s4:selftest Confirm that there isn't a listener on the ldapi:// socket
[ira/wip.git] / selftest / target / Samba4.pm
index 9364008ee2fc6b70e8413587e406104e7fc5d7cd..3c0c4f5152d636b8079b76aa48e494be9f7078c5 100644 (file)
@@ -10,47 +10,49 @@ use Cwd qw(abs_path);
 use FindBin qw($RealBin);
 use POSIX;
 
-sub new($$$$) {
-       my ($classname, $bindir, $ldap, $setupdir) = @_;
+sub new($$$$$) {
+       my ($classname, $bindir, $ldap, $setupdir, $exeext) = @_;
+       $exeext = "" unless defined($exeext);
        my $self = { 
                vars => {}, 
                ldap => $ldap, 
                bindir => $bindir, 
-               setupdir => $setupdir 
+               setupdir => $setupdir,
+               exeext => $exeext
        };
        bless $self;
        return $self;
 }
 
+sub bindir_path($$) {
+       my ($self, $path) = @_;
+
+       return "$self->{bindir}/$path$self->{exeext}";
+}
+
 sub openldap_start($$$) {
-        my ($slapd_conf, $uri, $logs) = @_;
-       my $oldpath = $ENV{PATH};
-       my $olroot = "";
-       my $olpath = "";
-       if (defined $ENV{OPENLDAP_ROOT}) {
-           $olroot = "$ENV{OPENLDAP_ROOT}";
-           $olpath = "$olroot/libexec:$olroot/sbin:";
-       }
-       $ENV{PATH} = "$olpath/usr/local/sbin:/usr/sbin:/sbin:$ENV{PATH}";
-        system("slapd -d63 -f $slapd_conf -h $uri > $logs 2>&1 &");
-        $ENV{PATH} = $oldpath;
 }
 
 sub slapd_start($$)
 {
        my $count = 0;
        my ($self, $env_vars) = @_;
+       my $ldbsearch = $self->bindir_path("ldbsearch");
 
        my $uri = $env_vars->{LDAP_URI};
 
+       if (system("$ldbsearch -H $uri -s base -b \"\" supportedLDAPVersion > /dev/null") == 0) {
+           print "A SLAPD is still listening to $uri before we started the LDAP backend.  Aborting!";
+           return 1;
+       }
        # running slapd in the background means it stays in the same process group, so it can be
        # killed by timelimit
        if ($self->{ldap} eq "fedora-ds") {
                system("$ENV{FEDORA_DS_ROOT}/sbin/ns-slapd -D $env_vars->{FEDORA_DS_DIR} -d0 -i $env_vars->{FEDORA_DS_PIDFILE}> $env_vars->{LDAPDIR}/logs 2>&1 &");
        } elsif ($self->{ldap} eq "openldap") {
-               openldap_start($env_vars->{SLAPD_CONF}, $uri, "$env_vars->{LDAPDIR}/logs");
+               system("$ENV{OPENLDAP_SLAPD} -d0 -F $env_vars->{SLAPD_CONF_D} -h $uri > $env_vars->{LDAPDIR}/logs 2>&1 &");
        }
-       while (system("$self->{bindir}/ldbsearch -H $uri -s base -b \"\" supportedLDAPVersion > /dev/null") != 0) {
+       while (system("$ldbsearch -H $uri -s base -b \"\" supportedLDAPVersion > /dev/null") != 0) {
                $count++;
                if ($count > 40) {
                    $self->slapd_stop($env_vars);
@@ -78,64 +80,80 @@ sub slapd_stop($$)
 sub check_or_start($$$) 
 {
        my ($self, $env_vars, $max_time) = @_;
-       return 0 if ( -p $env_vars->{SMBD_TEST_FIFO});
+       return 0 if ( -p $env_vars->{SAMBA_TEST_FIFO});
 
-       unlink($env_vars->{SMBD_TEST_FIFO});
-       POSIX::mkfifo($env_vars->{SMBD_TEST_FIFO}, 0700);
-       unlink($env_vars->{SMBD_TEST_LOG});
+       unlink($env_vars->{SAMBA_TEST_FIFO});
+       POSIX::mkfifo($env_vars->{SAMBA_TEST_FIFO}, 0700);
+       unlink($env_vars->{SAMBA_TEST_LOG});
        
-       print "STARTING SMBD... ";
+       print "STARTING SAMBA... ";
        my $pid = fork();
        if ($pid == 0) {
-               open STDIN, $env_vars->{SMBD_TEST_FIFO};
-               open STDOUT, ">$env_vars->{SMBD_TEST_LOG}";
+               open STDIN, $env_vars->{SAMBA_TEST_FIFO};
+               # we want out from samba to go to the log file, but also
+               # to the users terminal when running 'make test' on the command
+               # line. This puts it on stderr on the terminal
+               open STDOUT, "| tee $env_vars->{SAMBA_TEST_LOG} 1>&2";
                open STDERR, '>&STDOUT';
-               
+
                SocketWrapper::set_default_iface($env_vars->{SOCKET_WRAPPER_DEFAULT_IFACE});
 
                my $valgrind = "";
-               if (defined($ENV{SMBD_VALGRIND})) {
-                   $valgrind = $ENV{SMBD_VALGRIND};
+               if (defined($ENV{SAMBA_VALGRIND})) {
+                   $valgrind = $ENV{SAMBA_VALGRIND};
                } 
 
                $ENV{KRB5_CONFIG} = $env_vars->{KRB5_CONFIG}; 
+               $ENV{WINBINDD_SOCKET_DIR} = $env_vars->{WINBINDD_SOCKET_DIR};
 
                $ENV{NSS_WRAPPER_PASSWD} = $env_vars->{NSS_WRAPPER_PASSWD};
                $ENV{NSS_WRAPPER_GROUP} = $env_vars->{NSS_WRAPPER_GROUP};
 
