mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
492fd5b00f
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14767 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
95 lines
2.0 KiB
Bash
Executable File
95 lines
2.0 KiB
Bash
Executable File
#!/bin/bash
|
|
# Blackbox tests rpcclient with schannel
|
|
# Copyright (c) 2021 Andreas Schneider <asn@samba.org>
|
|
|
|
if [ $# -lt 8 ]; then
|
|
cat << EOF
|
|
Usage: test_rpcclient_schannel.sh DOMAIN REALM USERNAME PASSWORD SERVER PREFIX CONFIGURATION TESTENV
|
|
EOF
|
|
exit 1
|
|
fi
|
|
|
|
DOMAIN=$1
|
|
REALM=$2
|
|
USERNAME=$3
|
|
PASSWORD=$4
|
|
SERVER=$5
|
|
PREFIX=$6
|
|
CONFIGURATION=$7
|
|
TESTENV=$8
|
|
shift 8
|
|
|
|
failed=0
|
|
|
|
samba_subunit_dir=$(dirname "$0")
|
|
. "${samba_subunit_dir}/subunit.sh"
|
|
. "${samba_subunit_dir}/common_test_fns.inc"
|
|
|
|
samba_bindir="${BINDIR}"
|
|
samba_rpcclient="${samba_bindir}/rpcclient"
|
|
|
|
test_rpc_getusername()
|
|
{
|
|
cmd="$samba_rpcclient ncacn_np:${SERVER}[schannel] --machine-pass --configfile=${CONFIGURATION} -c getusername 2>&1"
|
|
out=$(eval "$cmd")
|
|
ret=$?
|
|
if [ $ret -ne 0 ]; then
|
|
echo "Failed to connect! Error: $ret"
|
|
echo "$out"
|
|
return 1
|
|
fi
|
|
|
|
echo "$out" | grep -q "Account Name: ANONYMOUS LOGON, Authority Name: NT AUTHORITY"
|
|
ret=$?
|
|
if [ $ret -ne 0 ]; then
|
|
echo "Incorrect account/authority name! Error: $ret"
|
|
echo "$out"
|
|
return 1
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
test_rpc_lookupsids()
|
|
{
|
|
cmd="$samba_rpcclient ncacn_ip_tcp:${SERVER}[schannel] --machine-pass --configfile=${CONFIGURATION} -c 'lookupsids3 S-1-1-0' 2>&1"
|
|
out=$(eval "$cmd")
|
|
ret=$?
|
|
if [ $ret -ne 0 ]; then
|
|
echo "Failed to connect! Error: $ret"
|
|
echo "$out"
|
|
return 1
|
|
fi
|
|
|
|
echo "$out" | grep -q "S-1-1-0 Everyone"
|
|
ret=$?
|
|
if [ $ret -ne 0 ]; then
|
|
echo "Incorrect account/authority name! Error: $ret"
|
|
echo "$out"
|
|
return 1
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
testit "ncacn_np.getusername" \
|
|
test_rpc_getusername || \
|
|
failed=$((failed + 1))
|
|
|
|
if [[ "$TESTENV" == "ad_member_fips"* ]]; then
|
|
unset GNUTLS_FORCE_FIPS_MODE
|
|
|
|
testit "ncacn_np.getusername.fips" \
|
|
test_rpc_getusername || \
|
|
failed=$((failed + 1))
|
|
|
|
GNUTLS_FORCE_FIPS_MODE=1
|
|
export GNUTLS_FORCE_FIPS_MODE
|
|
fi
|
|
|
|
testit "ncacn_ip_tcp.lookupsids" \
|
|
test_rpc_lookupsids || \
|
|
failed=$((failed + 1))
|
|
|
|
exit ${failed}
|