4dd652d13be19deb03eac2f7dc9ae26d4dc81bac
[nivanova/samba-autobuild/.git] / source4 / torture / drs / python / fsmo.py
1 #!/usr/bin/env python
2 # -*- coding: utf-8 -*-
3 #
4 # Unix SMB/CIFS implementation.
5 # Copyright (C) Anatoliy Atanasov <anatoliy.atanasov@postpath.com> 2010
6 #
7 # This program is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
11 #
12 # This program is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15 # GNU General Public License for more details.
16 #
17 # You should have received a copy of the GNU General Public License
18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
19 #
20 #
21 # Usage:
22 #  export DC1=dc1_dns_name
23 #  export DC2=dc2_dns_name
24 #  export SUBUNITRUN=$samba4srcdir/scripting/bin/subunitrun
25 #  PYTHONPATH="$PYTHONPATH:$samba4srcdir/torture/drs/python" $SUBUNITRUN fsmo -U"$DOMAIN/$DC_USERNAME"%"$DC_PASSWORD"
26 #
27
28 import sys
29 import time
30 import os
31
32 sys.path.insert(0, "bin/python")
33
34 from ldb import SCOPE_BASE
35
36 import drs_base
37
38 class DrsFsmoTestCase(drs_base.DrsBaseTestCase):
39
40     def setUp(self):
41         super(DrsFsmoTestCase, self).setUp()
42
43         # we have to wait for the replication before we make the check
44         self.fsmo_wait_max_time = 20
45         self.fsmo_wait_sleep_time = 0.2
46
47         # cache some of RootDSE props
48         self.dsServiceName_dc1 = self.info_dc1["dsServiceName"][0]
49         self.dsServiceName_dc2 = self.info_dc2["dsServiceName"][0]
50         self.infrastructure_dn = "CN=Infrastructure," + self.domain_dn
51         self.naming_dn = "CN=Partitions," + self.config_dn
52         self.rid_dn = "CN=RID Manager$,CN=System," + self.domain_dn
53
54     def tearDown(self):
55         super(DrsFsmoTestCase, self).tearDown()
56
57     def _net_fsmo_role_transfer(self, DC, role, noop=False):
58         # find out where is samba-tool command
59         net_cmd = os.path.abspath("./bin/samba-tool")
60         # make command line credentials string
61         creds = self.get_credentials()
62         cmd_line_auth = "-U%s/%s%%%s" % (creds.get_domain(),
63                                          creds.get_username(), creds.get_password())
64         (result, out, err) = self.runsubcmd("fsmo", "transfer",
65                                             "--role=%s" % role,
66                                             "-H", "ldap://%s:389" % DC,
67                                             cmd_line_auth)
68
69         self.assertCmdSuccess(result, out, err)
70         self.assertEquals(err,"","Shouldn't be any error messages")
71         if noop == False:
72             self.assertTrue("FSMO transfer of '%s' role successful" % role in out)
73         else:
74             self.assertTrue("This DC already has the '%s' FSMO role" % role in out)
75
76
77     def _wait_for_role_transfer(self, ldb_dc, role_dn, master):
78         """Wait for role transfer for certain amount of time
79
80         :return: (Result=True|False, CurrentMasterDnsName) tuple
81         """
82         cur_master = ''
83         retries = int(self.fsmo_wait_max_time / self.fsmo_wait_sleep_time) + 1
84         for i in range(0, retries):
85             # check if master has been transfered
86             res = ldb_dc.search(role_dn,
87                                 scope=SCOPE_BASE, attrs=["fSMORoleOwner"])
88             assert len(res) == 1, "Only one fSMORoleOwner value expected!"
89             cur_master = res[0]["fSMORoleOwner"][0]
90             if master == cur_master:
91                 return (True, cur_master)
92             # skip last sleep, if no need to wait anymore
93             if i != (retries - 1):
94                 # wait a little bit before next retry
95                 time.sleep(self.fsmo_wait_sleep_time)
96         return (False, cur_master)
97
98     def _role_transfer(self, role, role_dn):
99         """Triggers transfer of role from DC1 to DC2
100            and vice versa so the role goes back to the original dc"""
101         # dc2 gets the role from dc1
102         print "Testing for %s role transfer from %s to %s" % (role, self.dnsname_dc1, self.dnsname_dc2)
103
104         self._net_fsmo_role_transfer(DC=self.dnsname_dc2, role=role)
105         # check if the role is transfered
106         (res, master) = self._wait_for_role_transfer(ldb_dc=self.ldb_dc2,
107                                                      role_dn=role_dn,
108                                                      master=self.dsServiceName_dc2)
109         self.assertTrue(res,
110                         "Transferring %s role to %s has failed, master is: %s!"%(role, self.dsServiceName_dc2, master))
111
112         # dc1 gets back the role from dc2
113         print "Testing for %s role transfer from %s to %s" % (role, self.dnsname_dc2, self.dnsname_dc1)
114         self._net_fsmo_role_transfer(DC=self.dnsname_dc1, role=role)
115         # check if the role is transfered
116         (res, master) = self._wait_for_role_transfer(ldb_dc=self.ldb_dc1,
117                                                      role_dn=role_dn,
118                                                      master=self.dsServiceName_dc1)
119         self.assertTrue(res,
120                         "Transferring %s role to %s has failed, master is: %s!"%(role, self.dsServiceName_dc1, master))
121
122         # dc1 keeps the role
123         print "Testing for no-op %s role transfer from %s to %s" % (role, self.dnsname_dc2, self.dnsname_dc1)
124         self._net_fsmo_role_transfer(DC=self.dnsname_dc1, role=role, noop=True)
125         # check if the role is transfered
126         (res, master) = self._wait_for_role_transfer(ldb_dc=self.ldb_dc1,
127                                                      role_dn=role_dn,
128                                                      master=self.dsServiceName_dc1)
129         self.assertTrue(res,
130                         "Transferring %s role to %s has failed, master is: %s!"%(role, self.dsServiceName_dc1, master))
131
132     def test_SchemaMasterTransfer(self):
133         self._role_transfer(role="schema", role_dn=self.schema_dn)
134
135     def test_InfrastructureMasterTransfer(self):
136         self._role_transfer(role="infrastructure", role_dn=self.infrastructure_dn)
137
138     def test_PDCMasterTransfer(self):
139         self._role_transfer(role="pdc", role_dn=self.domain_dn)
140
141     def test_RIDMasterTransfer(self):
142         self._role_transfer(role="rid", role_dn=self.rid_dn)
143
144     def test_NamingMasterTransfer(self):
145         self._role_transfer(role="naming", role_dn=self.naming_dn)