17 files changed, 482 insertions, 0 deletions
diff --git a/testdata/samba3/account_policy.tdb b/testdata/samba3/account_policy.tdb
new file mode 100644
index 0000000..ece960a
--- /dev/null
+++ b/testdata/samba3/account_policy.tdb
diff --git a/testdata/samba3/group_mapping.tdb b/testdata/samba3/group_mapping.tdb
new file mode 100644
index 0000000..e1be1d4
--- /dev/null
+++ b/testdata/samba3/group_mapping.tdb
diff --git a/testdata/samba3/passdb.tdb b/testdata/samba3/passdb.tdb
new file mode 100644
index 0000000..e32d7be
--- /dev/null
+++ b/testdata/samba3/passdb.tdb
diff --git a/testdata/samba3/provision_samba3sam.ldif b/testdata/samba3/provision_samba3sam.ldif
new file mode 100644
index 0000000..03a69f1
--- /dev/null
+++ b/testdata/samba3/provision_samba3sam.ldif
@@ -0,0 +1,78 @@
+dn: @INDEXLIST
+@IDXATTR: name
+@IDXATTR: sAMAccountName
+@IDXATTR: objectSid
+@IDXATTR: objectClass
+@IDXATTR: objectCategory
+@IDXATTR: member
+@IDXATTR: uidNumber
+@IDXATTR: gidNumber
+@IDXATTR: unixName
+@IDXATTR: privilege
+@IDXATTR: nCName
+
+dn: @ATTRIBUTES
+userPrincipalName: CASE_INSENSITIVE
+servicePrincipalName: CASE_INSENSITIVE
+dnsDomain: CASE_INSENSITIVE
+dnsRoot: CASE_INSENSITIVE
+nETBIOSName: CASE_INSENSITIVE
+cn: CASE_INSENSITIVE
+dc: CASE_INSENSITIVE
+name: CASE_INSENSITIVE
+dn: CASE_INSENSITIVE
+sAMAccountName: CASE_INSENSITIVE
+objectClass: CASE_INSENSITIVE
+sambaPassword: HIDDEN
+krb5Key: HIDDEN
+ntPwdHash: HIDDEN
+sambaNTPwdHistory: HIDDEN
+lmPwdHash: HIDDEN
+sambaLMPwdHistory: HIDDEN
+createTimestamp: HIDDEN
+modifyTimestamp: HIDDEN
+groupType: INTEGER
+sAMAccountType: INTEGER
+systemFlags: INTEGER
+userAccountControl: INTEGER
+
+dn: @SUBCLASSES
+top: domain
+top: person
+top: group
+domain: domainDNS
+domain: builtinDomain
+person: organizationalPerson
+organizationalPerson: user
+user: computer
+template: userTemplate
+template: groupTemplate
+
+dn: @KLUDGEACL
+passwordAttribute: sambaPassword
+passwordAttribute: ntPwdHash
+passwordAttribute: sambaNTPwdHistory
+passwordAttribute: lmPwdHash
+passwordAttribute: sambaLMPwdHistory
+passwordAttribute: krb5key
+
+# the rootDSE module looks in this record for its base data
+dn: @ROOTDSE
+subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,${BASEDN}
+dsServiceName: CN=NTDS Settings,CN=${NETBIOSNAME},CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,${BASEDN}
+defaultNamingContext: ${BASEDN}
+rootDomainNamingContext: ${BASEDN}
+configurationNamingContext: CN=Configuration,${BASEDN}
+schemaNamingContext: CN=Schema,CN=Configuration,${BASEDN}
+supportedLDAPVersion: 2
+supportedLDAPVersion: 3
+dnsHostName: ${DNSNAME}
+ldapServiceName: ${DNSDOMAIN}:${NETBIOSNAME}$@${REALM}
+serverName: CN=${NETBIOSNAME},CN=Servers,CN=Default-First-Site,CN=Sites,CN=Configuration,${BASEDN}
+domainFunctionality: 0
+forestFunctionality: 0
+domainControllerFunctionality: 4
+isSynchronized: TRUE
+vendorName: Samba Team (http://samba.org)
+vendorVersion: ${VERSION}
+
diff --git a/testdata/samba3/provision_samba3sam_templates.ldif b/testdata/samba3/provision_samba3sam_templates.ldif
new file mode 100644
index 0000000..4fe6571
--- /dev/null
+++ b/testdata/samba3/provision_samba3sam_templates.ldif
@@ -0,0 +1,118 @@
+dn: CN=Templates
+objectClass: top
+objectClass: container
+cn: Templates
+description: Container for SAM account templates
+instanceType: 4
+showInAdvancedViewOnly: TRUE
