child.sendline("shutdown /r -t 0")
 219     t.port_wait("${WIN_HOSTNAME}", 139, wait_for_fail=True)
 220     t.port_wait("${WIN_HOSTNAME}", 139)
 221     child = t.open_telnet("${WIN_HOSTNAME}", "${WIN_USER}", "${WIN_PASS}", set_time=True, set_ip=True)
 222     child.sendline("ipconfig /registerdns")
 223     child.expect("Registration of the DNS resource records for all adapters of this computer has been initiated. Any errors will be reported in the Event Viewer")
 224     child.expect("C:")
 225
 226 def test_winjoin(t, vm):
 227     t.setwinvars(vm)
 228     t.info("Checking the windows join is OK")
 229     t.chdir('${PREFIX}')
 230     t.port_wait("${WIN_HOSTNAME}", 139)
 231     t.retry_cmd('bin/smbclient -L ${WIN_HOSTNAME}.${LCREALM} -Uadministrator@${LCREALM}%${PASSWORD1}', ["C$", "IPC$", "Sharename"], retries=100)
 232     t.cmd_contains("host -t A ${WIN_HOSTNAME}.${LCREALM}.", ['has address'])
 233     t.cmd_contains('bin/smbclient -L ${WIN_HOSTNAME}.${LCREALM} -Utestallowed@${LCREALM}%${PASSWORD1}', ["C$", "IPC$", "Sharename"])
 234     t.cmd_contains('bin/smbclient -L ${WIN_HOSTNAME}.${LCREALM} -k no -Utestallowed@${LCREALM}%${PASSWORD1}', ["C$", "IPC$", "Sharename"])
 235     t.cmd_contains('bin/smbclient -L ${WIN_HOSTNAME}.${LCREALM} -k yes -Utestallowed@${LCREALM}%${PASSWORD1}', ["C$", "IPC$", "Sharename"])
 236     child = t.open_telnet("${WIN_HOSTNAME}", "${DOMAIN}\\administrator", "${PASSWORD1}")
 237     child.sendline("net use t: \\\\${HOSTNAME}.${LCREALM}\\test")
 238     child.expect("The command completed successfully")
 239     t.vm_poweroff("${WIN_VM}")
 240
 241
 242 def run_dcpromo(t, vm):
 243     '''run a dcpromo on windows'''
 244     t.setwinvars(vm)
 245
 246     t.info("Joining a windows VM ${WIN_VM} to the domain as a DC using dcpromo")
 247     t.vm_poweroff("${WIN_VM}", checkfail=False)
 248     t.vm_restore("${WIN_VM}", "${WIN_SNAPSHOT}")
 249     t.ping_wait("${WIN_HOSTNAME}")
 250     child = t.open_telnet("${WIN_HOSTNAME}", "administrator", "${WIN_PASS}", set_ip=True)
 251     child.sendline("copy /Y con answers.txt")
 252     child.sendline('''
 253 [DCINSTALL]
 254 RebootOnSuccess=Yes
 255 RebootOnCompletion=Yes
 256 ReplicaOrNewDomain=Replica
 257 ReplicaDomainDNSName=${LCREALM}
 258 SiteName=Default-First-Site-Name
 259 InstallDNS=No
 260 ConfirmGc=Yes
 261 CreateDNSDelegation=No
 262 UserDomain=${LCREALM}
 263 UserName=${LCREALM}\\administrator
 264 Password=${PASSWORD1}
 265 DatabasePath="C:\Windows\NTDS"
 266 LogPath="C:\Windows\NTDS"
 267 SYSVOLPath="C:\Windows\SYSVOL"
 268 SafeModeAdminPassword=${PASSWORD1}
 269 \x1a
 270 ''')
 271     child.expect("copied.")
