From: Stefan Metzmacher Date: Wed, 13 Mar 2024 15:53:44 +0000 (+0100) Subject: testprogs/blackbox: add better testnames in test_weak_disable_ntlmssp_ldap.sh X-Git-Tag: tdb-1.4.11~771 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1474f9c5de3a0ca0a91596694b73aa19832ae3eb;p=thirdparty%2Fsamba.git testprogs/blackbox: add better testnames in test_weak_disable_ntlmssp_ldap.sh This makes it easier to adjust the expected output when it changes in the next commits. Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider --- diff --git a/testprogs/blackbox/test_weak_disable_ntlmssp_ldap.sh b/testprogs/blackbox/test_weak_disable_ntlmssp_ldap.sh index d2f1c8fdfc8..96d91d4e9e3 100755 --- a/testprogs/blackbox/test_weak_disable_ntlmssp_ldap.sh +++ b/testprogs/blackbox/test_weak_disable_ntlmssp_ldap.sh @@ -22,19 +22,22 @@ samba_net="$BINDIR/net" unset GNUTLS_FORCE_FIPS_MODE # Checks that testparm reports: Weak crypto is allowed -testit_grep "testparm" "Weak crypto is allowed" $samba_testparm --suppress-prompt $SMB_CONF_PATH 2>&1 || failed=$(expr $failed + 1) +testit_grep "testparm.with-weak" "Weak crypto is allowed" $samba_testparm --suppress-prompt $SMB_CONF_PATH 2>&1 || failed=$(expr $failed + 1) # We should be allowed to use NTLM for connecting -testit "net_ads_search.ntlm" $samba_net ads search --use-kerberos=off '(objectCategory=group)' sAMAccountName -U${USERNAME}%${PASSWORD} || failed=$(expr $failed + 1) +testit "net_ads_search.ntlm.with-weak" $samba_net ads search --use-kerberos=off '(objectCategory=group)' sAMAccountName -U${USERNAME}%${PASSWORD} || failed=$(expr $failed + 1) GNUTLS_FORCE_FIPS_MODE=1 export GNUTLS_FORCE_FIPS_MODE # Checks that testparm reports: Weak crypto is disallowed -testit_grep "testparm" "Weak crypto is disallowed" $samba_testparm --suppress-prompt $SMB_CONF_PATH 2>&1 || failed=$(expr $failed + 1) +testit_grep "testparm.without-weak" "Weak crypto is disallowed" $samba_testparm --suppress-prompt $SMB_CONF_PATH 2>&1 || failed=$(expr $failed + 1) # We should not be allowed to use NTLM for connecting -testit_expect_failure_grep "net_ads_search.ntlm" "We can't fallback to NTLMSSP, weak crypto is disallowed." $samba_net ads search --use-kerberos=off -d10 '(objectCategory=group)' sAMAccountName -U${USERNAME}%${PASSWORD} || failed=$(expr $failed + 1) +testit_expect_failure_grep \ + "net_ads_search.ntlm.without-weak" \ + "We can't fallback to NTLMSSP, weak crypto is disallowed." \ + $samba_net ads search -d10 --use-kerberos=off '(objectCategory=group)' sAMAccountName -U${USERNAME}%${PASSWORD} || failed=$(expr $failed + 1) unset GNUTLS_FORCE_FIPS_MODE