+systemFlags: 2348810240
+objectCategory: CN=Container,CN=Schema,CN=Configuration,${BASEDN}
+isCriticalSystemObject: TRUE
+
+###
+# note! the template users must not match normal searches. Be careful
+# with what classes you put them in
+###
+
+dn: CN=TemplateUser,CN=Templates
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: Template
+objectClass: userTemplate
+cn: TemplateUser
+instanceType: 4
+userAccountControl: 514
+badPwdCount: 0
+codePage: 0
+countryCode: 0
+badPasswordTime: 0
+lastLogoff: 0
+lastLogon: 0
+pwdLastSet: 0
+primaryGroupID: 513
+accountExpires: -1
+logonCount: 0
+objectCategory: CN=Person,CN=Schema,CN=Configuration,${BASEDN}
+
+dn: CN=TemplateComputer,CN=Templates
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: Template
+objectClass: userTemplate
+cn: TemplateComputer
+instanceType: 4
+userAccountControl: 4098
+badPwdCount: 0
+codePage: 0
+countryCode: 0
+badPasswordTime: 0
+lastLogoff: 0
+lastLogon: 0
+pwdLastSet: 0
+primaryGroupID: 513
+accountExpires: -1
+logonCount: 0
+objectCategory: CN=Computer,CN=Schema,CN=Configuration,${BASEDN}
+
+dn: CN=TemplateTrustingDomain,CN=Templates
+objectClass: top
+objectClass: Template
+objectClass: userTemplate
+cn: TemplateTrustingDomain
+instanceType: 4
+userAccountControl: 2080
+badPwdCount: 0
+codePage: 0
+countryCode: 0
+badPasswordTime: 0
+lastLogoff: 0
+lastLogon: 0
+primaryGroupID: 513
+accountExpires: -1
+logonCount: 0
+
+dn: CN=TemplateGroup,CN=Templates
+objectClass: top
+objectClass: Template
+objectClass: groupTemplate
+cn: TemplateGroup
+instanceType: 4
+groupType: -2147483646
+objectCategory: CN=Group,CN=Schema,CN=Configuration,${BASEDN}
+
+# Currently this isn't used, we don't have a way to detect it different from an incoming alias
+#
+# dn: CN=TemplateAlias,CN=Templates
+# objectClass: top
+# objectClass: Template
+# objectClass: aliasTemplate
+# cn: TemplateAlias
+# instanceType: 4
+# groupType: -2147483644
+
+dn: CN=TemplateForeignSecurityPrincipal,CN=Templates
+objectClass: top
+objectClass: Template
+objectClass: foreignSecurityPrincipalTemplate
+cn: TemplateForeignSecurityPrincipal
+instanceType: 4
+showInAdvancedViewOnly: TRUE
+objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,${BASEDN}
+
+dn: CN=TemplateSecret,CN=Templates
+objectClass: top
+objectClass: leaf
+objectClass: Template
+objectClass: secretTemplate
+cn: TemplateSecret
+instanceType: 4
+
+dn: CN=TemplateTrustedDomain,CN=Templates
+objectClass: top
+objectClass: leaf
+objectClass: Template
+objectClass: trustedDomainTemplate
+cn: TemplateTrustedDomain
+instanceType: 4
diff --git a/testdata/samba3/regfio_corrupt_hbin1.dat b/testdata/samba3/regfio_corrupt_hbin1.dat
new file mode 100644
index 0000000..e74d678
--- /dev/null
+++ b/testdata/samba3/regfio_corrupt_hbin1.dat
diff --git a/testdata/samba3/regfio_corrupt_lf_subkeys.dat b/testdata/samba3/regfio_corrupt_lf_subkeys.dat
new file mode 100644
index 0000000..c540051
--- /dev/null
+++ b/testdata/samba3/regfio_corrupt_lf_subkeys.dat
diff --git a/testdata/samba3/registry.tdb b/testdata/samba3/registry.tdb
new file mode 100644
index 0000000..9d64e02
--- /dev/null
+++ b/testdata/samba3/registry.tdb
diff --git a/testdata/samba3/samba3.ldif b/testdata/samba3/samba3.ldif
new file mode 100644
index 0000000..3978777
--- /dev/null
+++ b/testdata/samba3/samba3.ldif
@@ -0,0 +1,206 @@