 272     child.expect("C:")
 273     child.expect("C:")
 274     child.sendline("dcpromo /answer:answers.txt")
 275     i = child.expect(["You must restart this computer", "failed", "Active Directory Domain Services was not installed", "C:"], timeout=120)
 276     if i == 1 or i == 2:
 277         raise Exception("dcpromo failed")
 278     t.port_wait("${WIN_HOSTNAME}", 139, wait_for_fail=True)
 279     t.port_wait("${WIN_HOSTNAME}", 139)
 280
 281
 282 def test_dcpromo(t, vm):
 283     '''test that dcpromo worked'''
 284     t.setwinvars(vm)
 285     t.info("Checking the dcpromo join is OK")
 286     t.chdir('${PREFIX}')
 287     t.port_wait("${WIN_HOSTNAME}", 139)
 288     t.retry_cmd('bin/smbclient -L ${WIN_HOSTNAME}.${LCREALM} -Uadministrator@${LCREALM}%${PASSWORD1}', ["C$", "IPC$", "Sharename"])
 289     t.cmd_contains("host -t A ${WIN_HOSTNAME}.${LCREALM}.", ['has address'])
 290     t.cmd_contains('bin/smbclient -L ${WIN_HOSTNAME}.${LCREALM} -Utestallowed@${LCREALM}%${PASSWORD1}', ["C$", "IPC$", "Sharename"])
 291
 292     t.cmd_contains("bin/samba-tool drs kcc ${HOSTNAME} -Uadministrator@${LCREALM}%${PASSWORD1}", ['Consistency check', 'successful'])
 293     t.cmd_contains("bin/samba-tool drs kcc ${WIN_HOSTNAME} -Uadministrator@${LCREALM}%${PASSWORD1}", ['Consistency check', 'successful'])
 294
 295     t.kinit("administrator@${REALM}", "${PASSWORD1}")
 296     for nc in [ '${BASEDN}', 'CN=Configuration,${BASEDN}', 'CN=Schema,CN=Configuration,${BASEDN}' ]:
 297         t.cmd_contains("bin/samba-tool drs replicate ${HOSTNAME} ${WIN_HOSTNAME} %s -k yes" % nc, ["was successful"])
 298         t.cmd_contains("bin/samba-tool drs replicate ${WIN_HOSTNAME} ${HOSTNAME} %s -k yes" % nc, ["was successful"])
 299
 300     t.cmd_contains("bin/samba-tool drs showrepl ${HOSTNAME} -k yes",
 301                  [ "INBOUND NEIGHBORS",
 302                    "${BASEDN}",
 303                    "Last attempt .* was successful",
 304                    "CN=Configuration,${BASEDN}",
 305                    "Last attempt .* was successful",
 306                    "CN=Configuration,${BASEDN}", # cope with either order
 307                    "Last attempt .* was successful",
 308                    "OUTBOUND NEIGHBORS",
 309                    "${BASEDN}",
 310                    "Last success",
 311                    "CN=Configuration,${BASEDN}",
 312                    "Last success",
 313                    "CN=Configuration,${BASEDN}",
 314                    "Last success"],
 315                    ordered=True,
 316                    regex=True)
 317
 318     t.cmd_contains("bin/samba-tool drs showrepl ${WIN_HOSTNAME} -k yes",
 319                  [ "INBOUND NEIGHBORS",
 320                    "${BASEDN}",
 321                    "Last attempt .* was successful",
 322                    "CN=Configuration,${BASEDN}",
 323                    "Last attempt .* was successful",
 324                    "CN=Configuration,${BASEDN}",
 325                    "Last attempt .* was successful",
 326                    "OUTBOUND NEIGHBORS",
 327                    "${BASEDN}",
 328                    "Last success",
 329                    "CN=Configuration,${BASEDN}",
 330                    "Last success",
 331                    "CN=Configuration,${BASEDN}",
 332                    "Last success" ],
 333                    ordered=True,
 334                    regex=True)
 335
 336     child = t.open_telnet("${WIN_HOSTNAME}", "${DOMAIN}\\administrator", "${PASSWORD1}", set_time=True)
 337     child.sendline("net use t: \\\\${HOSTNAME}.${LCREALM}\\test")
 338     child.expect("The command completed successfully")
 339
 340     t.run_net_time(child)
 341
 342     t.info("Checking if showrepl is happy")
 343     child.sendline("repadmin /showrepl")
