sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Code
7,746 Commits 60 Branches 1,145 Tags 452 MiB
dd8388330e
Commit Graph

70 Commits

Author SHA1 Message Date
Andrew Bartlett
dd8388330e Fix up some braindamage in the testsuite. 
(if you remove the smbpasswd file, you wont be able to change the passwords
contained therein... :-)

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
180d7e8c43 Add the -s command to keep smbpasswd quiet during the tests. 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
71b63db1bf Also echo the smbpasswd command line 0001-01-01 00:00:00 +00:00
Andrew Bartlett
983fe93343 This should get the oldstyle domain join tests working again. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
409fb69ecb A couple more little fixes for the domain security tests. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
e809e6c20f Try to see if we can get these tests working... 0001-01-01 00:00:00 +00:00
Andrew Bartlett
ff354c99c5 This is another *BIG* change... 
Samba now features a pluggable passdb interface, along the same lines as the
one in use in the auth subsystem.  In this case, only one backend may be active
at a time by the 'normal' interface, and only one backend per passdb_context is
permitted outside that.

This pluggable interface is designed to allow any number of passdb backends to
be compiled in, with the selection at runtime.  The 'passdb backend' paramater
has been created (and documented!) to support this.

As such, configure has been modfied to allow (for example) --with-ldap and the
old smbpasswd to be selected at the same time.

This patch also introduces two new backends:  smbpasswd_nua and tdbsam_nua.
These two backends accept 'non unix accounts', where the user does *not* exist
in /etc/passwd.  These accounts' don't have UIDs in the unix sense, but to
avoid conflicts in the algroitmic mapping of RIDs, they use the values
specified in the 'non unix account range' paramter - in the same way as the
winbind ranges are specifed.

While I was at it, I cleaned up some of the code in pdb_tdb (code copied
directly from smbpasswd and not really considered properly).  Most of this was
to do with % macro expansion on stored data.  It isn't easy to get the macros
into the tdb, and the first password change will 'expand' them.  tdbsam needs
to use a similar system to pdb_ldap in this regard.

This patch only makes minor adjustments to pdb_nisplus and pdb_ldap, becouse I
don't have the test facilities for these.  I plan to incoroprate at least
pdb_ldap into this scheme after consultation with Jerry.

Each (converted) passdb module now no longer has any 'static' variables, and
only exports 1 init function outside its .c file.

The non-unix-account support in this patch has been proven!  It is now possible
to join a win2k machine to a Samba PDC without an account in /etc/passwd!

Other changes:

Minor interface adjustments:
pdb_delete_sam_account() now takes a SAM_ACCOUNT, not a char*.

pdb_update_sam_account() no longer takes the 'override' argument that was being
ignored so often (every other passdb backend).  Extra checks have been added in
some places.

Minor code changes:
smbpasswd no longer attempts to initialise the passdb at startup, this is
now done on first use.

pdbedit has lost some of its 'machine account' logic, as this behaviour is now
controlled by the passdb subsystem directly.

The samr subsystem no longer calls 'local password change', but does the pdb
interactions directly.  This allow the ACB_ flags specifed to be transferred
direct to the backend, without interference.

Doco:

I've updated the doco to reflect some of the changes, and removed some paramters
no longer applicable to HEAD.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
af37a86917 Fix up runlist botchup. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
12dcb55a3a Update the build farm's test runlist and make it a bit easier to read. 0001-01-01 00:00:00 +00:00
Martin Pool
f0878f19eb Add a panic action that tries to call gdb noninteractively to get a 
backtrace.   Will break on many machines, but we're already crashed in
this case.
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
75ad6df184 switch off level 100 debug for server security 0001-01-01 00:00:00 +00:00
Andrew Tridgell
228d4fc47b up the log level for server level security to try to track down the 
segvs in the build farm
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
067a4f87ac don't use /dev/null for a smbpasswd file 0001-01-01 00:00:00 +00:00
Andrew Bartlett
042b9e3a63 Fix up the build farm again. 
This should get us 'green' for once...