-               # Start slapd before smbd, but with the fifo on stdin
+               $ENV{UID_WRAPPER} = "1";
+
+               # Start slapd before samba, but with the fifo on stdin
                if (defined($self->{ldap})) {
                    $self->slapd_start($env_vars) or 
-                       die("couldn't start slapd (2nd time)");
+                       die("couldn't start slapd (main run)");
                }
 
                my $optarg = "";
                if (defined($max_time)) {
                        $optarg = "--maximum-runtime=$max_time ";
                }
-               if (defined($ENV{SMBD_OPTIONS})) {
-                       $optarg.= " $ENV{SMBD_OPTIONS}";
+               if (defined($ENV{SAMBA_OPTIONS})) {
+                       $optarg.= " $ENV{SAMBA_OPTIONS}";
                }
-               my $ret = system("$valgrind $self->{bindir}/samba $optarg $env_vars->{CONFIGURATION} -M single -i --leak-report-full");
+               my $samba = $self->bindir_path("samba");
+
+               # allow selection of the process model using
+               # the environment varibale SAMBA_PROCESS_MODEL
+               # that allows us to change the process model for 
+               # individual machines in the build farm
+               my $model = "single";
+               if (defined($ENV{SAMBA_PROCESS_MODEL})) {
+                       $model = $ENV{SAMBA_PROCESS_MODEL};
+               }
+               my $ret = system("$valgrind $samba $optarg $env_vars->{CONFIGURATION} -M $model -i");
                if ($? == -1) {
-                       print "Unable to start samba: $ret: $!\n";
+                       print "Unable to start $samba: $ret: $!\n";
                        exit 1;
                }
-               unlink($env_vars->{SMBD_TEST_FIFO});
+               unlink($env_vars->{SAMBA_TEST_FIFO});
                my $exit = $? >> 8;
                if ( $ret == 0 ) {
-                       print "samba exits with status $exit\n";
+                       print "$samba exits with status $exit\n";
                } elsif ( $ret & 127 ) {
-                       print "samba got signal ".($ret & 127)." and exits with $exit!\n";
+                       print "$samba got signal ".($ret & 127)." and exits with $exit!\n";
                } else {
                        $ret = $? >> 8;
-                       print "samba failed with status $exit!\n";
+                       print "$samba failed with status $exit!\n";
                }
                exit $exit;
        }
        print "DONE\n";
 
-       open(DATA, ">$env_vars->{SMBD_TEST_FIFO}");
+       open(DATA, ">$env_vars->{SAMBA_TEST_FIFO}");
 
        return $pid;
 }
@@ -149,18 +167,19 @@ sub wait_for_start($$)
 
        # This will return quickly when things are up, but be slow if we 
        # need to wait for (eg) SSL init 
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{SERVER}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{SERVER}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{NETBIOSNAME}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{NETBIOSNAME}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{NETBIOSALIAS}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{NETBIOSALIAS}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{SERVER}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{SERVER}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{NETBIOSNAME}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{NETBIOSNAME}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{NETBIOSALIAS}");
-       system("bin/nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{NETBIOSALIAS}");
+       my $nmblookup = $self->bindir_path("nmblookup");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{SERVER}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{SERVER}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{NETBIOSNAME}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{NETBIOSNAME}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{NETBIOSALIAS}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{NETBIOSALIAS}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{SERVER}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{SERVER}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{NETBIOSNAME}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{NETBIOSNAME}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} $testenv_vars->{NETBIOSALIAS}");
+       system("$nmblookup $testenv_vars->{CONFIGURATION} -U $testenv_vars->{SERVER_IP} $testenv_vars->{NETBIOSALIAS}");
 
        print $self->getlog_env($testenv_vars);
 }
@@ -169,7 +188,8 @@ sub write_ldb_file($$$)
 {
        my ($self, $file, $ldif) = @_;
 
-       open(LDIF, "|$self->{bindir}/ldbadd -H $file >/dev/null");
+       my $ldbadd = $self->bindir_path("ldbadd");
+       open(LDIF, "|$ldbadd -H $file >/dev/null");
        print LDIF $ldif;
        return close(LDIF);
 }
@@ -189,128 +209,26 @@ type: 0x3
 ");
 }
 
-sub mk_fedora_ds($$$)
+sub mk_fedora_ds($$)
 {
-       my ($self, $ldapdir, $configuration) = @_;
-
-       my $fedora_ds_inf = "$ldapdir/fedorads.inf";
-       my $fedora_ds_extra_ldif = "$ldapdir/fedorads-partitions.ldif";
+       my ($self, $ldapdir) = @_;
 
        #Make the subdirectory be as fedora DS would expect
        my $fedora_ds_dir = "$ldapdir/slapd-samba4";
 
        my $pidfile = "$fedora_ds_dir/logs/slapd-samba4.pid";
 
-my $dir = getcwd();
-chdir "$ENV{FEDORA_DS_ROOT}/bin" || die;
-       if (system("perl $ENV{FEDORA_DS_ROOT}/sbin/setup-ds.pl --silent --file=$fedora_ds_inf >&2") != 0) {
-            chdir $dir;
-            die("perl $ENV{FEDORA_DS_ROOT}/sbin/setup-ds.pl --silent --file=$fedora_ds_inf FAILED: $?");
-        }
-        chdir $dir || die;
-
        return ($fedora_ds_dir, $pidfile);
 }
 
-sub mk_openldap($$$)
+sub mk_openldap($$)
 {
-       my ($self, $ldapdir, $configuration) = @_;
+       my ($self, $ldapdir) = @_;
 
-       my $slapd_conf = "$ldapdir/slapd.conf";
+       my $slapd_conf_d = "$ldapdir/slapd.d";
        my $pidfile = "$ldapdir/slapd.pid";
-       my $modconf = "$ldapdir/modules.conf";
-
-       my $oldpath = $ENV{PATH};
-       my $olpath = "";
-       my $olroot = "";
-       if (defined $ENV{OPENLDAP_ROOT}) {
-               $olroot = "$ENV{OPENLDAP_ROOT}";
-              $olpath = "$olroot/libexec:$olroot/sbin:";
-       }
-       $ENV{PATH} = "$olpath/usr/local/sbin:/usr/sbin:/sbin:$ENV{PATH}";
-
-       unlink($modconf);
-       open(CONF, ">$modconf"); close(CONF);
-
-       if (system("slaptest -u -f $slapd_conf >&2") != 0) {
-               open(CONF, ">$modconf"); 
-               # enable slapd modules
-               print CONF "
-modulepath      $olroot/libexec/openldap
-moduleload     syncprov
-moduleload      memberof
-moduleload      refint
-";
-               close(CONF);
-       }
-       if (system("slaptest -u -f $slapd_conf >&2") != 0) {
-               open(CONF, ">$modconf"); 
-               # enable slapd modules
-               print CONF "
-modulepath      $olroot/libexec/openldap
-moduleload     back_hdb
-moduleload     syncprov
-moduleload      memberof
-moduleload      refint
-";
-               close(CONF);
-       }
-
-       if (system("slaptest -u -f $slapd_conf >&2") != 0) {
-               open(CONF, ">$modconf"); 
-               # enable slapd modules
-               print CONF "
-moduleload     back_hdb
-moduleload     syncprov
-moduleload      memberof
-moduleload      refint
-";
-               close(CONF);
-       }
-
-       if (system("slaptest -u -f $slapd_conf >&2") != 0) {
-               open(CONF, ">$modconf"); 
-               # enable slapd modules
-               print CONF "
-modulepath     /usr/lib/ldap
-moduleload     back_hdb
-moduleload     syncprov
-moduleload      memberof
-moduleload      refint
-";
-               close(CONF);
-       }
 
