1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-10 01:18:15 +03:00
samba-mirror/source3/script/tests/test_inherit_owner.sh
Ralph Boehme 2ffccf9c01 selftest: fix a flapping test
The previous approach of using ls | grep $NAME for testing whether the previous
directory removal succeeded will fail in case $NAME is a substring of any
directory entrie's name.

Eg

  NAME=tmp.123

and the directory contains an unrelated entry

  tmp.123456

Using allinfo instead should fix this.

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
2019-12-05 17:14:46 +00:00

163 lines
6.4 KiB
Bash
Executable File

#!/bin/sh
# this tests "inherit owner" config parameter
# currently needs to run in SMB1 mode, because it uses UNIX
# extensions to fetch the UNIX owner of a file.
if [ $# -lt 10 ]; then
cat <<EOF
Usage: $0 SERVER USERNAME PASSWORD PREFIX SMBCLIENT SMBCACLS NET SHARE INH_WIN INH_UNIX <additional args>
EOF
exit 1;
fi
SERVER="$1"
USERNAME="$2"
PASSWORD="$3"
PREFIX="$4"
SMBCLIENT="$5"
SMBCACLS="$6"
NET="$7"
SHARE="$8"
INH_WIN="$9"
INH_UNIX="${10}"
shift 10
ADDARGS="$*"
SMBCLIENT="$VALGRIND ${SMBCLIENT} ${ADDARGS}"
SMBCACLS="$VALGRIND ${SMBCACLS} ${ADDARGS}"
NET="$VALGRIND ${NET}"
incdir=`dirname $0`/../../../testprogs/blackbox
. $incdir/subunit.sh
create_file() {
local share=$1
local fname=$2
local rem_dirname=$(dirname $fname)
local bname=$(basename $fname)
touch $PREFIX/$bname
$SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "cd $rem_dirname; rm $bname" 2>/dev/null
$SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "cd $rem_dirname; allinfo $bname" 2>/dev/null | grep "NT_STATUS_OBJECT_NAME_NOT_FOUND" || exit 1
$SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "lcd $PREFIX; cd $rem_dirname; put $bname" 2>/dev/null || exit 1
}
create_dir() {
local share=$1
local dname=$2
local rem_dirname=$(dirname $dname)
local bname=$(basename $dname)
$SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "cd $rem_dirname; rmdir $bname" 2>/dev/null
$SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "cd $rem_dirname; allinfo $bname" 2>/dev/null | grep "NT_STATUS_OBJECT_NAME_NOT_FOUND" || exit 1
$SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "cd $rem_dirname; mkdir $bname" 2>/dev/null || exit 1
}
cleanup_file() {
local share=$1
local fname=$2
local rem_dirname=$(dirname $fname)
local bname=$(basename $fname)
$SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "cd $rem_dirname; rm $bname" 2>/dev/null || exit 1
}
cleanup_dir() {
local share=$1
local dname=$2
local rem_dirname=$(dirname $dname)
local bname=$(basename $dname)
$SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "cd $rem_dirname; rmdir $bname" 2>/dev/null || exit 1
}
set_win_owner() {
local share=$1
local fname=$2
local owner=$3
$SMBCACLS //$SERVER/$share $fname -U $USERNAME%$PASSWORD -C $owner 2>/dev/null || exit 1
}
unix_owner_id_is() {
local share=$1
local fname=$2
local expected_id=$3
local actual_id
actual_id=$($SMBCLIENT //$SERVER/$share -U $USERNAME%$PASSWORD -c "getfacl $fname" 2>/dev/null | sed -rn 's/^# owner: (.*)/\1/p')
if ! test "x$actual_id" = "x$expected_id" ; then
echo "Actual uid of $share/$fname is [$actual_id] expected [$expected_id]"
exit 1
fi
}
get_unix_id() {
local user=$1
local ent
ent=$(getent passwd $user) || exit 1
echo "$ent" | awk -F: '{print $3}'
}
win_owner_is() {
local share=$1
local fname=$2
local expected_owner=$3
local actual_owner