+dn: sambaDomainName=TESTS,${BASEDN}
+objectclass: sambaDomain
+objectclass: top
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739
+sambaNextRid: 2000
+sambaDomainName: TESTS
+
+dn: ou=Users,sambaDomainName=TESTS,${BASEDN}
+objectClass: organizationalUnit
+ou: Users
+
+dn: ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: organizationalUnit
+ou: Groups
+
+dn: uid=nobody,ou=Users,sambaDomainName=TESTS,${BASEDN}
+cn: nobody
+sn: nobody
+objectClass: inetOrgPerson
+objectClass: sambaSAMAccount
+objectClass: posixAccount
+objectClass: shadowAccount
+gidNumber: 514
+uid: nobody
+uidNumber: 999
+homeDirectory: /dev/null
+sambaPwdLastSet: 0
+sambaLogonTime: 0
+sambaLogoffTime: 2147483647
+sambaKickoffTime: 2147483647
+sambaPwdCanChange: 0
+sambaPwdMustChange: 2147483647
+sambaHomePath: \\PDC-SMB3\home\%U
+sambaHomeDrive: H:
+sambaProfilePath: \\PDC-SMB3\profiles\%U\nobody
+sambaPrimaryGroupSID: S-1-5-21-4231626423-2410014848-2360679739-514
+sambaLMPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
+sambaNTPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
+sambaAcctFlags: [NU         ]
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-2998
+loginShell: /bin/false
+
+dn: cn=Domain Admins,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 512
+cn: Domain Admins
+memberUid: Administrator
+description: Netbios Domain Administrators
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-512
+sambaGroupType: 2
+displayName: Domain Admins
+
+dn: cn=Domain Users,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 513
+cn: Domain Users
+description: Netbios Domain Users
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-513
+sambaGroupType: 2
+displayName: Domain Users
+
+dn: cn=Domain Guests,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 514
+cn: Domain Guests
+description: Netbios Domain Guests Users
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-514
+sambaGroupType: 2
+displayName: Domain Guests
+
+dn: cn=Print Operators,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 550
+cn: Print Operators
+description: Netbios Domain Print Operators
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-550
+sambaGroupType: 2
+displayName: Print Operators
+
+dn: cn=Backup Operators,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 551
+cn: Backup Operators
+description: Netbios Domain Members can bypass file security to back up files
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-551
+sambaGroupType: 2
+displayName: Backup Operators
+
+dn: cn=Replicator,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 1052
+cn: Replicator
+description: Netbios Domain Supports file replication in a sambaDomainName
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-1052
+sambaGroupType: 2
+displayName: Replicator
+
+dn: cn=Domain Computers,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 553
+cn: Domain Computers
+description: Netbios Domain Computers accounts
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-553
+sambaGroupType: 2
+displayName: Domain Computers
+
+dn: cn=Administrators,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 544
+cn: Administrators
+description: Netbios Domain Members can fully administer the computer/sambaDomainName
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-544
+sambaGroupType: 2
+displayName: Administrators
+
