mirror of
https://github.com/samba-team/samba.git
synced 2025-01-25 06:04:04 +03:00
5f4d86f955
this isn't supported, fallback to NTLM. Also, where we get a failure as 'logon failure', try and do a '3 tries' for the password, like we already do for CIFS. (Incomplete: needs a mapping between RPC errors and the logon failure NTSTATUS). Because we don't yet support Kerberos sign/seal to win2k3 SP1 for DCE/RPC, disable this (causing SPNEGO to negotiate NTLM) when kerberos isn't demanded. Andrew Bartlett (This used to be commit b3212d1fb91b26c1d326a289560106dffe1d2e80)
53 lines
1.7 KiB
Bash
Executable File
53 lines
1.7 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# tests that should pass against a w2k3 DC, as administrator
|
|
|
|
# add tests to this list as they start passing, so we test
|
|
# that they stay passing
|
|
ncacn_np_tests="RPC-SCHANNEL RPC-DSSETUP RPC-EPMAPPER RPC-SAMR RPC-WKSSVC RPC-SRVSVC RPC-EVENTLOG RPC-NETLOGON RPC-LSA RPC-SAMLOGON RPC-SAMSYNC RPC-MULTIBIND RPC-WINREG"
|
|
ncacn_ip_tcp_tests="RPC-SCHANNEL RPC-EPMAPPER RPC-SAMR RPC-NETLOGON RPC-LSA RPC-SAMLOGON RPC-SAMSYNC RPC-MULTIBIND"
|
|
|
|
if [ $# -lt 4 ]; then
|
|
cat <<EOF
|
|
Usage: test_w2k3.sh SERVER USERNAME PASSWORD DOMAIN REALM
|
|
EOF
|
|
exit 1;
|
|
fi
|
|
|
|
server="$1"
|
|
username="$2"
|
|
password="$3"
|
|
domain="$4"
|
|
realm="$5"
|
|
shift 5
|
|
|
|
incdir=`dirname $0`
|
|
. $incdir/test_functions.sh
|
|
|
|
OPTIONS="-U$username%$password -W $domain --option realm=$realm"
|
|
|
|
failed=0
|
|
|
|
name="RPC-SPOOLSS on ncacn_np"
|
|
testit "$name" bin/smbtorture $TORTURE_OPTIONS ncacn_np:"$server" $OPTIONS RPC-SPOOLSS "$*" || failed=`expr $failed + 1`
|
|
|
|
for bindoptions in padcheck connect sign seal ntlm,sign ntlm,seal validate bigendian; do
|
|
for transport in ncacn_ip_tcp ncacn_np; do
|
|
case $transport in
|
|
ncacn_np) tests=$ncacn_np_tests ;;
|
|
ncacn_ip_tcp) tests=$ncacn_ip_tcp_tests ;;
|
|
esac
|
|
for t in $tests; do
|
|
name="$t on $transport with $bindoptions"
|
|
testit "$name" bin/smbtorture $TORTURE_OPTIONS $transport:"$server[$bindoptions]" $OPTIONS $t "$*" || failed=`expr $failed + 1`
|
|
done
|
|
done
|
|
done
|
|
|
|
name="RPC-DRSUAPI on ncacn_ip_tcp with seal"
|
|
testit "$name" bin/smbtorture $TORTURE_OPTIONS ncacn_ip_tcp:"$server[seal]" $OPTIONS RPC-DRSUAPI "$*" || failed=`expr $failed + 1`
|
|
name="RPC-DRSUAPI on ncacn_ip_tcp with seal,bigendian"
|
|
testit "$name" bin/smbtorture $TORTURE_OPTIONS ncacn_ip_tcp:"$server[seal,bigendian]" $OPTIONS RPC-DRSUAPI "$*" || failed=`expr $failed + 1`
|
|
|
|
testok $0 $failed
|