samba-mirror/test_idmap_ad.sh at cbdd3d0c26c9cefd968a2adaf9892c5c858bf597

mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00

Christof Schmitt 2577f43a13 selftest: Add trusted domain tests for idmap_ad

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13903

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

2019-04-24 01:02:17 +00:00

233 lines

6.3 KiB

Bash

Executable File

Raw Blame History

 #!/bin/sh
 #
 # Basic testing of id mapping with idmap_ad
 #
 if [ $# -ne 6 ]; then
 	echo Usage: $0 DOMAIN DC_SERVER DC_PASSWORD TRUST_DOMAIN TRUST_SERVER TRUST_PASSWORD
 	exit 1
 fi
 DOMAIN="$1"
 DC_SERVER="$2"
 DC_PASSWORD="$3"
 TRUST_DOMAIN="$4"
 TRUST_SERVER="$5"
 TRUST_PASSWORD="$6"
 wbinfo="$VALGRIND $BINDIR/wbinfo"
 ldbmodify="$VALGRIND $BINDIR/ldbmodify"
 ldbsearch="$VALGRIND $BINDIR/ldbsearch"
 failed=0
 . `dirname $0`/../../testprogs/blackbox/subunit.sh
 DOMAIN_SID=$($wbinfo -n "$DOMAIN/" | cut -f 1 -d " ")
 if [ $? -ne 0 ] ; then
     echo "Could not find domain SID" | subunit_fail_test "test_idmap_ad"
     exit 1
 fi
 TRUST_DOMAIN_SID=$($wbinfo -n "$TRUST_DOMAIN/" | cut -f 1 -d " ")
 if [ $? -ne 0 ] ; then
     echo "Could not find trusted domain SID" | subunit_fail_test "test_idmap_ad"
     exit 1
 fi
 BASE_DN=$($ldbsearch -H ldap://$DC_SERVER -b "" -s base defaultNamingContext | awk '/^defaultNamingContext/ {print $2}')
 if [ $? -ne 0 ] ; then
     echo "Could not find base DB" | subunit_fail_test "test_idmap_ad"
     exit 1
 fi
 TRUST_BASE_DN=$($ldbsearch -H ldap://$TRUST_SERVER -b "" -s base defaultNamingContext | awk '/^defaultNamingContext/ {print $2}')
 if [ $? -ne 0 ] ; then
     echo "Could not find trusted base DB" | subunit_fail_test "test_idmap_ad"
     exit 1
 fi
 #
 # Add POSIX ids to AD
 #
 cat <<EOF | $ldbmodify -H ldap://$DC_SERVER -U "$DOMAIN\Administrator%$DC_PASSWORD"
 dn: CN=Administrator,CN=Users,$BASE_DN
 changetype: modify
 add: uidNumber
 uidNumber: 2000000
 EOF
 cat <<EOF | $ldbmodify -H ldap://$DC_SERVER -U "$DOMAIN\Administrator%$DC_PASSWORD"
 dn: CN=Domain Users,CN=Users,$BASE_DN
 changetype: modify
 add: gidNumber
 gidNumber: 2000001
 EOF
 cat <<EOF | $ldbmodify -H ldap://$DC_SERVER -U "$DOMAIN\Administrator%$DC_PASSWORD"
 dn: CN=Domain Admins,CN=Users,$BASE_DN
 changetype: modify
 add: gidNumber
 gidNumber: 2000002
 EOF
 #
 # Add POSIX ids to trusted domain
 #
 cat <<EOF | $ldbmodify -H ldap://$TRUST_SERVER \
 		       -U "$TRUST_DOMAIN\Administrator%$TRUST_PASSWORD"
 dn: CN=Administrator,CN=Users,$TRUST_BASE_DN
 changetype: modify
 add: uidNumber
 uidNumber: 2500000
 EOF
 cat <<EOF | $ldbmodify -H ldap://$TRUST_SERVER \
 		       -U "$TRUST_DOMAIN\Administrator%$TRUST_PASSWORD"
 dn: CN=Domain Users,CN=Users,$TRUST_BASE_DN
 changetype: modify
 add: gidNumber
 gidNumber: 2500001
 EOF
 cat <<EOF | $ldbmodify -H ldap://$TRUST_SERVER \
 		       -U "$TRUST_DOMAIN\Administrator%$TRUST_PASSWORD"
 dn: CN=Domain Admins,CN=Users,$TRUST_BASE_DN
 changetype: modify
 add: gidNumber
 gidNumber: 2500002
 EOF
 #
 # Test 1: Test uid of Administrator, should be 2000000
 #
 out="$($wbinfo -S $DOMAIN_SID-500)"
 echo "wbinfo returned: \"$out\", expecting \"2000000\""
 test "$out" = "2000000"
 ret=$?
 testit "Test uid of Administrator is 2000000" test $ret -eq 0 || failed=$(expr $failed + 1)
 #
 # Test 2: Test gid of Domain Users, should be 2000001
 #
 out="$($wbinfo -Y $DOMAIN_SID-513)"
 echo "wbinfo returned: \"$out\", expecting \"2000001\""
 test "$out" = "2000001"
 ret=$?
 testit "Test uid of Domain Users is 2000001" test $ret -eq 0 || failed=$(expr $failed + 1)
