source4/torture/libnet/libnet_BecomeDC.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    libnet_BecomeDC() tests
   5
   6    Copyright (C) Stefan Metzmacher <metze@samba.org> 2006
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18    You should have received a copy of the GNU General Public License
  19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  20 */
  21
  22 #include "includes.h"
  23 #include "lib/cmdline/popt_common.h"
  24 #include "torture/rpc/torture_rpc.h"
  25 #include "libnet/libnet.h"
  26 #include "dsdb/samdb/samdb.h"
  27 #include "../lib/util/dlinklist.h"
  28 #include "librpc/gen_ndr/ndr_drsuapi.h"
  29 #include "librpc/gen_ndr/ndr_drsblobs.h"
  30 #include "system/time.h"
  31 #include "ldb_wrap.h"
  32 #include "auth/auth.h"
  33 #include "param/param.h"
  34 #include "param/provision.h"
  35 #include "libcli/resolve/resolve.h"
  36
  37 bool torture_net_become_dc(struct torture_context *torture)
  38 {
  39         bool ret = true;
  40         NTSTATUS status;
  41         struct libnet_BecomeDC b;
  42         struct libnet_UnbecomeDC u;
  43         struct libnet_vampire_cb_state *s;
  44         struct ldb_message *msg;
  45         int ldb_ret;
  46         uint32_t i;
  47         char *sam_ldb_path;
  48         const char *address;
  49         struct nbt_name name;
  50         const char *netbios_name;
  51         struct cli_credentials *machine_account;
  52         struct test_join *tj;
  53         struct loadparm_context *lp_ctx;
  54         struct ldb_context *ldb;
  55         struct libnet_context *ctx;
  56         struct dsdb_schema *schema;
  57
  58         char *location = NULL;
  59         torture_assert_ntstatus_ok(torture, torture_temp_dir(torture, "libnet_BecomeDC", &location),
  60                                    "torture_temp_dir should return NT_STATUS_OK" );
  61
  62         netbios_name = lpcfg_parm_string(torture->lp_ctx, NULL, "become dc", "smbtorture dc");
  63         if (!netbios_name || !netbios_name[0]) {
  64                 netbios_name = "smbtorturedc";
  65         }
  66
  67         make_nbt_name_server(&name, torture_setting_string(torture, "host", NULL));
  68
  69         /* do an initial name resolution to find its IP */
  70         status = resolve_name(lpcfg_resolve_context(torture->lp_ctx),
  71                               &name, torture, &address, torture->ev);
  72         torture_assert_ntstatus_ok(torture, status, talloc_asprintf(torture,
  73                                    "Failed to resolve %s - %s\n",
  74                                    name.name, nt_errstr(status)));
  75
  76
  77         /* Join domain as a member server. */
  78         tj = torture_join_domain(torture, netbios_name,
  79                                  ACB_WSTRUST,
  80                                  &machine_account);
  81         torture_assert(torture, tj, talloc_asprintf(torture,
  82                                                     "%s failed to join domain as workstation\n",
  83                                                     netbios_name));
  84
  85         s = libnet_vampire_cb_state_init(torture, torture->lp_ctx, torture->ev,
  86                                netbios_name,
  87                                torture_join_dom_netbios_name(tj),
  88                                torture_join_dom_dns_name(tj),
  89                                location);
  90         torture_assert(torture, s, "libnet_vampire_cb_state_init");
  91
  92         ctx = libnet_context_init(torture->ev, torture->lp_ctx);
  93         ctx->cred = cmdline_credentials;
  94
  95         ZERO_STRUCT(b);
  96         b.in.domain_dns_name            = torture_join_dom_dns_name(tj);
  97         b.in.domain_netbios_name        = torture_join_dom_netbios_name(tj);
  98         b.in.domain_sid                 = torture_join_sid(tj);
  99         b.in.source_dsa_address         = address;
 100         b.in.dest_dsa_netbios_name      = netbios_name;
 101
 102         b.in.callbacks.private_data     = s;
 103         b.in.callbacks.check_options    = libnet_vampire_cb_check_options;
 104         b.in.callbacks.prepare_db       = libnet_vampire_cb_prepare_db;
