sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-11 16:58:40 +03:00
Code
samba-mirror/source4/script/tests/mktestsetup.sh

449 lines
11 KiB
Bash
Raw Normal View History

r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
#!/bin/sh
if [ $# -lt 1 ]
then
echo "$0 PREFIX"
exit 1
fi
PREFIX=$1
if test -z "$TLS_ENABLED"; then
TLS_ENABLED=false
fi
r17527: Don't duplicate the entire test setup just to allow testing of the new ldb-backed shares configuration. Andrew Bartlett (This used to be commit 59f86d80841e39613260094b2c848f416a035322)
2006-08-14 01:14:32 +00:00
if test -z "$SHARE_BACKEND"; then
SHARE_BACKEND=classic
fi
r19603: Make it easier to control the debug level of smbd. Ensure that we don't accept kerberos logins without a PAC (to ensure we actually produce a PAC in the KDC) Andrew Bartlett (This used to be commit 5fda92783f3d53e4a832dbbea678b5bd16f315fd)
2006-11-07 04:26:45 +00:00
if test -z "$SMBD_LOGLEVEL"; then
SMBD_LOGLEVEL=1
fi
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
DOMAIN=SAMBADOMAIN
USERNAME=administrator
REALM=SAMBA.EXAMPLE.COM
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
DNSNAME="samba.example.com"
BASEDN="dc=samba,dc=example,dc=com"
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
PASSWORD=penguin
r18828: Export some more useful environment varibles, particularly for use in 'make testenv' Andrew Bartlett (This used to be commit 5215b834bd08ae01b055aed0f2dc074b58996709)
2006-09-22 19:43:08 +00:00
AUTH="-U$USERNAME%$PASSWORD"
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
SRCDIR=`pwd`
ROOT=$USER
SERVER=localhost
NETBIOSNAME=localtest
if test -z "$ROOT"; then
ROOT=$LOGNAME
fi
if test -z "$ROOT"; then
ROOT=`whoami`
fi
oldpwd=`pwd`
srcdir=`dirname $0`/../..
mkdir -p $PREFIX || exit $?
cd $PREFIX
PREFIX_ABS=`pwd`
export PREFIX_ABS
cd $oldpwd
TEST_DATA_PREFIX=$PREFIX_ABS
export TEST_DATA_PREFIX
TMPDIR=$PREFIX_ABS/tmp
ETCDIR=$PREFIX_ABS/etc
PIDDIR=$PREFIX_ABS/pid
CONFFILE=$ETCDIR/smb.conf
KRB5_CONFIG=$ETCDIR/krb5.conf
PRIVATEDIR=$PREFIX_ABS/private
NCALRPCDIR=$PREFIX_ABS/ncalrpc
LOCKDIR=$PREFIX_ABS/lockdir
TLSDIR=$PRIVATEDIR/tls
r17379: Pre-generate DH parameters, to avoid doing this at runtime in our testsuite. Andrew Bartlett (This used to be commit 23314c3953676124a2ad06e8b3a3b297c11f2800)
2006-08-03 08:02:54 +00:00
DHFILE=$TLSDIR/dhparms.pem
r17394: Pregenerate all the files for TLS. Make the 'make test' startup *much* faster. Andrew Bartlett (This used to be commit c366c906623168795846899174a8fdaa7bc14808)
2006-08-04 04:43:35 +00:00
CAFILE=$TLSDIR/ca.pem
CERTFILE=$TLSDIR/cert.pem
KEYFILE=$TLSDIR/key.pem
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
WINBINDD_SOCKET_DIR=$PREFIX_ABS/winbind_socket
CONFIGURATION="--configfile=$CONFFILE"
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
LDAPDIR=$PREFIX_ABS/ldap
SLAPD_CONF=$LDAPDIR/slapd.conf
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
export CONFIGURATION
export CONFFILE
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
export SLAPD_CONF
export PIDDIR
r18828: Export some more useful environment varibles, particularly for use in 'make testenv' Andrew Bartlett (This used to be commit 5215b834bd08ae01b055aed0f2dc074b58996709)
2006-09-22 19:43:08 +00:00
export AUTH
r18829: Print a nice welcome message when we enter the test environment. Andrew Bartlett (This used to be commit 77f1c15d92d13f6e4f278d9d4b0f15fab66b4bbc)
