/* Unix SMB/CIFS implementation. test suite for wkssvc rpc operations Copyright (C) Andrew Tridgell 2003 Copyright (C) Günther Deschner 2007 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ #include "includes.h" #include "torture/torture.h" #include "librpc/gen_ndr/ndr_wkssvc_c.h" #include "torture/rpc/rpc.h" #include "lib/cmdline/popt_common.h" #include "param/param.h" #include "lib/crypto/crypto.h" #include "libcli/auth/libcli_auth.h" #define SMBTORTURE_MACHINE_NAME "smbtrt_name" #define SMBTORTURE_ALTERNATE_NAME "smbtrt_altname" #define SMBTORTURE_TRANSPORT_NAME "\\Device\\smbtrt_transport_name" #define SMBTORTURE_USE_NAME "S:" #define SMBTORTURE_MESSAGE "You are currently tortured by Samba" static bool test_NetWkstaGetInfo(struct torture_context *tctx, struct dcerpc_pipe *p) { NTSTATUS status; struct wkssvc_NetWkstaGetInfo r; union wkssvc_NetWkstaInfo info; uint16_t levels[] = {100, 101, 102, 502}; int i; r.in.server_name = dcerpc_server_name(p); r.out.info = &info; for (i=0;iinfo0 = &info0; r.in.server_name = talloc_asprintf(tctx, "\\\\%s", dcerpc_server_name(p)); r.in.level = 0; r.in.ctr = ctr; r.in.parm_err = r.out.parm_err = &parm_err; torture_comment(tctx, "testing NetrUseAdd level %u\n", r.in.level); status = dcerpc_wkssvc_NetrUseAdd(p, tctx, &r); torture_assert_ntstatus_ok(tctx, status, "NetrUseAdd failed"); torture_assert_werr_equal(tctx, r.out.result, WERR_UNKNOWN_LEVEL, "NetrUseAdd failed"); ZERO_STRUCT(r); ZERO_STRUCT(info1); info1.local = SMBTORTURE_USE_NAME; info1.remote = "\\\\localhost\\sysvol"; info1.password = NULL; ctr->info1 = &info1; r.in.server_name = talloc_asprintf(tctx, "\\\\%s", dcerpc_server_name(p)); r.in.level = 1; r.in.ctr = ctr; r.in.parm_err = r.out.parm_err = &parm_err; torture_comment(tctx, "testing NetrUseAdd level %u\n", r.in.level); status = dcerpc_wkssvc_NetrUseAdd(p, tctx, &r); torture_assert_ntstatus_ok(tctx, status, "NetrUseAdd failed"); torture_assert_werr_ok(tctx, r.out.result, "NetrUseAdd failed"); return true; } static bool test_NetrUseDel(struct torture_context *tctx, struct dcerpc_pipe *p) { NTSTATUS status; struct wkssvc_NetrUseDel r; r.in.server_name = talloc_asprintf(tctx, "\\\\%s", dcerpc_server_name(p)); r.in.use_name = SMBTORTURE_USE_NAME; r.in.force_cond = 0; torture_comment(tctx, "testing NetrUseDel\n"); status = dcerpc_wkssvc_NetrUseDel(p, tctx, &r); torture_assert_ntstatus_ok(tctx, status, "NetrUseDel failed"); torture_assert_werr_ok(tctx, r.out.result, "NetrUseDel failed"); return true; } static bool test_NetrUseGetInfo_level(struct torture_context *tctx, struct dcerpc_pipe *p, const char *use_name, uint32_t level, WERROR werr) { NTSTATUS status; struct wkssvc_NetrUseGetInfo r; union wkssvc_NetrUseGetInfoCtr ctr; ZERO_STRUCT(ctr); r.in.server_name = talloc_asprintf(tctx, "\\\\%s", dcerpc_server_name(p)); r.in.use_name = use_name; r.in.level = level; r.out.ctr = &ctr; status = dcerpc_wkssvc_NetrUseGetInfo(p, tctx, &r); torture_assert_ntstatus_ok(tctx, status, "NetrUseGetInfo failed"); torture_assert_werr_equal(tctx, r.out.result, werr, "NetrUseGetInfo failed"); return true; } static bool test_NetrUseGetInfo(struct torture_context *tctx, struct dcerpc_pipe *p) { NTSTATUS status; struct wkssvc_NetrUseEnum r; uint32_t handle = 0; uint32_t entries_read = 0; struct wkssvc_NetrUseEnumInfo info; struct wkssvc_NetrUseEnumCtr0 *use0; uint32_t levels[] = { 0, 1, 2 }; const char *use_name = NULL; int i, k; ZERO_STRUCT(info); info.level = 0; use0 = talloc_zero(tctx, struct wkssvc_NetrUseEnumCtr0); info.ctr.ctr0 = use0; r.in.server_name = talloc_asprintf(tctx, "\\\\%s", dcerpc_server_name(p)); r.in.prefmaxlen = (uint32_t)-1; r.in.info = r.out.info = &info; r.in.resume_handle = r.out.resume_handle = &handle; r.out.entries_read = &entries_read; status = dcerpc_wkssvc_NetrUseEnum(p, tctx, &r); torture_assert_ntstatus_ok(tctx, status, "NetrUseEnum failed"); torture_assert_werr_ok(tctx, r.out.result, "NetrUseEnum failed"); for (k=0; k < r.out.info->ctr.ctr0->count; k++) { use_name = r.out.info->ctr.ctr0->array[k].local; for (i=0; ictr.ctr0->array[k].remote; for (i=0; icount != 1) { torture_comment(tctx, "NetrEnumerateComputerNames did not return one " "name but %u\n", ctr->count); return false; } if (names && num_names) { *num_names = 0; *names = NULL; for (i=0; icount; i++) { if (!add_string_to_array(tctx, ctr->computer_name[i].string, names, num_names)) { return false; } } } return true; } static bool test_NetrEnumerateComputerNames(struct torture_context *tctx, struct dcerpc_pipe *p) { uint16_t levels[] = {0,1,2}; int i; for (i=0; idata[0], confounder, confounder_len); memcpy(&pwd_buf->data[8], buffer, 516); return true; } /* * prerequisites for remotely joining an unjoined XP SP2 workstation: * - firewall needs to be disabled (or open for ncacn_np access) * - HKLM\System\CurrentControlSet\Control\Lsa\forceguest needs to 0 * see also: * http://support.microsoft.com/kb/294355/EN-US/ and * http://support.microsoft.com/kb/290403/EN-US/ */ static bool test_NetrJoinDomain2(struct torture_context *tctx, struct dcerpc_pipe *p) { NTSTATUS status; struct wkssvc_NetrJoinDomain2 r; const char *domain_admin_account = NULL; const char *domain_admin_password = NULL; const char *domain_name = NULL; struct wkssvc_PasswordBuffer pwd_buf; enum wkssvc_NetJoinStatus join_status; const char *join_name = NULL; WERROR expected_err; /* FIXME: this test assumes to join workstations / servers and does not * handle DCs (WERR_SETUP_DOMAIN_CONTROLLER) */ if (!test_GetJoinInformation(tctx, p, &join_status, &join_name)) { return false; } switch (join_status) { case NetSetupDomainName: expected_err = WERR_SETUP_ALREADY_JOINED; break; case NetSetupUnknownStatus: case NetSetupUnjoined: case NetSetupWorkgroupName: default: expected_err = WERR_OK; break; } domain_admin_account = lp_parm_string(global_loadparm, NULL, "torture", "domain_admin_account"); domain_admin_password = lp_parm_string(global_loadparm, NULL, "torture", "domain_admin_password"); domain_name = lp_parm_string(global_loadparm, NULL, "torture", "domain_name"); if ((domain_admin_account == NULL) || (domain_admin_password == NULL) || (domain_name == NULL)) { torture_comment(tctx, "not enough input parameter\n"); return false; } if (!encode_wkssvc_join_password_buffer(tctx, p, domain_admin_password, &pwd_buf)) { return false; } r.in.server_name = dcerpc_server_name(p); r.in.domain_name = domain_name; r.in.account_ou = NULL; r.in.admin_account = domain_admin_account; r.in.encrypted_password = &pwd_buf; r.in.join_flags = WKSSVC_JOIN_FLAGS_JOIN_TYPE | WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE; torture_comment(tctx, "testing NetrJoinDomain2 (assuming non-DC)\n"); status = dcerpc_wkssvc_NetrJoinDomain2(p, tctx, &r); torture_assert_ntstatus_ok(tctx, status, "NetrJoinDomain2 failed"); torture_assert_werr_equal(tctx, r.out.result, expected_err, "NetrJoinDomain2 failed"); if (!test_GetJoinInformation(tctx, p, &join_status, &join_name)) { return false; } if (join_status != NetSetupDomainName) { torture_comment(tctx, "Join verify failed: got %d\n", join_status); return false; } return true; } static bool test_NetrUnjoinDomain2(struct torture_context *tctx, struct dcerpc_pipe *p) { NTSTATUS status; struct wkssvc_NetrUnjoinDomain2 r; const char *domain_admin_account = NULL; const char *domain_admin_password = NULL; struct wkssvc_PasswordBuffer pwd_buf; enum wkssvc_NetJoinStatus join_status; const char *join_name = NULL; WERROR expected_err; /* FIXME: this test assumes to join workstations / servers and does not * handle DCs (WERR_SETUP_DOMAIN_CONTROLLER) */ if (!test_GetJoinInformation(tctx, p, &join_status, &join_name)) { return false; } switch (join_status) { case NetSetupUnjoined: expected_err = WERR_SETUP_NOT_JOINED; break; case NetSetupDomainName: case NetSetupUnknownStatus: case NetSetupWorkgroupName: default: expected_err = WERR_OK; break; } domain_admin_account = lp_parm_string(global_loadparm, NULL, "torture", "domain_admin_account"); domain_admin_password = lp_parm_string(global_loadparm, NULL, "torture", "domain_admin_password"); if ((domain_admin_account == NULL) || (domain_admin_password == NULL)) { torture_comment(tctx, "not enough input parameter\n"); return false; } if (!encode_wkssvc_join_password_buffer(tctx, p, domain_admin_password, &pwd_buf)) { return false; } r.in.server_name = dcerpc_server_name(p); r.in.account = domain_admin_account; r.in.encrypted_password = &pwd_buf; r.in.unjoin_flags = 0; torture_comment(tctx, "testing NetrUnjoinDomain2 (assuming non-DC)\n"); status = dcerpc_wkssvc_NetrUnjoinDomain2(p, tctx, &r); torture_assert_ntstatus_ok(tctx, status, "NetrUnjoinDomain2 failed"); torture_assert_werr_equal(tctx, r.out.result, expected_err, "NetrUnjoinDomain2 failed"); if (!test_GetJoinInformation(tctx, p, &join_status, &join_name)) { return false; } switch (join_status) { case NetSetupUnjoined: case NetSetupWorkgroupName: break; case NetSetupUnknown: case NetSetupDomainName: default: torture_comment(tctx, "Unjoin verify failed: got %d\n", join_status); return false; } return true; } struct torture_suite *torture_rpc_wkssvc(TALLOC_CTX *mem_ctx) { struct torture_suite *suite; struct torture_rpc_tcase *tcase; struct torture_test *test; suite = torture_suite_create(mem_ctx, "WKSSVC"); tcase = torture_suite_add_rpc_iface_tcase(suite, "wkssvc", &ndr_table_wkssvc); torture_rpc_tcase_add_test(tcase, "NetWkstaGetInfo", test_NetWkstaGetInfo); torture_rpc_tcase_add_test(tcase, "NetWkstaTransportEnum", test_NetWkstaTransportEnum); torture_rpc_tcase_add_test(tcase, "NetrWkstaTransportDel", test_NetrWkstaTransportDel); torture_rpc_tcase_add_test(tcase, "NetrWkstaTransportAdd", test_NetrWkstaTransportAdd); torture_rpc_tcase_add_test(tcase, "NetWkstaEnumUsers", test_NetWkstaEnumUsers); torture_rpc_tcase_add_test(tcase, "NetrWkstaUserGetInfo", test_NetrWkstaUserGetInfo); torture_rpc_tcase_add_test(tcase, "NetrUseDel", test_NetrUseDel); torture_rpc_tcase_add_test(tcase, "NetrUseGetInfo", test_NetrUseGetInfo); torture_rpc_tcase_add_test(tcase, "NetrUseEnum", test_NetrUseEnum); torture_rpc_tcase_add_test(tcase, "NetrUseAdd", test_NetrUseAdd); torture_rpc_tcase_add_test(tcase, "NetrValidateName", test_NetrValidateName); torture_rpc_tcase_add_test(tcase, "NetrValidateName2", test_NetrValidateName2); torture_rpc_tcase_add_test(tcase, "NetrLogonDomainNameDel", test_NetrLogonDomainNameDel); torture_rpc_tcase_add_test(tcase, "NetrLogonDomainNameAdd", test_NetrLogonDomainNameAdd); torture_rpc_tcase_add_test(tcase, "NetrRemoveAlternateComputerName", test_NetrRemoveAlternateComputerName); torture_rpc_tcase_add_test(tcase, "NetrAddAlternateComputerName", test_NetrAddAlternateComputerName); test = torture_rpc_tcase_add_test(tcase, "NetrSetPrimaryComputername", test_NetrSetPrimaryComputername); test->dangerous = true; test = torture_rpc_tcase_add_test(tcase, "NetrRenameMachineInDomain", test_NetrRenameMachineInDomain); test->dangerous = true; test = torture_rpc_tcase_add_test(tcase, "NetrRenameMachineInDomain2", test_NetrRenameMachineInDomain2); test->dangerous = true; torture_rpc_tcase_add_test(tcase, "NetrEnumerateComputerNames", test_NetrEnumerateComputerNames); test = torture_rpc_tcase_add_test(tcase, "NetrJoinDomain2", test_NetrJoinDomain2); test->dangerous = true; test = torture_rpc_tcase_add_test(tcase, "NetrUnjoinDomain2", test_NetrUnjoinDomain2); test->dangerous = true; torture_rpc_tcase_add_test(tcase, "NetrJoinDomain", test_NetrJoinDomain); test->dangerous = true; torture_rpc_tcase_add_test(tcase, "NetrUnjoinDomain", test_NetrUnjoinDomain); test->dangerous = true; torture_rpc_tcase_add_test(tcase, "NetrGetJoinInformation", test_NetrGetJoinInformation); torture_rpc_tcase_add_test(tcase, "NetrGetJoinableOus", test_NetrGetJoinableOus); torture_rpc_tcase_add_test(tcase, "NetrGetJoinableOus2", test_NetrGetJoinableOus2); torture_rpc_tcase_add_test(tcase, "NetrWorkstationStatisticsGet", test_NetrWorkstationStatisticsGet); torture_rpc_tcase_add_test(tcase, "NetrMessageBufferSend", test_NetrMessageBufferSend); return suite; }