diff options
author | Robin Appelman <robin@icewind.nl> | 2022-01-20 19:16:08 +0300 |
---|---|---|
committer | backportbot[bot] <backportbot[bot]@users.noreply.github.com> | 2022-01-20 22:14:13 +0300 |
commit | c651fc2078e4b05b3a124d4b93095c4970e42fe8 (patch) | |
tree | a21e7bd663aa17893b9b201a48aae3d31fe0e863 /.github | |
parent | 70e13a450f09f7565b656aaf82d29073a066a59d (diff) |
Add test for samba kerberos sso in ci
Signed-off-by: Robin Appelman <robin@icewind.nl>
Diffstat (limited to '.github')
-rw-r--r-- | .github/workflows/smb-kerberos.yml | 78 |
1 files changed, 78 insertions, 0 deletions
diff --git a/.github/workflows/smb-kerberos.yml b/.github/workflows/smb-kerberos.yml new file mode 100644 index 00000000000..2875a7f4fbd --- /dev/null +++ b/.github/workflows/smb-kerberos.yml @@ -0,0 +1,78 @@ +name: Samba Kerberos SSO +on: + push: + branches: + - master + - stable* + paths: + - 'apps/files_external/**' + pull_request: + paths: + - 'apps/files_external/**' + +jobs: + smb-kerberos-tests: + runs-on: ubuntu-latest + + strategy: + fail-fast: false + matrix: + php-versions: ['7.4', '8.0'] + + name: php${{ matrix.php-versions }}-${{ matrix.ftpd }} + + steps: + - name: Checkout server + uses: actions/checkout@v2 + with: + submodules: true + - name: Pull images + run: | + docker pull icewind1991/samba-krb-test-dc + docker pull icewind1991/samba-krb-test-apache + docker pull icewind1991/samba-krb-test-client + - name: Setup AD-DC + run: | + mkdir data + sudo chown -R 33 data apps config + apps/files_external/tests/setup-krb.sh + - name: Set up Nextcloud + run: | + docker exec --user 33 apache ./occ maintenance:install --verbose --database=sqlite --database-name=nextcloud --database-host=127.0.0.1 --database-user=root --database-pass=rootpassword --admin-user admin --admin-pass password + docker exec --user 33 apache ./occ config:system:set trusted_domains 1 --value 'httpd.domain.test' + + # setup user_saml + docker exec --user 33 apache ./occ app:enable user_saml --force + docker exec --user 33 apache ./occ config:app:set user_saml type --value 'environment-variable' + docker exec --user 33 apache ./occ config:app:set user_saml general-uid_mapping --value REMOTE_USER + + # setup external storage + docker exec --user 33 apache ./occ app:enable files_external --force + docker exec --user 33 apache ./occ files_external:create smb smb smb::kerberosapache + docker exec --user 33 apache ./occ files_external:config 1 host krb.domain.test + docker exec --user 33 apache ./occ files_external:config 1 share netlogon + docker exec --user 33 apache ./occ files_external:list + - name: Test SSO + run: | + mkdir cookies + chmod 0777 cookies + + DC_IP=$(docker inspect dc --format '{{.NetworkSettings.IPAddress}}') + docker run --rm --name client -v $PWD/cookies:/cookies -v /tmp/shared:/shared --dns $DC_IP --hostname client.domain.test icewind1991/samba-krb-test-client \ + curl -c /cookies/jar -s --negotiate -u testuser@DOMAIN.TEST: --delegation always http://httpd.domain.test/index.php/apps/user_saml/saml/login + CONTENT=$(docker run --rm --name client -v $PWD/cookies:/cookies -v /tmp/shared:/shared --dns $DC_IP --hostname client.domain.test icewind1991/samba-krb-test-client \ + curl -b /cookies/jar -s --negotiate -u testuser@DOMAIN.TEST: --delegation always http://httpd.domain.test/remote.php/webdav/smb/test.txt) + echo $CONTENT + CONTENT=$(echo $CONTENT | tr -d '[:space:]') + [[ $CONTENT == "testfile" ]] + + + smb-kerberos-summary: + runs-on: ubuntu-latest + needs: smb-kerberos-tests + + if: always() + + steps: + - name: Summary status + run: if ${{ needs.smb-kerberos-tests.result != 'success' }}; then exit 1; fi |