wintest: Give dcpromo more time
[kai/samba.git] / wintest / test-s3.py
1 #!/usr/bin/env python
2
3 '''automated testing of Samba3 against windows'''
4
5 import sys, os
6 import optparse
7 import wintest
8
9 def set_libpath(t):
10     t.putenv("LD_LIBRARY_PATH", "${PREFIX}/lib")
11
12 def set_krb5_conf(t):
13     t.run_cmd("mkdir -p ${PREFIX}/etc")
14     t.write_file("${PREFIX}/etc/krb5.conf", 
15                     '''[libdefaults]
16         dns_lookup_realm = false
17         dns_lookup_kdc = true''')
18
19     t.putenv("KRB5_CONFIG", '${PREFIX}/etc/krb5.conf')
20
21 def build_s3(t):
22     '''build samba3'''
23     t.info('Building s3')
24     t.chdir('${SOURCETREE}/source3')
25     t.putenv('CC', 'ccache gcc')
26     t.run_cmd("./autogen.sh")
27     t.run_cmd("./configure -C --prefix=${PREFIX} --enable-developer")
28     t.run_cmd('make basics')
29     t.run_cmd('make -j4')
30     t.run_cmd('rm -rf ${PREFIX}')
31     t.run_cmd('make install')
32
33 def start_s3(t):
34     t.info('Starting Samba3')
35     t.chdir("${PREFIX}")
36     t.run_cmd('killall -9 -q samba smbd nmbd winbindd', checkfail=False)
37     t.run_cmd("rm -f var/locks/*.pid")
38     t.run_cmd(['sbin/nmbd', "-D"])
39     t.run_cmd(['sbin/winbindd', "-D"])
40     t.run_cmd(['sbin/smbd', "-D"])
41     t.port_wait("${INTERFACE_IP}", 139)
42
43 def test_wbinfo(t):
44     t.info('Testing wbinfo')
45     t.chdir('${PREFIX}')
46     t.cmd_contains("bin/wbinfo --version", ["Version 4."])
47     t.cmd_contains("bin/wbinfo -p", ["Ping to winbindd succeeded"])
48     t.retry_cmd("bin/wbinfo --online-status",
49                 ["BUILTIN : online",
50                  "${HOSTNAME} : online",
51                  "${WIN_DOMAIN} : online"],
52                 casefold=True)
53     t.cmd_contains("bin/wbinfo -u",
54                    ["${WIN_DOMAIN}/administrator",
55                     "${WIN_DOMAIN}/krbtgt" ],
56                    casefold=True)
57     t.cmd_contains("bin/wbinfo -g",
58                    ["${WIN_DOMAIN}/domain users",
59                     "${WIN_DOMAIN}/domain guests",
60                     "${WIN_DOMAIN}/domain admins"],
61                    casefold=True)
62     t.cmd_contains("bin/wbinfo --name-to-sid administrator",
63                    "S-1-5-.*-500 SID_USER .1",
64                    regex=True)
65     t.cmd_contains("bin/wbinfo --name-to-sid 'domain users'",
66                    "S-1-5-.*-513 SID_DOM_GROUP .2",
67                    regex=True)
68
69     t.retry_cmd("bin/wbinfo --authenticate=${WIN_DOMAIN}/administrator%${WIN_PASS}",
70                 ["plaintext password authentication succeeded",
71                  "challenge/response password authentication succeeded"])
72
73     t.retry_cmd("bin/wbinfo --krb5auth=${WIN_DOMAIN}/administrator%${WIN_PASS}",
74                 ["succeeded"])
75
76
77 def test_smbclient(t):
78     t.info('Testing smbclient')
79     smbclient = t.getvar("smbclient")
80     t.chdir('${PREFIX}')
81     t.cmd_contains("%s --version" % (smbclient), ["Version 4."])
82     t.cmd_contains('%s -L ${INTERFACE_IP} -U%%' % (smbclient), ["Domain=[${WIN_DOMAIN}]", "test", "IPC$", "Samba 4."],
83                    casefold=True)
84     child = t.pexpect_spawn('%s //${HOSTNAME}.${WIN_REALM}/test -Uroot@${WIN_REALM}%%${PASSWORD2}' % (smbclient))
85     child.expect("smb:")
86     child.sendline("dir")
87     child.expect("blocks available")
88     child.sendline("mkdir testdir")
89     child.expect("smb:")
90     child.sendline("cd testdir")
91     child.expect('testdir')
92     child.sendline("cd ..")
