nsswitch/tests/test_idmap_rfc2307.sh

   1 #!/bin/sh
   2 # Test id mapping through idmap_rfc2307 module
   3 if [ $# -lt 13 ]; then
   4         echo Usage: $0 DOMAIN USERNAME UID USERNAME2 UID2 GROUPNAME GID GROUPNAME2 GID2 LDAPPREFIX DC_SERVER DC_USERNAME DC_PASSWORD
   5         exit 1
   6 fi
   7
   8 DOMAIN="$1"
   9 USERNAME="$2"
  10 USERUID="$3"
  11 USERNAME2="$4"
  12 USERUID2="$5"
  13 GROUPNAME="$6"
  14 GROUPGID="$7"
  15 GROUPNAME2="$8"
  16 GROUPGID2="$9"
  17 shift 9
  18 LDAPPREFIX="$1"
  19 DC_SERVER="$2"
  20 DC_USERNAME="$3"
  21 DC_PASSWORD="$4"
  22
  23 wbinfo="$VALGRIND $BINDIR/wbinfo"
  24
  25 ldbsearch="ldbsearch"
  26 if [ -x "$BINDIR/ldbsearch" ]; then
  27         ldbsearch="$BINDIR/ldbsearch"
  28 fi
  29
  30 ldbadd="ldbadd"
  31 if [ -x "$BINDIR/ldbadd" ]; then
  32         ldbadd="$BINDIR/ldbadd"
  33 fi
  34
  35 ldbdel="ldbdel"
  36 if [ -x "$BINDIR/ldbdel" ]; then
  37         ldbdel="$BINDIR/ldbdel"
  38 fi
  39
  40 failed=0
  41
  42 . `dirname $0`/../../testprogs/blackbox/subunit.sh
  43
  44 # Delete LDAP records
  45 $VALGRIND $ldbsearch -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD \
  46           -s one -b "$LDAPPREFIX" | grep '^dn:' | cut -d ' ' -f 2- |
  47     xargs -d '\n' -n 1 -IDEL_DN \
  48           $ldbdel -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD \
  49           "DEL_DN"
  50 $VALGRIND $ldbdel -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD "$LDAPPREFIX"
  51
  52 # Add id mapping information to LDAP
  53
  54 testit "add ldap prefix" $VALGRIND $ldbadd -H ldap://$DC_SERVER \
  55         -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD <<EOF
  56 dn: $LDAPPREFIX
  57 objectclass: organizationalUnit
  58 EOF
  59
  60 testit "add ldap user mapping record" $VALGRIND $ldbadd -H ldap://$DC_SERVER \
  61         -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD <<EOF
  62 dn: cn=$USERNAME,$LDAPPREFIX
  63 objectClass: organizationalPerson
  64 objectClass: posixAccount
  65 ou: People
  66 cn: $USERNAME
  67 uid: $USERNAME
  68 uidNumber: $USERUID
  69 gidNumber: 1
  70 homeDirectory: /home/admin
  71 EOF
  72
  73 testit "add second ldap user mapping record" $VALGRIND $ldbadd \
  74        -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD <<EOF
  75 dn: cn=$USERNAME2,$LDAPPREFIX
  76 objectClass: organizationalPerson
  77 objectClass: posixAccount
  78 ou: People
  79 cn: $USERNAME2
  80 uid: $USERNAME2
  81 uidNumber: $USERUID2
  82 gidNumber: 2
  83 homeDirectory: /home/admin
  84 EOF
  85
  86 testit "add ldap group mapping record" $VALGRIND $ldbadd \
  87        -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD <<EOF
  88 dn: cn=$GROUPNAME,$LDAPPREFIX
  89 objectClass: posixGroup
  90 objectClass: groupOfNames
  91 cn: $GROUPNAME
  92 gidNumber: $GROUPGID
  93 member: cn=$USERNAME,$LDAPPREFIX
  94 EOF
  95
  96 testit "add second ldap group mapping record" $VALGRIND $ldbadd \
  97        -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD <<EOF
  98 dn: cn=$GROUPNAME2,$LDAPPREFIX
  99 objectClass: posixGroup
 100 objectClass: groupOfNames
 101 cn: $GROUPNAME2
