1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

120 Commits

Author SHA1 Message Date
Dirk Godau
6ded4f5230 drsuapi tests for DsBind with w2k8
These are marked as known_fail pending the next patch ("Extend DsBind
and DsGetDomainControllerInfo to work with w2k8").

Signed-off-by: Dirk Godau <voidswitch@gmail.com>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
2016-05-26 02:44:31 +02:00
Andreas Schneider
c3aaf6492f waf: Only build the backupkey rpc test with AD DC enabled
Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
2016-01-22 17:47:21 +01:00
Andrew Bartlett
71dcc76b70 build: Enable NTVFS file server to be omitted
We now only build it by default with --enable-sefltest, or otherwise
if requested.

The NTVFS file server still has features not present in the smbd file
server, such as a CIFS/SMB proxy, and a radically different design,
but it is also not undergoing any ongoing development so this keeps it
in a safe state for care and maintaince, with less of a security risk
if such an issue were to come up.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
2015-10-23 22:27:30 +02:00
Andreas Schneider
c5d91e0e0f s4-torture: Make the backupkey test as a noop with MIT Kerberos.
The test is planned but will be skipped in the MIT case this way. We
need to rewrite the test using a proper cryto/tls library.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
2015-07-17 01:38:15 +02:00
Günther Deschner
fbd1c24506 s4-torture: add witness torture rpc testsuite.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2015-04-13 13:08:12 +02:00
Günther Deschner
89a036f359 s4-torture: add clusapi torture test.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2015-03-13 23:58:07 +01:00
Andreas Schneider
6e5debf33b torture: Add netr_setPassword(2) schannel test.
Thanks to Florian Weimer <fweimer@redhat.com> for the help to write
this torture test.

Pair-Programmed-With: Guenther Deschner <gd@samba.org>
Signed-off-by: Andreas Schneider <asn@samba.org>
Signed-off-by: Guenther Deschner <gd@samba.org>

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon Feb 23 20:01:01 CET 2015 on sn-devel-104
2015-02-23 20:01:01 +01:00
Stefan Metzmacher
495a76b9f6 s4:torture/rpc: remove bogus rpc.multibind test
We can later add a more useful test that tests
security context multiplexing correctly.

And another one that demonstrates that only DCERPC_BIND
must be the first (and only the first) PDU on a connection.
Otherwise DCERPC_ALTER_CONTEXT is used.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2014-03-25 00:45:28 +01:00
Stefan Metzmacher
870a06aadd s4:torture/rpc: make use of dcerpc_binding_set_*() in torture_rpc_connection_transport()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
2014-02-13 11:54:15 +01:00
Günther Deschner
f80d56a1a0 s4-torture: No need to disable rpc.spoolss.win test when compiled with MIT kerberos.
Guenther

Signed-off-by: Günther Deschner <gd@samba.org>

Reviewed-by: David Disseldorp <ddiss@samba.org>

Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Mon May 20 20:35:33 CEST 2013 on sn-devel-104
2013-05-20 20:35:33 +02:00
Günther Deschner
f22efd402a s4-torture: move samr_ValidatePassword test out of main samr test.
Makes it easier to call with ncacn_ip_tcp transport (Windows does not allow
other transports).

Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2012-12-12 11:29:33 +01:00
David Disseldorp
53c62bca2f s4-torture: fsrvp test suite
Covers most operations defined by the File Server Remote VSS Protocol.
2012-06-08 13:34:31 +02:00
Alexander Bokovoy
23aac2039d waf: support --without-ad-dc for Heimdal (embedded and system) as well
--without-ad-dc was hardwired to mean --with-system-mitkrb5. With this change
it also possible to build source3/ code and source4/ client side without
building AD DC functionality using Heimdal (embedded or system).
2012-06-07 16:08:02 +03:00
Alexander Bokovoy
2ddf89a2bc Introduce system MIT krb5 build with --with-system-mitkrb5 option.
System MIT krb5 build also enabled by specifying --without-ad-dc

When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level
configure in WAF build we are trying to detect and use system-wide MIT krb5
libraries. As result, Samba 4 DC functionality will be disabled due to the fact
that it is currently impossible to implement embedded KDC server with MIT krb5.

