sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Code

s4:torture: add a rpc.samba3.smb-reauth2 test

Browse Source 
* Open session.
* Reauth to anon.
* Open lsa pipe.
* Do lsa get username.
* Rauth to original user.
* Do lsa get username again.

expected result: the getusername works and
shows 'NT AUTHORITY\ANONYMOUS LOGON' in both calls.

Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Thu Apr 26 02:27:12 CEST 2012 on sn-devel-104
This commit is contained in:
Michael Adam 2012-04-25 16:38:56 +02:00
parent 71f88dbbb5
commit a7ffbf467d
1 changed files with 145 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

145
source4/torture/rpc/samba3rpc.c
View File

@ -3436,6 +3436,150 @@ done:
return ret;
}
/**
* Test smb reauthentication while rpc pipe is in use.
* Open a second lsa bind after reauth to anon.
* Do lsa getusername on that second bind.
*/
static bool torture_rpc_smb_reauth2(struct torture_context *torture)
{
TALLOC_CTX *mem_ctx;
NTSTATUS status;
bool ret = false;
struct smbcli_state *cli;
struct smbcli_options options;
struct smbcli_session_options session_options;
struct dcerpc_pipe *lsa_pipe;
struct dcerpc_binding_handle *lsa_handle;
struct lsa_GetUserName r;
struct lsa_String *authority_name_p = NULL;
char *authority_name_saved = NULL;
struct lsa_String *account_name_p = NULL;
char *account_name_saved = NULL;
struct cli_credentials *anon_creds = NULL;
struct smb_composite_sesssetup io;
mem_ctx = talloc_init("torture_samba3_reauth");
torture_assert(torture, (mem_ctx != NULL), "talloc_init failed");
lpcfg_smbcli_options(torture->lp_ctx, &options);
lpcfg_smbcli_session_options(torture->lp_ctx, &session_options);
status = smbcli_full_connection(mem_ctx, &cli,
torture_setting_string(torture, "host", NULL),
lpcfg_smb_ports(torture->lp_ctx),
"IPC$", NULL,
lpcfg_socket_options(torture->lp_ctx),
cmdline_credentials,
lpcfg_resolve_context(torture->lp_ctx),
torture->ev, &options, &session_options,
lpcfg_gensec_settings(torture, torture->lp_ctx));
torture_assert_ntstatus_ok_goto(torture, status, ret, done,
"smbcli_full_connection failed");
/* smb re-authenticate as anonymous */
anon_creds = cli_credentials_init_anon(mem_ctx);
ZERO_STRUCT(io);
io.in.sesskey = cli->transport->negotiate.sesskey;
io.in.capabilities = cli->transport->negotiate.capabilities;
io.in.credentials = anon_creds;
io.in.workgroup = lpcfg_workgroup(torture->lp_ctx);
io.in.gensec_settings = lpcfg_gensec_settings(torture, torture->lp_ctx);
status = smb_composite_sesssetup(cli->session, &io);
torture_assert_ntstatus_ok_goto(torture, status, ret, done,
"session reauth to anon failed");
/* open the lsa pipe */
lsa_pipe = dcerpc_pipe_init(mem_ctx, torture->ev);
torture_assert_goto(torture, (lsa_pipe != NULL), ret, done,
"dcerpc_pipe_init failed");
lsa_handle = lsa_pipe->binding_handle;
status = dcerpc_pipe_open_smb(lsa_pipe, cli->tree, "\\lsarpc");
torture_assert_ntstatus_ok_goto(torture, status, ret, done,
"dcerpc_pipe_open failed");
status = dcerpc_bind_auth_none(lsa_pipe, &ndr_table_lsarpc);
torture_assert_ntstatus_ok_goto(torture, status, ret, done,
"dcerpc_bind_auth_none failed");
/* lsa getusername */
ZERO_STRUCT(r);
r.in.system_name = "\\";
r.in.account_name = &account_name_p;
r.in.authority_name = &authority_name_p;
r.out.account_name = &account_name_p;
status = dcerpc_lsa_GetUserName_r(lsa_handle, mem_ctx, &r);
authority_name_p = *r.out.authority_name;
torture_assert_ntstatus_ok_goto(torture, status, ret, done,
"GetUserName failed");
torture_assert_ntstatus_ok_goto(torture, r.out.result, ret, done,
"GetUserName failed");
torture_comment(torture, "lsa_GetUserName gave '%s\\%s'\n",
authority_name_p->string,
account_name_p->string);
account_name_saved = talloc_strdup(mem_ctx, account_name_p->string);
torture_assert_goto(torture, (account_name_saved != NULL), ret, done,
"talloc failed");
authority_name_saved = talloc_strdup(mem_ctx, authority_name_p->string);
torture_assert_goto(torture, (authority_name_saved != NULL), ret, done,
"talloc failed");
/* smb re-auth again to the original user */
ZERO_STRUCT(io);
io.in.sesskey = cli->transport->negotiate.sesskey;
io.in.capabilities = cli->transport->negotiate.capabilities;
io.in.credentials = cmdline_credentials;
io.in.workgroup = lpcfg_workgroup(torture->lp_ctx);
io.in.gensec_settings = lpcfg_gensec_settings(torture, torture->lp_ctx);
status = smb_composite_sesssetup(cli->session, &io);
torture_assert_ntstatus_ok_goto(torture, status, ret, done,
"session reauth to anon failed");
/* re-do lsa getusername after reauth */
TALLOC_FREE(authority_name_p);
TALLOC_FREE(account_name_p);
ZERO_STRUCT(r);
r.in.system_name = "\\";
r.in.account_name = &account_name_p;
r.in.authority_name = &authority_name_p;
r.out.account_name = &account_name_p;
status = dcerpc_lsa_GetUserName_r(lsa_handle, mem_ctx, &r);
authority_name_p = *r.out.authority_name;
torture_assert_ntstatus_ok_goto(torture, status, ret, done,
"GetUserName failed");
torture_assert_ntstatus_ok_goto(torture, r.out.result, ret, done,
"GetUserName failed");
torture_assert_goto(torture, (strcmp(authority_name_p->string, authority_name_saved) == 0),
ret, done, "authority_name not equal after reauth to anon");
torture_assert_goto(torture, (strcmp(account_name_p->string, account_name_saved) == 0),
ret, done, "account_name not equal after reauth to anon");
ret = true;
done:
talloc_free(mem_ctx);
return ret;
}
struct torture_suite *torture_rpc_samba3(TALLOC_CTX *mem_ctx)
{
struct torture_suite *suite = torture_suite_create(mem_ctx, "samba3");
@ -3454,6 +3598,7 @@ struct torture_suite *torture_rpc_samba3(TALLOC_CTX *mem_ctx)
torture_suite_add_simple_test(suite, "getaliasmembership-0", torture_samba3_getaliasmembership_0);
torture_suite_add_simple_test(suite, "regconfig", torture_samba3_regconfig);
torture_suite_add_simple_test(suite, "smb-reauth1", torture_rpc_smb_reauth1);
torture_suite_add_simple_test(suite, "smb-reauth2", torture_rpc_smb_reauth2);
suite->description = talloc_strdup(suite, "samba3 DCERPC interface tests");