actual_owner=$($SMBCACLS //$SERVER/$share $fname -U $USERNAME%$PASSWORD 2>/dev/null | sed -rn 's/^OWNER:(.*)/\1/p')
if ! test "x$actual_owner" = "x$expected_owner" ; then
echo "Actual owner of $share/$fname is [$actual_owner] expected [$expected_owner]"
exit 1
fi
}
default_uid=$(get_unix_id $USERNAME)
alt_uid=$(get_unix_id force_user)
if [ "$INH_WIN" = "0" ] && [ "$INH_UNIX" = "0" ] ; then
#default - file owned by creator, change-owner modifies both
WIN_OWNER_AFTER_CREATE="$SERVER/$USERNAME"
UNIX_OWNER_AFTER_CREATE=$(get_unix_id $USERNAME)
WIN_OWNER_AFTER_CHOWN="$SERVER/smbget_user"
UNIX_OWNER_AFTER_CHOWN=$(get_unix_id smbget_user)
TEST_LABEL="default"
elif [ "$INH_WIN" = "1" ] && [ "$INH_UNIX" = "1" ] ; then
#inherit owner=windows and unix - file owned by parent
#owner, change-owner modifies both
WIN_OWNER_AFTER_CREATE="$SERVER/force_user"
UNIX_OWNER_AFTER_CREATE=$(get_unix_id force_user)
WIN_OWNER_AFTER_CHOWN="$SERVER/smbget_user"
UNIX_OWNER_AFTER_CHOWN=$(get_unix_id smbget_user)
TEST_LABEL="both"
elif [ "$INH_WIN" = "0" ] && [ "$INH_UNIX" = "1" ] ; then
#inherit owner=unix only - windows owner is creator,
#unix owner inherited, upon change-owner only windows
#owner is changed
WIN_OWNER_AFTER_CREATE="$SERVER/$USERNAME"
UNIX_OWNER_AFTER_CREATE=$(get_unix_id force_user)
WIN_OWNER_AFTER_CHOWN="$SERVER/smbget_user"
UNIX_OWNER_AFTER_CHOWN=$(get_unix_id force_user)
TEST_LABEL="unix"
else
echo "Unknown combination INH_WIN=$INH_WIN INH_UNIX=$INH_UNIX"
exit 1
fi
# SETUP
testit "$TEST_LABEL - setup root dir" create_dir tmp tmp.$$
testit "grant SeRestorePrivilege" $NET rpc rights grant $USERNAME SeRestorePrivilege -U $USERNAME%$PASSWORD -I $SERVER || exit 1
testit "$TEST_LABEL - assign default ACL" $SMBCACLS //$SERVER/tmp tmp.$$ -U $USERNAME%$PASSWORD -S "REVISION:1,OWNER:$SERVER\force_user,GROUP:$SERVER\domusers,ACL:Everyone:ALLOWED/0x3/FULL" 2>/dev/null
# END SETUP
testit "$TEST_LABEL - create subdir under root" create_dir $SHARE tmp.$$/subdir
testit "$TEST_LABEL - verify subdir win owner" win_owner_is $SHARE tmp.$$/subdir "$WIN_OWNER_AFTER_CREATE"
testit "$TEST_LABEL - verify subdir unix owner" unix_owner_id_is $SHARE tmp.$$/subdir $UNIX_OWNER_AFTER_CREATE
testit "$TEST_LABEL - create file under root" create_file $SHARE tmp.$$/afile
testit "$TEST_LABEL - verify file win owner" win_owner_is $SHARE tmp.$$/afile "$WIN_OWNER_AFTER_CREATE"
testit "$TEST_LABEL - verify file unix owner" unix_owner_id_is $SHARE tmp.$$/afile $UNIX_OWNER_AFTER_CREATE
testit "$TEST_LABEL - change dir owner" set_win_owner $SHARE tmp.$$/subdir "$SERVER\smbget_user"
testit "$TEST_LABEL - verify subdir win owner after change" win_owner_is $SHARE tmp.$$/subdir "$WIN_OWNER_AFTER_CHOWN"
testit "$TEST_LABEL - verify subdir unix owner after change" unix_owner_id_is $SHARE tmp.$$/subdir $UNIX_OWNER_AFTER_CHOWN
testit "$TEST_LABEL - change file owner" set_win_owner $SHARE tmp.$$/afile "$SERVER\smbget_user"
testit "$TEST_LABEL - verify file win owner after change" win_owner_is $SHARE tmp.$$/afile "$WIN_OWNER_AFTER_CHOWN"
testit "$TEST_LABEL - verify file unix owner after change" unix_owner_id_is $SHARE tmp.$$/afile $UNIX_OWNER_AFTER_CHOWN
testit "$TEST_LABEL - cleanup subdir" cleanup_dir $SHARE tmp.$$/subdir
testit "$TEST_LABEL - cleanup file" cleanup_file $SHARE tmp.$$/afile
testit "$TEST_LABEL - cleanup root" cleanup_dir $SHARE tmp.$$
testit "revoke SeRestorePrivilege" $NET rpc rights revoke $USERNAME SeRestorePrivilege -U $USERNAME%$PASSWORD -I $SERVER || exit 1