 344     child.expect("${BASEDN}")
 345     child.expect("was successful")
 346     child.expect("CN=Configuration,${BASEDN}")
 347     child.expect("was successful")
 348     child.expect("CN=Schema,CN=Configuration,${BASEDN}")
 349     child.expect("was successful")
 350
 351     t.info("Checking if new users propogate to windows")
 352     t.run_cmd('bin/samba-tool newuser test2 ${PASSWORD2}')
 353     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k no", ['Sharename', 'Remote IPC'])
 354     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k yes", ['Sharename', 'Remote IPC'])
 355
 356     t.info("Checking if new users on windows propogate to samba")
 357     child.sendline("net user test3 ${PASSWORD3} /add")
 358     while True:
 359         i = child.expect(["The command completed successfully",
 360                           "The directory service was unable to allocate a relative identifier"])
 361         if i == 0:
 362             break
 363         time.sleep(2)
 364
 365     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k no", ['Sharename', 'IPC'])
 366     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k yes", ['Sharename', 'IPC'])
 367
 368     t.info("Checking propogation of user deletion")
 369     t.run_cmd('bin/samba-tool user delete test2 -Uadministrator@${LCREALM}%${PASSWORD1}')
 370     child.sendline("net user test3 /del")
 371     child.expect("The command completed successfully")
 372
 373     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k no", ['LOGON_FAILURE'])
 374     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k no", ['LOGON_FAILURE'])
 375     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k yes", ['LOGON_FAILURE'])
 376     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k yes", ['LOGON_FAILURE'])
 377     t.vm_poweroff("${WIN_VM}")
 378
 379
 380 def run_dcpromo_rodc(t, vm):
 381     '''run a RODC dcpromo to join a windows DC to the samba domain'''
 382     t.setwinvars(vm)
 383     t.info("Joining a w2k8 box to the domain as a RODC")
 384     t.vm_poweroff("${WIN_VM}", checkfail=False)
 385     t.vm_restore("${WIN_VM}", "${WIN_SNAPSHOT}")
 386     t.ping_wait("${WIN_HOSTNAME}")
 387     child = t.open_telnet("${WIN_HOSTNAME}", "administrator", "${WIN_PASS}", set_ip=True)
 388     child.sendline("copy /Y con answers.txt")
 389     child.sendline('''
 390 [DCInstall]
 391 ReplicaOrNewDomain=ReadOnlyReplica
 392 ReplicaDomainDNSName=${LCREALM}
 393 PasswordReplicationDenied="BUILTIN\Administrators"
 394 PasswordReplicationDenied="BUILTIN\Server Operators"
 395 PasswordReplicationDenied="BUILTIN\Backup Operators"
 396 PasswordReplicationDenied="BUILTIN\Account Operators"
 397 PasswordReplicationDenied="${DOMAIN}\Denied RODC Password Replication Group"
 398 PasswordReplicationAllowed="${DOMAIN}\Allowed RODC Password Replication Group"
 399 DelegatedAdmin="${DOMAIN}\\Administrator"
 400 SiteName=Default-First-Site-Name
 401 InstallDNS=No
 402 ConfirmGc=Yes
 403 CreateDNSDelegation=No
 404 UserDomain=${LCREALM}
 405 UserName=${LCREALM}\\administrator
 406 Password=${PASSWORD1}
 407 DatabasePath="C:\Windows\NTDS"
 408 LogPath="C:\Windows\NTDS"
 409 SYSVOLPath="C:\Windows\SYSVOL"
 410 SafeModeAdminPassword=${PASSWORD1}
 411 RebootOnCompletion=No
 412 \x1a
 413 ''')
 414     child.expect("copied.")
 415     child.sendline("dcpromo /answer:answers.txt")
 416     i = child.expect(["You must restart this computer", "failed"], timeout=120)
 417     if i != 0:
 418         raise Exception("dcpromo failed")
 419     child.sendline("shutdown -r -t 0")
 420     t.port_wait("${WIN_HOSTNAME}", 139, wait_for_fail=True)
 421     t.port_wait("${WIN_HOSTNAME}", 139)
 422
 423
 424
 425 def test_dcpromo_rodc(t, vm):
 426     '''test the RODC dcpromo worked'''
