r5384: for RPC-NETLOGON to pass we need to set the realm as well as the domain to...

realm.

A better fix would be to have a dcerpc_server_realm() helper
function. Andrew, maybe you could see how to extract that out of
gensec? Calling lp_realm() in our torture tests is the wrong approach
I think.
(This used to be commit 2b62840920b21fd9584bc5b3bda050c9a23d61a9)

diff --git a/source4/script/tests/test_w2k3.sh b/source4/script/tests/test_w2k3.sh
index fb94c043d4c98fd40cced439a01eeb108d97be2a..cc505166adbdf223a4cd848cf44581b847d0bb61 100755 (executable)
--- a/source4/script/tests/test_w2k3.sh
+++ b/source4/script/tests/test_w2k3.sh
@@ -36,6 +36,8 @@ testit() {
    rm -f test.$$;
 }
 
+OPTIONS="-U$username%$password -W $domain --option realm=$domain"
+
 for transport in ncacn_ip_tcp ncacn_np; do
  for bindoptions in padcheck connect sign seal spnego,sign spnego,seal validate bigendian; do
      case $transport in
@@ -44,14 +46,14 @@ for transport in ncacn_ip_tcp ncacn_np; do
      esac
    for t in $tests; do
     echo Testing $t on $transport with $bindoptions
-    testit bin/smbtorture $transport:"$server[$bindoptions]" -U"$username"%"$password" -W $domain $t "$*"
+    testit bin/smbtorture $transport:"$server[$bindoptions]" $OPTIONS $t "$*"
    done
  done
 done
 
 echo Testing RPC-DRSUAPI on ncacn_ip_tcp with seal
-testit bin/smbtorture ncacn_ip_tcp:"$server[seal]" -U"$username"%"$password" -W $domain RPC-DRSUAPI "$*"
+testit bin/smbtorture ncacn_ip_tcp:"$server[seal]" $OPTIONS RPC-DRSUAPI "$*"
 echo Testing RPC-DRSUAPI on ncacn_ip_tcp with seal,bigendian
-testit bin/smbtorture ncacn_ip_tcp:"$server[seal,bigendian]" -U"$username"%"$password" -W $domain RPC-DRSUAPI "$*"
+testit bin/smbtorture ncacn_ip_tcp:"$server[seal,bigendian]" $OPTIONS RPC-DRSUAPI "$*"
 
 echo "ALL OK";