source4/torture/drs/python/fsmo.py

   1 #!/usr/bin/env python3
   2 # -*- coding: utf-8 -*-
   3 #
   4 # Unix SMB/CIFS implementation.
   5 # Copyright (C) Anatoliy Atanasov <anatoliy.atanasov@postpath.com> 2010
   6 #
   7 # This program is free software; you can redistribute it and/or modify
   8 # it under the terms of the GNU General Public License as published by
   9 # the Free Software Foundation; either version 3 of the License, or
  10 # (at your option) any later version.
  11 #
  12 # This program is distributed in the hope that it will be useful,
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15 # GNU General Public License for more details.
  16 #
  17 # You should have received a copy of the GNU General Public License
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19 #
  20 #
  21 # Usage:
  22 #  export DC1=dc1_dns_name
  23 #  export DC2=dc2_dns_name
  24 #  export SUBUNITRUN=$samba4srcdir/scripting/bin/subunitrun
  25 #  PYTHONPATH="$PYTHONPATH:$samba4srcdir/torture/drs/python" $SUBUNITRUN fsmo -U"$DOMAIN/$DC_USERNAME"%"$DC_PASSWORD"
  26 #
  27
  28 from __future__ import print_function
  29 import sys
  30 import time
  31 import os
  32
  33 sys.path.insert(0, "bin/python")
  34
  35 from ldb import SCOPE_BASE
  36
  37 import drs_base
  38
  39
  40 class DrsFsmoTestCase(drs_base.DrsBaseTestCase):
  41
  42     def setUp(self):
  43         super(DrsFsmoTestCase, self).setUp()
  44
  45         # we have to wait for the replication before we make the check
  46         self.fsmo_wait_max_time = 20
  47         self.fsmo_wait_sleep_time = 0.2
  48
  49         # cache some of RootDSE props
  50         self.dsServiceName_dc1 = self.info_dc1["dsServiceName"][0]
  51         self.dsServiceName_dc2 = self.info_dc2["dsServiceName"][0]
  52         self.infrastructure_dn = "CN=Infrastructure," + self.domain_dn
  53         self.naming_dn = "CN=Partitions," + self.config_dn
  54         self.rid_dn = "CN=RID Manager$,CN=System," + self.domain_dn
  55         self.domain_dns_dn = (
  56             "CN=Infrastructure,DC=DomainDnsZones, %s" % self.domain_dn )
  57         self.forest_dns_dn = (
  58             "CN=Infrastructure,DC=ForestDnsZones, %s" % self.domain_dn )
  59
  60     def tearDown(self):
  61         super(DrsFsmoTestCase, self).tearDown()
  62
  63     def _net_fsmo_role_transfer(self, DC, role, noop=False):
  64         # find out where is samba-tool command
  65         net_cmd = os.path.abspath("./bin/samba-tool")
  66         # make command line credentials string
  67         ccache_name = self.get_creds_ccache_name()
  68         cmd_line_auth = "--krb5-ccache=%s" % ccache_name
  69         (result, out, err) = self.runsubcmd("fsmo", "transfer",
  70                                             "--role=%s" % role,
  71                                             "-H", "ldap://%s:389" % DC,
  72                                             cmd_line_auth)
  73
  74         self.assertCmdSuccess(result, out, err)
  75         self.assertEquals(err, "", "Shouldn't be any error messages")
  76         if not noop:
  77             self.assertTrue("FSMO transfer of '%s' role successful" % role in out)
  78         else:
  79             self.assertTrue("This DC already has the '%s' FSMO role" % role in out)
  80
  81     def _wait_for_role_transfer(self, ldb_dc, role_dn, master):
  82         """Wait for role transfer for certain amount of time
  83
  84         :return: (Result=True|False, CurrentMasterDnsName) tuple
  85         """
  86         cur_master = ''
  87         retries = int(self.fsmo_wait_max_time / self.fsmo_wait_sleep_time) + 1
  88         for i in range(0, retries):
  89             # check if master has been transfered
  90             res = ldb_dc.search(role_dn,
  91                                 scope=SCOPE_BASE, attrs=["fSMORoleOwner"])
  92             assert len(res) == 1, "Only one fSMORoleOwner value expected!"
  93             cur_master = res[0]["fSMORoleOwner"][0]
  94             if master == cur_master:
  95                 return (True, cur_master)
  96             # skip last sleep, if no need to wait anymore
  97             if i != (retries - 1):
  98                 # wait a little bit before next retry
  99                 time.sleep(self.fsmo_wait_sleep_time)
 100         return (False, cur_master)
 101
 102     def _role_transfer(self, role, role_dn):
 103         """Triggers transfer of role from DC1 to DC2
 104            and vice versa so the role goes back to the original dc"""
 105         # dc2 gets the role from dc1
 106         print("Testing for %s role transfer from %s to %s" % (role, self.dnsname_dc1, self.dnsname_dc2))
 107
 108         self._net_fsmo_role_transfer(DC=self.dnsname_dc2, role=role)
 109         # check if the role is transfered
 110         (res, master) = self._wait_for_role_transfer(ldb_dc=self.ldb_dc2,
 111                                                      role_dn=role_dn,
 112                                                      master=self.dsServiceName_dc2)
 113         self.assertTrue(res,
 114                         "Transferring %s role to %s has failed, master is: %s!" % (role, self.dsServiceName_dc2, master))
 115
 116         # dc1 gets back the role from dc2
 117         print("Testing for %s role transfer from %s to %s" % (role, self.dnsname_dc2, self.dnsname_dc1))
 118         self._net_fsmo_role_transfer(DC=self.dnsname_dc1, role=role)
 119         # check if the role is transfered
 120         (res, master) = self._wait_for_role_transfer(ldb_dc=self.ldb_dc1,
 121                                                      role_dn=role_dn,
 122                                                      master=self.dsServiceName_dc1)
 123         self.assertTrue(res,
 124                         "Transferring %s role to %s has failed, master is: %s!" % (role, self.dsServiceName_dc1, master))
 125
 126         # dc1 keeps the role
 127         print("Testing for no-op %s role transfer from %s to %s" % (role, self.dnsname_dc2, self.dnsname_dc1))
 128         self._net_fsmo_role_transfer(DC=self.dnsname_dc1, role=role, noop=True)
 129         # check if the role is transfered
 130         (res, master) = self._wait_for_role_transfer(ldb_dc=self.ldb_dc1,
 131                                                      role_dn=role_dn,
 132                                                      master=self.dsServiceName_dc1)
 133         self.assertTrue(res,
 134                         "Transferring %s role to %s has failed, master is: %s!" % (role, self.dsServiceName_dc1, master))
 135
 136     def test_SchemaMasterTransfer(self):
 137         self._role_transfer(role="schema", role_dn=self.schema_dn)
 138
 139     def test_InfrastructureMasterTransfer(self):
 140         self._role_transfer(role="infrastructure", role_dn=self.infrastructure_dn)
 141
 142     def test_PDCMasterTransfer(self):
 143         self._role_transfer(role="pdc", role_dn=self.domain_dn)
 144
 145     def test_RIDMasterTransfer(self):
 146         self._role_transfer(role="rid", role_dn=self.rid_dn)
 147
 148     def test_NamingMasterTransfer(self):
 149         self._role_transfer(role="naming", role_dn=self.naming_dn)
 150
 151     def test_DomainDnsZonesMasterTransfer(self):
 152         self._role_transfer(role="domaindns", role_dn=self.domain_dns_dn)
 153
 154     def test_ForestDnsZonesMasterTransfer(self):
 155         self._role_transfer(role="forestdns", role_dn=self.forest_dns_dn)