source4/torture/libnet/libnet_user.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Test suite for libnet calls.
   4
   5    Copyright (C) Rafal Szczesniak 2005
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 3 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19 */
  20
  21 #include "includes.h"
  22 #include "system/time.h"
  23 #include "lib/cmdline/popt_common.h"
  24 #include "libnet/libnet.h"
  25 #include "librpc/gen_ndr/ndr_samr_c.h"
  26 #include "librpc/gen_ndr/ndr_lsa_c.h"
  27 #include "torture/rpc/torture_rpc.h"
  28 #include "torture/libnet/usertest.h"
  29 #include "torture/libnet/proto.h"
  30 #include "param/param.h"
  31
  32
  33
  34 bool torture_createuser(struct torture_context *torture)
  35 {
  36         NTSTATUS status;
  37         TALLOC_CTX *mem_ctx;
  38         struct libnet_context *ctx = NULL;
  39         struct libnet_CreateUser req;
  40         bool ret = true;
  41
  42         mem_ctx = talloc_init("test_createuser");
  43
  44         if (!test_libnet_context_init(torture, true, &ctx)) {
  45                 return false;
  46         }
  47
  48         req.in.user_name = TEST_USERNAME;
  49         req.in.domain_name = lpcfg_workgroup(torture->lp_ctx);
  50         req.out.error_string = NULL;
  51
  52         status = libnet_CreateUser(ctx, mem_ctx, &req);
  53         if (!NT_STATUS_IS_OK(status)) {
  54                 torture_comment(torture, "libnet_CreateUser call failed: %s\n", nt_errstr(status));
  55                 ret = false;
  56                 goto done;
  57         }
  58
  59         if (!test_user_cleanup(torture, ctx->samr.pipe->binding_handle,
  60                                mem_ctx, &ctx->samr.handle, TEST_USERNAME)) {
  61                 torture_comment(torture, "cleanup failed\n");
  62                 ret = false;
  63                 goto done;
  64         }
  65
  66         if (!test_samr_close_handle(torture,
  67                                     ctx->samr.pipe->binding_handle, mem_ctx, &ctx->samr.handle)) {
  68                 torture_comment(torture, "domain close failed\n");
  69                 ret = false;
  70         }
  71
  72 done:
  73         talloc_free(ctx);
  74         talloc_free(mem_ctx);
  75         return ret;
  76 }
  77
  78
  79 bool torture_deleteuser(struct torture_context *torture)
  80 {
  81         NTSTATUS status;
  82         struct dcerpc_pipe *p;
  83         TALLOC_CTX *mem_ctx;
  84         struct policy_handle h;
  85         struct lsa_String domain_name;
  86         const char *name = TEST_USERNAME;
  87         struct libnet_context *ctx = NULL;
  88         struct libnet_DeleteUser req;
  89         bool ret = false;
  90
  91         status = torture_rpc_connection(torture,
  92                                         &p,
  93                                         &ndr_table_samr);
  94         torture_assert_ntstatus_ok(torture, status, "torture_rpc_connection() failed");
  95
  96         mem_ctx = talloc_init("torture_deleteuser");
  97
  98         /*
  99          * Pre-create a user to be deleted later
 100          */
 101         domain_name.string = lpcfg_workgroup(torture->lp_ctx);
 102         ret = test_domain_open(torture, p->binding_handle, &domain_name, mem_ctx, &h, NULL);
 103         torture_assert_goto(torture, ret, ret, done, "test_domain_open() failed");
 104
 105         ret = test_user_create(torture, p->binding_handle, mem_ctx, &h, name, NULL);
 106         torture_assert_goto(torture, ret, ret, done, "test_user_create() failed");
 107
 108         /*
 109          * Delete the user using libnet layer
 110          */
 111         ret = test_libnet_context_init(torture, true, &ctx);
 112         torture_assert_goto(torture, ret, ret, done, "test_libnet_context_init() failed");
 113
 114         req.in.user_name = TEST_USERNAME;
 115         req.in.domain_name = lpcfg_workgroup(torture->lp_ctx);
 116
 117         status = libnet_DeleteUser(ctx, mem_ctx, &req);
 118         torture_assert_ntstatus_ok_goto(torture, status, ret, done, "libnet_DeleteUser() failed");
 119
 120         /* mark test as successful */
 121         ret = true;
 122