-       if (system("slaptest -u -f $slapd_conf >&2") != 0) {
-               open(CONF, ">$modconf"); 
-               # enable slapd modules (Fedora layout)
-               print CONF "
-modulepath     /usr/lib/openldap
-moduleload     syncprov
-moduleload      memberof
-moduleload      refint
-";
-               close(CONF);
-       }
-
-       if (system("slaptest -u -f $slapd_conf >&2") != 0) {
-               open(CONF, ">$modconf"); 
-               # enable slapd modules (Fedora x86_64 layout)
-               print CONF "
-modulepath     /usr/lib64/openldap
-moduleload     syncprov
-moduleload      memberof
-moduleload      refint
-";
-               close(CONF);
-       }
-
-       system("slaptest -u -f $slapd_conf") == 0 or die("slaptest still fails after adding modules");
-
-    
-       $ENV{PATH} = $oldpath;
-
-       return ($slapd_conf, $pidfile);
+       return ($slapd_conf_d, $pidfile);
 }
 
 sub mk_keyblobs($$)
@@ -327,6 +245,7 @@ sub mk_keyblobs($$)
        my $adminkeyfile = "$tlsdir/adminkey.pem";
        my $reqadmin = "$tlsdir/req-admin.der";
        my $admincertfile = "$tlsdir/admincert.pem";
+       my $admincertupnfile = "$tlsdir/admincertupn.pem";
 
        mkdir($tlsdir, 0777);
 
@@ -474,211 +393,252 @@ EOF
        open(ADMINCERTFILE, ">$admincertfile");
        print ADMINCERTFILE <<EOF;
 -----BEGIN CERTIFICATE-----
-MIIDHTCCAoagAwIBAgIUC0W5dW/N9kE+NgD0mKK34YgyqQ0wCwYJKoZIhvcNAQEFMFIxEzAR
+MIIDHTCCAoagAwIBAgIUUggzW4lLRkMKe1DAR2NKatkMDYwwCwYJKoZIhvcNAQELMFIxEzAR
 BgoJkiaJk/IsZAEZDANjb20xFzAVBgoJkiaJk/IsZAEZDAdleGFtcGxlMRUwEwYKCZImiZPy
-LGQBGQwFc2FtYmExCzAJBgNVBAMMAkNBMCIYDzIwMDgwMzAxMTMyMzAwWhgPMjAzMzAyMjQx
-MzIzMDBaMG0xEzARBgoJkiaJk/IsZAEZDANjb20xFzAVBgoJkiaJk/IsZAEZDAdleGFtcGxl
+LGQBGQwFc2FtYmExCzAJBgNVBAMMAkNBMCIYDzIwMDkwNzI3MDMzMjE1WhgPMjAzNDA3MjIw
+MzMyMTVaMG0xEzARBgoJkiaJk/IsZAEZDANjb20xFzAVBgoJkiaJk/IsZAEZDAdleGFtcGxl
 MRUwEwYKCZImiZPyLGQBGQwFc2FtYmExDjAMBgNVBAMMBXVzZXJzMRYwFAYDVQQDDA1BZG1p
 bmlzdHJhdG9yMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0+OL7TQBj0RejbIH1+g5G
 eRaWaM9xF43uE5y7jUHEsi5owhZF5iIoHZeeL6cpDF5y1BZRs0JlA1VqMry1jjKlzFYVEMMF
 xB6esnXhl0Jpip1JkUMMXLOP1m/0dqayuHBWozj9f/cdyCJr0wJIX1Z8Pr+EjYRGPn/MF0xd
 l3JRlwIDAQABo4HSMIHPMA4GA1UdDwEB/wQEAwIFoDAoBgNVHSUEITAfBgcrBgEFAgMEBggr
 BgEFBQcDAgYKKwYBBAGCNxQCAjBIBgNVHREEQTA/oD0GBisGAQUCAqAzMDGgExsRU0FNQkEu
-RVhBTVBMRS5DT02hGjAYoAMCAQGhETAPGw1hZG1pbmlzdHJhdG9yMB8GA1UdIwQYMBaAFMLZ
+RVhBTVBMRS5DT02hGjAYoAMCAQGhETAPGw1BZG1pbmlzdHJhdG9yMB8GA1UdIwQYMBaAFMLZ
 ufegDKLZs0VOyFXYK1L6M8oyMB0GA1UdDgQWBBQg81bLyfCA88C2B/BDjXlGuaFaxjAJBgNV
-HRMEAjAAMA0GCSqGSIb3DQEBBQUAA4GBAHsqSqul0hZCXn4t8Kfp3v/JLMiUMJihR1XOgzoa
-ufLOQ1HNzFUHKuo1JEQ1+i5gHT/arLu/ZBF4BfQol7vW27gKIEt0fkRV8EvoPxXvSokHq0Ku
-HCuPOhYNEP3wYiwB3g93NMCinWVlz0mh5aijEU7y/XrjlZxBKFFrTE+BJi1o
+HRMEAjAAMA0GCSqGSIb3DQEBCwUAA4GBAEf/OSHUDJaGdtWGNuJeqcVYVMwrfBAc0OSwVhz1
+7/xqKHWo8wIMPkYRtaRHKLNDsF8GkhQPCpVsa6mX/Nt7YQnNvwd+1SBP5E8GvwWw9ZzLJvma
+nk2n89emuayLpVtp00PymrDLRBcNaRjFReQU8f0o509kiVPHduAp3jOiy13l
 -----END CERTIFICATE-----
 EOF
        close(ADMINCERTFILE);
+
+       # hxtool issue-certificate --ca-certificate=FILE:$CAFILE,$KEYFILE \
+       # --type="pkinit-client" \
+       # --ms-upn="administrator@samba.example.com" \
+       # --req="PKCS10:$ADMINREQFILE" --certificate="FILE:$ADMINCERTUPNFILE" \
+       # --lifetime="25 years"
+       
+       open(ADMINCERTUPNFILE, ">$admincertupnfile");
+       print ADMINCERTUPNFILE <<EOF;
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+EOF
 }
 
