[PATCH] selftest: add tests for member join + kerberos

Andreas Schneider asn at samba.org
Thu Jun 30 15:01:21 UTC 2016


On Thursday, 30 June 2016 12:18:33 CEST Uri Simchoni wrote:
> Hi,
> 
> The attached patch set adds domain join tests with Kerberos (net ads
> join -k). It also shifts the test env for the test from ad_member to
> ad_dc, because:
> 
> 1. It's more appropriate - the member server plays no part in this test
> (I believe Andrew pointed that out when the test was initially added)
> 
> 2. "net ads join -k" fails under the ad_member testenv. This testenv
> uses the ntfvs file server on the DC side. It seems like after the
> successful join, there's an attempt to verify the join, which involves
> netlogon RPC over NP using machine account. The request to open the pipe
> fails if the session had been setup with Kerberos (the Create request
> for "netlogon" on the IPC$ share). I decided not to invest time in what
> seems to be an ntvfs server bug (after all, this works against Windows
> and against our AD with smbd as file server). If someone thinks I made
> the wrong choice I'll dig some more.
> 
> Review & push appreciated.

Hi Uri,

awesome that we test this now!

RB+ and pushed to autobuild.


	-- andreas


-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org



More information about the samba-technical mailing list