2dc5db0eb0ba6672fb1c23875e2a964e59c24cd1Tinderbox User# Copyright (C) 2010, 2011, 2014, 2016, 2017 Internet Systems Consortium, Inc. ("ISC")
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews# This Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews# License, v. 2.0. If a copy of the MPL was not distributed with this
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews# file, You can obtain one at http://mozilla.org/MPL/2.0/.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt# tests for TSIG-GSS updates
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Huntserver 10.53.0.1 5300
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Huntupdate add $host $cmd
eca15167ac923ec2c16add3e7e3dd6c596aa6f8cMark Andrews $NSUPDATE -g -d ns1/update.txt > nsupdate.out 2>&1 || {
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt out=`$DIG $DIGOPTS -t $type -q $host | egrep "^${host}"`
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt echo "I:dig output incorrect for $host $type $cmd: $out"
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Huntecho "I:testing updates as administrator"
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunttest_update testdc1.example.nil. A "86400 A 10.53.0.10" "10.53.0.10" || status=1
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunttest_update testdc2.example.nil. A "86400 A 10.53.0.11" "10.53.0.11" || status=1
eca15167ac923ec2c16add3e7e3dd6c596aa6f8cMark Andrewstest_update denied.example.nil. TXT "86400 TXT helloworld" "helloworld" > /dev/null && status=1
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Huntecho "I:testing updates as a user"
eca15167ac923ec2c16add3e7e3dd6c596aa6f8cMark Andrewstest_update testdenied.example.nil. A "86400 A 10.53.0.12" "10.53.0.12" > /dev/null && status=1
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunttest_update testdenied.example.nil. TXT "86400 TXT helloworld" "helloworld" || status=1
3916872f379457fe344afb02398a009701c5016aEvan Huntecho "I:testing external update policy"
eca15167ac923ec2c16add3e7e3dd6c596aa6f8cMark Andrewstest_update testcname.example.nil. TXT "86400 CNAME testdenied.example.nil" "testdenied" > /dev/null && status=1
1c95f672323b7ac176af4225a36d33daa442542cMark Andrews$PERL ./authsock.pl --type=CNAME --path=ns1/auth.sock --pidfile=authsock.pid --timeout=120 > /dev/null 2>&1 &
3916872f379457fe344afb02398a009701c5016aEvan Hunttest_update testcname.example.nil. TXT "86400 CNAME testdenied.example.nil" "testdenied" || status=1
eca15167ac923ec2c16add3e7e3dd6c596aa6f8cMark Andrewstest_update testcname.example.nil. TXT "86400 A 10.53.0.13" "10.53.0.13" > /dev/null && status=1
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Huntecho "I:testing external policy with SIG(0) key"
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt$NSUPDATE -R $RANDFILE -k ns1/Kkey.example.nil.*.private <<END > /dev/null 2>&1 || ret=1
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Huntserver 10.53.0.1 5300
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Huntzone example.nil
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Huntupdate add fred.example.nil 120 cname foo.bar.
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Huntoutput=`$DIG $DIGOPTS +short cname fred.example.nil.`
e02fa56849131911e9554133b17a5325b37d0828Michał Kępieńecho "I:ensure too long realm name is fatal in non-interactive mode"
e02fa56849131911e9554133b17a5325b37d0828Michał Kępień realm namenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamename
e02fa56849131911e9554133b17a5325b37d0828Michał Kępieńgrep "realm is too long" nsupdate.out > /dev/null || ret=1
e02fa56849131911e9554133b17a5325b37d0828Michał Kępieńgrep "syntax error" nsupdate.out > /dev/null || ret=1
e02fa56849131911e9554133b17a5325b37d0828Michał Kępieńecho "I:ensure too long realm name is not fatal in interactive mode"
e02fa56849131911e9554133b17a5325b37d0828Michał Kępień$NSUPDATE -i <<END > nsupdate.out 2>&1 || ret=1
e02fa56849131911e9554133b17a5325b37d0828Michał Kępień realm namenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamenamename
e02fa56849131911e9554133b17a5325b37d0828Michał Kępieńgrep "realm is too long" nsupdate.out > /dev/null || ret=1
3635d8f9104e70e141a8f191a0e6c1502ceed2f3Mark Andrewsecho "I:exit status: $status"