-sub provision($$$$$$)
+#
+# provision_raw_prepare() is also used by Samba34.pm!
+#
+sub provision_raw_prepare($$$$$$$)
 {
-       my ($self, $prefix, $server_role, $netbiosname, $netbiosalias, $swiface, $password) = @_;
-
-       my $server_loglevel = 1;
-       my $username = "administrator";
-       my $domain = "SAMBADOMAIN";
-       my $realm = "SAMBA.EXAMPLE.COM";
-       my $dnsname = "samba.example.com";
-       my $basedn = "dc=samba,dc=example,dc=com";
-       my $unix_name = ($ENV{USER} or $ENV{LOGNAME} or `whoami`);
-       chomp $unix_name;
-       my $unix_uid = $>;
-       my $unix_gids_str = $);
-       my @unix_gids = split(" ", $unix_gids_str);
-       my $srcdir="$RealBin/..";
+       my ($self, $prefix, $server_role, $netbiosname, $netbiosalias, $swiface, $password, $kdc_ipv4) = @_;
+       my $ctx;
+
        -d $prefix or mkdir($prefix, 0777) or die("Unable to create $prefix");
        my $prefix_abs = abs_path($prefix);
-       my $tmpdir = "$prefix_abs/tmp";
-       my $etcdir = "$prefix_abs/etc";
-       my $piddir = "$prefix_abs/pid";
-       my $conffile = "$etcdir/smb.conf";
-       my $krb5_config = "$etcdir/krb5.conf";
-       my $privatedir = "$prefix_abs/private";
-       my $ncalrpcdir = "$prefix_abs/ncalrpc";
-       my $lockdir = "$prefix_abs/lockdir";
-       my $winbindd_socket_dir = "$prefix_abs/winbindd_socket";
-       my $winbindd_privileged_socket_dir = "$prefix_abs/winbindd_privileged_socket";
-       my $ntp_signd_socket_dir = "$prefix_abs/ntp_signd_socket";
-       my $nsswrap_passwd = "$etcdir/passwd";
-       my $nsswrap_group = "$etcdir/group";
 
-       my $configuration = "--configfile=$conffile";
-       my $ldapdir = "$privatedir/ldap";
+       die ("prefix=''") if $prefix_abs eq "";
+       die ("prefix='/'") if $prefix_abs eq "/";
+
+       (system("rm -rf $prefix_abs/*") == 0) or die("Unable to clean up");
 
-       my $tlsdir = "$privatedir/tls";
+       $ctx->{prefix} = $prefix;
+       $ctx->{prefix_abs} = $prefix_abs;
+       $ctx->{server_role} = $server_role;
+       $ctx->{netbiosname} = $netbiosname;
+       $ctx->{netbiosalias} = $netbiosalias;
+       $ctx->{swiface} = $swiface;
+       $ctx->{password} = $password;
+       $ctx->{kdc_ipv4} = $kdc_ipv4;
+
+       $ctx->{server_loglevel} = 1;
+       $ctx->{username} = "Administrator";
+       $ctx->{domain} = "SAMBADOMAIN";
+       $ctx->{realm} = "SAMBA.EXAMPLE.COM";
+       $ctx->{dnsname} = "samba.example.com";
+       $ctx->{basedn} = "dc=samba,dc=example,dc=com";
+
+       my $unix_name = ($ENV{USER} or $ENV{LOGNAME} or `whoami`);
+       chomp $unix_name;
+       $ctx->{unix_name} = $unix_name;
+       $ctx->{unix_uid} = $>;
+       $ctx->{unix_gids_str} = $);
+       @{$ctx->{unix_gids}} = split(" ", $ctx->{unix_gids_str});
+
+       $ctx->{etcdir} = "$prefix_abs/etc";
+       $ctx->{piddir} = "$prefix_abs/pid";
+       $ctx->{smb_conf} = "$ctx->{etcdir}/smb.conf";
+       $ctx->{krb5_conf} = "$ctx->{etcdir}/krb5.conf";
+       $ctx->{privatedir} = "$prefix_abs/private";
+       $ctx->{ncalrpcdir} = "$prefix_abs/ncalrpc";
+       $ctx->{lockdir} = "$prefix_abs/lockdir";
+       $ctx->{winbindd_socket_dir} = "$prefix_abs/winbindd_socket";
+       $ctx->{winbindd_privileged_socket_dir} = "$prefix_abs/winbindd_privileged_socket";
+       $ctx->{ntp_signd_socket_dir} = "$prefix_abs/ntp_signd_socket";
+       $ctx->{nsswrap_passwd} = "$ctx->{etcdir}/passwd";
+       $ctx->{nsswrap_group} = "$ctx->{etcdir}/group";
+
+       $ctx->{tlsdir} = "$ctx->{privatedir}/tls";
+
+       $ctx->{ipv4} = "127.0.0.$swiface";
+       $ctx->{interfaces} = "$ctx->{ipv4}/8";
+
+       $ctx->{localbasedn} = $ctx->{basedn};
+       $ctx->{localbasedn} = "CN=$netbiosname" if $server_role eq "member server";
+
+       push(@{$ctx->{directories}}, $ctx->{privatedir});
+       push(@{$ctx->{directories}}, $ctx->{etcdir});
+       push(@{$ctx->{directories}}, $ctx->{piddir});
+       push(@{$ctx->{directories}}, $ctx->{ncalrpcdir});
+       push(@{$ctx->{directories}}, $ctx->{lockdir});
+
+       $ctx->{smb_conf_extra_options} = "";
+
+       my @provision_options = ();
+       push (@provision_options, "NSS_WRAPPER_PASSWD=\"$ctx->{nsswrap_passwd}\"");
+       push (@provision_options, "NSS_WRAPPER_GROUP=\"$ctx->{nsswrap_group}\"");
+       if (defined($ENV{GDB_PROVISION})) {
+               push (@provision_options, "gdb --args");
+       }
+       if (defined($ENV{VALGRIND_PROVISION})) {
+               push (@provision_options, "valgrind");
+       }
+       if (defined($ENV{PYTHON})) {
+               push (@provision_options, $ENV{PYTHON});
+       }
+       push (@provision_options, "$self->{setupdir}/provision");
+       push (@provision_options, "--configfile=$ctx->{smb_conf}");
+       push (@provision_options, "--host-name=$ctx->{netbiosname}");
+       push (@provision_options, "--host-ip=$ctx->{ipv4}");
+       push (@provision_options, "--quiet");
+       push (@provision_options, "--domain=$ctx->{domain}");
+       push (@provision_options, "--realm=$ctx->{realm}");
+       push (@provision_options, "--adminpass=$ctx->{password}");
+       push (@provision_options, "--krbtgtpass=krbtgt$ctx->{password}");
+       push (@provision_options, "--machinepass=machine$ctx->{password}");
+       push (@provision_options, "--root=$ctx->{unix_name}");
+       push (@provision_options, "--server-role=\"$ctx->{server_role}\"");
 
