s4/fsmo: Added python tests for schema master transfer op

2 files changed, 153 insertions, 0 deletions

diff --git a/source4/selftest/tests.sh b/source4/selftest/tests.sh
index 10a083bca9..a0483b7735 100755
--- a/source4/selftest/tests.sh
+++ b/source4/selftest/tests.sh
@@ -530,6 +530,7 @@ plantestsuite "blackbox.spn.py" dc:local PYTHON="$PYTHON" $samba4srcdir/setup/te
 
 # DRS python tests
 plantestsuite "drs_delete_object.python" vampire_dc PYTHONPATH="$PYTHONPATH:$samba4srcdir/torture/drs/python" DC1=\$DC_SERVER DC2=\$VAMPIRE_DC_SERVER $SUBUNITRUN delete_object -U"\$DOMAIN/\$DC_USERNAME"%"\$DC_PASSWORD"
+plantestsuite "drs_fsmo.python" vampire_dc PYTHONPATH="$PYTHONPATH:$samba4srcdir/torture/drs/python" DC1=\$DC_SERVER DC2=\$VAMPIRE_DC_SERVER $SUBUNITRUN fsmo -U"\$DOMAIN/\$DC_USERNAME"%"\$DC_PASSWORD"
 
 # This makes sure we test the rid allocation code
 t="RPC-SAMR-LARGE-DC"
diff --git a/source4/torture/drs/python/fsmo.py b/source4/torture/drs/python/fsmo.py
new file mode 100644
index 0000000000..bc601715ed
--- /dev/null
+++ b/source4/torture/drs/python/fsmo.py
@@ -0,0 +1,152 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+#
+# Unix SMB/CIFS implementation.
+# Copyright (C) Anatoliy Atanasov <anatoliy.atanasov@postpath.com> 2010
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+#
+# Usage:
+#  export DC1=dc1_dns_name
+#  export DC2=dc2_dns_name
+#  export SUBUNITRUN=$samba4srcdir/scripting/bin/subunitrun
+#  PYTHONPATH="$PYTHONPATH:$samba4srcdir/torture/drs/python" $SUBUNITRUN fsmo -U"$DOMAIN/$DC_USERNAME"%"$DC_PASSWORD"
+#
+
+import sys
+import time
+import os
+
+sys.path.append("bin/python")
+
+from samba.auth import system_session
+from ldb import SCOPE_BASE
+from samba.samdb import SamDB
+
+import samba.tests
+
+class DrsFsmoTestCase(samba.tests.TestCase):
+
+    # RootDSE msg for DC1
+    info_dc1 = None
+    ldb_dc1 = None
+    # RootDSE msg for DC1
+    info_dc2 = None
+    ldb_dc2 = None
+
+    def setUp(self):
+        super(DrsFsmoTestCase, self).setUp()
+
+        # connect to DCs singleton
+        if self.ldb_dc1 is None:
+            DrsFsmoTestCase.dc1 = get_env_var("DC1")
+            DrsFsmoTestCase.ldb_dc1 = connect_samdb(self.dc1)
+        if self.ldb_dc2 is None:
+            DrsFsmoTestCase.dc2 = get_env_var("DC2")
+            DrsFsmoTestCase.ldb_dc2 = connect_samdb(self.dc2)
+
+        # fetch rootDSEs
+        if self.info_dc1 is None:
+            ldb = self.ldb_dc1
+            res = ldb.search(base="", expression="", scope=SCOPE_BASE, attrs=["*"])
+            self.assertEquals(len(res), 1)
+            DrsFsmoTestCase.info_dc1 = res[0]
+        if self.info_dc2 is None:
+            ldb = self.ldb_dc2
+            res = ldb.search(base="", expression="", scope=SCOPE_BASE, attrs=["*"])
+            self.assertEquals(len(res), 1)
+            DrsFsmoTestCase.info_dc2 = res[0]
+
+        # cache some of RootDSE props
+        self.schema_dn = self.info_dc1["schemaNamingContext"][0]
+        self.dsServiceName_dc1 = self.info_dc1["dsServiceName"][0]
+        self.dsServiceName_dc2 = self.info_dc2["dsServiceName"][0]
+
+        # we will need DCs DNS names for 'net fsmo' command
+        self.dnsname_dc1 = self.info_dc1["dnsHostName"][0]
+        self.dnsname_dc2 = self.info_dc2["dnsHostName"][0]
+        pass
+
+    def tearDown(self):