 427     t.setwinvars(vm)
 428     t.info("Checking the w2k8 RODC join is OK")
 429     t.chdir('${PREFIX}')
 430     t.port_wait("${WIN_HOSTNAME}", 139)
 431     t.retry_cmd('bin/smbclient -L ${WIN_HOSTNAME}.${LCREALM} -Uadministrator@${LCREALM}%${PASSWORD1}', ["C$", "IPC$", "Sharename"])
 432     t.cmd_contains("host -t A ${WIN_HOSTNAME}.${LCREALM}.", ['has address'])
 433     t.cmd_contains('bin/smbclient -L ${WIN_HOSTNAME}.${LCREALM} -Utestallowed@${LCREALM}%${PASSWORD1}', ["C$", "IPC$", "Sharename"])
 434     child = t.open_telnet("${WIN_HOSTNAME}", "${DOMAIN}\\administrator", "${PASSWORD1}", set_time=True)
 435     child.sendline("net use t: \\\\${HOSTNAME}.${LCREALM}\\test")
 436     child.expect("The command completed successfully")
 437
 438     t.info("Checking if showrepl is happy")
 439     child.sendline("repadmin /showrepl")
 440     child.expect("${BASEDN}")
 441     child.expect("was successful")
 442     child.expect("CN=Configuration,${BASEDN}")
 443     child.expect("was successful")
 444     child.expect("CN=Configuration,${BASEDN}")
 445     child.expect("was successful")
 446
 447     t.info("Checking if new users are available on windows")
 448     t.run_cmd('bin/samba-tool newuser test2 ${PASSWORD2}')
 449     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k yes", ['Sharename', 'Remote IPC'])
 450     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k no", ['LOGON_FAILURE'])
 451     t.retry_cmd("bin/samba-tool drs replicate ${WIN_HOSTNAME} ${HOSTNAME} ${BASEDN} -k yes", ["was successful"])
 452     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k no", ['Sharename', 'Remote IPC'])
 453     t.run_cmd('bin/samba-tool user delete test2 -Uadministrator@${LCREALM}%${PASSWORD1}')
 454     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k yes", ['LOGON_FAILURE'])
 455     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k no", ['LOGON_FAILURE'])
 456     t.vm_poweroff("${WIN_VM}")
 457
 458
 459 def join_as_dc(t, vm):
 460     '''join a windows domain as a DC'''
 461     t.setwinvars(vm)
 462     t.info("Joining ${WIN_VM} as a second DC using samba-tool join DC")
 463     t.chdir('${PREFIX}')
 464     t.run_cmd('killall -9 -q samba smbd nmbd winbindd', checkfail=False)
 465     t.vm_poweroff("${WIN_VM}", checkfail=False)
 466     t.vm_restore("${WIN_VM}", "${WIN_SNAPSHOT}")
 467     t.run_cmd('${RNDC} -c ${PREFIX}/etc/rndc.conf flush')
 468     t.run_cmd("rm -rf etc private")
 469     t.open_telnet("${WIN_HOSTNAME}", "${WIN_DOMAIN}\\administrator", "${WIN_PASS}", set_time=True, set_ip=True)
 470     t.retry_cmd("bin/samba-tool drs showrepl ${WIN_HOSTNAME} -Uadministrator%${WIN_PASS}", ['INBOUND NEIGHBORS'] )
 471     t.run_cmd('bin/samba-tool join ${WIN_REALM} DC -Uadministrator%${WIN_PASS} -d${DEBUGLEVEL}')
 472     t.run_cmd('bin/samba-tool drs kcc ${WIN_HOSTNAME} -Uadministrator@${WIN_REALM}%${WIN_PASS}')
 473
 474
 475 def test_join_as_dc(t, vm):
 476     '''test the join of a windows domain as a DC'''
 477     t.setwinvars(vm)
 478     t.info("Checking the DC join is OK")
 479     t.chdir('${PREFIX}')
 480     t.retry_cmd('bin/smbclient -L ${HOSTNAME}.${WIN_REALM} -Uadministrator@${WIN_REALM}%${WIN_PASS}', ["C$", "IPC$", "Sharename"])
 481     t.cmd_contains("host -t A ${HOSTNAME}.${WIN_REALM}.", ['has address'])
 482     child = t.open_telnet("${WIN_HOSTNAME}", "${WIN_DOMAIN}\\administrator", "${WIN_PASS}", set_time=True)
 483
 484     t.info("Forcing kcc runs, and replication")
 485     t.run_cmd('bin/samba-tool drs kcc ${WIN_HOSTNAME} -Uadministrator@${WIN_REALM}%${WIN_PASS}')
 486     t.run_cmd('bin/samba-tool drs kcc ${HOSTNAME} -Uadministrator@${WIN_REALM}%${WIN_PASS}')
 487
 488     t.kinit("administrator@${WIN_REALM}", "${WIN_PASS}")