-       my $ifaceipv4 = "127.0.0.$swiface";
-       my $interfaces = "$ifaceipv4/8";
+       @{$ctx->{provision_options}} = @provision_options;
 
-       (system("rm -rf $prefix/*") == 0) or die("Unable to clean up");
-       mkdir($_, 0777) foreach ($privatedir, $etcdir, $piddir, $ncalrpcdir, $lockdir, 
-               $tmpdir, "$tmpdir/test1", "$tmpdir/test2");
+       return $ctx;
+}
 
+#
+# provision_raw_step1() is also used by Samba34.pm!
+#
+# Step1 creates the basic configuration
+#
+sub provision_raw_step1($$)
+{
+       my ($self, $ctx) = @_;
 
-       my $localbasedn = $basedn;
-       $localbasedn = "CN=$netbiosname" if $server_role eq "member server";
+       mkdir($_, 0777) foreach (@{$ctx->{directories}});
 
-       open(CONFFILE, ">$conffile");
+       open(CONFFILE, ">$ctx->{smb_conf}")
+               or die("can't open $ctx->{smb_conf}$?");
        print CONFFILE "
 [global]
-       netbios name = $netbiosname
-       netbios aliases = $netbiosalias
-       workgroup = $domain
-       realm = $realm
-       private dir = $privatedir
-       pid directory = $piddir
-       ncalrpc dir = $ncalrpcdir
-       lock dir = $lockdir
+       netbios name = $ctx->{netbiosname}
+       netbios aliases = $ctx->{netbiosalias}
+       workgroup = $ctx->{domain}
+       realm = $ctx->{realm}
+       private dir = $ctx->{privatedir}
+       pid directory = $ctx->{piddir}
+       ncalrpc dir = $ctx->{ncalrpcdir}
+       lock dir = $ctx->{lockdir}
        setup directory = $self->{setupdir}
        modules dir = $self->{bindir}/modules
-       winbindd socket directory = $winbindd_socket_dir
-       winbindd privileged socket directory = $winbindd_privileged_socket_dir
-       ntp signd socket directory = $ntp_signd_socket_dir
-        winbind separator = /
+       winbindd socket directory = $ctx->{winbindd_socket_dir}
+       winbindd privileged socket directory = $ctx->{winbindd_privileged_socket_dir}
+       ntp signd socket directory = $ctx->{ntp_signd_socket_dir}
+       winbind separator = /
        name resolve order = bcast
-       interfaces = $interfaces
-       tls dh params file = $tlsdir/dhparms.pem
-       panic action = $srcdir/script/gdb_backtrace \%PID% \%PROG%
+       interfaces = $ctx->{interfaces}
+       tls dh params file = $ctx->{tlsdir}/dhparms.pem
+       panic action = $RealBin/gdb_backtrace \%PID% \%PROG%
        wins support = yes
-       server role = $server_role
-       max xmit = 32K
-       server max protocol = SMB2
+       server role = $ctx->{server_role}
        notify:inotify = false
        ldb:nosync = true
 #We don't want to pass our self-tests if the PAC code is wrong
        gensec:require_pac = true
-       log level = $server_loglevel
-
-[tmp]
-       path = $tmpdir
-       read only = no
-       ntvfs handler = posix
-       posix:sharedelay = 100000
-       posix:eadb = $lockdir/eadb.tdb
-       posix:oplocktimeout = 3
-       posix:writetimeupdatedelay = 500000
-
-[test1]
-       path = $tmpdir/test1
-       read only = no
-       ntvfs handler = posix
-       posix:sharedelay = 100000
-       posix:eadb = $lockdir/eadb.tdb
-       posix:oplocktimeout = 3
-       posix:writetimeupdatedelay = 500000
-
-[test2]
-       path = $tmpdir/test2
-       read only = no
-       ntvfs handler = posix
-       posix:sharedelay = 100000
-       posix:eadb = $lockdir/eadb.tdb
-       posix:oplocktimeout = 3
-       posix:writetimeupdatedelay = 500000
-
-[cifs]
-       read only = no
-       ntvfs handler = cifs
-       cifs:server = $netbiosname
-       cifs:share = tmp
-#There is no username specified here, instead the client is expected
-#to log in with kerberos, and the serverwill use delegated credentials.
-
-[simple]
-       path = $tmpdir
-       read only = no
-       ntvfs handler = simple
-
-[sysvol]
-       path = $lockdir/sysvol
-       read only = yes
-
-[netlogon]
-       path = $lockdir/sysvol/$dnsname/scripts
-       read only = no
+       log level = $ctx->{server_loglevel}
+       lanman auth = Yes
 
-[cifsposix]
-       copy = simple
-       ntvfs handler = cifsposix   
+       # Begin extra options
+       $ctx->{smb_conf_extra_options}
+       # End extra options
 ";
        close(CONFFILE);
 