2006-09-22 20:00:49 +00:00
export SERVER
export NETBIOSNAME
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
rm -rf $PREFIX/*
r18979: With these extra indexes (also added for the normal case) and a DB_CONFIG file, we now get reasonable enought performance to pass 'make test' against OpenLDAP. We do have to double the maximum runtime for the torture client however. Andrew Bartlett (This used to be commit 5b3c8cc036c1180c9e96d9aaacd3f2e0a83460e5)
2006-09-28 17:08:17 +00:00
mkdir -p $PRIVATEDIR $ETCDIR $PIDDIR $NCALRPCDIR $LOCKDIR $TMPDIR $TLSDIR $LDAPDIR/db $LDAPDIR/db/bdb-logs $LDAPDIR/db/tmp
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
r18377: disable native iconv with valgrind (This used to be commit d1ceb79d9d10a3fd7bdba935ef2d12db346051f4)
2006-09-11 09:21:58 +00:00
if [ -z "$VALGRIND" ]; then
nativeiconv="true"
else
nativeiconv="false"
fi
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
cat >$CONFFILE<<EOF
[global]
r18377: disable native iconv with valgrind (This used to be commit d1ceb79d9d10a3fd7bdba935ef2d12db346051f4)
2006-09-11 09:21:58 +00:00
iconv:native = $nativeiconv
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
netbios name = $NETBIOSNAME
netbios aliases = $SERVER
workgroup = $DOMAIN
realm = $REALM
private dir = $PRIVATEDIR
pid directory = $PIDDIR
ncalrpc dir = $NCALRPCDIR
lock dir = $LOCKDIR
r17527: Don't duplicate the entire test setup just to allow testing of the new ldb-backed shares configuration. Andrew Bartlett (This used to be commit 59f86d80841e39613260094b2c848f416a035322)
2006-08-14 01:14:32 +00:00
share backend = $SHARE_BACKEND
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
setup directory = $SRCDIR/setup
js include = $SRCDIR/scripting/libjs
winbindd socket directory = $WINBINDD_SOCKET_DIR
name resolve order = bcast
interfaces = 127.0.0.1/8
tls enabled = $TLS_ENABLED
r17379: Pre-generate DH parameters, to avoid doing this at runtime in our testsuite. Andrew Bartlett (This used to be commit 23314c3953676124a2ad06e8b3a3b297c11f2800)
2006-08-03 08:02:54 +00:00
tls dh params file = $DHFILE
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
panic action = $SRCDIR/script/gdb_backtrace %PID% %PROG%
wins support = yes
r20149: Remove the smb.conf distinction between PDC and BDC. Now the correct way to setup a Samba4 DC is to set 'server role = domain controller'. We use the fSMORoleOwner attribute in the base DN to determine the PDC. This patch is quite large, as I have corrected a number of places that assumed taht we are always the PDC, or that used the smb.conf lp_server_role() to determine that. Also included is a warning fix in the SAMR code, where the IDL has seperated a couple of types for group display enumeration. We also now use the ldb database to determine if we should run the global catalog service. In the near future, I will complete the DRSUAPI DsGetDomainControllerInfo server-side on the same basis. Andrew Bartlett (This used to be commit 67d8365e831adf3eaecd8b34dcc481fc82565893)
2006-12-13 11:19:51 +00:00
server role = domain controller
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
max xmit = 32K
server max protocol = SMB2
r18372: don't use the system inotify until in the build farm until we work out how to work around a problem with it giving unpredictable orderings in renames (sometimes target is first event, sometimes source) (This used to be commit 066e3b51b1ca038023e53a978e1d2e706cd3d8a6)
