samba-tool: Add new samba-tool gpo aclcheck and test
[Samba/gebeck_regimport.git] / source4 / scripting / python / samba / tests / samba_tool / gpo.py
blob82e7268e1b9695d30313f1ec119b5dd23b2f4623
1 # Unix SMB/CIFS implementation.
2 # Copyright (C) Andrew Bartlett 2012
4 # based on time.py:
5 # Copyright (C) Sean Dague <sdague@linux.vnet.ibm.com> 2011
7 # This program is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # This program is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with this program. If not, see <http://www.gnu.org/licenses/>.
21 import os
22 from samba.tests.samba_tool.base import SambaToolCmdTest
23 import shutil
25 class GpoCmdTestCase(SambaToolCmdTest):
26 """Tests for samba-tool time subcommands"""
28 gpo_name = "testgpo"
30 def test_gpo_list(self):
31 """Run gpo list against the server and make sure it looks accurate"""
32 (result, out, err) = self.runsubcmd("gpo", "listall", "-H", "ldap://%s" % os.environ["SERVER"])
33 self.assertCmdSuccess(result, "Ensuring gpo listall ran successfully")
35 def test_fetchfail(self):
36 """Run against a non-existent GPO, and make sure it fails (this hard-coded UUID is very unlikely to exist"""
37 (result, out, err) = self.runsubcmd("gpo", "fetch", "c25cac17-a02a-4151-835d-fae17446ee43", "-H", "ldap://%s" %
38 os.environ["SERVER"])
39 self.assertEquals(result, -1, "check for result code")
41 def test_fetch(self):
42 """Run against a real GPO, and make sure it passes"""
43 (result, out, err) = self.runsubcmd("gpo", "fetch", self.gpo_guid, "-H", "ldap://%s" % os.environ["SERVER"], "--tmpdir", self.tempdir)
44 self.assertCmdSuccess(result, "Ensuring gpo fetched successfully")
45 shutil.rmtree(os.path.join(self.tempdir, "policy"))
47 def test_show(self):
48 """Show a real GPO, and make sure it passes"""
49 (result, out, err) = self.runsubcmd("gpo", "show", self.gpo_guid, "-H", "ldap://%s" % os.environ["SERVER"])
50 self.assertCmdSuccess(result, "Ensuring gpo fetched successfully")
52 def test_aclcheck(self):
53 """Check all the GPOs on the remote server have correct ACLs"""
54 (result, out, err) = self.runsubcmd("gpo", "aclcheck", "-H", "ldap://%s" % os.environ["SERVER"], "-U%s%%%s" % (os.environ["USERNAME"], os.environ["PASSWORD"]))
55 self.assertCmdSuccess(result, "Ensuring gpo checked successfully")
57 def setUp(self):
58 """set up a temporary GPO to work with"""
59 super(GpoCmdTestCase, self).setUp()
60 (result, out, err) = self.runsubcmd("gpo", "create", self.gpo_name,
61 "-H", "ldap://%s" % os.environ["SERVER"],
62 "-U%s%%%s" % (os.environ["USERNAME"], os.environ["PASSWORD"]),
63 "--tmpdir", self.tempdir)
64 shutil.rmtree(os.path.join(self.tempdir, "policy"))
65 self.assertCmdSuccess(result, "Ensuring gpo created successfully")
66 try:
67 self.gpo_guid = "{%s}" % out.split("{")[1].split("}")[0]
68 except IndexError:
69 self.fail("Failed to find GUID in output: %s" % out)
71 def tearDown(self):
72 """remove the temporary GPO to work with"""
73 (result, out, err) = self.runsubcmd("gpo", "del", self.gpo_guid, "-H", "ldap://%s" % os.environ["SERVER"], "-U%s%%%s" % (os.environ["USERNAME"], os.environ["PASSWORD"]))
74 self.assertCmdSuccess(result, "Ensuring gpo deleted successfully")
75 super(GpoCmdTestCase, self).tearDown()