| 1 | /*
|
|---|
| 2 | Unix SMB/CIFS implementation.
|
|---|
| 3 | passdb testing utility
|
|---|
| 4 |
|
|---|
| 5 | Copyright (C) Wilco Baan Hofman 2006
|
|---|
| 6 | Copyright (C) Jelmer Vernooij 2006
|
|---|
| 7 |
|
|---|
| 8 | This program is free software; you can redistribute it and/or modify
|
|---|
| 9 | it under the terms of the GNU General Public License as published by
|
|---|
| 10 | the Free Software Foundation; either version 2 of the License, or
|
|---|
| 11 | (at your option) any later version.
|
|---|
| 12 |
|
|---|
| 13 | This program is distributed in the hope that it will be useful,
|
|---|
| 14 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|---|
| 15 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|---|
| 16 | GNU General Public License for more details.
|
|---|
| 17 |
|
|---|
| 18 | You should have received a copy of the GNU General Public License
|
|---|
| 19 | along with this program; if not, write to the Free Software
|
|---|
| 20 | Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|---|
| 21 | */
|
|---|
| 22 |
|
|---|
| 23 |
|
|---|
| 24 | #include "includes.h"
|
|---|
| 25 |
|
|---|
| 26 | static BOOL samu_correct(struct samu *s1, struct samu *s2)
|
|---|
| 27 | {
|
|---|
| 28 | BOOL ret = True;
|
|---|
| 29 | uint32 s1_len, s2_len;
|
|---|
| 30 | const char *s1_buf, *s2_buf;
|
|---|
| 31 | const uint8 *d1_buf, *d2_buf;
|
|---|
| 32 |
|
|---|
| 33 | /* Check Unix username */
|
|---|
| 34 | s1_buf = pdb_get_username(s1);
|
|---|
| 35 | s2_buf = pdb_get_username(s2);
|
|---|
| 36 | if (s2_buf == NULL && s1_buf != NULL) {
|
|---|
| 37 | DEBUG(0, ("Username is not set\n"));
|
|---|
| 38 | ret = False;
|
|---|
| 39 | } else if (s1_buf == NULL) {
|
|---|
| 40 | /* Do nothing */
|
|---|
| 41 | } else if (strcmp(s1_buf,s2_buf)) {
|
|---|
| 42 | DEBUG(0, ("Username not written correctly, want %s, got \"%s\"\n",
|
|---|
| 43 | pdb_get_username(s1),
|
|---|
| 44 | pdb_get_username(s2)));
|
|---|
| 45 | ret = False;
|
|---|
| 46 | }
|
|---|
| 47 |
|
|---|
| 48 | /* Check NT username */
|
|---|
| 49 | s1_buf = pdb_get_nt_username(s1);
|
|---|
| 50 | s2_buf = pdb_get_nt_username(s2);
|
|---|
| 51 | if (s2_buf == NULL && s1_buf != NULL) {
|
|---|
| 52 | DEBUG(0, ("NT Username is not set\n"));
|
|---|
| 53 | ret = False;
|
|---|
| 54 | } else if (s1_buf == NULL) {
|
|---|
| 55 | /* Do nothing */
|
|---|
| 56 | } else if (strcmp(s1_buf, s2_buf)) {
|
|---|
| 57 | DEBUG(0, ("NT Username not written correctly, want \"%s\", got \"%s\"\n",
|
|---|
| 58 | pdb_get_nt_username(s1),
|
|---|
| 59 | pdb_get_nt_username(s2)));
|
|---|
| 60 | ret = False;
|
|---|
| 61 | }
|
|---|
| 62 |
|
|---|
| 63 | /* Check acct ctrl */
|
|---|
| 64 | if (pdb_get_acct_ctrl(s1) != pdb_get_acct_ctrl(s2)) {
|
|---|