 123 done:
 124         talloc_free(ctx);
 125         talloc_free(mem_ctx);
 126         return ret;
 127 }
 128
 129
 130 /*
 131   Generate testing set of random changes
 132 */
 133
 134 static void set_test_changes(struct torture_context *tctx,
 135                              TALLOC_CTX *mem_ctx, struct libnet_ModifyUser *r,
 136                              int num_changes, char **user_name, enum test_fields req_change)
 137 {
 138         const char* logon_scripts[] = { "start_login.cmd", "login.bat", "start.cmd" };
 139         const char* home_dirs[] = { "\\\\srv\\home", "\\\\homesrv\\home\\user", "\\\\pdcsrv\\domain" };
 140         const char* home_drives[] = { "H:", "z:", "I:", "J:", "n:" };
 141         const uint32_t flags[] = { (ACB_DISABLED | ACB_NORMAL | ACB_PW_EXPIRED),
 142                                    (ACB_NORMAL | ACB_PWNOEXP),
 143                                    (ACB_NORMAL | ACB_PW_EXPIRED) };
 144         const char *homedir, *homedrive, *logonscript;
 145         struct timeval now;
 146         int i, testfld;
 147
 148         torture_comment(tctx, "Fields to change: [");
 149
 150         for (i = 0; i < num_changes && i <= USER_FIELD_LAST; i++) {
 151                 const char *fldname;
 152
 153                 testfld = (req_change == none) ? (random() % USER_FIELD_LAST) + 1 : req_change;
 154
 155                 /* get one in case we hit time field this time */
 156                 gettimeofday(&now, NULL);
 157
 158                 switch (testfld) {
 159                 case acct_name:
 160                         continue_if_field_set(r->in.account_name);
 161                         r->in.account_name = talloc_asprintf(mem_ctx, TEST_CHG_ACCOUNTNAME,
 162                                                              (int)(random() % 100));
 163                         fldname = "account_name";
 164
 165                         /* update the test's user name in case it's about to change */
 166                         *user_name = talloc_strdup(mem_ctx, r->in.account_name);
 167                         break;
 168
 169                 case acct_full_name:
 170                         continue_if_field_set(r->in.full_name);
 171                         r->in.full_name = talloc_asprintf(mem_ctx, TEST_CHG_FULLNAME,
 172                                                           (unsigned int)random(), (unsigned int)random());
 173                         fldname = "full_name";
 174                         break;
 175
 176                 case acct_description:
 177                         continue_if_field_set(r->in.description);
 178                         r->in.description = talloc_asprintf(mem_ctx, TEST_CHG_DESCRIPTION,
 179                                                             (long)random());
 180                         fldname = "description";
 181                         break;
 182
 183                 case acct_home_directory:
 184                         continue_if_field_set(r->in.home_directory);
 185                         homedir = home_dirs[random() % ARRAY_SIZE(home_dirs)];
 186                         r->in.home_directory = talloc_strdup(mem_ctx, homedir);
 187                         fldname = "home_dir";
 188                         break;
 189
 190                 case acct_home_drive:
 191                         continue_if_field_set(r->in.home_drive);
 192                         homedrive = home_drives[random() % ARRAY_SIZE(home_drives)];
 193                         r->in.home_drive = talloc_strdup(mem_ctx, homedrive);
 194                         fldname = "home_drive";
 195                         break;
 196
 197                 case acct_comment:
 198                         continue_if_field_set(r->in.comment);
 199                         r->in.comment = talloc_asprintf(mem_ctx, TEST_CHG_COMMENT,
 200                                                         (unsigned long)random(), (unsigned long)random());
 201                         fldname = "comment";
 202                         break;
 203
 204                 case acct_logon_script:
 205                         continue_if_field_set(r->in.logon_script);