2006-09-11 07:59:02 +00:00
notify:inotify = false
r18582: disable synchronous ldb in the build farm. Some hosts have very slow filesystems and the tests are taking more than 1.5 hours. We will still be testing the sync code paths, as the ldb tests still run synchronous, but doing all of our other tests synchronously just costs too much time. (This used to be commit ce2baf7385e019383ffb292bd30e77c31eecbbef)
2006-09-16 15:51:41 +00:00
ldb:nosync = true
r19343: Add support for external scripts/binaries that write results using the 'subunit' protocol. This allows us to easily plug EJS scripts or binaries that can't depend on -ltorture into smbtorture. The protocol is very simple: - write "comments" to stderr Example output on stdout: test: foo success: foo test: bar success: bar test: blah failure: blah [ dummy.c:30: Expression 1 != 2 failed! ] test: blie skip: blie [ Iconv support not built in ] I've already converted the talloc testsuite. (This used to be commit e1742c14a247fabba969f8698108e73997d3f420)
2006-10-16 20:05:19 +00:00
torture:subunitdir = $SRCDIR/bin/torture
r19680: Allow specifying basedir for test data. Create temporary directories in base directory. (This used to be commit f111feb1d2b82a9ec3a8b6fbcdbe297bf11edc42)
2006-11-12 03:40:38 +00:00
torture:basedir = $TEST_DATA_PREFIX
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
r19343: Add support for external scripts/binaries that write results using the 'subunit' protocol. This allows us to easily plug EJS scripts or binaries that can't depend on -ltorture into smbtorture. The protocol is very simple: - write "comments" to stderr Example output on stdout: test: foo success: foo test: bar success: bar test: blah failure: blah [ dummy.c:30: Expression 1 != 2 failed! ] test: blie skip: blie [ Iconv support not built in ] I've already converted the talloc testsuite. (This used to be commit e1742c14a247fabba969f8698108e73997d3f420)
2006-10-16 20:05:19 +00:00
system:anonymous = true
r19603: Make it easier to control the debug level of smbd. Ensure that we don't accept kerberos logins without a PAC (to ensure we actually produce a PAC in the KDC) Andrew Bartlett (This used to be commit 5fda92783f3d53e4a832dbbea678b5bd16f315fd)
2006-11-07 04:26:45 +00:00
#We don't want to pass our self-tests if the PAC code is wrong
gensec:require_pac = true
log level = $SMBD_LOGLEVEL
r18459: Set access to test LDAP server as system to anonymous, but also note the correct authz-regexp for future use. Fail to test if slapd fails and TEST_LDAP=yes (This used to be commit 1daf4e7bd47df4f127447ab9b5d583bbe7b2a10a)
2006-09-13 10:26:32 +00:00
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
[tmp]
path = $TMPDIR
read only = no
ntvfs handler = posix
posix:sharedelay = 100000
posix:eadb = $LOCKDIR/eadb.tdb
[cifs]
read only = no
ntvfs handler = cifs
cifs:server = $SERVER
cifs:user = $USERNAME
cifs:password = $PASSWORD
cifs:domain = $DOMAIN
cifs:share = tmp
r18564: update for cifs unix/posix extensions stub version to build and beginnings of smbtorture test for it (This used to be commit 57f56957176ca04f3abb579b557aade71f8d361d)
2006-09-15 19:24:38 +00:00
r18569: add really simple testing of the 'simple' ntvfs backend, so we know when it breaks. It isn't much good as a template for developers to use unless it works :-) (This used to be commit 262bee07dcb140b413d5ae5a8a754b3e57235323)
