Test framework for authentication testing

[Kai Blin]

Hi folks,

while planning my work on Kerberos and Negotiate, I realized that we need a 
better way to test things like network authentication, the way we're doing it 
right now depends on the person running the tests to have a certain setup in 
the test environment, and e.g. the NTLM SSP tests use an undocumented windows 
feature to get some of the testing done.

Now, a better way to do this would be to actually get some stubbed out user 
database set up, add a user for testing purposes, run the tests and then 
delete the test user. Sort of what the Samba project is doing for their 
smbtorture tests, if I understood those right.

Of course this has to be done in a way that will also work on windows, or the 
tests will be useless. Now the question that's really bugging me is, is this 
possible at all? Does it make sense?

What I'd want to do would be the following:
* add a user
* set the user password
[... run the tests...]
* delete the user

Cheers,
Kai

[Detlef Riekenberg]

On So, 2007-03-18 at 12:23 +0100, Kai Blin wrote:
> Now, a better way to do this would be to actually get some stubbed out user 
> database set up, add a user for testing purposes, run the tests and then 
> delete the test user.

Sounds to be a good Idea.
> Now the question that's really bugging me is, is this 
> possible at all?

from netapi32/access.c: 
NetUserAdd / NetUserDel / NetUserChangePassword
> Does it make sense?

IMHO: Yes.
> What I'd want to do would be the following:
> - add a user
> - set the user password
>
> [... run the tests...]
> - delete the user

You must handle the case, that the user has no rights
to do that (User is not an Administrator).

[Kai Blin]

On Sunday 18 March 2007 18:01, Detlef Riekenberg wrote:
> from netapi32/access.c:
>
> NetUserAdd / NetUserDel / NetUserChangePassword

Thanks.
> > What I'd want to do would be the following:
> > - add a user
> > - set the user password
> >
> > [... run the tests...]
> > - delete the user
>
> You must handle the case, that the user has no rights
> to do that (User is not an Administrator).

Sure. In that case, we just skip the tests like we do now. Nothing lost.

Cheers,
Kai

[Detlef Riekenberg]

On So, 2007-03-18 at 18:18 +0100, Kai Blin wrote:
> > > What I'd want to do would be the following:
> > > - add a user
> >
> > You must handle the case, that the user has no rights
> > to do that (User is not an Administrator).
>
> Sure. In that case, we just skip the tests like we do now. Nothing lost.

When you are not an Admnistrator and run the tests for 
msi (install) or advpack (install), you see why
I just want to point to this situation.

(both tests pop up a Dialog on w2k and stop
the testsuite)
I will create bug-reports, when bugzilla is online again.