 105         b.in.callbacks.schema_chunk     = libnet_vampire_cb_schema_chunk;
 106         b.in.callbacks.config_chunk     = libnet_vampire_cb_store_chunk;
 107         b.in.callbacks.domain_chunk     = libnet_vampire_cb_store_chunk;
 108
 109         status = libnet_BecomeDC(ctx, s, &b);
 110         torture_assert_ntstatus_ok_goto(torture, status, ret, cleanup, talloc_asprintf(torture,
 111                                    "libnet_BecomeDC() failed - %s %s\n",
 112                                    nt_errstr(status), b.out.error_string));
 113         ldb = libnet_vampire_cb_ldb(s);
 114
 115         msg = ldb_msg_new(s);
 116         torture_assert_int_equal_goto(torture, (msg?1:0), 1, ret, cleanup,
 117                                       "ldb_msg_new() failed\n");
 118         msg->dn = ldb_dn_new(msg, ldb, "@ROOTDSE");
 119         torture_assert_int_equal_goto(torture, (msg->dn?1:0), 1, ret, cleanup,
 120                                       "ldb_msg_new(@ROOTDSE) failed\n");
 121
 122         ldb_ret = ldb_msg_add_string(msg, "isSynchronized", "TRUE");
 123         torture_assert_int_equal_goto(torture, ldb_ret, LDB_SUCCESS, ret, cleanup,
 124                                       "ldb_msg_add_string(msg, isSynchronized, TRUE) failed\n");
 125
 126         for (i=0; i < msg->num_elements; i++) {
 127                 msg->elements[i].flags = LDB_FLAG_MOD_REPLACE;
 128         }
 129
 130         torture_comment(torture, "mark ROOTDSE with isSynchronized=TRUE\n");
 131         ldb_ret = ldb_modify(libnet_vampire_cb_ldb(s), msg);
 132         torture_assert_int_equal_goto(torture, ldb_ret, LDB_SUCCESS, ret, cleanup,
 133                                       "ldb_modify() failed\n");
 134
 135         /* commit the transaction now we know the secrets were written
 136          * out properly
 137         */
 138         ldb_ret = ldb_transaction_commit(ldb);
 139         torture_assert_int_equal_goto(torture, ldb_ret, LDB_SUCCESS, ret, cleanup,
 140                                       "ldb_transaction_commit() failed\n");
 141
 142         /* reopen the ldb */
 143         talloc_unlink(s, ldb);
 144
 145         lp_ctx = libnet_vampire_cb_lp_ctx(s);
 146         sam_ldb_path = talloc_asprintf(s, "%s/%s", location, "private/sam.ldb");
 147         lpcfg_set_cmdline(lp_ctx, "sam database", sam_ldb_path);
 148         torture_comment(torture, "Reopen the SAM LDB with system credentials and all replicated data: %s\n", sam_ldb_path);
 149         ldb = samdb_connect(s, torture->ev, lp_ctx, system_session(lp_ctx), 0);
 150         torture_assert_goto(torture, ldb != NULL, ret, cleanup,
 151                                       talloc_asprintf(torture,
 152                                       "Failed to open '%s'\n", sam_ldb_path));
 153
 154         torture_assert_goto(torture, dsdb_uses_global_schema(ldb), ret, cleanup,
 155                                                 "Uses global schema");
 156
 157         schema = dsdb_get_schema(ldb, s);
 158         torture_assert_goto(torture, schema != NULL, ret, cleanup,
 159                                       "Failed to get loaded dsdb_schema\n");
 160
 161         /* Make sure we get this from the command line */
 162         if (lpcfg_parm_bool(torture->lp_ctx, NULL, "become dc", "do not unjoin", false)) {
 163                 talloc_free(s);
 164                 return ret;
 165         }
 166
 167 cleanup:
 168         ZERO_STRUCT(u);
 169         u.in.domain_dns_name            = torture_join_dom_dns_name(tj);
 170         u.in.domain_netbios_name        = torture_join_dom_netbios_name(tj);
 171         u.in.source_dsa_address         = address;
 172         u.in.dest_dsa_netbios_name      = netbios_name;
 173
 174         status = libnet_UnbecomeDC(ctx, s, &u);
 175         torture_assert_ntstatus_ok(torture, status, talloc_asprintf(torture,
 176                                    "libnet_UnbecomeDC() failed - %s %s\n",
 177                                    nt_errstr(status), u.out.error_string));
 178
 179         /* Leave domain. */
 180         torture_leave_domain(torture, tj);
 181
 182         talloc_free(s);
 183         return ret;
 184 }