blackbox/test_net_ads_search_server: also test ldaps/starttls

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/testprogs/blackbox/test_net_ads_search_server.sh b/testprogs/blackbox/test_net_ads_search_server.sh
index f8350c9a97aad84fb0430a35cf6ed2cc996ccc33..67d541001c9bfeedcb32d638e255350d7a8bfe05 100755 (executable)
--- a/testprogs/blackbox/test_net_ads_search_server.sh
+++ b/testprogs/blackbox/test_net_ads_search_server.sh
@@ -34,4 +34,46 @@ testit_grep_count \
        '(objectClass=domain)' distinguishedName || \
        failed=$((failed + 1))
 
+testit_grep_count \
+       "net_ads_search.ntlmssp.ldaps" \
+       "distinguishedName: ${DN}" \
+       1 \
+       $samba_net ads search --use-kerberos=off -P \
+       --option="tlsverifypeer=no_check" \
+       --option="clientldapsaslwrapping=ldaps" \
+       --server "${SERVER}.${REALM}" \
+       '(objectClass=domain)' distinguishedName || \
+       failed=$((failed + 1))
+testit_grep_count \
+       "net_ads_search.krb5.ldaps" \
+       "distinguishedName: ${DN}" \
+       1 \
+       $samba_net ads search --use-kerberos=required -P \
+       --option="tlsverifypeer=no_check" \
+       --option="clientldapsaslwrapping=ldaps" \
+       --server "${SERVER}.${REALM}" \
+       '(objectClass=domain)' distinguishedName || \
+       failed=$((failed + 1))
+
+testit_grep_count \
+       "net_ads_search.ntlmssp.starttls" \
+       "distinguishedName: ${DN}" \
+       1 \
+       $samba_net ads search --use-kerberos=off -P \
+       --option="tlsverifypeer=no_check" \
+       --option="clientldapsaslwrapping=starttls" \
+       --server "${SERVER}.${REALM}" \
+       '(objectClass=domain)' distinguishedName || \
+       failed=$((failed + 1))
+testit_grep_count \
+       "net_ads_search.krb5.starttls" \
+       "distinguishedName: ${DN}" \
+       1 \
+       $samba_net ads search --use-kerberos=required -P \
+       --option="tlsverifypeer=no_check" \
+       --option="clientldapsaslwrapping=starttls" \
+       --server "${SERVER}.${REALM}" \
+       '(objectClass=domain)' distinguishedName || \
+       failed=$((failed + 1))
+
 exit $failed