 489     for nc in [ '${WIN_BASEDN}', 'CN=Configuration,${WIN_BASEDN}', 'CN=Schema,CN=Configuration,${WIN_BASEDN}' ]:
 490         t.cmd_contains("bin/samba-tool drs replicate ${HOSTNAME} ${WIN_HOSTNAME} %s -k yes" % nc, ["was successful"])
 491         t.cmd_contains("bin/samba-tool drs replicate ${WIN_HOSTNAME} ${HOSTNAME} %s -k yes" % nc, ["was successful"])
 492
 493     child.sendline("net use t: \\\\${HOSTNAME}.${WIN_REALM}\\test")
 494     child.expect("The command completed successfully")
 495
 496     t.info("Checking if showrepl is happy")
 497     child.sendline("repadmin /showrepl")
 498     child.expect("${WIN_BASEDN}")
 499     child.expect("was successful")
 500     child.expect("CN=Configuration,${WIN_BASEDN}")
 501     child.expect("was successful")
 502     child.expect("CN=Configuration,${WIN_BASEDN}")
 503     child.expect("was successful")
 504
 505     t.info("Checking if new users propogate to windows")
 506     t.run_cmd('bin/samba-tool newuser test2 ${PASSWORD2}')
 507     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k no", ['Sharename', 'Remote IPC'])
 508     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k yes", ['Sharename', 'Remote IPC'])
 509
 510     t.info("Checking if new users on windows propogate to samba")
 511     child.sendline("net user test3 ${PASSWORD3} /add")
 512     child.expect("The command completed successfully")
 513     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k no", ['Sharename', 'IPC'])
 514     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k yes", ['Sharename', 'IPC'])
 515
 516     t.info("Checking propogation of user deletion")
 517     t.run_cmd('bin/samba-tool user delete test2 -Uadministrator@${WIN_REALM}%${WIN_PASS}')
 518     child.sendline("net user test3 /del")
 519     child.expect("The command completed successfully")
 520
 521     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k no", ['LOGON_FAILURE'])
 522     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k no", ['LOGON_FAILURE'])
 523     t.retry_cmd("bin/smbclient -L ${WIN_HOSTNAME} -Utest2%${PASSWORD2} -k yes", ['LOGON_FAILURE'])
 524     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k yes", ['LOGON_FAILURE'])
 525     t.vm_poweroff("${WIN_VM}")
 526
 527
 528 def join_as_rodc(t, vm):
 529     '''join a windows domain as a RODC'''
 530     t.setwinvars(vm)
 531     t.info("Joining ${WIN_VM} as a RODC using samba-tool join DC")
 532     t.chdir('${PREFIX}')
 533     t.run_cmd('killall -9 -q samba smbd nmbd winbindd', checkfail=False)
 534     t.vm_poweroff("${WIN_VM}", checkfail=False)
 535     t.vm_restore("${WIN_VM}", "${WIN_SNAPSHOT}")
 536     t.run_cmd('${RNDC} -c ${PREFIX}/etc/rndc.conf flush')
 537     t.run_cmd("rm -rf etc private")
 538     t.open_telnet("${WIN_HOSTNAME}", "${WIN_DOMAIN}\\administrator", "${WIN_PASS}", set_time=True, set_ip=True)
 539     t.retry_cmd("bin/samba-tool drs showrepl ${WIN_HOSTNAME} -Uadministrator%${WIN_PASS}", ['INBOUND NEIGHBORS'] )
 540     t.run_cmd('bin/samba-tool join ${WIN_REALM} RODC -Uadministrator%${WIN_PASS} -d${DEBUGLEVEL}')
 541     t.run_cmd('bin/samba-tool drs kcc ${WIN_HOSTNAME} -Uadministrator@${WIN_REALM}%${WIN_PASS}')
 542
 543
 544 def test_join_as_rodc(t, vm):
 545     '''test a windows domain RODC join'''
 546     t.setwinvars(vm)
 547     t.info("Checking the RODC join is OK")
 548     t.chdir('${PREFIX}')
 549     t.retry_cmd('bin/smbclient -L ${HOSTNAME}.${WIN_REALM} -Uadministrator@${WIN_REALM}%${WIN_PASS}', ["C$", "IPC$", "Sharename"])
 550     t.cmd_contains("host -t A ${HOSTNAME}.${WIN_REALM}.", ['has address'])
 551     child = t.open_telnet("${WIN_HOSTNAME}", "${WIN_DOMAIN}\\administrator", "${WIN_PASS}", set_time=True)
 552
 553     t.info("Forcing kcc runs, and replication")
