selftest/Samba3: use "server min protocol = SMB3_00" for "ktest"

This verifies that clients can still connect with that setting.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12540

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Fri Jan 27 12:03:39 CET 2017 on sn-devel-144

(cherry picked from commit 348bcca76855798d60c04ddb30f1e13b2ac2d7cd)

diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm
index 17ad820ce2954c6464257bf9de6cedfd673a9ff6..4596a0a118da05a663d5262f806a4a9e753e4886 100755 (executable)
--- a/selftest/target/Samba3.pm
+++ b/selftest/target/Samba3.pm
@@ -748,6 +748,8 @@ sub setup_ktest($$$)
        security = ads
         username map = $prefix/lib/username.map
         server signing = required
+       server min protocol = SMB3_00
+       client max protocol = SMB3
 ";
 
        my $ret = $self->provision($prefix,

diff --git a/source3/selftest/tests.py b/source3/selftest/tests.py
index f5bddc25e9cba250dd9e71b7ca6cb138ea49cd87..ae0d9559790954abdc8b96b224d65c51fac1bfc3 100755 (executable)
--- a/source3/selftest/tests.py
+++ b/source3/selftest/tests.py
@@ -431,8 +431,12 @@ for s in signseal_options:
 
     # We should try more combinations in future, but this is all
     # the pre-calculated credentials cache supports at the moment
+    #
+    # As the ktest env requires SMB3_00 we need to use "smb2" until
+    # dcerpc client code in smbtorture support autonegotiation
+    # of any smb dialect.
     e = ""
-    a = ""
+    a = "smb2"
     binding_string = "ncacn_np:$SERVER[%s%s%s]" % (a, s, e)
     options = binding_string + " -k yes --krb5-ccache=$PREFIX/ktest/krb5_ccache-2"
     plansmbtorture4testsuite(test, "ktest", options, 'krb5 with old ccache ncacn_np with [%s%s%s] ' % (a, s, e))