diff options
Diffstat (limited to 'python/samba/tests/samba_tool/group_edit.sh')
| -rwxr-xr-x | python/samba/tests/samba_tool/group_edit.sh | 228 |
1 files changed, 228 insertions, 0 deletions
diff --git a/python/samba/tests/samba_tool/group_edit.sh b/python/samba/tests/samba_tool/group_edit.sh new file mode 100755 index 0000000..3db2c66 --- /dev/null +++ b/python/samba/tests/samba_tool/group_edit.sh @@ -0,0 +1,228 @@ +#!/bin/sh +# +# Test for 'samba-tool group edit' + +if [ $# -lt 3 ]; then + cat <<EOF +Usage: group_edit.sh SERVER USERNAME PASSWORD +EOF + exit 1 +fi + +SERVER="$1" +USERNAME="$2" +PASSWORD="$3" + +samba_ldbsearch=ldbsearch +if test -x $BINDIR/ldbsearch; then + samba_ldbsearch=$BINDIR/ldbsearch +fi + +STpath=$(pwd) +. $STpath/testprogs/blackbox/subunit.sh + +display_name="Users in Göttingen" +display_name_b64="VXNlcnMgaW4gR8O2dHRpbmdlbg==" +display_name_new="Users in Goettingen" +# attribute value including control character +# echo -e "test \a string" | base64 +display_name_con_b64="dGVzdCAHIHN0cmluZwo=" + +tmpeditor=$(mktemp --suffix .sh -p $SELFTEST_TMPDIR samba-tool-editor-XXXXXXXX) +chmod +x $tmpeditor + +create_test_group() +{ + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + group add testgroup1 \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +delete_test_group() +{ + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + group delete testgroup1 \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +create_test_user() +{ + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + user create testuser1 --random-password \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +delete_test_user() +{ + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + user delete testuser1 \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +add_member() +{ + user_dn=$($PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + user show testuser1 --attributes=dn \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" | + grep ^dn: | cut -d' ' -f2) + + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +grep -v '^$' \$group_ldif > \${group_ldif}.tmp +echo "member: $user_dn" >> \${group_ldif}.tmp + +mv \${group_ldif}.tmp \$group_ldif +EOF + + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + group edit testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_member() +{ + $PYTHON ${STpath}/source4/scripting/bin/samba-tool \ + group listmembers testgroup1 \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +# Test edit group - add base64 attributes +add_attribute_base64() +{ + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +grep -v '^$' \$group_ldif > \${group_ldif}.tmp +echo "displayName:: $display_name_b64" >> \${group_ldif}.tmp + +mv \${group_ldif}.tmp \$group_ldif +EOF + + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_attribute_base64() +{ + $samba_ldbsearch '(sAMAccountName=testgroup1)' displayName \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +delete_attribute() +{ + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +grep -v '^displayName' \$group_ldif >> \${group_ldif}.tmp +mv \${group_ldif}.tmp \$group_ldif +EOF + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +# Test edit group - add base64 attribute value including control character +add_attribute_base64_control() +{ + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +grep -v '^$' \$group_ldif > \${group_ldif}.tmp +echo "displayName:: $display_name_con_b64" >> \${group_ldif}.tmp + +mv \${group_ldif}.tmp \$group_ldif +EOF + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_attribute_base64_control() +{ + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group show \ + testgroup1 --attributes=displayName \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_attribute_force_no_base64() +{ + # LDB_FLAG_FORCE_NO_BASE64_LDIF should be used here. + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group show \ + testgroup1 --attributes=displayName \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +# Test edit group - change base64 attribute value including control character +change_attribute_base64_control() +{ + # create editor.sh + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +sed -i -e 's/displayName:: $display_name_con_b64/displayName: $display_name/' \ + \$group_ldif +EOF + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +# Test edit group - change attributes with LDB_FLAG_FORCE_NO_BASE64_LDIF +change_attribute_force_no_base64() +{ + # create editor.sh + # Expects that the original attribute is available as clear text, + # because the LDB_FLAG_FORCE_NO_BASE64_LDIF should be used here. + cat >$tmpeditor <<EOF +#!/usr/bin/env bash +group_ldif="\$1" + +sed -i -e 's/displayName: $display_name/displayName: $display_name_new/' \ + \$group_ldif +EOF + + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group edit \ + testgroup1 --editor=$tmpeditor \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +get_changed_attribute_force_no_base64() +{ + $PYTHON ${STpath}/source4/scripting/bin/samba-tool group show \ + testgroup1 --attributes=displayName \ + -H "ldap://$SERVER" "-U$USERNAME" "--password=$PASSWORD" +} + +failed=0 + +testit "create_test_group" create_test_group || failed=$(expr $failed + 1) +testit "create_test_user" create_test_user || failed=$(expr $failed + 1) +testit "add_member" add_member || failed=$(expr $failed + 1) +testit_grep "get_member" "^testuser1" get_member || failed=$(expr $failed + 1) +testit "add_attribute_base64" add_attribute_base64 || failed=$(expr $failed + 1) +testit_grep "get_attribute_base64" "^displayName:: $display_name_b64" get_attribute_base64 || failed=$(expr $failed + 1) +testit "delete_attribute" delete_attribute || failed=$(expr $failed + 1) +testit "add_attribute_base64_control" add_attribute_base64_control || failed=$(expr $failed + 1) +testit_grep "get_attribute_base64_control" "^displayName:: $display_name_con_b64" get_attribute_base64_control || failed=$(expr $failed + 1) +testit "change_attribute_base64_control" change_attribute_base64_control || failed=$(expr $failed + 1) +testit_grep "get_attribute_base64" "^displayName:: $display_name_b64" get_attribute_base64 || failed=$(expr $failed + 1) +testit_grep "get_attribute_force_no_base64" "^displayName: $display_name" get_attribute_force_no_base64 || failed=$(expr $failed + 1) +testit "change_attribute_force_no_base64" change_attribute_force_no_base64 || failed=$(expr $failed + 1) +testit_grep "get_changed_attribute_force_no_base64" "^displayName: $display_name_new" get_changed_attribute_force_no_base64 || failed=$(expr $failed + 1) +testit "delete_test_group" delete_test_group || failed=$(expr $failed + 1) +testit "delete_test_user" delete_test_user || failed=$(expr $failed + 1) + +rm -f $tmpeditor + +exit $failed |