Error injection in the MSRPC code in Samba as an AD

[Richard Sharpe]

On Fri, Aug 25, 2023 at 12:53 PM Andrew Bartlett <abartlet at samba.org> wrote:
>
> On Fri, 2023-08-25 at 09:02 -0700, Richard Sharpe via samba-technical wrote:
>
> Hi folks (and Jeremy :-),
>
>
> We have seen a bunch of issues around winbindd and issues caused by
>
> errors from Windows domain controllers or delays because the DCs are
>
> far away or slow.
>
>
> To try to create more robust code I have embarked on a project to
>
> allow the injection of errors into the Samba AD code when handling
>
> MSRPC requests.
>
>
> We tried other approaches, like using the Linux networking code to
>
> randomly drop packets or inject delays, but this was not very useful.
>
> We also tried adding error injection into the winbind code when
>
> handling responses, but that creates issues around packaging. So, it
>
> seemed like it would be easier to add it to the AD code and then
>
> provision test systems with the correct setups.
>
>
> I've thought for more than a decade that those deploying Samba as a file-server for customers could really benefit from using Samba as an AD DC for testing.  I hadn't imagined this creative use - I just figured it would be easier to automate etc.

Actually, that is the other thing I am pushing for. It seems to be so
easy to deploy Samba as a DC, setup users, groups, etc ... and that
may allow us to handle 80% of our tests while we think about whether
we need the other functionality we discussed in another thread.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者)