2006-09-15 21:05:03 +00:00
[simple]
path = $TMPDIR
read only = no
ntvfs handler = simple
r18564: update for cifs unix/posix extensions stub version to build and beginnings of smbtorture test for it (This used to be commit 57f56957176ca04f3abb579b557aade71f8d361d)
2006-09-15 19:24:38 +00:00
[cifsposixtestshare]
read only = no
r18570: Fix up function names in cifs unix/posix extensions backend. Enable tiny quick test for torture for them (This used to be commit 64062d16a2cc215af320eb30827887eb2531e3b0)
2006-09-15 21:39:38 +00:00
ntvfs handler = cifsposix
r18564: update for cifs unix/posix extensions stub version to build and beginnings of smbtorture test for it (This used to be commit 57f56957176ca04f3abb579b557aade71f8d361d)
2006-09-15 19:24:38 +00:00
path = $TMPDIR
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
EOF
r17527: Don't duplicate the entire test setup just to allow testing of the new ldb-backed shares configuration. Andrew Bartlett (This used to be commit 59f86d80841e39613260094b2c848f416a035322)
2006-08-14 01:14:32 +00:00
## Override default srahes_config.ldb file
rm -f $PRIVATEDIR/share.ldb
cat >$PRIVATEDIR/share.ldif<<EOF
### Shares basedn
dn: @INDEXLIST
@IDXATTR: name
dn: @ATTRIBUTES
cn: CASE_INSENSITIVE
dc: CASE_INSENSITIVE
name: CASE_INSENSITIVE
dn: CASE_INSENSITIVE
objectClass: CASE_INSENSITIVE
dn: CN=Shares
objectClass: top
objectClass: organizationalUnit
cn: Shares
### Default IPC$ Share
dn: CN=IPC$,CN=Shares
objectClass: top
objectClass: share
cn: IPC$
name: IPC$
type: IPC
path: /tmp
comment: Remote IPC
max-connections: -1
available: True
readonly: True
browseable: False
ntvfs-handler: default
### Default ADMIN$ Share
dn: CN=ADMIN$,CN=Shares
objectClass: top
objectClass: share
cn: ADMIN$
name: ADMIN$
type: DISK
path: /tmp
comment: Remote Admin
max-connections: -1
available: True
readonly: True
browseable: False
ntvfs-handler: default
dn: CN=tmp,CN=Shares
objectClass: top
objectClass: share
cn: tmp
name: tmp
type: DISK
path: $TMPDIR
comment: Temp Dir for Tests
readonly: False
ntvfs-handler: posix
posix-sharedelay: 100000
posix-eadb: $LOCKDIR/eadb.tdb
dn: CN=cifs,CN=Shares
objectClass: top
objectClass: share
cn: cifs
name: cifs
type: DISK
readonly: False
ntvfs-handler: cifs
cifs-server: $SERVER
cifs-user: $USERNAME
cifs-password: $PASSWORD
cifs-domain: $DOMAIN
cifs-share: tmp
EOF
$srcdir/bin/ldbadd -H $PRIVATEDIR/share.ldb < $PRIVATEDIR/share.ldif >/dev/null || exit 1
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
cat >$KRB5_CONFIG<<EOF
[libdefaults]
default_realm = SAMBA.EXAMPLE.COM
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
forwardable = yes
[realms]
SAMBA.EXAMPLE.COM = {
r18290: finally worked out why we were failing tests on solaris. It has kerberos on port 750 in /etc/services! Work around this by using 127.0.0.1:88 in the krb5.conf (This used to be commit 9fb91702fd6c080d87ea60c60e0591636d1a6441)
2006-09-09 07:51:30 +00:00
kdc = 127.0.0.1:88
admin_server = 127.0.0.1:88
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
default_domain = samba.example.com
}
[domain_realm]
.samba.example.com = SAMBA.EXAMPLE.COM
EOF
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
export KRB5_CONFIG
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