 206                         logonscript = logon_scripts[random() % ARRAY_SIZE(logon_scripts)];
 207                         r->in.logon_script = talloc_strdup(mem_ctx, logonscript);
 208                         fldname = "logon_script";
 209                         break;
 210
 211                 case acct_profile_path:
 212                         continue_if_field_set(r->in.profile_path);
 213                         r->in.profile_path = talloc_asprintf(mem_ctx, TEST_CHG_PROFILEPATH,
 214                                                              (unsigned long)random(), (unsigned int)random());
 215                         fldname = "profile_path";
 216                         break;
 217
 218                 case acct_expiry:
 219                         continue_if_field_set(r->in.acct_expiry);
 220                         now = timeval_add(&now, (random() % (31*24*60*60)), 0);
 221                         r->in.acct_expiry = (struct timeval *)talloc_memdup(mem_ctx, &now, sizeof(now));
 222                         fldname = "acct_expiry";
 223                         break;
 224
 225                 case acct_flags:
 226                         continue_if_field_set(r->in.acct_flags);
 227                         r->in.acct_flags = flags[random() % ARRAY_SIZE(flags)];
 228                         fldname = "acct_flags";
 229                         break;
 230
 231                 default:
 232                         fldname = "unknown_field";
 233                 }
 234
 235                 torture_comment(tctx, ((i < num_changes - 1) ? "%s," : "%s"), fldname);
 236
 237                 /* disable requested field (it's supposed to be the only one used) */
 238                 if (req_change != none) req_change = none;
 239         }
 240
 241         torture_comment(tctx, "]\n");
 242 }
 243
 244
 245 #define TEST_STR_FLD(fld) \
 246         if (!strequal(req.in.fld, user_req.out.fld)) { \
 247                 torture_comment(torture, "failed to change '%s'\n", #fld); \
 248                 ret = false; \
 249                 goto cleanup; \
 250         }
 251
 252 #define TEST_TIME_FLD(fld) \
 253         if (timeval_compare(req.in.fld, user_req.out.fld)) { \
 254                 torture_comment(torture, "failed to change '%s'\n", #fld); \
 255                 ret = false; \
 256                 goto cleanup; \
 257         }
 258
 259 #define TEST_NUM_FLD(fld) \
 260         if (req.in.fld != user_req.out.fld) { \
 261                 torture_comment(torture, "failed to change '%s'\n", #fld); \
 262                 ret = false; \
 263                 goto cleanup; \
 264         }
 265
 266
 267 bool torture_modifyuser(struct torture_context *torture)
 268 {
 269         NTSTATUS status;
 270         struct dcerpc_pipe *p;
 271         TALLOC_CTX *prep_mem_ctx;
 272         struct policy_handle h;
 273         struct lsa_String domain_name;
 274         char *name;
 275         struct libnet_context *ctx = NULL;
 276         struct libnet_ModifyUser req;
 277         struct libnet_UserInfo user_req;
 278         int fld;
 279         bool ret = true;
 280         struct dcerpc_binding_handle *b;
 281
 282         prep_mem_ctx = talloc_init("prepare test_deleteuser");
 283
 284         status = torture_rpc_connection(torture,
 285                                         &p,
 286                                         &ndr_table_samr);
 287         if (!NT_STATUS_IS_OK(status)) {
 288                 ret = false;
 289                 goto done;
 290         }
 291         b = p->binding_handle;
 292
 293         name = talloc_strdup(prep_mem_ctx, TEST_USERNAME);
 294
 295         domain_name.string = lpcfg_workgroup(torture->lp_ctx);
 296         if (!test_domain_open(torture, b, &domain_name, prep_mem_ctx, &h, NULL)) {
 297                 ret = false;
 298                 goto done;
 299         }
 300
 301         if (!test_user_create(torture, b, prep_mem_ctx, &h, name, NULL)) {
 302                 ret = false;
 303                 goto done;
 304         }
 305
 306         torture_comment(torture, "Testing change of all fields - each single one in turn\n");
 307
 308         if (!test_libnet_context_init(torture, true, &ctx)) {