-       $self->mk_keyblobs($tlsdir);
+       $self->mk_keyblobs($ctx->{tlsdir});
 
-       open(KRB5CONF, ">$krb5_config");
+       open(KRB5CONF, ">$ctx->{krb5_conf}")
+               or die("can't open $ctx->{krb5_conf}$?");
        print KRB5CONF "
-#Generated krb5.conf for $realm
+#Generated krb5.conf for $ctx->{realm}
 
 [libdefaults]
- default_realm = $realm
+ default_realm = $ctx->{realm}
  dns_lookup_realm = false
  dns_lookup_kdc = false
  ticket_lifetime = 24h
  forwardable = yes
 
 [realms]
- $realm = {
-  kdc = 127.0.0.1:88
-  admin_server = 127.0.0.1:88
-  default_domain = $dnsname
+ $ctx->{realm} = {
+  kdc = $ctx->{kdc_ipv4}:88
+  admin_server = $ctx->{kdc_ipv4}:88
+  default_domain = $ctx->{dnsname}
  }
- $dnsname = {
-  kdc = 127.0.0.1:88
-  admin_server = 127.0.0.1:88
-  default_domain = $dnsname
+ $ctx->{dnsname} = {
+  kdc = $ctx->{kdc_ipv4}:88
+  admin_server = $ctx->{kdc_ipv4}:88
+  default_domain = $ctx->{dnsname}
  }
- $domain = {
-  kdc = 127.0.0.1:88
-  admin_server = 127.0.0.1:88
-  default_domain = $dnsname
+ $ctx->{domain} = {
+  kdc = $ctx->{kdc_ipv4}:88
+  admin_server = $ctx->{kdc_ipv4}:88
+  default_domain = $ctx->{dnsname}
  }
 
 [appdefaults]
-       pkinit_anchors = FILE:$tlsdir/ca.pem
+       pkinit_anchors = FILE:$ctx->{tlsdir}/ca.pem
 
 [kdc]
        enable-pkinit = true
-       pkinit_identity = FILE:$tlsdir/kdc.pem,$tlsdir/key.pem
-       pkinit_anchors = FILE:$tlsdir/ca.pem
+       pkinit_identity = FILE:$ctx->{tlsdir}/kdc.pem,$ctx->{tlsdir}/key.pem
+       pkinit_anchors = FILE:$ctx->{tlsdir}/ca.pem
 
 [domain_realm]
- .$dnsname = $realm
+ .$ctx->{dnsname} = $ctx->{realm}
 ";
        close(KRB5CONF);
 
-       open(PWD, ">$nsswrap_passwd");
+       open(PWD, ">$ctx->{nsswrap_passwd}");
        print PWD "
-root:x:0:0:root gecos:$prefix_abs:/bin/false
-$unix_name:x:$unix_uid:$unix_gids[0]:$unix_name gecos:$prefix_abs:/bin/false
-nobody:x:65534:65533:nobody gecos:$prefix_abs:/bin/false
+root:x:0:0:root gecos:$ctx->{prefix_abs}:/bin/false
+$ctx->{unix_name}:x:$ctx->{unix_uid}:@{$ctx->{unix_gids}}[0]:$ctx->{unix_name} gecos:$ctx->{prefix_abs}:/bin/false
+nobody:x:65534:65533:nobody gecos:$ctx->{prefix_abs}:/bin/false
 ";
        close(PWD);
 
-       open(GRP, ">$nsswrap_group");
+       open(GRP, ">$ctx->{nsswrap_group}");
        print GRP "
 root:x:0:
 wheel:x:10:
@@ -688,93 +648,158 @@ nogroup:x:65534:nobody
 ";
        close(GRP);
 
+       my $configuration = "--configfile=$ctx->{smb_conf}";
+
 #Ensure the config file is valid before we start
-       if (system("$self->{bindir}/testparm $configuration -v --suppress-prompt >/dev/null 2>&1") != 0) {
-               system("$self->{bindir}/testparm -v --suppress-prompt $configuration >&2");
-               die("Failed to create a valid smb.conf configuration!");
+       my $testparm = $self->bindir_path("testparm");
+       if (system("$testparm $configuration -v --suppress-prompt >/dev/null 2>&1") != 0) {
+               system("$testparm -v --suppress-prompt $configuration >&2");
+               die("Failed to create a valid smb.conf configuration $testparm!");
        }
 
-       (system("($self->{bindir}/testparm $configuration -v --suppress-prompt --parameter-name=\"netbios name\" --section-name=global 2> /dev/null | grep -i \"^$netbiosname\" ) >/dev/null 2>&1") == 0) or die("Failed to create a valid smb.conf configuration! $self->{bindir}/testparm $configuration -v --suppress-prompt --parameter-name=\"netbios name\" --section-name=global");
-
-       my @provision_options = ();
-       push (@provision_options, "NSS_WRAPPER_PASSWD=\"$nsswrap_passwd\"");
-       push (@provision_options, "NSS_WRAPPER_GROUP=\"$nsswrap_group\"");
-       if (defined($ENV{GDB_PROVISION})) {
-               push (@provision_options, "gdb --args python");
-       }
-       if (defined($ENV{VALGRIND_PROVISION})) {
-               push (@provision_options, "valgrind");
-       }
-       push (@provision_options, "$self->{setupdir}/provision");
-       push (@provision_options, split(' ', $configuration));
-       push (@provision_options, "--host-name=$netbiosname");
-       push (@provision_options, "--host-ip=$ifaceipv4");
-       push (@provision_options, "--quiet");
-       push (@provision_options, "--domain=$domain");
-       push (@provision_options, "--realm=$realm");
-       push (@provision_options, "--adminpass=$password");
-       push (@provision_options, "--krbtgtpass=krbtgt$password");
-       push (@provision_options, "--machinepass=machine$password");
-       push (@provision_options, "--root=$unix_name");
-
-       push (@provision_options, "--server-role=\"$server_role\"");
-
-       my $ldap_uri= "$ldapdir/ldapi";
-       $ldap_uri =~ s|/|%2F|g;
-       $ldap_uri = "ldapi://$ldap_uri";
+       (system("($testparm $configuration -v --suppress-prompt --parameter-name=\"netbios name\" --section-name=global 2> /dev/null | grep -i \"^$ctx->{netbiosname}\" ) >/dev/null 2>&1") == 0) or die("Failed to create a valid smb.conf configuration! $self->{bindir}/testparm $configuration -v --suppress-prompt --parameter-name=\"netbios name\" --section-name=global");
 