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Tim Potter
751ea8cfb9 Allow lookup of users with spaces in their name. 0001-01-01 00:00:00 +00:00
Tim Potter
87955fcf30 Fixed bug in canned results list for checking the error code of wbinfo. 
Made test names more verbose.
 0001-01-01 00:00:00 +00:00
Martin Pool
fa7367a973 Rename $pwd to $test_root to avoid future confusion. 0001-01-01 00:00:00 +00:00
Martin Pool
309b718842 Back out the change in 1.11 that set the poorly-named $pwd variable -- 
for the build farm this is actually the root directory for building,
or something like that.  Thanks a.b.
 0001-01-01 00:00:00 +00:00
Martin Pool
af65a01d0d Also show $tree in diagnostics. 0001-01-01 00:00:00 +00:00
Martin Pool
0d6d0c31f9 Give sensible defaults to some variables that are set by the build 
farm but not present in Make.
 0001-01-01 00:00:00 +00:00
Martin Pool
b6745ccd33 Little note about what's happening with Satyr. 0001-01-01 00:00:00 +00:00
Martin Pool
b18703fc8e Doc. 
Try not to run tests if the user specified --prefix=/usr* or something
similar, because it would not be nice(!) to clobber their
configuration file and passwords.  Eventually I think we want to run
the installed versions, but specify different paths for everything.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
3a2a967723 If we disable hostname lookups we can at least get a uniform answer for testing 
the rhosts and hostsequiv stuff with.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
4df974527c Fix up the test for some of the quirkier hosts on the farm, and enable one 
previously disabled sub-test.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
9e5a1d1623 Add and modify some of the various tests I have had sitting around here for a 
little while.  This should give us a bit more coverage.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Tim Potter
2138c44619 Fixed typo. 0001-01-01 00:00:00 +00:00
Christopher R. Hertel
6f38850262 Typo fix per Vance on IRC. 0001-01-01 00:00:00 +00:00
Tim Potter
99071c45d0 Another winbind test - fill in later. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
9bfc480bda Some minor doco on what the build_farm dir does 0001-01-01 00:00:00 +00:00
Andrew Bartlett
51903dbfee Update tests, start testing password server code, now I have it working and 
know what it does...

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
805c20452e Allow us to vary the log-level, so we can run at level 1 normally, 
and push it to 10 when we fail (we redo the test).

Also disable the server-level security testing till it know what it does

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
fe5d38780f added line-feed at end of templates 0001-01-01 00:00:00 +00:00
Andrew Bartlett
bc6160a482 Running torture-RANDOMIPC on the build farm doesn't go down as a 'good idea' as its logsfiles are BIG! 0001-01-01 00:00:00 +00:00
Andrew Bartlett
d04ea88b5d Fix the torture test, we had the wrong file-name in the tests 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
584a14a216 We need strict locking to pass LOCK4 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
eee251f710 Start of smbtorture based testing. Not all of smbtorture's facilites 
are used, but these ones should pass.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Tridgell
0d112d7960 fixed guest account for build farm boxes 0001-01-01 00:00:00 +00:00
Andrew Bartlett
19fdc553d6 Jigger around with the tests a bit more 
We now test security=share, security=user, security=server for both the
positive and negitive case (good/bad pw) and check that guest shares work for
share level security.

The server level security stuff seems to test positive without actualy
contating a server (another LIBSMB_PROG based smbd) - I will need to look into that...

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
b28baf71a7 Add the generic funcions file for the basicsmb tests 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
56a881b2b4 Changed some of the tests around, made failures for parts actualy count 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
542977bc43 Added the basic tests of smb functionality for HEAD 
This works with the new build farm system

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Tim Potter
4c2b915ed1 Test login using pam_winbind.so and group membership. 0001-01-01 00:00:00 +00:00
Tim Potter
b208d74e05 Fixed lookup of entire /etc/{passwd,group} file line. 0001-01-01 00:00:00 +00:00
Tim Potter
acef477383 Cleaned up bitrot in nsswitch testsuite. Merged tests across from TNG 
branch.
 0001-01-01 00:00:00 +00:00
Richard Sharpe
adef47b517 Bulk add of the test suite for libsmbclient ... 0001-01-01 00:00:00 +00:00
David O'Neill
376601d17d Changes from APPLIANCE_HEAD: 
testsuite/printing/psec.c
        - Use lock directory from smb.conf parameter when peeking at the
          ntdrivers.tdb file.
    source/rpc_parse/parse_sec.c
        - fix typo in debug message
    source/script/installbin.sh
        - create private directory as part of 'make install'.
    source/nsswitch/winbindd_cache.c
    source/nsswitch/winbindd_idmap.c
    source/passdb/secrets.c
    source/smbd/connection.c
        - always convert tdb key to unix code-page when generating.
    source/printing/nt_printing.c
        - always convert tdb key to unix code-page when generating.
        - don't prepend path to a filename that is NULL in
          add_a_printer_driver_3().
    source/rpc_server/srv_spoolss_nt.c
        - always convert tdb key to unix code-page when generating.
        - don't prepend server name to a path/filename that is NULL in the
          fill_printer_driver_info functions.
    source/printing/printing.c
        - always convert tdb key to unix code-page when generating.
        - move access check for print_queue_purge() outside of job delete
          loop.
    source/smbd/unix_acls.c
        - fix for setting ACLs (this got missed earlier)
    source/lib/messages.c
        - trivial sync with appliance_head
 0001-01-01 00:00:00 +00:00
David O'Neill
03dd90ab92 Brief documentation on using the virtual printer code 0001-01-01 00:00:00 +00:00
Tim Potter
73b237e639 Fix error string. 0001-01-01 00:00:00 +00:00
Tim Potter
7b896697d1 Compile fixes for changes in make_sec_desc() interface. 0001-01-01 00:00:00 +00:00
Tim Potter
369a378b33 Fixed some debugging code. 0001-01-01 00:00:00 +00:00