Thus, --with-system-mitkrb5/--without-ad-dc build will only produce
  * Samba 4 client libraries and their Python bindings
  * Samba 3 server (smbd, nmbd, winbindd from source3/)
  * Samba 3 client libraries

In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture.
This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
2012-05-23 17:51:50 +03:00
Alexander Bokovoy
4875a12ab8 Avoid using Heimdal-specific tests in MIT build 2012-05-04 16:51:29 +02:00
Andreas Schneider
4186ef9560 s4-torture: Add a samr privilege check.
This is the first part which checks if a deleted user is propagated
correctly to all daemons and caches with user information are emtpy.
2011-10-27 17:09:50 +02:00
Andrew Bartlett
907cdb5de7 s4-modules Remove lp_ctx from init functions that no longer need it
Now that we don't allow the smb.conf to change the modules dir, many
functions that simply load modules or initialise a subsytem that may
load modules no longer need an lp_ctx.

Andrew Bartlett
2011-06-06 17:37:51 +10:00
Matthieu Patou
56b1cff70e s4 torture: add new rpc torture tests for backup key remote protocol
Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Sat Feb  5 13:01:42 CET 2011 on sn-devel-104
2011-02-05 13:01:42 +01:00
Jelmer Vernooij
35fbc7bbda s4-smbtorture: Make test names lowercase and dot-separated.
This is consistent with the test names used by selftest, should
make the names less confusing and easier to integrate with other tools.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104
2010-12-11 04:16:13 +01:00
Andrew Bartlett
41999761f1 s4-torture Add tests for DES-only accounts PAC behaviour/validation.
Previously we didn't support DES-only in a Samba4 domain.  This is
important for some legacy systems that have not yet migrated from this
weak crypto.

Andrew Bartlett
2010-11-02 22:00:54 +11:00
Sumit Bose
896f3c8a49 s4-smbtorture: Added a torture test for forest trusts
Signed-off-by: Günther Deschner <gd@samba.org>
2010-08-25 13:48:22 +02:00
James Peach
21fe753303 smbtorture: Ensure that the RPC setup returns correct status. 2010-08-17 20:19:17 -07:00
Kamen Mazdrashki
c30f9bd734 s4-test: Move RPC-DSSYNC test in DRS-RPC test suite 2010-08-11 00:18:14 +03:00
Günther Deschner
595c5a2498 s4-smbtorture: add very simple RPC-BIND testsuite.
Guenther
2010-07-14 01:34:48 +02:00
Günther Deschner
e89502e0f5 s4-smbtorture: add RPC-SPOOLSS-ACCESS.
This test creates

- a user
- a user with BUILTIN\Administrators membership
- a user with BUILTIN\Print Operators membership
- a user with SePrintOperatorPrivilege (if available)
- a user with full access in security descriptor

and checks what access rights are granted in spoolss_OpenPrinterEx.

Guenther
2010-06-05 00:35:09 +02:00
Günther Deschner
bb4693d15e s4-smbtorture: completely rework RPC-SPOOLSS-PRINTER.
This is now a child testsuite to RPC-SPOOLSS. You can call simple tests via
RPC-SPOOLSS-{addprinter,addprinterex}-testname.

Guenther
2010-06-04 14:24:24 +02:00
Günther Deschner
e65164ff48 s4-smbtorture: convert RPC-SPOOLSS into a torture suite.
Guenther
2010-06-03 18:31:23 +02:00
Günther Deschner
29775e39b1 s4-smbtorture: add RPC-SPOOLSS-DRIVER test.
Guenther
2010-04-23 02:16:09 +02:00
Stefan Metzmacher
e1e2195a4a s4:torture/rpc: rename rpc.h => torture_rpc.h
The reason for this is that some systems include
<rpc/rpc.h> from within system headers. HP-UX 11.00
does so somewhere deep inside of <shadow.h>.

For torture/winbind/struct_based.c <rpc/rpc.h> resolves
to torture/rpc/rpc.h and breaks the build.

metze
2010-04-14 20:27:11 +02:00
Günther Deschner
3cb56942ed s4-smbtorture: rework RPC-DFS test a bit.
Guenther
2010-03-19 22:46:16 +01:00
Günther Deschner
f5ab6fd788 s4-smbtorture: put all RPC-SAMB3-X torture tests into their own torture_suite.
Guenther
2010-03-19 20:23:33 +01:00
Michael Adam
9764db806f torture: add new test RPC-SAMR-PASSWORDS-LOCKOUT
This tests account lockout features.
Windows 2003r2 and Windows 2008r2 survice this test.

Note: Windows does not set the ACB_AUTOLOCK account flag when it
locks out an account.
One thing that could/should be added to this test is a check of
the lockout time property.

