sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-03 01:18:10 +03:00
Code

s4:selftest: only run ad_member with AUTH_LEVEL_CONNECT_LSA=1

Browse Source 
We only want to test against
'allow dcerpc auth level connect:lsarpc = yes' once
in order to have the related code tests.
We use the ad_memeber for that special test and
use the default on the tested ADDC.

This reveals some knownfails, which will be fixed in
the next commit...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14356

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
This commit is contained in:
Stefan Metzmacher 2024-09-23 15:13:59 +02:00 committed by Andreas Schneider
parent 98d908bfd0
commit 93bd5ba609
3 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
selftest/knownfail.d/test_lsa_multi_auth_connect Normal file
View File

@ -0,0 +1 @@
^samba.tests.dcerpc.raw_protocol.samba.tests.dcerpc.raw_protocol.TestDCERPC_BIND.test_lsa_multi_auth_connect...chgdcpass

1
selftest/target/Samba4.pm
View File

@ -2208,7 +2208,6 @@ sub provision_chgdcpass($$)
my $extra_smb_conf = " my $extra_smb_conf = "
check password script = $self->{srcdir}/selftest/checkpassword_arg1.sh ${unacceptable_password} check password script = $self->{srcdir}/selftest/checkpassword_arg1.sh ${unacceptable_password}
allow dcerpc auth level connect:lsarpc = yes
dcesrv:max auth states = 8 dcesrv:max auth states = 8
drs:broken_samba_4.5_get_anc_emulation = true drs:broken_samba_4.5_get_anc_emulation = true
drs:get_tgt_support = false drs:get_tgt_support = false

21
source4/selftest/tests.py
View File

@ -1368,14 +1368,19 @@ planoldpythontestsuite(
planoldpythontestsuite("ad_dc_ntvfs", "samba.tests.dcerpc.dnsserver", extra_args=['-U"$USERNAME%$PASSWORD"']) planoldpythontestsuite("ad_dc_ntvfs", "samba.tests.dcerpc.dnsserver", extra_args=['-U"$USERNAME%$PASSWORD"'])
planoldpythontestsuite("ad_dc", "samba.tests.dcerpc.dnsserver", extra_args=['-U"$USERNAME%$PASSWORD"']) planoldpythontestsuite("ad_dc", "samba.tests.dcerpc.dnsserver", extra_args=['-U"$USERNAME%$PASSWORD"'])
for env in ["chgdcpass", "ad_member"]: planoldpythontestsuite("chgdcpass", "samba.tests.dcerpc.raw_protocol",
planoldpythontestsuite(env, "samba.tests.dcerpc.raw_protocol", environ={"MAX_NUM_AUTH": "8",
environ={"MAX_NUM_AUTH": "8", "ALLOW_BIND_AUTH_PAD": "1",
"ALLOW_BIND_AUTH_PAD": "1", "LEGACY_BIND_NACK_NO_REASON": "1",
"AUTH_LEVEL_CONNECT_LSA": "1", "USERNAME": "$DC_USERNAME",
"LEGACY_BIND_NACK_NO_REASON": "1", "PASSWORD": "$DC_PASSWORD"})
"USERNAME": "$DC_USERNAME", planoldpythontestsuite("ad_member", "samba.tests.dcerpc.raw_protocol",
"PASSWORD": "$DC_PASSWORD"}) environ={"MAX_NUM_AUTH": "8",
"ALLOW_BIND_AUTH_PAD": "1",
"AUTH_LEVEL_CONNECT_LSA": "1",
"LEGACY_BIND_NACK_NO_REASON": "1",
"USERNAME": "$DC_USERNAME",
"PASSWORD": "$DC_PASSWORD"})
if have_heimdal_support: if have_heimdal_support:
planoldpythontestsuite("ad_dc_smb1:local", "samba.tests.auth_log", extra_args=['-U"$USERNAME%$PASSWORD"'], planoldpythontestsuite("ad_dc_smb1:local", "samba.tests.auth_log", extra_args=['-U"$USERNAME%$PASSWORD"'],