r17379: Pre-generate DH parameters, to avoid doing this at runtime in our testsuite. Andrew Bartlett (This used to be commit 23314c3953676124a2ad06e8b3a3b297c11f2800)
2006-08-03 08:02:54 +00:00
cat >$DHFILE<<EOF
-----BEGIN DH PARAMETERS-----
MGYCYQC/eWD2xkb7uELmqLi+ygPMKyVcpHUo2yCluwnbPutEueuxrG/Cys8j8wLO
svCN/jYNyR2NszOmg7ZWcOC/4z/4pWDVPUZr8qrkhj5MRKJc52MncfaDglvEdJrv
YX70obsCAQI=
-----END DH PARAMETERS-----
EOF
r17394: Pregenerate all the files for TLS. Make the 'make test' startup *much* faster. Andrew Bartlett (This used to be commit c366c906623168795846899174a8fdaa7bc14808)
2006-08-04 04:43:35 +00:00
cat >$CAFILE<<EOF
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
EOF
cat >$CERTFILE<<EOF
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
EOF
cat >$KEYFILE<<EOF
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
EOF
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
cat >$SLAPD_CONF <<EOF
loglevel 0
include $LDAPDIR/ad.schema
pidfile $PIDDIR/slapd.pid
argsfile $LDAPDIR/slapd.args
r18246: Let our openldap slapd.conf include the magic to have DIGEST-MD5 on the server-side work. (This used to be commit 73d87cce7c5e33f73d6a63379af3586f543eb372)
2006-09-08 04:35:00 +00:00
sasl-realm $DNSNAME
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
access to * by * write
r18459: Set access to test LDAP server as system to anonymous, but also note the correct authz-regexp for future use. Fail to test if slapd fails and TEST_LDAP=yes (This used to be commit 1daf4e7bd47df4f127447ab9b5d583bbe7b2a10a)
2006-09-13 10:26:32 +00:00
allow update_anon
r18246: Let our openldap slapd.conf include the magic to have DIGEST-MD5 on the server-side work. (This used to be commit 73d87cce7c5e33f73d6a63379af3586f543eb372)
2006-09-08 04:35:00 +00:00
authz-regexp
uid=([^,]*),cn=$DNSNAME,cn=digest-md5,cn=auth
r18459: Set access to test LDAP server as system to anonymous, but also note the correct authz-regexp for future use. Fail to test if slapd fails and TEST_LDAP=yes (This used to be commit 1daf4e7bd47df4f127447ab9b5d583bbe7b2a10a)
2006-09-13 10:26:32 +00:00
ldap:///$BASEDN??sub?(samAccountName=\$1)
r18246: Let our openldap slapd.conf include the magic to have DIGEST-MD5 on the server-side work. (This used to be commit 73d87cce7c5e33f73d6a63379af3586f543eb372)
2006-09-08 04:35:00 +00:00
authz-regexp
uid=([^,]*),cn=([^,]*),cn=digest-md5,cn=auth
r18459: Set access to test LDAP server as system to anonymous, but also note the correct authz-regexp for future use. Fail to test if slapd fails and TEST_LDAP=yes (This used to be commit 1daf4e7bd47df4f127447ab9b5d583bbe7b2a10a)
2006-09-13 10:26:32 +00:00
ldap:///$BASEDN??sub?(samAccountName=\$1)
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
include $LDAPDIR/modules.conf
defaultsearchbase "$BASEDN"
backend bdb
database bdb
suffix "$BASEDN"
r18246: Let our openldap slapd.conf include the magic to have DIGEST-MD5 on the server-side work. (This used to be commit 73d87cce7c5e33f73d6a63379af3586f543eb372)
2006-09-08 04:35:00 +00:00
rootdn "cn=Manager,$BASEDN"
rootpw $PASSWORD
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
directory $LDAPDIR/db
index objectClass eq
index samAccountName eq
r18828: Export some more useful environment varibles, particularly for use in 'make testenv' Andrew Bartlett (This used to be commit 5215b834bd08ae01b055aed0f2dc074b58996709)
2006-09-22 19:43:08 +00:00
index name eq
index objectSid eq
index objectCategory eq