Michael
2010-01-20 17:32:58 +01:00
Erick Nogueira do Nascimento
48bdf3e608 s4-drs: torture test for DsGetReplInfo() (RPC-DSGETINFO test).
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-16 14:10:41 +11:00
Günther Deschner
a744dbcf2b s4-smbtorture: add RPC-SAMR-PASSWORDS-BADPWDCOUNT torture test.
This test checks the behavior (since w2k3 sp1) of the badPwdCount samr attribute
in relation to password history and successfull and unsucessful netlogon
samlogons.

Michael, please check. This should help verifiying Bug #4347.

Guenther
2010-01-12 12:09:47 +01:00
Volker Lendecke
4a19adadcc smbtorture4: Add rpc-samba3-getaliasmembership-0 2009-12-15 12:28:16 -08:00
Kamen Mazdrashki
b9e262c512 s4/drs(tort): Convert DSSYNC test to a test case fixture
Now it should be much more clear why and where a test
in DSSYNC test case has failed.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-11-17 10:47:16 +11:00
Günther Deschner
e9c6984cb6 s4-smbtorture: re-arrange netlogon LogonControl test.
The LogonControl tests now are split out to a new RPC-NETLOGON-ADMIN test that
tests the behaviour of that call when called by user, dc or workstation.

Guenther
2009-11-09 17:36:53 +01:00
Andrew Tridgell
84d0047377 s4-torture: ran minimal_includes.pl over source4/torture
This reduces compile time somewhat.
2009-10-20 16:04:46 +11:00
Kamen Mazdrashki
bb6fda8a9a s4/tort: RPC-DRSUAPI test case refactored to match torture architecture 2009-09-11 11:53:18 +10:00
Kamen Mazdrashki
2904034410 tort: RPC-CRACKNAMES test case refactored 2009-09-08 22:44:50 +10:00
Günther Deschner
46184692ad s4-smbtorture: add RPC-NETLOGON-S3 to test samba3 netlogon server.
Guenther
2009-08-26 23:04:18 +02:00
Günther Deschner
47eb061b53 s4-smbtorture: move all privilege tests to RPC-LSA-PRIVILEGES.
Guenther
2009-07-16 10:03:12 +02:00
Günther Deschner
29c3a277e1 s4-smbtorture: move all trusted domain tests to RPC-LSA-TRUSTED-DOMAINS.
Guenther
2009-07-16 10:03:12 +02:00
Günther Deschner
b6fb8cf5f3 s4-smbtorture: add RPC-SPOOLSS-PRINTER test.
Guenther
2009-07-14 23:03:58 +02:00
Günther Deschner
50bb4bcc5b s4-smbtorture: add RPC-SAMR-MACHINE-AUTH test.
This test talks to a DC as a joined workstation member - in the same way
winbindd does, in particular the calls used in this test's query pattern
will all request for SEC_FLAG_MAXIMUM_ALLOWED access_mask
(which pretty much all of samba's client code does as well).

In fact this test verifies that winbind can correctly talk to a samba dc using
samr dcerpc calls.

Guenther
2009-06-29 14:40:08 +02:00
Günther Deschner
ec5c83c0db s4-smbtorture: add torture_suite_add_machine_workstation_rpc_iface_tcase.
Unlike torture_suite_add_machine_bdc_rpc_iface_tcase() which joins as a BDC
(ACB_SRVTRUST) this joins as a member workstation (ACB_WSTRUST).

Guenther
2009-06-29 12:43:32 +02:00
Günther Deschner
eb5e8dc82e s4-smbtorture: add RPC-SAMR-LARGE-DC test.
This rather simple test creates 4500 objects on a domain controller and checks
the enum calls for the correct number of results.

Guenther
2009-05-25 13:56:54 +02:00
Günther Deschner
0a9049be87 s4-smbtorture: add RPC-SAMR-USERS-PRIVILEGES test.
This test demonstrates the independence of the lsa and samr accounts while
remove a samr users that still has privileges granted.

Guenther
2009-05-18 22:54:14 +02:00
Günther Deschner
5f015920a8 s4-smbtorture: add very basic RPC-LSA-LOOKUPNAMES test.
Guenther
2009-05-11 16:44:39 +02:00
Günther Deschner
c794ba71b7 s4-smbtorture: add LSA-LOOKUPSIDS to verify bug #6263.
Guenther
2009-04-17 01:32:45 +02:00