+        super(DrsFsmoTestCase, self).tearDown()
+
+    def _net_fsmo_schema_transfer(self, DC):
+        # find out where is net command
+        net_cmd = os.path.abspath("./bin/net")
+        # make command line credentials string
+        creds = samba.tests.cmdline_credentials
+        cmd_line_auth = "-U%s/%s%%%s" % (creds.get_domain(),
+                                         creds.get_username(), creds.get_password())
+        # bin/net fsmo transfer --role=schema --host=ldap://<Dest_DC_NAME>:389
+        cmd_line = "%s fsmo transfer --role=schema --host=ldap://%s:389 %s" % (net_cmd, DC,
+                                                                               cmd_line_auth)
+        ret = os.system(cmd_line)
+        self.assertEquals(ret, 0, "Transfering schema to %s has failed!" % (DC))
+        pass
+
+
+    def test_SchemaMasterTransfer(self):
+        """Triggers schema master transfer role from DC1 to DC2
+           and vice versa so the role goes back to the original dc"""
+        # dc2 gets the schema master role from dc1
+        print "Testing for role transfer from %s to %s" % (self.dnsname_dc1, self.dnsname_dc2)
+
+        self._net_fsmo_schema_transfer(DC=self.dnsname_dc2)
+        # check if the role is transfered, but wait a little first so the getncchanges can pass
+        time.sleep(20)
+        res = self.ldb_dc2.search(self.schema_dn,
+                                  scope=SCOPE_BASE, attrs=["fSMORoleOwner"])
+        assert len(res) == 1
+        self.schemaMaster = res[0]["fSMORoleOwner"][0]
+        self.assertEquals(self.schemaMaster, self.dsServiceName_dc2,
+                          "Transfering schema to %s has failed, schema master is: %s!"%(self.dsServiceName_dc2,self.schemaMaster))
+
+        # dc1 gets back the schema master role from dc2
+        print "Testing for role transfer from %s to %s" % (self.dnsname_dc2, self.dnsname_dc1)
+        self._net_fsmo_schema_transfer(DC=self.dnsname_dc1)
+        # check if the role is transfered
+        time.sleep(20)
+        res = self.ldb_dc1.search(self.schema_dn,
+                                  scope=SCOPE_BASE, attrs=["fSMORoleOwner"])
+        assert len(res) == 1
+        self.schemaMaster = res[0]["fSMORoleOwner"][0]
+        self.assertEquals(self.schemaMaster, self.dsServiceName_dc1,
+                          "Transfering schema to %s has failed, schema master is %s"%(self.dsServiceName_dc1, self.schemaMaster))
+        pass
+
+########################################################################################
+def get_env_var(var_name):
+    if not var_name in os.environ.keys():
+        raise AssertionError("Please supply %s in environment" % var_name)
+    return os.environ[var_name]
+
+def connect_samdb(samdb_url):
+    ldb_options = []
+    if not "://" in samdb_url:
+        if os.path.isfile(samdb_url):
+            samdb_url = "tdb://%s" % samdb_url
+        else:
+            samdb_url = "ldap://%s:389" % samdb_url
+            # user 'paged_search' module when connecting remotely
+            ldb_options = ["modules:paged_searches"]
+
+    return SamDB(url=samdb_url,
+                 lp=samba.tests.env_loadparm(),
+                 session_info=system_session(),
+                 credentials=samba.tests.cmdline_credentials,
+                 options=ldb_options)
+
+
+