93     child.sendline("rmdir testdir")
94
95     child = t.pexpect_spawn('%s //${HOSTNAME}.${WIN_REALM}/test -Uroot@${WIN_REALM}%%${PASSWORD2} -k' % (smbclient))
96     child.expect("smb:")
97     child.sendline("dir")
98     child.expect("blocks available")
99     child.sendline("mkdir testdir")
100     child.expect("smb:")
101     child.sendline("cd testdir")
102     child.expect('testdir')
103     child.sendline("cd ..")
104     child.sendline("rmdir testdir")
105
106 def create_shares(t):
107     t.info("Adding test shares")
108     t.chdir('${PREFIX}')
109     t.write_file("etc/smb.conf", '''
110 [test]
111        path = ${PREFIX}/test
112        read only = no
113        ''',
114                  mode='a')
115     t.run_cmd("mkdir -p test")
116
117
118 def prep_join_as_member(t, vm):
119     '''prepare to join a windows domain as a member server'''
120     t.setwinvars(vm)
121     t.info("Starting VMs for joining ${WIN_VM} as a member using net ads join")
122     t.chdir('${PREFIX}')
123     t.run_cmd('killall -9 -q samba smbd nmbd winbindd', checkfail=False)
124     t.vm_poweroff("${WIN_VM}", checkfail=False)
125     t.vm_restore("${WIN_VM}", "${WIN_SNAPSHOT}")
126     child = t.open_telnet("${WIN_HOSTNAME}", "administrator", "${WIN_PASS}", set_time=True)
127     t.get_ipconfig(child)
128     t.del_files(["var", "private"])
129     t.write_file("etc/smb.conf", '''
130 [global]
131         netbios name = ${HOSTNAME}
132         log level = ${DEBUGLEVEL}
133         realm = ${WIN_REALM}
134         workgroup = ${WIN_DOMAIN}
135         security = ADS
136         bind interfaces only = yes
137         interfaces = ${INTERFACE}
138         winbind separator = /
139         idmap uid = 1000000-2000000
140         idmap gid = 1000000-2000000
141         winbind enum users = yes
142         winbind enum groups = yes
143         max protocol = SMB2
144         map hidden = no
145         map system = no
146         ea support = yes
147         panic action = xterm -e gdb --pid %d
148     ''')
149
150 def join_as_member(t, vm):
151     '''join a windows domain as a member server'''
152     t.setwinvars(vm)
153     t.info("Joining ${WIN_VM} as a member using net ads join")
154     t.port_wait("${WIN_IP}", 389)
155     t.retry_cmd("host -t SRV _ldap._tcp.${WIN_REALM} ${WIN_IP}", ['has SRV record'] )
156     t.cmd_contains("bin/net ads join -Uadministrator%${WIN_PASS}", ["Joined"])
157     t.cmd_contains("bin/net ads testjoin", ["Join is OK"])
158     t.cmd_contains("bin/net ads dns register ${HOSTNAME}.${WIN_REALM} -P", ["Successfully registered hostname with DNS"])
159     t.cmd_contains("host -t A ${HOSTNAME}.${WIN_REALM}",
160                  ['${HOSTNAME}.${WIN_REALM} has address'])
161
162 def create_root_account(t, vm):
163     t.setwinvars(vm)
164     t.info("Creating 'root' account for testing Samba3 member server")
165     t.chdir('${PREFIX}')
166     t.run_cmd('bin/net ads user add root -Uadministrator%${WIN_PASS}')
167     child = t.pexpect_spawn('bin/net ads password root -Uadministrator%${WIN_PASS}')
168     child.expect("Enter new password for root")
169     child.sendline("${PASSWORD2}")
170     child.expect("Password change for ");
171     child.expect(" completed")
172     child = t.pexpect_spawn('bin/net rpc shell -S ${WIN_HOSTNAME}.${WIN_REALM} -Uadministrator%${WIN_PASS}')
173     child.expect("net rpc>")
174     child.sendline("user edit disabled root no")
175     child.expect("Set root's disabled flag")
176
177 def test_join_as_member(t, vm):
178     '''test the domain join'''
179     t.setwinvars(vm)
180     t.info('Testing join as member')
181     t.chdir('${PREFIX}')
182     test_wbinfo(t)
183     test_smbclient(t)
184
185
186 def test_s3(t):
187     '''basic s3 testing'''
188
189     t.setvar("SAMBA_VERSION", "Version 4")
190     t.setvar("smbclient", "bin/smbclient")
191     t.check_prerequesites()
192     set_libpath(t)
193