        my $ret = {
-               KRB5_CONFIG => $krb5_config,
-               PIDDIR => $piddir,
-               SERVER => $netbiosname,
-               SERVER_IP => $ifaceipv4,
-               NETBIOSNAME => $netbiosname,
-               NETBIOSALIAS => $netbiosalias,
-               LDAP_URI => $ldap_uri,
-               DOMAIN => $domain,
-               USERNAME => $username,
-               REALM => $realm,
-               PASSWORD => $password,
-               LDAPDIR => $ldapdir,
-               WINBINDD_SOCKET_DIR => $winbindd_socket_dir,
-               NCALRPCDIR => $ncalrpcdir,
-               LOCKDIR => $lockdir,
+               KRB5_CONFIG => $ctx->{krb5_conf},
+               PIDDIR => $ctx->{piddir},
+               SERVER => $ctx->{netbiosname},
+               SERVER_IP => $ctx->{ipv4},
+               NETBIOSNAME => $ctx->{netbiosname},
+               NETBIOSALIAS => $ctx->{netbiosalias},
+               DOMAIN => $ctx->{domain},
+               USERNAME => $ctx->{username},
+               REALM => $ctx->{realm},
+               PASSWORD => $ctx->{password},
+               LDAPDIR => $ctx->{ldapdir},
+               WINBINDD_SOCKET_DIR => $ctx->{winbindd_socket_dir},
+               NCALRPCDIR => $ctx->{ncalrpcdir},
+               LOCKDIR => $ctx->{lockdir},
+               SERVERCONFFILE => $ctx->{smb_conf},
                CONFIGURATION => $configuration,
-               SOCKET_WRAPPER_DEFAULT_IFACE => $swiface,
-               NSS_WRAPPER_PASSWD => $nsswrap_passwd,
-               NSS_WRAPPER_GROUP => $nsswrap_group,
+               SOCKET_WRAPPER_DEFAULT_IFACE => $ctx->{swiface},
+               NSS_WRAPPER_PASSWD => $ctx->{nsswrap_passwd},
+               NSS_WRAPPER_GROUP => $ctx->{nsswrap_group},
+               SAMBA_TEST_FIFO => "$ctx->{prefix}/samba_test.fifo",
+               SAMBA_TEST_LOG => "$ctx->{prefix}/samba_test.log",
+               SAMBA_TEST_LOG_POS => 0,
        };
 
-       if (defined($self->{ldap})) {
+       return $ret;
+}
+
+#
+# provision_raw_step2() is also used by Samba34.pm!
+#
+# Step2 runs the provision script
+#
+sub provision_raw_step2($$$)
+{
+       my ($self, $ctx, $ret) = @_;
+
+       my $provision_cmd = join(" ", @{$ctx->{provision_options}});
+       (system($provision_cmd) == 0) or die("Unable to provision: \n$provision_cmd\n");
+
+       return $ret;
+}
+
+sub provision($$$$$$$)
+{
+       my ($self, $prefix, $server_role, $netbiosname, $netbiosalias, $swiface, $password, $kdc_ipv4) = @_;
 
-                push (@provision_options, "--ldap-backend=$ldap_uri");
-               system("$self->{setupdir}/provision-backend $configuration --ldap-admin-pass=$password --root=$unix_name --realm=$realm --domain=$domain --host-name=$netbiosname --ldap-backend-type=$self->{ldap}>&2") == 0 or die("backend provision failed");
+       my $ctx = $self->provision_raw_prepare($prefix, $server_role,
+                                              $netbiosname, $netbiosalias,
+                                              $swiface, $password, $kdc_ipv4);
 
-               push (@provision_options, "--password=$password");
+       $ctx->{tmpdir} = "$ctx->{prefix_abs}/tmp";
+       push(@{$ctx->{directories}}, "$ctx->{tmpdir}");
+       push(@{$ctx->{directories}}, "$ctx->{tmpdir}/test1");
+       push(@{$ctx->{directories}}, "$ctx->{tmpdir}/test2");
 
-               if ($self->{ldap} eq "openldap") {
-                      push (@provision_options, "--username=samba-admin");
-                      ($ret->{SLAPD_CONF}, $ret->{OPENLDAP_PIDFILE}) = $self->mk_openldap($ldapdir, $configuration) or die("Unable to create openldap directories");
-                      push (@provision_options, "--ldap-backend-type=openldap");
-               } elsif ($self->{ldap} eq "fedora-ds") {
-                      push (@provision_options, "--simple-bind-dn=cn=Manager,$localbasedn");
-                      ($ret->{FEDORA_DS_DIR}, $ret->{FEDORA_DS_PIDFILE}) = $self->mk_fedora_ds($ldapdir, $configuration) or die("Unable to create fedora ds directories");
-                      push (@provision_options, "--ldap-backend-type=fedora-ds");
-                 }
+       $ctx->{smb_conf_extra_options} = "
 
-               $self->slapd_start($ret) or 
-                       die("couldn't start slapd");
+       max xmit = 32K
+       server max protocol = SMB2
+
+[tmp]
+       path = $ctx->{tmpdir}
+       read only = no
+       posix:sharedelay = 100000
+       posix:eadb = $ctx->{lockdir}/eadb.tdb
+       posix:oplocktimeout = 3
+       posix:writetimeupdatedelay = 500000
+
+[test1]
+       path = $ctx->{tmpdir}/test1
+       read only = no
+       posix:sharedelay = 100000
+       posix:eadb = $ctx->{lockdir}/eadb.tdb
+       posix:oplocktimeout = 3
+       posix:writetimeupdatedelay = 500000
+
+[test2]
+       path = $ctx->{tmpdir}/test2
+       read only = no
+       posix:sharedelay = 100000
+       posix:eadb = $ctx->{lockdir}/eadb.tdb
+       posix:oplocktimeout = 3
+       posix:writetimeupdatedelay = 500000
+
+[cifs]
+       read only = no
+       ntvfs handler = cifs
+       cifs:server = $ctx->{netbiosname}
+       cifs:share = tmp
+#There is no username specified here, instead the client is expected
+#to log in with kerberos, and the serverwill use delegated credentials.
+
+[simple]
+       path = $ctx->{tmpdir}
+       read only = no
+       ntvfs handler = simple
+
+[sysvol]
+       path = $ctx->{lockdir}/sysvol
+       read only = yes
+
+[netlogon]
+       path = $ctx->{lockdir}/sysvol/$ctx->{dnsname}/scripts
+       read only = no
+
+[cifsposix]
+       copy = simple
+       ntvfs handler = cifsposix
+";
+
+       if (defined($self->{ldap})) {
+               $ctx->{ldapdir} = "$ctx->{privatedir}/ldap";
+               push(@{$ctx->{directories}}, "$ctx->{ldapdir}");
+
+               my $ldap_uri= "$ctx->{ldapdir}/ldapi";
+               $ldap_uri =~ s|/|%2F|g;
+               $ldap_uri = "ldapi://$ldap_uri";
+               $ctx->{ldap_uri} = $ldap_uri;
        }
 
