summaryrefslogtreecommitdiff
path: root/testprogs
Commit message (Collapse)AuthorAgeFilesLines
...
* testprogs: Add MIT Kerberos specific kpasswd blackbox testAndreas Schneider2017-04-291-0/+231
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Add test with exported keytab from samba-toolAndreas Schneider2017-04-291-0/+127
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Add a kinit trust test for MIT KDCAndreas Schneider2017-04-291-0/+139
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Add test_kinit_mit.sh testAndreas Schneider2017-04-291-0/+310
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Fix usage printout of bogus blackbox testAndreas Schneider2017-04-291-1/+1
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Fix test_chgdcpass blackbox test with MITAndreas Schneider2017-04-291-2/+14
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Add common kinit functionAndreas Schneider2017-04-291-0/+16
| | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* lib/util: add a test for samba_runcmd_send()Ralph Boehme2017-04-201-0/+15
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs/blackbox: add test_trust_ntlm.shStefan Metzmacher2017-04-101-0/+164
| | | | | | | | | | | This verifies that various domain/realm and username combinations map to the correct user. BUG: https://bugzilla.samba.org/show_bug.cgi?id=2976 BUG: https://bugzilla.samba.org/show_bug.cgi?id=12709 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* testprogs/blackbox: add test_rpcclient_*_grep helper functionsStefan Metzmacher2017-04-101-0/+52
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12709 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* testprogs/blackbox: use subunit_ helper functions in test_smbclient_*Stefan Metzmacher2017-04-101-8/+8
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12709 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* testprogs: Correctly expand shell parametersAndreas Schneider2017-03-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old behaviour is: for var in $* do echo "$var" done And you get this: $ sh test.sh 1 2 '3 4' 1 2 3 4 Changing it to: for var in "$@" do echo "$var" done will correctly expand to: $ sh test.sh 1 2 '3 4' 1 2 3 4 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Mar 15 05:26:17 CET 2017 on sn-devel-144
* testprogs: Test 'net ads join' with a dedicated keytabAndreas Schneider2017-03-141-0/+9
| | | | | | | | This checks that a 'net ads join' can create the keytab and make sure we will not regress in future. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlet <abartlet@samba.org>
* tests/dbcheck-links: remove spurious sleepingGarming Sam2017-03-131-1/+0
| | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* dbcheck: Improve dbcheck to find (and may fix) dangling msDS-RevealedUsersGarming Sam2017-03-131-0/+77
| | | | | | | | We cannot add missing backlinks because of the duplicate checking. There seems to be no trivial way to add the bypass. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* testprogs: Add kinit_trusts tests with smbclient4Andreas Schneider2017-03-101-0/+8
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=12554 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* testprogs: Use smbclient by default in test_kinit_trustsAndreas Schneider2017-03-101-1/+1
| | | | | | | | | This is the tool we use by default and we should test with it. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12554 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* tests/dbcheck: Add a test for two live objects, with a dangling forward linkGarming Sam2017-02-231-0/+22
| | | | | | | | | | | Handling backlinks appears to be rather non-deterministic, so the forward link hangs off of the RODC replication group (which has no other valid forward links). In other situations, it either won't delete the memberOf, or the expected output order will vary. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> BUG: https://bugzilla.samba.org/show_bug.cgi?id=12600
* tests/dbcheck: Add a test for two live objects, with a dangling backlinkGarming Sam2017-02-231-0/+15
| | | | | | | | Adds dbcheck 4.5.0pre1 to the knownfail, to be removed later. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> BUG: https://bugzilla.samba.org/show_bug.cgi?id=12600
* dbcheck-links: Test that dbcheck against one-way links does not errorGarming Sam2017-02-131-0/+10
| | | | | | | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> BUG: https://bugzilla.samba.org/show_bug.cgi?id=12577 Pair-programmed-with: Bob Campbell <bobcampbell@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Mon Feb 13 07:33:08 CET 2017 on sn-devel-144
* dbcheck: Do not regard old one-way-links as errorsAndrew Bartlett2017-02-131-2/+4
