# Copyright (c) 2021 Andreas Schneider <asn@samba.org>
if [ $# -lt 8 ]; then
- cat << EOF
+ cat <<EOF
Usage: test_rpcclient_schannel.sh DOMAIN REALM USERNAME PASSWORD SERVER PREFIX CONFIGURATION TESTENV
EOF
- exit 1
+ exit 1
fi
DOMAIN=$1
test_rpc_getusername()
{
- cmd="$samba_rpcclient ncacn_np:${SERVER}[schannel] --machine-pass --configfile=${CONFIGURATION} -c getusername 2>&1"
- out=$(eval "$cmd")
- ret=$?
- if [ $ret -ne 0 ]; then
- echo "Failed to connect! Error: $ret"
- echo "$out"
- return 1
- fi
-
- echo "$out" | grep -q "Account Name: ANONYMOUS LOGON, Authority Name: NT AUTHORITY"
- ret=$?
- if [ $ret -ne 0 ]; then
- echo "Incorrect account/authority name! Error: $ret"
- echo "$out"
- return 1
- fi
-
- return 0
+ cmd="$samba_rpcclient ncacn_np:${SERVER}[schannel] --machine-pass --configfile=${CONFIGURATION} -c getusername 2>&1"
+ out=$(eval "$cmd")
+ ret=$?
+ if [ $ret -ne 0 ]; then
+ echo "Failed to connect! Error: $ret"
+ echo "$out"
+ return 1
+ fi
+
+ echo "$out" | grep -q "Account Name: ANONYMOUS LOGON, Authority Name: NT AUTHORITY"
+ ret=$?
+ if [ $ret -ne 0 ]; then
+ echo "Incorrect account/authority name! Error: $ret"
+ echo "$out"
+ return 1
+ fi
+
+ return 0
}
test_rpc_lookupsids()
{
- cmd="$samba_rpcclient ncacn_ip_tcp:${SERVER}[schannel] --machine-pass --configfile=${CONFIGURATION} -c 'lookupsids3 S-1-1-0' 2>&1"
- out=$(eval "$cmd")
- ret=$?
- if [ $ret -ne 0 ]; then
- echo "Failed to connect! Error: $ret"
- echo "$out"
- return 1
- fi
-
- echo "$out" | grep -q "S-1-1-0 Everyone"
- ret=$?
- if [ $ret -ne 0 ]; then
- echo "Incorrect account/authority name! Error: $ret"
- echo "$out"
- return 1
- fi
-
- return 0
+ cmd="$samba_rpcclient ncacn_ip_tcp:${SERVER}[schannel] --machine-pass --configfile=${CONFIGURATION} -c 'lookupsids3 S-1-1-0' 2>&1"
+ out=$(eval "$cmd")
+ ret=$?
+ if [ $ret -ne 0 ]; then
+ echo "Failed to connect! Error: $ret"
+ echo "$out"
+ return 1
+ fi
+
+ echo "$out" | grep -q "S-1-1-0 Everyone"
+ ret=$?
+ if [ $ret -ne 0 ]; then
+ echo "Incorrect account/authority name! Error: $ret"
+ echo "$out"
+ return 1
+ fi
+
+ return 0
}
testit "ncacn_np.getusername" \
- test_rpc_getusername || \
- failed=$((failed + 1))
+ test_rpc_getusername ||
+ failed=$((failed + 1))
if [[ "$TESTENV" == "ad_member_fips"* ]]; then
- unset GNUTLS_FORCE_FIPS_MODE
+ unset GNUTLS_FORCE_FIPS_MODE
- testit "ncacn_np.getusername.fips" \
- test_rpc_getusername || \
- failed=$((failed + 1))
+ testit "ncacn_np.getusername.fips" \
+ test_rpc_getusername ||
+ failed=$((failed + 1))
- GNUTLS_FORCE_FIPS_MODE=1
- export GNUTLS_FORCE_FIPS_MODE
+ GNUTLS_FORCE_FIPS_MODE=1
+ export GNUTLS_FORCE_FIPS_MODE
fi
testit "ncacn_ip_tcp.lookupsids" \
- test_rpc_lookupsids || \
- failed=$((failed + 1))
+ test_rpc_lookupsids ||
+ failed=$((failed + 1))
exit ${failed}