-       my $provision_cmd = join(" ", @provision_options);
-       (system($provision_cmd) == 0) or die("Unable to provision: \n$provision_cmd\n");
+       my $ret = $self->provision_raw_step1($ctx);
 
        if (defined($self->{ldap})) {
-               $self->slapd_stop($ret) or 
-                       die("couldn't stop slapd");
-        }
+                $ret->{LDAP_URI} = $ctx->{ldap_uri};
+               push (@{$ctx->{provision_options}}, "--ldap-backend-type=" . $self->{ldap});
+               if ($self->{ldap} eq "openldap") {
+                       push (@{$ctx->{provision_options}}, "--slapd-path=" . $ENV{OPENLDAP_SLAPD});
+                       ($ret->{SLAPD_CONF_D}, $ret->{OPENLDAP_PIDFILE}) = $self->mk_openldap($ctx->{ldapdir}) or die("Unable to create openldap directories");
+
+                } elsif ($self->{ldap} eq "fedora-ds") {
+                       push (@{$ctx->{provision_options}}, "--slapd-path=" . "$ENV{FEDORA_DS_ROOT}/sbin/ns-slapd");
+                       push (@{$ctx->{provision_options}}, "--setup-ds-path=" . "$ENV{FEDORA_DS_ROOT}/sbin/setup-ds.pl");
+                       ($ret->{FEDORA_DS_DIR}, $ret->{FEDORA_DS_PIDFILE}) = $self->mk_fedora_ds($ctx->{ldapdir}) or die("Unable to create fedora ds directories");
+               }
 
-       return $ret; 
+       }
+
+       $ret = $self->provision_raw_step2($ctx, $ret);
+
+       return $ret;
 }
 
 sub provision_member($$$)
@@ -787,22 +812,20 @@ sub provision_member($$$)
                                   "localmember3",
                                   "localmember",
                                   3,
-                                  "localmemberpass");
+                                  "localmemberpass",
+                                  $dcvars->{SERVER_IP});
 
        $ret or die("Unable to provision");
 
+       my $net = $self->bindir_path("net");
        my $cmd = "";
        $cmd .= "SOCKET_WRAPPER_DEFAULT_IFACE=\"$ret->{SOCKET_WRAPPER_DEFAULT_IFACE}\" ";
        $cmd .= "KRB5_CONFIG=\"$ret->{KRB5_CONFIG}\" ";
-       $cmd .= "$self->{bindir}/net join $ret->{CONFIGURATION} $dcvars->{DOMAIN} member";
+       $cmd .= "$net join $ret->{CONFIGURATION} $dcvars->{DOMAIN} member";
        $cmd .= " -U$dcvars->{USERNAME}\%$dcvars->{PASSWORD}";
 
        system($cmd) == 0 or die("Join failed\n$cmd");
 
-       $ret->{SMBD_TEST_FIFO} = "$prefix/smbd_test.fifo";
-       $ret->{SMBD_TEST_LOG} = "$prefix/smbd_test.log";
-       $ret->{SMBD_TEST_LOG_POS} = 0;
-
        $ret->{DC_SERVER} = $dcvars->{SERVER};
        $ret->{DC_SERVER_IP} = $dcvars->{SERVER_IP};
        $ret->{DC_NETBIOSNAME} = $dcvars->{NETBIOSNAME};
@@ -823,14 +846,12 @@ sub provision_dc($$)
                                   "localdc1",
                                   "localdc",
                                   1,
-                                  "localdcpass");
+                                  "localdcpass",
+                                  "127.0.0.1");
 
        $self->add_wins_config("$prefix/private") or 
                die("Unable to add wins configuration");
 
-       $ret->{SMBD_TEST_FIFO} = "$prefix/server_test.fifo";
-       $ret->{SMBD_TEST_LOG} = "$prefix/server_test.log";
-       $ret->{SMBD_TEST_LOG_POS} = 0;
        return $ret;
 }
 
@@ -875,16 +896,16 @@ sub teardown_env($$)
 sub getlog_env($$)
 {
        my ($self, $envvars) = @_;
-       my $title = "SMBD LOG of: $envvars->{NETBIOSNAME}\n";
+       my $title = "SAMBA LOG of: $envvars->{NETBIOSNAME}\n";
        my $out = $title;
 
-       open(LOG, "<$envvars->{SMBD_TEST_LOG}");
+       open(LOG, "<$envvars->{SAMBA_TEST_LOG}");
 
-       seek(LOG, $envvars->{SMBD_TEST_LOG_POS}, SEEK_SET);
+       seek(LOG, $envvars->{SAMBA_TEST_LOG_POS}, SEEK_SET);
        while (<LOG>) {
                $out .= $_;
        }
-       $envvars->{SMBD_TEST_LOG_POS} = tell(LOG);
+       $envvars->{SAMBA_TEST_LOG_POS} = tell(LOG);
        close(LOG);
 
        return "" if $out eq $title;
@@ -896,7 +917,7 @@ sub check_env($$)
 {
        my ($self, $envvars) = @_;
 
-       return 1 if (-p $envvars->{SMBD_TEST_FIFO});
+       return 1 if (-p $envvars->{SAMBA_TEST_FIFO});
 
        print $self->getlog_env($envvars);