 309                 return false;
 310         }
 311
 312         for (fld = USER_FIELD_FIRST; fld <= USER_FIELD_LAST; fld++) {
 313                 ZERO_STRUCT(req);
 314                 req.in.domain_name = lpcfg_workgroup(torture->lp_ctx);
 315                 req.in.user_name = name;
 316
 317                 set_test_changes(torture, torture, &req, 1, &name, fld);
 318
 319                 status = libnet_ModifyUser(ctx, torture, &req);
 320                 if (!NT_STATUS_IS_OK(status)) {
 321                         torture_comment(torture, "libnet_ModifyUser call failed: %s\n", nt_errstr(status));
 322                         ret = false;
 323                         continue;
 324                 }
 325
 326                 ZERO_STRUCT(user_req);
 327                 user_req.in.domain_name = lpcfg_workgroup(torture->lp_ctx);
 328                 user_req.in.data.user_name = name;
 329                 user_req.in.level = USER_INFO_BY_NAME;
 330
 331                 status = libnet_UserInfo(ctx, torture, &user_req);
 332                 if (!NT_STATUS_IS_OK(status)) {
 333                         torture_comment(torture, "libnet_UserInfo call failed: %s\n", nt_errstr(status));
 334                         ret = false;
 335                         continue;
 336                 }
 337
 338                 switch (fld) {
 339                 case acct_name: TEST_STR_FLD(account_name);
 340                         break;
 341                 case acct_full_name: TEST_STR_FLD(full_name);
 342                         break;
 343                 case acct_comment: TEST_STR_FLD(comment);
 344                         break;
 345                 case acct_description: TEST_STR_FLD(description);
 346                         break;
 347                 case acct_home_directory: TEST_STR_FLD(home_directory);
 348                         break;
 349                 case acct_home_drive: TEST_STR_FLD(home_drive);
 350                         break;
 351                 case acct_logon_script: TEST_STR_FLD(logon_script);
 352                         break;
 353                 case acct_profile_path: TEST_STR_FLD(profile_path);
 354                         break;
 355                 case acct_expiry: TEST_TIME_FLD(acct_expiry);
 356                         break;
 357                 case acct_flags: TEST_NUM_FLD(acct_flags);
 358                         break;
 359                 default:
 360                         break;
 361                 }
 362         }
 363
 364 cleanup:
 365         if (!test_user_cleanup(torture, ctx->samr.pipe->binding_handle,
 366                                torture, &ctx->samr.handle, TEST_USERNAME)) {
 367                 torture_comment(torture, "cleanup failed\n");
 368                 ret = false;
 369                 goto done;
 370         }
 371
 372         if (!test_samr_close_handle(torture,
 373                                     ctx->samr.pipe->binding_handle, torture, &ctx->samr.handle)) {
 374                 torture_comment(torture, "domain close failed\n");
 375                 ret = false;
 376         }
 377
 378 done:
 379         talloc_free(ctx);
 380         talloc_free(prep_mem_ctx);
 381         return ret;
 382 }
 383
 384
 385 bool torture_userinfo_api(struct torture_context *torture)
 386 {
 387         const char *name = TEST_USERNAME;
 388         bool ret = true;
 389         NTSTATUS status;
 390         TALLOC_CTX *mem_ctx = NULL, *prep_mem_ctx;
 391         struct libnet_context *ctx = NULL;
 392         struct dcerpc_pipe *p;
 393         struct policy_handle h;
 394         struct lsa_String domain_name;
 395         struct libnet_UserInfo req;
 396         struct dcerpc_binding_handle *b;
 397
 398         prep_mem_ctx = talloc_init("prepare torture user info");
 399
 400         status = torture_rpc_connection(torture,
 401                                         &p,
 402                                         &ndr_table_samr);
 403         if (!NT_STATUS_IS_OK(status)) {
 404                 return false;
 405         }
 406         b = p->binding_handle;
 407
 408         domain_name.string = lpcfg_workgroup(torture->lp_ctx);
