git.samba.org / vlendec / samba-autobuild / .git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: f18ca8a)
testprogs: Remove unused test_kinit_trusts_(heimdal|mit).sh
authorAndreas Schneider <asn@samba.org>
Tue, 21 Mar 2023 08:14:18 +0000 (09:14 +0100)
committerAndreas Schneider <asn@cryptomilk.org>
Thu, 6 Apr 2023 13:45:35 +0000 (13:45 +0000)
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
testprogs/blackbox/test_kinit_trusts_heimdal.sh [deleted file] patch | blob | history
testprogs/blackbox/test_kinit_trusts_mit.sh [deleted file] patch | blob | history

diff --git a/testprogs/blackbox/test_kinit_trusts_heimdal.sh b/testprogs/blackbox/test_kinit_trusts_heimdal.sh
deleted file mode 100755 (executable)
index aa5cf30..0000000
--- a/testprogs/blackbox/test_kinit_trusts_heimdal.sh
+++ /dev/null
@@ -1,162 +0,0 @@
-#!/bin/sh
-# Copyright (C) 2015 Stefan Metzmacher <metze@samba.org>
-
-if [ $# -lt 14 ]; then
-       cat <<EOF
-Usage: test_kinit_trusts.sh SERVER USERNAME PASSWORD REALM DOMAIN TRUST_USERNAME TRUST_PASSWORD TRUST_REALM TRUST_DOMAIN PREFIX TYPE ENCTYPE CONFIGURATION
-EOF
-       exit 1
-fi
-
-SERVER=$1
-USERNAME=$2
-PASSWORD=$3
-REALM=$4
-DOMAIN=$5
-shift 5
-TRUST_SERVER=$1
-TRUST_USERNAME=$2
-TRUST_PASSWORD=$3
-TRUST_REALM=$4
-TRUST_DOMAIN=$5
-shift 5
-PREFIX=$1
-TYPE=$2
-ENCTYPE=$3
-CONFIGURATION="${4}"
-shift 3
-failed=0
-
-samba4bindir="$BINDIR"
-samba4kinit_binary=kinit
-if test -x $BINDIR/samba4kinit; then
-       samba4kinit_binary=$BINDIR/samba4kinit
-fi
-
-smbclient="$samba4bindir/smbclient"
-wbinfo="$samba4bindir/wbinfo"
-rpcclient="$samba4bindir/rpcclient"
-samba_tool="$samba4bindir/samba-tool"
-
-. $(dirname $0)/subunit.sh
-. $(dirname $0)/common_test_fns.inc
-
-unc="//$SERVER.$REALM/tmp"
-
-enctype="-e $ENCTYPE"
-
-KRB5CCNAME_PATH="$PREFIX/tmpccache"
-KRB5CCNAME="FILE:$KRB5CCNAME_PATH"
-samba4kinit="$samba4kinit_binary -c $KRB5CCNAME"
-export KRB5CCNAME
-rm -rf $KRB5CCNAME_PATH
-
-echo $TRUST_PASSWORD >$PREFIX/tmppassfile
-testit "kinit with password" \
-       $samba4kinit $enctype --password-file=$PREFIX/tmppassfile \
-       --request-pac $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-test_smbclient "Test login with user kerberos ccache" \
-       'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-rm -rf $KRB5CCNAME_PATH
-
-testit "kinit with password and two minute lifetime" \
-       $samba4kinit $enctype --password-file=$PREFIX/tmppassfile \
-       --request-pac --server=krbtgt/$REALM@$TRUST_REALM --lifetime=2m \
-       $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-test_smbclient "Test login with user kerberos ccache and two minute lifetime" 'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME || failed=`(failed + 1)`
-rm -rf $KRB5CCNAME_PATH
-
-# Test with smbclient4
-smbclient="$samba4bindir/smbclient4"
-testit "kinit with password" \
-       $samba4kinit $enctype --password-file=$PREFIX/tmppassfile \
-       --request-pac $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-test_smbclient "Test login with user kerberos ccache (smbclient4)" \
-       'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-rm -rf $KRB5CCNAME_PATH
-
-testit "kinit with password (enterprise style)" \
-       $samba4kinit $enctype --enterprise --password-file=$PREFIX/tmppassfile \
-       --request-pac $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-smbclient="$samba4bindir/smbclient"
-test_smbclient "Test login with user kerberos ccache" \
-       'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-
-if test x"${TYPE}" = x"forest"; then
-       testit "kinit with password (upn enterprise style)" \
-               $samba4kinit $enctype --enterprise \
-               --password-file=$PREFIX/tmppassfile --request-pac \
-               testdenied_upn@${TRUST_REALM}.upn || \
-               failed=$((failed + 1))
-       test_smbclient "Test login with user kerberos ccache" \
