[PATCH] selftest: add tests for member join + kerberos
Andreas Schneider
asn at samba.org
Thu Jun 30 15:01:21 UTC 2016
On Thursday, 30 June 2016 12:18:33 CEST Uri Simchoni wrote:
> Hi,
>
> The attached patch set adds domain join tests with Kerberos (net ads
> join -k). It also shifts the test env for the test from ad_member to
> ad_dc, because:
>
> 1. It's more appropriate - the member server plays no part in this test
> (I believe Andrew pointed that out when the test was initially added)
>
> 2. "net ads join -k" fails under the ad_member testenv. This testenv
> uses the ntfvs file server on the DC side. It seems like after the
> successful join, there's an attempt to verify the join, which involves
> netlogon RPC over NP using machine account. The request to open the pipe
> fails if the session had been setup with Kerberos (the Create request
> for "netlogon" on the IPC$ share). I decided not to invest time in what
> seems to be an ntvfs server bug (after all, this works against Windows
> and against our AD with smbd as file server). If someone thinks I made
> the wrong choice I'll dig some more.
>
> Review & push appreciated.
Hi Uri,
awesome that we test this now!
RB+ and pushed to autobuild.
-- andreas
--
Andreas Schneider GPG-ID: CC014E3D
Samba Team asn at samba.org
www.samba.org
More information about the samba-technical
mailing list