 409         if (!test_domain_open(torture, b, &domain_name, prep_mem_ctx, &h, NULL)) {
 410                 ret = false;
 411                 goto done;
 412         }
 413
 414         if (!test_user_create(torture, b, prep_mem_ctx, &h, name, NULL)) {
 415                 ret = false;
 416                 goto done;
 417         }
 418
 419         mem_ctx = talloc_init("torture user info");
 420
 421         if (!test_libnet_context_init(torture, true, &ctx)) {
 422                 return false;
 423         }
 424
 425         ZERO_STRUCT(req);
 426
 427         req.in.domain_name = domain_name.string;
 428         req.in.data.user_name   = name;
 429         req.in.level = USER_INFO_BY_NAME;
 430
 431         status = libnet_UserInfo(ctx, mem_ctx, &req);
 432         if (!NT_STATUS_IS_OK(status)) {
 433                 torture_comment(torture, "libnet_UserInfo call failed: %s\n", nt_errstr(status));
 434                 ret = false;
 435                 goto done;
 436         }
 437
 438         if (!test_user_cleanup(torture, ctx->samr.pipe->binding_handle,
 439                                mem_ctx, &ctx->samr.handle, TEST_USERNAME)) {
 440                 torture_comment(torture, "cleanup failed\n");
 441                 ret = false;
 442                 goto done;
 443         }
 444
 445         if (!test_samr_close_handle(torture,
 446                                     ctx->samr.pipe->binding_handle, mem_ctx, &ctx->samr.handle)) {
 447                 torture_comment(torture, "domain close failed\n");
 448                 ret = false;
 449         }
 450
 451 done:
 452         talloc_free(ctx);
 453         talloc_free(mem_ctx);
 454         return ret;
 455 }
 456
 457
 458 bool torture_userlist(struct torture_context *torture)
 459 {
 460         bool ret = true;
 461         NTSTATUS status;
 462         TALLOC_CTX *mem_ctx = NULL;
 463         struct libnet_context *ctx;
 464         struct lsa_String domain_name;
 465         struct libnet_UserList req;
 466         int i;
 467
 468         ctx = libnet_context_init(torture->ev, torture->lp_ctx);
 469         ctx->cred = cmdline_credentials;
 470
 471         domain_name.string = lpcfg_workgroup(torture->lp_ctx);
 472         mem_ctx = talloc_init("torture user list");
 473
 474         ZERO_STRUCT(req);
 475
 476         torture_comment(torture, "listing user accounts:\n");
 477
 478         do {
 479
 480                 req.in.domain_name = domain_name.string;
 481                 req.in.page_size   = 128;
 482                 req.in.resume_index = req.out.resume_index;
 483
 484                 status = libnet_UserList(ctx, mem_ctx, &req);
 485                 if (!NT_STATUS_IS_OK(status) &&
 486                     !NT_STATUS_EQUAL(status, STATUS_MORE_ENTRIES)) break;
 487
 488                 for (i = 0; i < req.out.count; i++) {
 489                         torture_comment(torture, "\tuser: %s, sid=%s\n",
 490                                         req.out.users[i].username, req.out.users[i].sid);
 491                 }
 492
 493         } while (NT_STATUS_EQUAL(status, STATUS_MORE_ENTRIES));
 494
 495         if (!(NT_STATUS_IS_OK(status) ||
 496               NT_STATUS_EQUAL(status, NT_STATUS_NO_MORE_ENTRIES))) {
 497                 torture_comment(torture, "libnet_UserList call failed: %s\n", nt_errstr(status));
 498                 ret = false;
 499                 goto done;
 500         }
 501
 502         if (!test_samr_close_handle(torture,
 503                                     ctx->samr.pipe->binding_handle, mem_ctx, &ctx->samr.handle)) {
 504                 torture_comment(torture, "samr domain close failed\n");
 505                 ret = false;
 506                 goto done;
 507         }
 508
 509         if (!test_lsa_close_handle(torture,
 510                                    ctx->lsa.pipe->binding_handle, mem_ctx, &ctx->lsa.handle)) {
 511                 torture_comment(torture, "lsa domain close failed\n");
 512                 ret = false;
 513         }
 514
 515         talloc_free(ctx);
 516
 517 done:
 518         talloc_free(mem_ctx);
 519         return ret;
 520 }