-               'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME || \
-               failed=$((failed + 1))
-fi
-
-testit "kinit with password (windows style)" \
-       $samba4kinit $enctype --renewable --windows \
-       --password-file=$PREFIX/tmppassfile --request-pac \
-       $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-test_smbclient "Test login with user kerberos ccache" \
-       'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-
-testit "kinit renew ticket" \
-       $samba4kinit $enctype --request-pac -R
-
-test_smbclient "Test login with kerberos ccache" \
-       'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-
-testit "check time with kerberos ccache" \
-       $VALGRIND $PYTHON $samba_tool time $SERVER.$REALM $CONFIGURATION \
-       -k yes "$@" || \
-       failed=$((failed + 1))
-
-lowerrealm=$(echo $TRUST_REALM | tr '[A-Z]' '[a-z]')
-test_smbclient "Test login with user kerberos lowercase realm" \
-       'ls' "$unc" \
-       --use-krb5-ccache=$KRB5CCNAME \
-       -U$TRUST_USERNAME@$lowerrealm%$TRUST_PASSWORD || \
-       failed=$((failed + 1))
-test_smbclient "Test login with user kerberos lowercase realm 2" \
-       'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME \
-       -U$TRUST_USERNAME@$TRUST_REALM%$TRUST_PASSWORD --realm=$lowerrealm || \
-       failed=$((failed + 1))
-
-# Test the outgoing direction
-unc="//$TRUST_SERVER.$TRUST_REALM/tmp"
-test_smbclient "Test user login with the first outgoing secret" \
-       'ls' "$unc" --use-krb5-ccache=$KRB5CCNAME \
-       -U$USERNAME@$REALM%$PASSWORD || \
-       failed=$((failed + 1))
-
-testit_expect_failure "setpassword should not work" \
-       $VALGRIND $PYTHON $samba_tool user setpassword "${TRUST_DOMAIN}\$" \
-       --random-password || \
-       failed=$((failed + 1))
-
-testit "wbinfo ping dc" \
-       $VALGRIND $wbinfo --ping-dc --domain=$TRUST_DOMAIN || \
-       failed=$((failed + 1))
-testit "wbinfo change outgoing trust pw" \
-       $VALGRIND $wbinfo --change-secret --domain=$TRUST_DOMAIN || \
-       failed=$((failed + 1))
-testit "wbinfo check outgoing trust pw" \
-       $VALGRIND $wbinfo --check-secret --domain=$TRUST_DOMAIN || \
-       failed=$((failed + 1))
-
-test_smbclient "Test user login with the changed outgoing secret" \
-       'ls' "$unc" --use-kerberos=required -U$USERNAME@$REALM%$PASSWORD || \
-       failed=$((failed + 1))
-
-rm -f $PREFIX/tmpccache $PREFIX/tmppassfile
-exit $failed
diff --git a/testprogs/blackbox/test_kinit_trusts_mit.sh b/testprogs/blackbox/test_kinit_trusts_mit.sh
deleted file mode 100755 (executable)
index be437e0..0000000
--- a/testprogs/blackbox/test_kinit_trusts_mit.sh
+++ /dev/null
@@ -1,191 +0,0 @@
-#!/bin/sh
-# Blackbox tests for kinit and trust validation
-# Copyright (c) 2015 Stefan Metzmacher <metze@samba.org>
-# Copyright (c) 2016 Andreas Schneider <asn@samba.org>
-
-if [ $# -lt 13 ]; then
-       cat <<EOF
-Usage: test_kinit_trusts.sh SERVER USERNAME PASSWORD REALM DOMAIN TRUST_USERNAME TRUST_PASSWORD TRUST_REALM TRUST_DOMAIN PREFIX TYPE CONFIGURATION
-EOF
-       exit 1
-fi
-
-SERVER=$1
-USERNAME=$2
-PASSWORD=$3
-REALM=$4
-DOMAIN=$5
-shift 5
-TRUST_SERVER=$1
-TRUST_USERNAME=$2
-TRUST_PASSWORD=$3
-TRUST_REALM=$4
-TRUST_DOMAIN=$5
-shift 5
-PREFIX=$1
-TYPE=$2
-CONFIGURATION="${3}"
-shift 3
-
-failed=0
-
-samba_bindir="$BINDIR"
-samba_srcdir="$SRCDIR/source4"
-samba_kinit=kinit
-samba_kdestroy=kdestroy
-samba_kpasswd=kpasswd
-
-samba_tool="$samba_bindir/samba-tool"
-samba_texpect="$samba_bindir/texpect"
-
-smbclient="$samba_bindir/smbclient"
-wbinfo="$samba_bindir/wbinfo"
-rpcclient="$samba_bindir/rpcclient"
-
-SMBCLIENT_UNC="//$SERVER.$REALM/tmp"
-
-. $(dirname $0)/subunit.sh
-
-test_smbclient()
-{
-       name="$1"
-       cmd="$2"
-       shift
-       shift
-       echo "test: $name"
-       $VALGRIND $smbclient $CONFIGURATION $SMBCLIENT_UNC -c "$cmd" "$@"
-       status=$?