+dn: cn=Users,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 545
+cn: Users
+description: Netbios Domain Ordinary users
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-545
+sambaGroupType: 2
+displayName: users
+
+dn: cn=Guests,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 546
+cn: Guests
+memberUid: nobody
+description: Netbios Domain Users granted guest access to the computer/sambaDomainName
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-546
+sambaGroupType: 2
+displayName: Guests
+
+dn: cn=Power Users,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 547
+cn: Power Users
+description: Netbios Domain Members can share directories and printers
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-547
+sambaGroupType: 2
+displayName: Power Users
+
+dn: cn=Account Operators,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 548
+cn: Account Operators
+description: Netbios Domain Users to manipulate users accounts
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-548
+sambaGroupType: 2
+displayName: Account Operators
+
+dn: cn=Server Operators,ou=Groups,sambaDomainName=TESTS,${BASEDN}
+objectClass: posixGroup
+objectClass: sambaGroupMapping
+gidNumber: 549
+cn: Server Operators
+description: Netbios Domain Server Operators
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-549
+sambaGroupType: 2
+displayName: Server Operators
+
+dn: ou=Computers,sambaDomainName=TESTS,${BASEDN}
+objectClass: organizationalUnit
+ou: Computers
+
+dn: uid=Administrator,ou=Users,sambaDomainName=TESTS,${BASEDN}
+cn: Administrator
+sn: Administrator
+objectClass: inetOrgPerson
+objectClass: sambaSAMAccount
+objectClass: posixAccount
+objectClass: shadowAccount
+gidNumber: 512
+uid: Administrator
+uidNumber: 0
+homeDirectory: /home/%U
+sambaPwdLastSet: 0
+sambaLogonTime: 0
+sambaLogoffTime: 2147483647
+sambaKickoffTime: 2147483647
+sambaPwdCanChange: 0
+sambaPwdMustChange: 2147483647
+sambaHomePath: \\PDC-SMB3\home\%U
+sambaHomeDrive: H:
+sambaProfilePath: \\PDC-SMB3\profiles\%U\Administrator
+sambaPrimaryGroupSID: S-1-5-21-4231626423-2410014848-2360679739-512
+sambaLMPassword: 193130B61A7F81C0AAD3B435B51404EE
+sambaNTPassword: C2AE1FE6E648846352453E816F2AEB93
+sambaAcctFlags: [U          ]
+sambaSID: S-1-5-21-4231626423-2410014848-2360679739-2996
+loginShell: /bin/false
+gecos: Netbios Domain Administrator
+
diff --git a/testdata/samba3/secrets.tdb b/testdata/samba3/secrets.tdb
new file mode 100644
index 0000000..f9a0f7b
--- /dev/null
+++ b/testdata/samba3/secrets.tdb
diff --git a/testdata/samba3/share_info.tdb b/testdata/samba3/share_info.tdb
new file mode 100644
index 0000000..ba4268f
--- /dev/null
+++ b/testdata/samba3/share_info.tdb
diff --git a/testdata/samba3/smb.conf b/testdata/samba3/smb.conf
new file mode 100644
index 0000000..cabba5f
--- /dev/null
+++ b/testdata/samba3/smb.conf
@@ -0,0 +1,24 @@
+[global]
+   workgroup = SAMBA
+   security = user
+   passdb backend = smbpasswd:../testdata/samba3/smbpasswd tdbsam:../testdata/samba3/passdb.tdb ldapsam:tdb://samba3.ldb
+   debug level = 5
+   netbios name = BEDWYR
+
+[cd1]
+	path = /mnt/cd1
+	public = yes
+
+[cd2]
+	path = /mnt/cd2
+	public = yes
+
+[media]
+	path = /media
+	public = yes
+
+[tmp]
+	path = /tmp
+	guest only = yes
+	public = yes
+	read only = no
diff --git a/testdata/samba3/smb_new.conf b/testdata/samba3/smb_new.conf
new file mode 100644