194     if not t.skip("configure_bind"):
195         t.configure_bind()
196     if not t.skip("stop_bind"):
197         t.stop_bind()
198     if not t.skip("stop_vms"):
199         t.stop_vms()
200
201     if not t.skip("build"):
202         build_s3(t)
203
204     set_krb5_conf(t)
205     if not t.skip("configure_bind2"):
206         t.configure_bind()
207     if not t.skip("start_bind"):
208         t.start_bind()
209
210     dc_started = False
211     if t.have_var('W2K8R2A_VM') and not t.skip("join_w2k8r2"):
212         t.start_winvm('W2K8R2A')
213         dc_started = True
214         prep_join_as_member(t, "W2K8R2A")
215         t.run_dcpromo_as_first_dc("W2K8R2A", func_level='2008r2')
216         join_as_member(t, "W2K8R2A")
217         create_shares(t)
218         start_s3(t)
219         create_root_account(t, "W2K8R2A")
220         test_join_as_member(t, "W2K8R2A")
221
222     if t.have_var('WINDOWS7_VM') and t.have_var('W2K8R2A_VM') and not t.skip("join_windows7_2008r2"):
223         if not dc_started:
224             t.start_winvm('W2K8R2A')
225             t.run_dcpromo_as_first_dc("W2K8R2A", func_level='2008r2')
226             dc_started = True
227         else:
228             t.setwinvars('W2K8R2A')
229         realm = t.getvar("WIN_REALM")
230         dom_username = t.getvar("WIN_USER")
231         dom_password = t.getvar("WIN_PASS")
232         dom_realm = t.getvar("WIN_REALM")
233         t.start_winvm('WINDOWS7')
234         t.test_remote_smbclient("WINDOWS7")
235         t.run_winjoin('WINDOWS7', realm, username=dom_username, password=dom_password)
236         t.test_remote_smbclient("WINDOWS7", dom_username, dom_password)
237         t.test_remote_smbclient('WINDOWS7', dom_username, dom_password, args='--option=clientntlmv2auth=no')
238         t.test_remote_smbclient('WINDOWS7', "%s@%s" % (dom_username, dom_realm), dom_password, args="-k")
239         t.test_remote_smbclient('WINDOWS7', "%s@%s" % (dom_username, dom_realm), dom_password, args="-k --option=clientusespnegoprincipal=yes")
240         t.test_net_use('WINDOWS7', dom_realm, t.getvar("W2K8R2A_DOMAIN"), 'root', '${PASSWORD2}')
241
242     if t.have_var('WINXP_VM') and t.have_var('W2K8R2A_VM') and not t.skip("join_winxp_2008r2"):
243         if not dc_started:
244             t.start_winvm('W2K8R2A')
245             t.run_dcpromo_as_first_dc("W2K8R2A", func_level='2008r2')
246             dc_started = True
247         else:
248             t.setwinvars('W2K8R2A')
249         realm = t.getvar("WIN_REALM")
250         dom_username = t.getvar("WIN_USER")
251         dom_password = t.getvar("WIN_PASS")
252         dom_realm = t.getvar("WIN_REALM")
253         t.start_winvm('WINXP')
254         t.run_winjoin('WINXP', realm, username=dom_username, password=dom_password)
255         t.test_remote_smbclient('WINXP', dom_username, dom_password)
256         t.test_remote_smbclient('WINXP', dom_username, dom_password, args='--option=clientntlmv2auth=no')
257         t.test_remote_smbclient('WINXP', "%s@%s" % (dom_username, dom_realm), dom_password, args="-k")
258         t.test_remote_smbclient('WINXP', "%s@%s" % (dom_username, dom_realm), dom_password, args="-k --clientusespnegoprincipal=yes")
259         t.test_net_use('WINXP', dom_realm, t.getvar("W2K8R2A_DOMAIN"), 'root', '${PASSWORD2}')
260
261     t.info("S3 test: All OK")
262
263
264 def test_cleanup(t):
265     '''cleanup after tests'''
266     t.info("Cleaning up ...")
267     t.restore_resolv_conf()
268     if getattr(t, 'bind_child', False):
269         t.bind_child.kill()
270
271
272 if __name__ == '__main__':
273     t = wintest.wintest()
274
275     t.setup("test-s3.py", "source3")
276
277     try:
278         test_s3(t)
279     except:
280         if not t.opts.nocleanup:
281             test_cleanup(t)
282         raise
283
284     if not t.opts.nocleanup:
285         test_cleanup(t)
286     t.info("S3 test: All OK")