 554     t.run_cmd('bin/samba-tool drs kcc ${HOSTNAME} -Uadministrator@${WIN_REALM}%${WIN_PASS}')
 555     t.run_cmd('bin/samba-tool drs kcc ${WIN_HOSTNAME} -Uadministrator@${WIN_REALM}%${WIN_PASS}')
 556
 557     t.kinit("administrator@${WIN_REALM}", "${WIN_PASS}")
 558     for nc in [ '${WIN_BASEDN}', 'CN=Configuration,${WIN_BASEDN}', 'CN=Schema,CN=Configuration,${WIN_BASEDN}' ]:
 559         t.cmd_contains("bin/samba-tool drs replicate ${HOSTNAME} ${WIN_HOSTNAME} %s -k yes" % nc, ["was successful"])
 560
 561     child.sendline("net use t: \\\\${HOSTNAME}.${WIN_REALM}\\test")
 562     child.expect("The command completed successfully")
 563
 564     t.info("Checking if showrepl is happy")
 565     child.sendline("repadmin /showrepl")
 566     child.expect("DSA invocationID")
 567
 568     t.cmd_contains("bin/samba-tool drs showrepl ${WIN_HOSTNAME}.${WIN_REALM} -k yes",
 569                  [ "INBOUND NEIGHBORS",
 570                    "OUTBOUND NEIGHBORS",
 571                    "${WIN_BASEDN}",
 572                    "Last attempt .* was successful",
 573                    "CN=Configuration,${WIN_BASEDN}",
 574                    "Last attempt .* was successful",
 575                    "CN=Configuration,${WIN_BASEDN}",
 576                    "Last attempt .* was successful" ],
 577                    ordered=True,
 578                    regex=True)
 579
 580     t.info("Checking if new users on windows propogate to samba")
 581     child.sendline("net user test3 ${PASSWORD3} /add")
 582     child.expect("The command completed successfully")
 583     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k no", ['Sharename', 'IPC'])
 584     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k yes", ['Sharename', 'IPC'])
 585
 586     # should this work?
 587     t.info("Checking if new users propogate to windows")
 588     t.cmd_contains('bin/samba-tool newuser test2 ${PASSWORD2}', ['No RID Set DN'])
 589
 590     t.info("Checking propogation of user deletion")
 591     child.sendline("net user test3 /del")
 592     child.expect("The command completed successfully")
 593
 594     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k no", ['LOGON_FAILURE'])
 595     t.retry_cmd("bin/smbclient -L ${HOSTNAME} -Utest3%${PASSWORD3} -k yes", ['LOGON_FAILURE'])
 596     t.vm_poweroff("${WIN_VM}")
 597
 598
 599 def test_howto(t):
 600     '''test the Samba4 howto'''
 601
 602     check_prerequesites(t)
 603
 604     # we don't need fsync safety in these tests
 605     t.putenv('TDB_NO_FSYNC', '1')
 606
 607     if not t.skip("build"):
 608         build_s4(t)
 609
 610     if not t.skip("provision"):
 611         provision_s4(t, interface='${INTERFACE_IP}')
 612
 613     if not t.skip("create-shares"):
 614         create_shares(t)
 615
 616     if not t.skip("starts4"):
 617         start_s4(t, interface='${INTERFACE_IP}')
 618     if not t.skip("smbclient"):
 619         test_smbclient(t)
 620     if not t.skip("startbind"):
 621         restart_bind(t)
 622     if not t.skip("dns"):
 623         test_dns(t)
 624     if not t.skip("kerberos"):
 625         test_kerberos(t)
 626     if not t.skip("dyndns"):
 627         test_dyndns(t)
 628
 629     if t.have_var('WINDOWS7_VM') and not t.skip("windows7"):
 630         run_winjoin(t, "WINDOWS7")
 631         test_winjoin(t, "WINDOWS7")
 632
 633     if t.have_var('WINXP_VM') and not t.skip("winxp"):
 634         run_winjoin(t, "WINXP")
 635         test_winjoin(t, "WINXP")
 636
 637     if t.have_var('W2K8R2C_VM') and not t.skip("dcpromo_rodc"):
 638         t.info("Testing w2k8r2 RODC dcpromo")
 639         run_dcpromo_rodc(t, "W2K8R2C")
 640         test_dcpromo_rodc(t, "W2K8R2C")
 641
 642     if t.have_var('W2K8R2B_VM') and not t.skip("dcpromo_w2k8r2"):
 643         t.info("Testing w2k8r2 dcpromo")
