source3/script/tests/test_smbd_no_krb5.sh

   1 #!/bin/sh
   2
   3 if [ $# -lt 1 ]; then
   4 cat <<EOF
   5 Usage: test_smbd_no_krb5.sh SERVER USERNAME PASSWORD PREFIX
   6 EOF
   7 exit 1;
   8 fi
   9
  10 smbclient=$1
  11 SERVER=$2
  12 USERNAME=$3
  13 PASSWORD=$4
  14 PREFIX=$5
  15 shift 5
  16
  17 samba_bindir="$BINDIR"
  18 samba_kinit=kinit
  19 if test -x ${samba_bindir}/samba4kinit; then
  20         samba_kinit=${samba_bindir}/samba4kinit
  21 fi
  22
  23 incdir=`dirname $0`/../../../testprogs/blackbox
  24 . $incdir/subunit.sh
  25 . $incdir/common_test_fns.inc
  26
  27 failed=0
  28
  29 opt="--option=gensec:gse_krb5=yes -U${USERNAME}%${PASSWORD}"
  30
  31 # check kerberos access
  32 test_smbclient "test_krb5" "ls" "//$SERVER/tmp" $opt --use-kerberos=required || failed=`expr $failed + 1`
  33
  34 # disbale krb5 globally so smbd won't accept it
  35 global_inject_conf=$(dirname $SMB_CONF_PATH)/global_inject.conf
  36 echo 'gensec:gse_krb5=no' > $global_inject_conf
  37
  38 # verify that kerberos fails
  39 test_smbclient_expect_failure "smbd_no_krb5" "ls" "//$SERVER/tmp" --use-kerberos=required $opt || failed=`expr $failed + 1`
  40
  41 # verify downgrade to ntlmssp
  42 test_smbclient "test_spnego_downgrade" "ls" "//$SERVER/tmp" $opt --use-kerberos=disabled || failed=`expr $failed + 1`
  43
  44 echo '' > $global_inject_conf
  45
  46 testok $0 $failed