| 65 | DEBUG(0, ("Acct ctrl field not written correctly, want %d (0x%X), got %d (0x%X)\n",
|
|---|
| 66 | pdb_get_acct_ctrl(s1),
|
|---|
| 67 | pdb_get_acct_ctrl(s1),
|
|---|
| 68 | pdb_get_acct_ctrl(s2),
|
|---|
| 69 | pdb_get_acct_ctrl(s2)));
|
|---|
| 70 | ret = False;
|
|---|
| 71 | }
|
|---|
| 72 |
|
|---|
| 73 | /* Check NT password */
|
|---|
| 74 | d1_buf = pdb_get_nt_passwd(s1);
|
|---|
| 75 | d2_buf = pdb_get_nt_passwd(s2);
|
|---|
| 76 | if (d2_buf == NULL && d1_buf != NULL) {
|
|---|
| 77 | DEBUG(0, ("NT password is not set\n"));
|
|---|
| 78 | ret = False;
|
|---|
| 79 | } else if (d1_buf == NULL) {
|
|---|
| 80 | /* Do nothing */
|
|---|
| 81 | } else if (memcmp(d1_buf, d2_buf, NT_HASH_LEN)) {
|
|---|
| 82 | DEBUG(0, ("NT password not written correctly\n"));
|
|---|
| 83 | ret = False;
|
|---|
| 84 | }
|
|---|
| 85 |
|
|---|
| 86 | /* Check lanman password */
|
|---|
| 87 | d1_buf = pdb_get_lanman_passwd(s1);
|
|---|
| 88 | d2_buf = pdb_get_lanman_passwd(s2);
|
|---|
| 89 | if (d2_buf == NULL && d1_buf != NULL) {
|
|---|
| 90 | DEBUG(0, ("Lanman password is not set\n"));
|
|---|
| 91 | } else if (d1_buf == NULL) {
|
|---|
| 92 | /* Do nothing */
|
|---|
| 93 | } else if (memcmp(d1_buf, d2_buf, NT_HASH_LEN)) {
|
|---|
| 94 | DEBUG(0, ("Lanman password not written correctly\n"));
|
|---|
| 95 | ret = False;
|
|---|
| 96 | }
|
|---|
| 97 |
|
|---|
| 98 | /* Check password history */
|
|---|
| 99 | d1_buf = pdb_get_pw_history(s1, &s1_len);
|
|---|
| 100 | d2_buf = pdb_get_pw_history(s2, &s2_len);
|
|---|
| 101 | if (d2_buf == NULL && d1_buf != NULL) {
|
|---|
| 102 | DEBUG(0, ("Password history is not set\n"));
|
|---|
| 103 | } else if (d1_buf == NULL) {
|
|---|
| 104 | /* Do nothing */
|
|---|
| 105 | } else if (s1_len != s1_len) {
|
|---|
| 106 | DEBUG(0, ("Password history not written correctly, lengths differ, want %d, got %d\n",
|
|---|
| 107 | s1_len, s2_len));
|
|---|
| 108 | ret = False;
|
|---|
| 109 | } else if (strncmp(s1_buf, s2_buf, s1_len)) {
|
|---|
| 110 | DEBUG(0, ("Password history not written correctly\n"));
|
|---|
| 111 | ret = False;
|
|---|
| 112 | }
|
|---|
| 113 |
|
|---|
| 114 | /* Check logon time */
|
|---|
| 115 | if (pdb_get_logon_time(s1) != pdb_get_logon_time(s2)) {
|
|---|
| 116 | DEBUG(0, ("Logon time is not written correctly\n"));
|
|---|
| 117 | ret = False;
|
|---|
| 118 | }
|
|---|
| 119 |
|
|---|
| 120 | /* Check logoff time */
|
|---|
| 121 | if (pdb_get_logoff_time(s1) != pdb_get_logoff_time(s2)) {
|
|---|
| 122 | DEBUG(0, ("Logoff time is not written correctly\n"));
|
|---|
| 123 | ret = False;
|
|---|
| 124 | }
|
|---|
| 125 |
|
|---|
| 126 | /* Check kickoff time */
|
|---|
| 127 | if (pdb_get_kickoff_time(s1) != pdb_get_logoff_time(s2)) {
|
|---|