index member eq
index uidNumber eq
index gidNumber eq
index unixName eq
index privilege eq
r18979: With these extra indexes (also added for the normal case) and a DB_CONFIG file, we now get reasonable enought performance to pass 'make test' against OpenLDAP. We do have to double the maximum runtime for the torture client however. Andrew Bartlett (This used to be commit 5b3c8cc036c1180c9e96d9aaacd3f2e0a83460e5)
2006-09-28 17:08:17 +00:00
index nCName eq pres
r18828: Export some more useful environment varibles, particularly for use in 'make testenv' Andrew Bartlett (This used to be commit 5215b834bd08ae01b055aed0f2dc074b58996709)
2006-09-22 19:43:08 +00:00
index lDAPDisplayName eq
index subClassOf eq
r18979: With these extra indexes (also added for the normal case) and a DB_CONFIG file, we now get reasonable enought performance to pass 'make test' against OpenLDAP. We do have to double the maximum runtime for the torture client however. Andrew Bartlett (This used to be commit 5b3c8cc036c1180c9e96d9aaacd3f2e0a83460e5)
2006-09-28 17:08:17 +00:00
index dnsRoot eq
index nETBIOSName eq pres
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
r18781: Move the usnCreated and usnChanged handling around again. This moves these attributes from objectguid into an optional backend (objectguid), used by ltdb. For OpenLDAP, the entryUUID module converts entryCSN into usnChanged. This also changes the sequence number API, and uses 'time based' sequence numbers, when an LDAP or similar backend is detected. To assist this, we also store the last modified time in the TDB, whenever we change a value. Andrew Bartlett (This used to be commit 72858f859483c0c532dddb2c146d6bd7b9be5072)
2006-09-21 06:44:12 +00:00
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
EOF
r18979: With these extra indexes (also added for the normal case) and a DB_CONFIG file, we now get reasonable enought performance to pass 'make test' against OpenLDAP. We do have to double the maximum runtime for the torture client however. Andrew Bartlett (This used to be commit 5b3c8cc036c1180c9e96d9aaacd3f2e0a83460e5)
2006-09-28 17:08:17 +00:00
cat > $LDAPDIR/db/DB_CONFIG <<EOF
#
# Set the database in memory cache size.
#
set_cachesize 0 524288 0
#
# Set database flags (this is a test environment, we don't need to fsync()).
#
set_flags DB_TXN_NOSYNC
#
# Set log values.
#
set_lg_regionmax 104857
set_lg_max 1048576
set_lg_bsize 209715
set_lg_dir $LDAPDIR/db/bdb-logs
#
# Set temporary file creation directory.
#
set_tmp_dir $LDAPDIR/db/tmp
EOF
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
PROVISION_OPTIONS="$CONFIGURATION --host-name=$NETBIOSNAME --host-ip=127.0.0.1"
PROVISION_OPTIONS="$PROVISION_OPTIONS --quiet --domain $DOMAIN --realm $REALM"
PROVISION_OPTIONS="$PROVISION_OPTIONS --adminpass $PASSWORD --root=$ROOT"
r18246: Let our openldap slapd.conf include the magic to have DIGEST-MD5 on the server-side work. (This used to be commit 73d87cce7c5e33f73d6a63379af3586f543eb372)
2006-09-08 04:35:00 +00:00
PROVISION_OPTIONS="$PROVISION_OPTIONS --simple-bind-dn=cn=Manager,$BASEDN --password=$PASSWORD --root=$ROOT"
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
$srcdir/bin/smbscript $srcdir/setup/provision $PROVISION_OPTIONS
LDAPI="ldapi://$LDAPDIR/ldapi"
LDAPI_ESCAPE="ldapi://"`echo $LDAPDIR/ldapi | sed 's|/|%2F|g'`
export LDAPI
export LDAPI_ESCAPE