index 0000000..d82c48c
--- /dev/null
+++ b/testdata/samba3/smb_new.conf
@@ -0,0 +1,7 @@
+[global]
+   workgroup = NEW_WORKGROUP
+   client min protocol = NT1
+   client max protocol = SMB3_00
+   client signing = 1
+   deadtime = 5
+   netbios name = BEDWYR
+\ No newline at end of file
diff --git a/testdata/samba3/smbpasswd b/testdata/samba3/smbpasswd
new file mode 100644
index 0000000..6e3c34d
--- /dev/null
+++ b/testdata/samba3/smbpasswd
@@ -0,0 +1,3 @@
+nobodypw:65534:B28BD20B0D3770EBAAD3B435B51404EE:B123AB4EC733F895B1260A3A08D9C69B:[NU         ]:LCT-43148525:
+rootpw:0:552902031BEDE9EFAAD3B435B51404EE:878D8014606CDA29677A44EFA1353FC7:[U          ]:LCT-4314851B:
+jelmerpw:1000:193130B61A7F81C0AAD3B435B51404EE:C2AE1FE6E648846352453E816F2AEB93:[U          ]:LCT-4314850D:
diff --git a/testdata/samba3/winbindd_idmap.tdb b/testdata/samba3/winbindd_idmap.tdb
new file mode 100644
index 0000000..aa4fa53
--- /dev/null
+++ b/testdata/samba3/winbindd_idmap.tdb
diff --git a/testdata/samba3/wins.dat b/testdata/samba3/wins.dat
new file mode 100644
index 0000000..f636b3d
--- /dev/null
+++ b/testdata/samba3/wins.dat
@@ -0,0 +1,23 @@
+VERSION 1 0
+"ADMINISTRATOR#03" 1124185120 192.168.1.5 64R
+"AURELIA#00" 1125117925 192.168.8.6 44R
+"AURELIA#20" 1125117921 192.168.8.6 44R
+"AVALLACH#00" 1125049158 192.168.1.5 64R
+"AVALLACH#03" 1125101210 192.168.1.5 64R
+"AVALLACH#20" 1125101209 192.168.1.5 64R
+"AVALLACH$#03" 1125101125 192.168.1.5 64R
+"GANIEDA#00" 1125148158 192.168.4.34 64R
+"GANIEDA#03" 1125148158 192.168.4.34 64R
+"GANIEDA#20" 1125148158 192.168.4.34 64R
+"GANIEDA$#03" 1125173455 192.168.4.34 64R
+"MERLIN#00" 1125137792 192.168.1.7 64R
+"MERLIN#03" 1125137792 192.168.1.7 64R
+"MERLIN#20" 1125137792 192.168.1.7 64R
+"RHONWYN#00" 1125107162 192.168.1.1 192.168.4.1 192.168.0.7 66R
+"RHONWYN#03" 1125107162 192.168.1.1 192.168.4.1 192.168.0.7 66R
+"RHONWYN#20" 1125107162 192.168.1.1 192.168.4.1 192.168.0.7 66R
+"MYDOMAIN#00" 1125107162 255.255.255.255 e4R
+"MYDOMAIN#1b" 1125107162 192.168.1.1 192.168.4.1 192.168.0.7 64R
+"MYDOMAIN#1c" 1125107162 192.168.1.1 192.168.4.1 192.168.0.7 e4R
+"MYDOMAIN#1e" 1125107162 255.255.255.255 e4R
+"WORKGROUP#00" 1125117930 255.255.255.255 e4R
diff --git a/testdata/samba3/wins.dat2 b/testdata/samba3/wins.dat2
new file mode 100644
index 0000000..f2c2a3b
--- /dev/null
+++ b/testdata/samba3/wins.dat2
@@ -0,0 +1,23 @@
+VERSION 1 0
+"FILESERVER#03" 1340075987 192.168.1.99 64R
+"BARTLETT#1b" 1340075987 192.168.1.99 64R
+"YOWIEE#03" 1340075987 192.168.1.99 66R
+"LOGINSERVER#20" 1340075987 192.168.1.99 64R
+"GAMESSERVER#00" 1340075987 192.168.1.99 64R
+"BARTLETT#00" 1340075987 255.255.255.255 e4R
+"FILESERVER#20" 1340075987 192.168.1.99 64R
+"YOWIEE#20" 1340075987 192.168.1.99 66R
+"BARTLETT#1c" 1340075987 192.168.1.99 e4R
+"PRINTSERVER#03" 1340075987 192.168.1.99 64R
+"KYD61BE8#00" 1339924470 0.0.0.0  4R
+"BARTLETT#1e" 1340075987 255.255.255.255 e4R
+"LOGINSERVER#00" 1340075987 192.168.1.99 64R
+"GAMESSERVER#03" 1340075987 192.168.1.99 64R
+"PRINTSERVER#20" 1340075987 192.168.1.99 64R
+"FILESERVER#00" 1340075987 192.168.1.99 64R
+"YOWIEE#00" 1340075987 192.168.1.99 66R
+"KYD61BE8#03" 1339924450 0.0.0.0  4R
+"GAMESSERVER#20" 1340075987 192.168.1.99 64R
+"KYD61BE8#20" 1339924490 0.0.0.0  4R
+"LOGINSERVER#03" 1340075987 192.168.1.99 64R
+"PRINTSERVER#00" 1340075987 192.168.1.99 64R