| | | | | | | | | | | | | | | | | Samba does not maintain one way links when the target is deleted or renamed so do not fail dbcheck because of such links, but allow them to be updated. This matters because administrators and make test expect that normal Samba operation do NOT cause the database to become corrupt, and any error from dbcheck tends to trigger alarms (or test failures). If an object pointed at by a one way link is renamed or deleted in normal operations (such as intersiteTopologyGenerator pointing at a demoted DC), or make test, then this could trigger. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> BUG: https://bugzilla.samba.org/show_bug.cgi?id=12577
* selftest: Do not test for link ordering in tombstones_expunge testAndrew Bartlett2017-02-091-1/+1
| | | | | | | | | | | | | | By testing only for the DNs that are returned we do not change the strictness of the test, because it is a test of the match rule which applies to the whole object, not the returned values. However, when this code asserted the returned order of the links, it prevents us from changing this order. This order was not deterministic across DCs but as this test ran against an offline DB, it was able to assume a particular order. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* testprogs: Use better KRB5CCNAME in test_password_settings.shAndreas Schneider2016-12-211-0/+8
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* selftest: Fix timestamps on FreeBSD 11Volker Lendecke2016-11-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | FreeBSD's date does not print the %, and \? does not catch that Tested this manually: $ echo 'time: 2016-11-23 12:52:19.123456Z'| sed 's/\..*NZ$/.000000Z/' time: 2016-11-23 12:52:19.123456Z $ echo 'time: 2016-11-23 12:52:19.%6NZ'| sed 's/\..*NZ$/.000000Z/' time: 2016-11-23 12:52:19.000000Z $ echo 'time: 2016-11-23 12:52:19.6NZ'| sed 's/\..*NZ$/.000000Z/' time: 2016-11-23 12:52:19.000000Z $ echo 'time: 2016-11-23 12:52:19.NZ'| sed 's/\..*NZ$/.000000Z/' time: 2016-11-23 12:52:19.000000Z $ Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Thu Nov 24 00:42:55 CET 2016 on sn-devel-144
* selftest: Ensure we catch errors from samba-tool domain tombstones expungeAndrew Bartlett2016-11-221-1/+1
| | | | | | | | The previous code would overwrite $? before the return, so always returned 0 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> BUG: https://bugzilla.samba.org/show_bug.cgi?id=12297
* selftest: Add test for link and deleted link behaviour in dbcheckAndrew Bartlett2016-11-221-0/+188
| | | | | | | | | | The other dbcheck tests were getting over-complex, so we start a new test here based on tombestone-expunge.sh, as we are looking at very similar problems Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> BUG: https://bugzilla.samba.org/show_bug.cgi?id=12297
* tombstones-expunge: Add a test for deleting links to recycled objectsGarming Sam2016-11-021-0/+9
| | | | | | | | | | | | | Currently this fails because we rely on a GUID DN, which fails to resolve in the case that the GUID no longer exists in the database (i.e. when that object has been purged after 6 months). The tests use a made up extended DN built from fred where the GUID has been tweaked. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> BUG: https://bugzilla.samba.org/show_bug.cgi?id=12385
* Add a blackbox tests for id & getent to test domain@realm type credentialsNoel Power2016-10-031-0/+27
| | | | | | | | | | | | | | Using domain@realm credentials has been problematic when global conf setting "winbind use default domain" is enabled, this patch creates a new s4member_dflt_domain environment (where "winbind use default domain" is enabled) and runs getent & id against the normal s4member & and new s4member_dflt_domain environments BUG: https://bugzilla.samba.org/show_bug.cgi?id=12298 Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* testprogs: Use own credential cache for test_client_etypes.shAndreas Schneider2016-09-251-0/+8
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* testprogs: Use better KRB5CCNAME in test_password_settings.shAndreas Schneider2016-09-251-2/+6
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* testprogs: Test only what the Heimdal kpasswd test should testAndreas Schneider2016-09-111-170/+122
| | | | | | | | | The test_password_settings.sh test does test using different password settings and is not specific to the kpasswd implementation. This test tests the kpasswd service. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Make test_passwords.sh a Heimdal kpasswd testAndreas Schneider2016-09-111-0/+0
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Add a new test_password_settings.sh scriptAndreas Schneider2016-09-111-0/+211
| | | | | | | This test is not Kerberos implementation specific. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* testprogs: Add a common test_smbclient_expect_failure() functionAndreas Schneider2016-09-111-0/+18