#This uses the provision we just did, to read out the schema
$srcdir/bin/ad2oLschema $CONFIGURATION -H $PRIVATEDIR/sam.ldb -I $srcdir/setup/schema-map-openldap-2.3 -O $LDAPDIR/ad.schema
#Now create an LDAP baseDN
$srcdir/bin/smbscript $srcdir/setup/provision $PROVISION_OPTIONS --ldap-base
OLDPATH=$PATH
PATH=/usr/local/sbin:/usr/sbin:/sbin:$PATH
export PATH
MODCONF=$LDAPDIR/modules.conf
rm -f $MODCONF
touch $MODCONF
r18247: more shell portability fixes (This used to be commit d9ddfdf9e86295224dd42c0ab1aa954111ede588)
2006-09-08 04:35:41 +00:00
slaptest -u -f $SLAPD_CONF > /dev/null 2>&1 || {
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
echo "enabling slapd modules"
cat > $MODCONF <<EOF
modulepath /usr/lib/ldap
moduleload back_bdb
EOF
r18247: more shell portability fixes (This used to be commit d9ddfdf9e86295224dd42c0ab1aa954111ede588)
2006-09-08 04:35:41 +00:00
}
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
if slaptest -u -f $SLAPD_CONF; then
r18247: more shell portability fixes (This used to be commit d9ddfdf9e86295224dd42c0ab1aa954111ede588)
2006-09-08 04:35:41 +00:00
slapadd -f $SLAPD_CONF < $PRIVATEDIR/$DNSNAME.ldif || {
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
echo "slapadd failed"
r18247: more shell portability fixes (This used to be commit d9ddfdf9e86295224dd42c0ab1aa954111ede588)
2006-09-08 04:35:41 +00:00
}
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
r18247: more shell portability fixes (This used to be commit d9ddfdf9e86295224dd42c0ab1aa954111ede588)
2006-09-08 04:35:41 +00:00
slaptest -f $SLAPD_CONF || {
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
echo "slaptest after database load failed"
r18247: more shell portability fixes (This used to be commit d9ddfdf9e86295224dd42c0ab1aa954111ede588)
2006-09-08 04:35:41 +00:00
}
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
fi
PATH=$OLDPATH
export PATH
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
cat >$PRIVATEDIR/wins_config.ldif<<EOF
r18917: having 255 virtual interfaces available in socket wrapper means we stat() 240 files that don't exist on every broadcast. That's a bit excessive! reduce max virtual interfaces to 16 (This used to be commit 3c4100027c7d3806a2021cb4d70ec6adf9dd2dc6)
2006-09-26 11:31:14 +00:00
dn: name=TORTURE_6,CN=PARTNERS
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
objectClass: wreplPartner
r18917: having 255 virtual interfaces available in socket wrapper means we stat() 240 files that don't exist on every broadcast. That's a bit excessive! reduce max virtual interfaces to 16 (This used to be commit 3c4100027c7d3806a2021cb4d70ec6adf9dd2dc6)
2006-09-26 11:31:14 +00:00
name: TORTURE_6
address: 127.0.0.6
r16522: Move code to create the test data out of selftest.sh. (This used to be commit 2c601df23f3390954bf77918e198b1d027e43b24)
2006-06-26 17:43:39 +00:00
pullInterval: 0
pushChangeCount: 0
type: 0x3
EOF
$srcdir/bin/ldbadd -H $PRIVATEDIR/wins_config.ldb < $PRIVATEDIR/wins_config.ldif >/dev/null || exit 1
r18023: Add support infrusructure for testing against an OpenLDAP server. This will give a bit more noise on platforms without OpenLDAP (when we run the slaptest check), but it shouldn't be too bad. We don't start the LDAP server or re-provision unless LDAP_TEST is set. Andrew Bartlett (This used to be commit 999d989131f41d0218ec05595c9761aff5bbf5fa)
2006-09-04 00:32:46 +00:00
Copy Permalink