| 128 | DEBUG(0, ("Kickoff time is not written correctly\n"));
|
|---|
| 129 | ret = False;
|
|---|
| 130 | }
|
|---|
| 131 |
|
|---|
| 132 | /* Check bad password time */
|
|---|
| 133 | if (pdb_get_bad_password_time(s1) != pdb_get_bad_password_time(s2)) {
|
|---|
| 134 | DEBUG(0, ("Bad password time is not written correctly\n"));
|
|---|
| 135 | ret = False;
|
|---|
| 136 | }
|
|---|
| 137 |
|
|---|
| 138 | /* Check password last set time */
|
|---|
| 139 | if (pdb_get_pass_last_set_time(s1) != pdb_get_pass_last_set_time(s2)) {
|
|---|
| 140 | DEBUG(0, ("Password last set time is not written correctly\n"));
|
|---|
| 141 | ret = False;
|
|---|
| 142 | }
|
|---|
| 143 |
|
|---|
| 144 | /* Check password can change time */
|
|---|
| 145 | if (pdb_get_pass_can_change_time(s1) != pdb_get_pass_can_change_time(s2)) {
|
|---|
| 146 | DEBUG(0, ("Password can change time is not written correctly\n"));
|
|---|
| 147 | ret = False;
|
|---|
| 148 | }
|
|---|
| 149 |
|
|---|
| 150 | /* Check password must change time */
|
|---|
| 151 | if (pdb_get_pass_must_change_time(s1) != pdb_get_pass_must_change_time(s2)) {
|
|---|
| 152 | DEBUG(0, ("Password must change time is not written correctly\n"));
|
|---|
| 153 | ret = False;
|
|---|
| 154 | }
|
|---|
| 155 |
|
|---|
| 156 | /* Check logon divs */
|
|---|
| 157 | if (pdb_get_logon_divs(s1) != pdb_get_logon_divs(s2)) {
|
|---|
| 158 | DEBUG(0, ("Logon divs not written correctly\n"));
|
|---|
| 159 | ret = False;
|
|---|
| 160 | }
|
|---|
| 161 |
|
|---|
| 162 | /* Check logon hours */
|
|---|
| 163 | if (pdb_get_hours_len(s1) != pdb_get_hours_len(s2)) {
|
|---|
| 164 | DEBUG(0, ("Logon hours length not written correctly\n"));
|
|---|
| 165 | ret = False;
|
|---|
| 166 | } else if (pdb_get_hours_len(s1) != 0) {
|
|---|
| 167 | d1_buf = pdb_get_hours(s1);
|
|---|
| 168 | d2_buf = pdb_get_hours(s2);
|
|---|
| 169 | if (d2_buf == NULL && d2_buf != NULL) {
|
|---|
| 170 | DEBUG(0, ("Logon hours is not set\n"));
|
|---|
| 171 | ret = False;
|
|---|
| 172 | } else if (d1_buf == NULL) {
|
|---|
| 173 | /* Do nothing */
|
|---|
| 174 | } else if (memcmp(d1_buf, d2_buf, MAX_HOURS_LEN)) {
|
|---|
| 175 | DEBUG(0, ("Logon hours is not written correctly\n"));
|
|---|
| 176 | ret = False;
|
|---|
| 177 | }
|
|---|
| 178 | }
|
|---|
| 179 |
|
|---|
| 180 | /* Check profile path */
|
|---|
| 181 | s1_buf = pdb_get_profile_path(s1);
|
|---|
| 182 | s2_buf = pdb_get_profile_path(s2);
|
|---|
| 183 | if (s2_buf == NULL && s1_buf != NULL) {
|
|---|
| 184 | DEBUG(0, ("Profile path is not set\n"));
|
|---|
| 185 | ret = False;
|
|---|
| 186 | } else if (s1_buf == NULL) {
|
|---|
| 187 | /* Do nothing */
|
|---|
| 188 | } else if (strcmp(s1_buf, s2_buf)) {
|
|---|
| 189 | DEBUG(0, ("Profile path is not written correctly\n"));
|
|---|