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* dbcheck: assert uSNChanged values in release-4-5-0-pre1Garming Sam2016-09-081-1/+17
| | | | | | | | | | | This shows that dbcheck doesn't change the replPropertyMetadata when fixing the links on these objects. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Garming Sam <garming@samba.org> Autobuild-Date(master): Thu Sep 8 14:39:19 CEST 2016 on sn-devel-144
* dbcheck: Make it clearer about temporary outputGarming Sam2016-09-081-1/+1
| | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* tombstone-expunge: Assert than an expunge does not bump the USNGarming Sam2016-09-081-0/+12
| | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* selftest: detect older tshark versionUri Simchoni2016-09-051-0/+12
| | | | | | | | | | | Detect older versions of tshark, which do not recognize the -Y option, and skip the kerberos enc type tests Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Mon Sep 5 16:31:58 CEST 2016 on sn-devel-144
* lib/ldb-samba: Add test for DSDB_MATCH_FOR_EXPUNGE match ruleAndrew Bartlett2016-09-011-0/+50
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* selftest: Add test for 'samba-tool tombstones expunge'Andrew Bartlett2016-09-011-0/+144
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* blackbox tests: add timestamps for subunit testsDouglas Bagnall2016-08-311-0/+11
| | | | | | | | | | | | | | | There is the icky thing with sed because some kinds of `date` don't have sub-second resolution, which we really want. Another way to do it would be: python -c "import datetime; print datetime.datetime.utcnow().strftime('time: %Y-%m-%d %H:%M:%S.%fZ')" which should be universal, but is a little slower. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* dbcheck: Abandon dbcheck if we get an error during a transactionAndrew Bartlett2016-08-291-0/+10
| | | | | | | | | | | | | | | | Otherwise, anything that the transaction has already done to the DB will be left in the DB even despite the failure. For example, if a fix wrote to the DB, but then failed a post-write check, then the fix will not be unrolled. This is because we do not have nested transactions in TDB. BUG: https://bugzilla.samba.org/show_bug.cgi?id=12178 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Mon Aug 29 12:46:21 CEST 2016 on sn-devel-144
* selftest: skip client_etypes tests if tshark or sha1sum is not installedUri Simchoni2016-08-251-7/+12
| | | | | | | | | | | That was the original plan - not to fail existing envs, but for subunit not to fail, it is not sufficient to just return 0 from the script. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Autobuild-User(master): Garming Sam <garming@samba.org> Autobuild-Date(master): Thu Aug 25 09:39:43 CEST 2016 on sn-devel-144
* selftest: tests for kerberos encryption typesUri Simchoni2016-08-091-0/+58
| | | | | | | | | | | | This test uses tshark and cwrap's packet capturing capability to observe the Kerberos handshakes and ensure the correct encryption types are being used. Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Aug 9 07:43:52 CEST 2016 on sn-devel-144
* testprogs/blackbox: add test_pkinit_pac_heimdal.shStefan Metzmacher2016-07-221-0/+53
| | | | | | | | This verifies that we have a PAC_CREDENTIAL_INFO element in the PAC when using pkinit. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* test_pkinit_heimdal.sh: add some more tests regarding the ↵Stefan Metzmacher2016-07-221-9/+104
| | | | | | | | | UF_SMARTCARD_REQUIRED behavior BUG: https://bugzilla.samba.org/show_bug.cgi?id=11441 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* dbcheck/release-4-1-0rc3: Add a check regarding replica locationsGarming Sam2016-07-211-0/+13
| | | | | | | | | | | | This DC has repsFrom for the DNS partitions, but not the corresponding link. This ensures that dbcheck has fixed them up. This will currently fail without the actual changes to dbcheck coming in the following commit. BUG: https://bugzilla.samba.org/show_bug.cgi?id=9200 Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* dbcheck: Replica locations can now be leftoverGarming Sam2016-07-211-1/+1
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=9200 Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* renamedc: Make a more targeted dbcheckGarming Sam2016-07-151-1/+3
| | | | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Garming Sam <garming@samba.org> Autobuild-Date(master): Fri Jul 15 13:40:40 CEST 2016 on sn-devel-144
* dbcheck.sh: Remove all the plausible stale linksGarming Sam2016-07-151-0/+6
| | | | | | | | | | This ensures the subsequent dbcheck doesn't fail. The reason these stale links occur is because they are effectively one-way links at this point we have no efficient method of checking the opposite end of a one-way link (without doing a full traversal). Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>