 #
 # Test 3: Test get userinfo for Administrator works
 #
 out="$($wbinfo -i $DOMAIN/Administrator)"
 echo "wbinfo returned: \"$out\", expecting \"$DOMAIN/administrator:*:2000000:2000001::/home/$DOMAIN/administrator:/bin/false\""
 test "$out" = "$DOMAIN/administrator:*:2000000:2000001::/home/$DOMAIN/administrator:/bin/false"
 ret=$?
 testit "Test get userinfo for Administrator works" test $ret -eq 0 || failed=$(expr $failed + 1)
 #
 # Test 4: Test lookup from gid to sid
 #
 out="$($wbinfo -G 2000002)"
 echo "wbinfo returned: \"$out\", expecting \"$DOMAIN_SID-512\""
 test "$out" = "$DOMAIN_SID-512"
 ret=$?
 testit "Test gid lookup of Domain Admins" test $ret -eq 0 || failed=$(expr $failed + 1)
 #
 # Trusted domain test 1: Test uid of Administrator, should be 2500000
 #
 out="$($wbinfo -S $TRUST_DOMAIN_SID-500)"
 echo "wbinfo returned: \"$out\", expecting \"2500000\""
 test "$out" = "2500000"
 ret=$?
 testit "Test uid of Administrator in trusted domain is 2500000" test $ret -eq 0 || failed=$(expr $failed + 1)
 #
 # Trusted domain test 2: Test gid of Domain Users, should be 2500001
 #
 out="$($wbinfo -Y $TRUST_DOMAIN_SID-513)"
 echo "wbinfo returned: \"$out\", expecting \"2500001\""
 test "$out" = "2500001"
 ret=$?
 testit "Test uid of Domain Users in trusted domain is 2500001" test $ret -eq 0 || failed=$(expr $failed + 1)
 #
 # Trusted domain test 3: Test get userinfo for Administrator works
 #
 out="$($wbinfo -i $TRUST_DOMAIN/Administrator)"
 echo "wbinfo returned: \"$out\", expecting \"$TRUST_DOMAIN/administrator:*:2500000:2500001::/home/$TRUST_DOMAIN/administrator:/bin/false\""
 test "$out" = "$TRUST_DOMAIN/administrator:*:2500000:2500001::/home/$TRUST_DOMAIN/administrator:/bin/false"
 ret=$?
 testit "Test get userinfo for Administrator works" test $ret -eq 0 || failed=$(expr $failed + 1)
 #
 # Trusted domain test 4: Test lookup from gid to sid
 #
 out="$($wbinfo -G 2500002)"
 echo "wbinfo returned: \"$out\", expecting \"$TRUST_DOMAIN_SID-512\""
 test "$out" = "$TRUST_DOMAIN_SID-512"
 ret=$?
 testit "Test gid lookup of Domain Admins in trusted domain." test $ret -eq 0 || failed=$(expr $failed + 1)
 #
 # Remove POSIX ids from AD
 #
 cat <<EOF | $ldbmodify -H ldap://$DC_SERVER -U "$DOMAIN\Administrator%$DC_PASSWORD"
 dn: CN=Administrator,CN=Users,$BASE_DN
 changetype: modify
 delete: uidNumber
 uidNumber: 2000000
 EOF
 cat <<EOF | $ldbmodify -H ldap://$DC_SERVER -U "$DOMAIN\Administrator%$DC_PASSWORD"
 dn: CN=Domain Users,CN=Users,$BASE_DN
 changetype: modify
 delete: gidNumber
 gidNumber: 2000001
 EOF
 cat <<EOF | $ldbmodify -H ldap://$DC_SERVER -U "$DOMAIN\Administrator%$DC_PASSWORD"
 dn: CN=Domain Admins,CN=Users,$BASE_DN
 changetype: modify
 delete: gidNumber
 gidNumber: 2000002
 EOF
 #
 # Remove POSIX ids from trusted domain
 #
 cat <<EOF | $ldbmodify -H ldap://$TRUST_SERVER \
 		       -U "$TRUST_DOMAIN\Administrator%$TRUST_PASSWORD"
 dn: CN=Administrator,CN=Users,$TRUST_BASE_DN
 changetype: modify
 delete: uidNumber
 uidNumber: 2500000
 EOF
 cat <<EOF | $ldbmodify -H ldap://$TRUST_SERVER \
 		       -U "$TRUST_DOMAIN\Administrator%$TRUST_PASSWORD"
 dn: CN=Domain Users,CN=Users,$TRUST_BASE_DN
 changetype: modify
 delete: gidNumber
 gidNumber: 2500001
 EOF
 cat <<EOF | $ldbmodify -H ldap://$TRUST_SERVER \
 		       -U "$TRUST_DOMAIN\Administrator%$TRUST_PASSWORD"
 dn: CN=Domain Admins,CN=Users,$TRUST_BASE_DN
 changetype: modify
 delete: gidNumber
 gidNumber: 2500002
 EOF
 exit $failed

233 lines 6.3 KiB Bash Executable File Raw Blame History

233 lines

6.3 KiB

Bash

Executable File

Raw Blame History