| 190 | ret = False;
|
|---|
| 191 | }
|
|---|
| 192 |
|
|---|
| 193 | /* Check home dir */
|
|---|
| 194 | s1_buf = pdb_get_homedir(s1);
|
|---|
| 195 | s2_buf = pdb_get_homedir(s2);
|
|---|
| 196 | if (s2_buf == NULL && s1_buf != NULL) {
|
|---|
| 197 | DEBUG(0, ("Home dir is not set\n"));
|
|---|
| 198 | ret = False;
|
|---|
| 199 | } else if (s1_buf == NULL) {
|
|---|
| 200 | /* Do nothing */
|
|---|
| 201 | } else if (strcmp(s1_buf, s2_buf)) {
|
|---|
| 202 | DEBUG(0, ("Home dir is not written correctly\n"));
|
|---|
| 203 | ret = False;
|
|---|
| 204 | }
|
|---|
| 205 |
|
|---|
| 206 | /* Check logon script */
|
|---|
| 207 | s1_buf = pdb_get_logon_script(s1);
|
|---|
| 208 | s2_buf = pdb_get_logon_script(s2);
|
|---|
| 209 | if (s2_buf == NULL && s1_buf != NULL) {
|
|---|
| 210 | DEBUG(0, ("Logon script not set\n"));
|
|---|
| 211 | ret = False;
|
|---|
| 212 | } else if (s1_buf == NULL) {
|
|---|
| 213 | /* Do nothing */
|
|---|
| 214 | } else if (strcmp(s1_buf, s2_buf)) {
|
|---|
| 215 | DEBUG(0, ("Logon script is not written correctly\n"));
|
|---|
| 216 | ret = False;
|
|---|
| 217 | }
|
|---|
| 218 |
|
|---|
| 219 | /* TODO Check user and group sids */
|
|---|
| 220 |
|
|---|
| 221 | return ret;
|
|---|
| 222 | }
|
|---|
| 223 |
|
|---|
| 224 |
|
|---|
| 225 | int main(int argc, char **argv)
|
|---|
| 226 | {
|
|---|
| 227 | TALLOC_CTX *ctx;
|
|---|
| 228 | struct samu *out = NULL;
|
|---|
| 229 | struct samu *in = NULL;
|
|---|
| 230 | NTSTATUS rv;
|
|---|
| 231 | int i;
|
|---|
| 232 | struct timeval tv;
|
|---|
| 233 | BOOL error = False;
|
|---|
| 234 | struct passwd *pwd;
|
|---|
| 235 | uint8 *buf;
|
|---|
| 236 | uint32 expire, min_age, history;
|
|---|
| 237 | struct pdb_methods *pdb;
|
|---|
| 238 | poptContext pc;
|
|---|
| 239 | static const char *backend = NULL;
|
|---|
| 240 | static const char *unix_user = "nobody";
|
|---|
| 241 | struct poptOption long_options[] = {
|
|---|
| 242 | {"username", 'u', POPT_ARG_STRING, &unix_user, 0, "Unix user to use for testing", "USERNAME" },
|
|---|
| 243 | {"backend", 'b', POPT_ARG_STRING, &backend, 0, "Backend to use if not default", "BACKEND[:SETTINGS]" },
|
|---|
| 244 | POPT_AUTOHELP
|
|---|
| 245 | POPT_COMMON_SAMBA
|
|---|
| 246 | POPT_TABLEEND
|
|---|
| 247 | };
|
|---|
| 248 |
|
|---|
| 249 | load_case_tables();
|
|---|
| 250 |
|
|---|
| 251 | pc = poptGetContext("vfstest", argc, (const char **) argv,
|
|---|
| 252 | long_options, 0);
|
|---|
| 253 |
|
|---|
| 254 | poptSetOtherOptionHelp(pc, "backend[:settings] username");
|
|---|
| 255 |
|
|---|
| 256 | while(poptGetNextOpt(pc) != -1);
|
|---|
| 257 |
|
|---|
| 258 | poptFreeContext(pc);
|
|---|
| 259 |
|
|---|
| 260 | /* Load configuration */
|
|---|
| 261 | lp_load(dyn_CONFIGFILE, False, False, True, True);