 644         run_dcpromo(t, "W2K8R2B")
 645         test_dcpromo(t, "W2K8R2B")
 646
 647     if t.have_var('W2K8B_VM') and not t.skip("dcpromo_w2k8"):
 648         t.info("Testing w2k8 dcpromo")
 649         run_dcpromo(t, "W2K8B")
 650         test_dcpromo(t, "W2K8B")
 651
 652     if t.have_var('W2K3B_VM') and not t.skip("dcpromo_w2k3"):
 653         t.info("Testing w2k3 dcpromo")
 654         t.info("Changing to 2003 functional level")
 655         provision_s4(t, func_level='2003', interfaces='${INTERFACES}')
 656         create_shares(t)
 657         start_s4(t, interfaces='${INTERFACES}')
 658         test_smbclient(t)
 659         restart_bind(t)
 660         test_dns(t)
 661         test_kerberos(t)
 662         test_dyndns(t)
 663         run_dcpromo(t, "W2K3B")
 664         test_dcpromo(t, "W2K3B")
 665
 666     if t.have_var('W2K8R2A_VM') and not t.skip("join_w2k8r2"):
 667         join_as_dc(t, "W2K8R2A")
 668         create_shares(t)
 669         start_s4(t, interfaces='${INTERFACES}')
 670         test_dyndns(t)
 671         test_join_as_dc(t, "W2K8R2A")
 672
 673     if t.have_var('W2K8R2A_VM') and not t.skip("join_rodc"):
 674         join_as_rodc(t, "W2K8R2A")
 675         create_shares(t)
 676         start_s4(t, interfaces='${INTERFACES}')
 677         test_dyndns(t)
 678         test_join_as_rodc(t, "W2K8R2A")
 679
 680     if t.have_var('W2K3A_VM') and not t.skip("join_w2k3"):
 681         join_as_dc(t, "W2K3A")
 682         create_shares(t)
 683         start_s4(t, interfaces='${INTERFACES}')
 684         test_dyndns(t)
 685         test_join_as_dc(t, "W2K3A")
 686
 687     t.info("Howto test: All OK")
 688
 689
 690 def test_cleanup(t):
 691     '''cleanup after tests'''
 692     restore_resolv_conf(t)
 693     if getattr(t, 'bind_child', False):
 694         t.bind_child.kill()
 695
 696
 697 if __name__ == '__main__':
 698     parser = optparse.OptionParser("test-howto.py")
 699     parser.add_option("--conf", type='string', default='', help='config file')
 700     parser.add_option("--skip", type='string', default='', help='list of steps to skip (comma separated)')
 701     parser.add_option("--list", action='store_true', default=False, help='list the available steps')
 702     parser.add_option("--rebase", action='store_true', default=False, help='do a git pull --rebase')
 703     parser.add_option("--clean", action='store_true', default=False, help='clean the tree')
 704     parser.add_option("--prefix", type='string', default=None, help='override install prefix')
 705     parser.add_option("--sourcetree", type='string', default=None, help='override sourcetree location')
 706     parser.add_option("--nocleanup", action='store_true', default=False, help='disable cleanup code')
 707
 708     opts, args = parser.parse_args()
 709
 710     if not opts.conf:
 711         print("Please specify a config file with --conf")
 712         sys.exit(1)
 713
 714     t = wintest.wintest()
 715     t.load_config(opts.conf)
 716     t.set_skip(opts.skip)
 717
 718     if opts.list:
 719         t.list_steps_mode()
 720
 721     if opts.prefix:
 722         t.setvar('PREFIX', opts.prefix)
 723
 724     if opts.sourcetree:
 725         t.setvar('SOURCETREE', opts.sourcetree)
 726
 727     if opts.rebase:
 728         t.info('rebasing')
 729         t.chdir('${SOURCETREE}')
 730         t.run_cmd('git pull --rebase')
 731
 732     if opts.clean:
 733         t.info('rebasing')
 734         t.chdir('${SOURCETREE}/source4')
 735         t.run_cmd('rm -rf bin')
 736
 737     try:
 738         test_howto(t)
 739     except Exception, str:
 740         if not opts.nocleanup:
 741             test_cleanup(t)
 742         raise
 743
 744     if not opts.nocleanup:
 745         test_cleanup(t)
 746     t.info("S4 howto test: All OK")