 102 gidNumber: $GROUPGID2
 103 member: cn=$USERNAME,$LDAPPREFIX
 104 EOF
 105
 106 testit "wbinfo --name-to-sid" $wbinfo --name-to-sid "$DOMAIN/$USERNAME" || failed=$(expr $failed + 1)
 107 user_sid=$($wbinfo -n "$DOMAIN/$USERNAME" | cut -d " " -f1)
 108 echo "$DOMAIN/$USERNAME resolved to $user_sid"
 109
 110 testit "wbinfo --sid-to-uid=$user_sid" $wbinfo --sid-to-uid=$user_sid || failed=$(expr $failed + 1)
 111 user_uid=$($wbinfo --sid-to-uid=$user_sid | cut -d " " -f1)
 112 echo "$DOMAIN/$USERNAME resolved to $user_uid"
 113
 114 testit "test $user_uid -eq $USERUID" test $user_uid -eq $USERUID || failed=$(expr $failed + 1)
 115
 116 # Not sure how to get group names with spaces to resolve through testit
 117 #testit "wbinfo --name-to-sid" $wbinfo --name-to-sid="$DOMAIN/$GROUPNAME" || failed=$(expr $failed + 1)
 118 group_sid=$($wbinfo --name-to-sid="$DOMAIN/$GROUPNAME" | cut -d " " -f1)
 119 echo "$DOMAIN/$GROUPNAME resolved to $group_sid"
 120
 121 testit "wbinfo --sid-to-gid=$group_sid" $wbinfo --sid-to-gid=$group_sid || failed=$(expr $failed + 1)
 122 group_gid=$($wbinfo --sid-to-gid=$group_sid | cut -d " " -f1)
 123 echo "$DOMAIN/$GROUPNAME resolved to $group_gid"
 124
 125 testit "test $group_gid -eq $GROUPGID" test $group_gid -eq $GROUPGID || failed=$(expr $failed + 1)
 126
 127 # Use different user and group for reverse lookup to not read from cache
 128
 129 testit "$wbinfo --uid-to-sid=$USERUID2" $wbinfo --uid-to-sid=$USERUID2 || failed=$(expr $failed + 1)
 130 user_sid2=$($wbinfo --uid-to-sid=$USERUID2 | cut -d " " -f1)
 131 echo "UID $USERUID2 resolved to SID $user_sid2"
 132
 133 testit "$wbinfo --sid-to-name=$user_sid2" $wbinfo --sid-to-name=$user_sid2 || failed=$(expr $failed + 1)
 134 user_name2=$($wbinfo --sid-to-name=$user_sid2 | cut -d " " -f1)
 135 echo "SID $user_sid2 resolved to $user_name2"
 136
 137 testit "test $user_name2 = $DOMAIN/$USERNAME2" test "$(echo $user_name2 | tr A-Z a-z)" = "$(echo $DOMAIN/$USERNAME2 | tr A-Z a-z)" || failed=$(expr $failed + 1)
 138
 139 testit "$wbinfo --gid-to-sid=$GROUPGID2" $wbinfo --gid-to-sid=$GROUPGID2 || failed=$(expr $failed + 1)
 140 group_sid2=$($wbinfo --gid-to-sid=$GROUPGID2 | cut -d " " -f1)
 141 echo "GID $GROUPGID2 resolved to SID $group_sid2"
 142
 143 testit "$wbinfo --sid-to-name=$group_sid2" $wbinfo --sid-to-name=$group_sid2 || failed=$(expr $failed + 1)
 144 group_name2=$($wbinfo --sid-to-name=$group_sid2 | cut -d " " -f1)
 145 echo "SID $group_sid2 resolved to $group_name2"
 146
 147 testit "test $group_name2 = $DOMAIN/$GROUPNAME2" test "$(echo $group_name2 | tr A-Z a-z)" = "$(echo $DOMAIN/$GROUPNAME2 | tr A-Z a-z)" || failed=$(expr $failed + 1)
 148
 149 # Delete LDAP records
 150 $VALGRIND $ldbsearch -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD \
 151           -s one -b "$LDAPPREFIX" | grep '^dn:' | cut -d ' ' -f 2- |
 152     xargs -d '\n' -n 1 -IDEL_DN \
 153           $ldbdel -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD \
 154           "DEL_DN"
 155 $VALGRIND $ldbdel -H ldap://$DC_SERVER -U$DOMAIN/$DC_USERNAME%$DC_PASSWORD "$LDAPPREFIX"
 156
 157 exit $failed