|
|---|
| 262 | setup_logging("pdbtest", True);
|
|---|
| 263 |
|
|---|
| 264 | if (backend == NULL) {
|
|---|
| 265 | backend = lp_passdb_backend();
|
|---|
| 266 | }
|
|---|
| 267 |
|
|---|
| 268 | rv = make_pdb_method_name(&pdb, backend);
|
|---|
| 269 | if (NT_STATUS_IS_ERR(rv)) {
|
|---|
| 270 | fprintf(stderr, "Error initializing '%s': %s\n", backend, get_friendly_nt_error_msg(rv));
|
|---|
| 271 | exit(1);
|
|---|
| 272 | }
|
|---|
| 273 |
|
|---|
| 274 | ctx = talloc_init("PDBTEST");
|
|---|
| 275 |
|
|---|
| 276 | if (!(out = samu_new(ctx))) {
|
|---|
| 277 | fprintf(stderr, "Can't create samu structure.\n");
|
|---|
| 278 | exit(1);
|
|---|
| 279 | }
|
|---|
| 280 |
|
|---|
| 281 | if ((pwd = getpwnam_alloc(ctx, unix_user)) == NULL) {
|
|---|
| 282 | fprintf(stderr, "Error getting user information for %s\n", unix_user);
|
|---|
| 283 | exit(1);
|
|---|
| 284 | }
|
|---|
| 285 |
|
|---|
| 286 | samu_set_unix(out, pwd);
|
|---|
| 287 |
|
|---|
| 288 | pdb_set_profile_path(out, "\\\\torture\\profile", PDB_SET);
|
|---|
| 289 | pdb_set_homedir(out, "\\\\torture\\home", PDB_SET);
|
|---|
| 290 | pdb_set_logon_script(out, "torture_script.cmd", PDB_SET);
|
|---|
| 291 |
|
|---|
| 292 | pdb_get_account_policy(AP_PASSWORD_HISTORY, &history);
|
|---|
| 293 | if (history * PW_HISTORY_ENTRY_LEN < NT_HASH_LEN) {
|
|---|
| 294 | buf = (uint8 *)TALLOC(ctx, NT_HASH_LEN);
|
|---|
| 295 | } else {
|
|---|
| 296 | buf = (uint8 *)TALLOC(ctx, history * PW_HISTORY_ENTRY_LEN);
|
|---|
| 297 | }
|
|---|
| 298 |
|
|---|
| 299 | /* Generate some random hashes */
|
|---|
| 300 | GetTimeOfDay(&tv);
|
|---|
| 301 | srand(tv.tv_usec);
|
|---|
| 302 | for (i = 0; i < NT_HASH_LEN; i++) {
|
|---|
| 303 | buf[i] = (uint8) rand();
|
|---|
| 304 | }
|
|---|
| 305 | pdb_set_nt_passwd(out, buf, PDB_SET);
|
|---|
| 306 | for (i = 0; i < LM_HASH_LEN; i++) {
|
|---|
| 307 | buf[i] = (uint8) rand();
|
|---|
| 308 | }
|
|---|
| 309 | pdb_set_lanman_passwd(out, buf, PDB_SET);
|
|---|
| 310 | for (i = 0; i < history * PW_HISTORY_ENTRY_LEN; i++) {
|
|---|
| 311 | buf[i] = (uint8) rand();
|
|---|
| 312 | }
|
|---|
| 313 | pdb_set_pw_history(out, buf, history, PDB_SET);
|
|---|
| 314 |
|
|---|
| 315 | pdb_get_account_policy(AP_MAX_PASSWORD_AGE, &expire);
|
|---|
| 316 | pdb_get_account_policy(AP_MIN_PASSWORD_AGE, &min_age);
|
|---|
| 317 | pdb_set_pass_last_set_time(out, time(NULL), PDB_SET);
|
|---|
| 318 |
|
|---|
| 319 | if (expire == 0 || expire == (uint32)-1) {
|
|---|
| 320 | pdb_set_pass_must_change_time(out, get_time_t_max(), PDB_SET);
|
|---|
| 321 | } else {
|
|---|
| 322 | pdb_set_pass_must_change_time(out, time(NULL)+expire, PDB_SET);
|
|---|
| 323 | }
|
|---|
| 324 |
|
|---|
| 325 | if (min_age == (uint32)-1) {
|
|---|