-       if [ x$status = x0 ]; then
-               echo "success: $name"
-       else
-               echo "failure: $name"
-       fi
-       return $status
-}
-
-KRB5CCNAME_PATH="$PREFIX/test_kinit_trusts_ccache"
-KRB5CCNAME="FILE:$KRB5CCNAME_PATH"
-export KRB5CCNAME
-rm -rf $KRB5CCNAME_PATH
-
-cat >$PREFIX/tmpkinitscript <<EOF
-expect Password for
-send ${TRUST_PASSWORD}\n
-EOF
-
-###########################################################
-### Test incoming trust direction
-###########################################################
-
-testit "kinit with password" \
-       $samba_texpect $PREFIX/tmpkinitscript \
-       $samba_kinit $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-test_smbclient "Test login with kerberos ccache" \
-       'ls' --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-$samba_kdestroy
-
-smbclient="$samba_bindir/smbclient4"
-
-testit "kinit with password" \
-       $samba_texpect $PREFIX/tmpkinitscript \
-       $samba_kinit $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-test_smbclient "Test login with user kerberos ccache (smbclient4)" \
-       'ls' --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-$samba_kdestroy
-
-smbclient="$samba_bindir/smbclient"
-
-testit "kinit with password (enterprise)" \
-       $samba_texpect $PREFIX/tmpkinitscript \
-       $samba_kinit -E $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-test_smbclient "Test login with kerberos ccache" \
-       'ls' --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-
-$samba_kdestroy
-
-if test x"${TYPE}" = x"forest"; then
-       testit "kinit with password (enterprise UPN)" \
-               $samba_texpect $PREFIX/tmpkinitscript \
-               $samba_kinit -E testdenied_upn@${TRUST_REALM}.upn || \
-               failed=$((failed + 1))
-       test_smbclient "Test login with user kerberos ccache" \
-               'ls' --use-krb5-ccache=$KRB5CCNAME || \
-               failed=$((failed + 1))
-fi
-
-$samba_kdestroy
-
-testit "kinit with password (enterprise)" \
-       $samba_texpect $PREFIX/tmpkinitscript \
-       $samba_kinit -E $TRUST_USERNAME@$TRUST_REALM || \
-       failed=$((failed + 1))
-test_smbclient "Test login with kerberos ccache" \
-       'ls' --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-
-testit "kinit renew ticket" \
-       $samba_kinit -R
-test_smbclient "Test login with kerberos ccache" \
-       'ls' --use-krb5-ccache=$KRB5CCNAME || \
-       failed=$((failed + 1))
-
-testit "check time with kerberos ccache" \
-       $VALGRIND $samba_tool time $SERVER.$REALM \
-       $CONFIGURATION -k yes "$@" || \
-       failed=$((failed + 1))
-
-$samba_kdestroy
-
-lowerrealm=$(echo $TRUST_REALM | tr '[A-Z]' '[a-z]')
-test_smbclient "Test login with user kerberos lowercase realm" \
-       'ls' --use-kerberos=required \
-       -U$TRUST_USERNAME@$lowerrealm%$TRUST_PASSWORD || \
-       failed=$((failed + 1))
-test_smbclient "Test login with user kerberos lowercase realm 2" \
-       'ls' --use-kerberos=required \
-       -U$TRUST_USERNAME@$TRUST_REALM%$TRUST_PASSWORD --realm=$lowerrealm || \
-       failed=$((failed + 1))
-
-###########################################################
-### Test outgoing trust direction
-###########################################################
-
-SMBCLIENT_UNC="//$TRUST_SERVER.$TRUST_REALM/tmp"
-test_smbclient "Test user login with the first outgoing secret" \
-       'ls' --use-kerberos=required -U$USERNAME@$REALM%$PASSWORD || \
-       failed=$((failed + 1))
-
-testit_expect_failure "setpassword should not work" \
-       $VALGRIND $samba_tool user setpassword "${TRUST_DOMAIN}\$" \
-       --random-password || \
-       failed=$((failed + 1))
-
-testit "wbinfo ping dc" \
-       $VALGRIND $wbinfo --ping-dc --domain=$TRUST_DOMAIN || \
-       failed=$((failed + 1))
-testit "wbinfo change outgoing trust pw" \
-       $VALGRIND $wbinfo --change-secret --domain=$TRUST_DOMAIN || \
-       failed=$((failed + 1))
-testit "wbinfo check outgoing trust pw" \
-       $VALGRIND $wbinfo --check-secret --domain=$TRUST_DOMAIN || \
-       failed=$((failed + 1))
-
-test_smbclient "Test user login with the changed outgoing secret" \
-       'ls' --use-kerberos=required -U$USERNAME@$REALM%$PASSWORD || \
-       failed=$((failed + 1))
-
-### Cleanup
-
-$samba_kdestroy
-
-rm -f $KRB5CCNAME_PATH
-rm -f $PREFIX/tmpkinituserpassscript
-rm -f $PREFIX/tmpkinitscript
-
-exit $failed
Unnamed repository; edit this file 'description' to name the repository.