diff options
Diffstat (limited to 'python')
-rwxr-xr-x | python/samba/tests/samba_tool/group_edit.sh | 208 |
1 files changed, 208 insertions, 0 deletions
diff --git a/python/samba/tests/samba_tool/group_edit.sh b/python/samba/tests/samba_tool/group_edit.sh new file mode 100755 index 00000000000..90f5252d926 --- /dev/null +++ b/python/samba/tests/samba_tool/group_edit.sh @@ -0,0 +1,208 @@ +#!/bin/sh +# +# Test for 'samba-tool group edit' + +if [ $# -lt 3 ]; then +cat <<EOF +Usage: group_edit.sh SERVER USERNAME PASSWORD +EOF +exit 1; +fi + +SERVER="$1" +USERNAME="$2" +PASSWORD="$3" + +STpath=$(pwd) +. $STpath/testprogs/blackbox/subunit.sh + +display_name="Users in Göttingen" +display_name_b64="VXNlcnMgaW4gR8O2dHRpbmdlbg==" +display_name_new="Users in Goettingen" +# attribute value including control character +# echo -e "test \a string" | base64 +display_name_con_b64="dGVzdCAHIHN0cmluZwo=" + +tmpeditor=$(mktemp --suffix .sh -p $STpath/bin samba-tool-editor-XXXXXXXX) +chmod +x $tmpeditor + +create_test_group() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + group add testgroup1 \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +delete_test_group() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + group delete testgroup1 \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +create_test_user() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + user create testuser1 --random-password \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +delete_test_user() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + user delete testuser1 \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +add_member() { + user_dn=$($PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + user show testuser1 --attributes=dn \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" | \ + grep ^dn: | cut -d' ' -f2) + + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +grep -v '^$' \$group_ldif > \${group_ldif}.tmp +echo "member: $user_dn" >> \${group_ldif}.tmp + +mv \${group_ldif}.tmp \$group_ldif +EOF + + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + group edit testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_member() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + group listmembers testgroup1 \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +# Test edit group - add base64 attributes +add_attribute_base64() { + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +grep -v '^$' \$group_ldif > \${group_ldif}.tmp +echo "displayName:: $display_name_b64" >> \${group_ldif}.tmp + +mv \${group_ldif}.tmp \$group_ldif +EOF + + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_attribute_base64() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group show \ + testgroup1 --attributes=displayName \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +delete_attribute() { + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +grep -v '^displayName' \$group_ldif >> \${group_ldif}.tmp +mv \${group_ldif}.tmp \$group_ldif +EOF + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +# Test edit group - add base64 attribute value including control character +add_attribute_base64_control() { + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +grep -v '^$' \$group_ldif > \${group_ldif}.tmp +echo "displayName:: $display_name_con_b64" >> \${group_ldif}.tmp + +mv \${group_ldif}.tmp \$group_ldif +EOF + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_attribute_base64_control() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group show \ + testgroup1 --attributes=displayName \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + + +# Test edit group - change base64 attribute value including control character +change_attribute_base64_control() { + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +sed -i -e 's/displayName:: $display_name_con_b64/displayName: $display_name/' \ + \$group_ldif +EOF + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_attribute_base64_control() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group show \ + testgroup1 --attributes=displayName \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +# Test edit group - change attributes with LDB_FLAG_FORCE_NO_BASE64_LDIF +change_attribute_force_no_base64() { + # create editor.sh + # Expects that the original attribute is available as clear text, + # because the LDB_FLAG_FORCE_NO_BASE64_LDIF should be used here. + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +sed -i -e 's/displayName: $display_name/displayName: $display_name_new/' \ + \$group_ldif +EOF + + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_changed_attribute_force_no_base64() { + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group show \ + testgroup1 --attributes=displayName \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +failed=0 + +testit "create_test_group" create_test_group || failed=`expr $failed + 1` +testit "create_test_user" create_test_user || failed=`expr $failed + 1` +testit "add_member" add_member || failed=`expr $failed + 1` +testit_grep "get_member" "^testuser1" get_member || failed=`expr $failed + 1` +testit "add_attribute_base64" add_attribute_base64 || failed=`expr $failed + 1` +testit_grep "get_attribute_base64" "^displayName:: $display_name_b64" get_attribute_base64 || failed=`expr $failed + 1` +testit "delete_attribute" delete_attribute || failed=`expr $failed + 1` +testit "add_attribute_base64_control" add_attribute_base64_control || failed=`expr $failed + 1` +testit_grep "get_attribute_base64_control" "^displayName:: $display_name_con_b64" get_attribute_base64_control || failed=`expr $failed + 1` +testit "change_attribute_base64_control" change_attribute_base64_control || failed=`expr $failed + 1` +testit_grep "get_attribute_base64_control" "^displayName:: $display_name_b64" get_attribute_base64_control || failed=`expr $failed + 1` +testit "change_attribute_force_no_base64" change_attribute_force_no_base64 || failed=`expr $failed + 1` +testit_grep "get_changed_attribute_force_no_base64" "^displayName: $display_name_new" get_changed_attribute_force_no_base64 || failed=`expr $failed + 1` +testit "delete_test_group" delete_test_group || failed=`expr $failed + 1` +testit "delete_test_user" delete_test_user || failed=`expr $failed + 1` + +rm -f $tmpeditor + +exit $failed |