| 326 | pdb_set_pass_can_change_time(out, 0, PDB_SET);
|
|---|
| 327 | } else {
|
|---|
| 328 | pdb_set_pass_can_change_time(out, time(NULL)+min_age, PDB_SET);
|
|---|
| 329 | }
|
|---|
| 330 |
|
|---|
| 331 | /* Create account */
|
|---|
| 332 | if (!NT_STATUS_IS_OK(rv = pdb->add_sam_account(pdb, out))) {
|
|---|
| 333 | fprintf(stderr, "Error in add_sam_account: %s\n",
|
|---|
| 334 | get_friendly_nt_error_msg(rv));
|
|---|
| 335 | exit(1);
|
|---|
| 336 | }
|
|---|
| 337 |
|
|---|
| 338 | if (!(in = samu_new(ctx))) {
|
|---|
| 339 | fprintf(stderr, "Can't create samu structure.\n");
|
|---|
| 340 | exit(1);
|
|---|
| 341 | }
|
|---|
| 342 |
|
|---|
| 343 | /* Get account information through getsampwnam() */
|
|---|
| 344 | if (NT_STATUS_IS_ERR(pdb->getsampwnam(pdb, in, out->username))) {
|
|---|
| 345 | fprintf(stderr, "Error getting sampw of added user %s.\n",
|
|---|
| 346 | out->username);
|
|---|
| 347 | if (!NT_STATUS_IS_OK(rv = pdb->delete_sam_account(pdb, out))) {
|
|---|
| 348 | fprintf(stderr, "Error in delete_sam_account %s\n",
|
|---|
| 349 | get_friendly_nt_error_msg(rv));
|
|---|
| 350 | }
|
|---|
| 351 | TALLOC_FREE(ctx);
|
|---|
| 352 | }
|
|---|
| 353 |
|
|---|
| 354 | /* Verify integrity */
|
|---|
| 355 | if (samu_correct(out, in)) {
|
|---|
| 356 | printf("User info written correctly\n");
|
|---|
| 357 | } else {
|
|---|
| 358 | printf("User info NOT written correctly\n");
|
|---|
| 359 | error = True;
|
|---|
| 360 | }
|
|---|
| 361 |
|
|---|
| 362 | /* Delete account */
|
|---|
| 363 | if (!NT_STATUS_IS_OK(rv = pdb->delete_sam_account(pdb, out))) {
|
|---|
| 364 | fprintf(stderr, "Error in delete_sam_account %s\n",
|
|---|
| 365 | get_friendly_nt_error_msg(rv));
|
|---|
| 366 | }
|
|---|
| 367 |
|
|---|
| 368 | pdb->setsampwent(pdb, False, 0);
|
|---|
| 369 | while (NT_STATUS_IS_OK(pdb->getsampwent(pdb, out))) {
|
|---|
| 370 | if (pdb_get_username(out) == NULL) {
|
|---|
| 371 | fprintf(stderr, "Got bad username through getsampwent()\n");
|
|---|
| 372 | error = True;
|
|---|
| 373 | break;
|
|---|
| 374 | }
|
|---|
| 375 | if (NT_STATUS_IS_ERR(pdb->getsampwnam(pdb, in, pdb_get_username(out)))) {
|
|---|
| 376 | fprintf(stderr, "Error getting samu through getsampwnam() of an account we got through getsampwent!\n");
|
|---|
| 377 | error = True;
|
|---|
| 378 | continue;
|
|---|
| 379 | }
|
|---|
| 380 | if (!samu_correct(out, in)) {
|
|---|
| 381 | printf("Record gotten through getsampwnam() differs from same record through getsampwent()\n");
|
|---|
| 382 | }
|
|---|
| 383 | }
|
|---|
| 384 | pdb->endsampwent(pdb);
|
|---|
| 385 |
|
|---|
| 386 | TALLOC_FREE(ctx);
|
|---|
| 387 |
|
|---|
| 388 | if (error) {
|
|---|
| 389 | return 1;
|
|---|
| 390 | }
|
|---|
| 391 | return 0;
|
|---|
| 392 | }
|
|---|