a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport os

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport stat

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport ent

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnikimport grp

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikimport pwd

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport config

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnikimport random

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport signal

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnikimport string

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnikimport struct

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport subprocess

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport time

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport pytest

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnikimport pysss_murmur

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport ds_openldap

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport ldap_ent

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikimport sssd_id

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikfrom util import unindent

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas SlebodnikLDAP_BASE_DN = "dc=example,dc=com"

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik@pytest.fixture(scope="module")

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef ds_inst(request):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik """LDAP server instance fixture"""

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ds_inst = ds_openldap.DSOpenLDAP(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik config.PREFIX, 10389, LDAP_BASE_DN,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "cn=admin", "Secret123")

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik try:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ds_inst.setup()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik except:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ds_inst.teardown()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik raise

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik request.addfinalizer(lambda: ds_inst.teardown())

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik return ds_inst

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik@pytest.fixture(scope="module")

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef ldap_conn(request, ds_inst):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik """LDAP server connection fixture"""

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ldap_conn = ds_inst.bind()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ldap_conn.ds_inst = ds_inst

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik request.addfinalizer(lambda: ldap_conn.unbind_s())

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik return ldap_conn

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef create_ldap_fixture(request, ldap_conn, ent_list):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik """Add LDAP entries and add teardown for removing them"""

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik for entry in ent_list:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ldap_conn.add_s(entry[0], entry[1])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik def teardown():

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik for entry in ent_list:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ldap_conn.delete_s(entry[0])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik request.addfinalizer(teardown)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef create_conf_fixture(request, contents):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik """Generate sssd.conf and add teardown for removing it"""

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik conf = open(config.CONF_PATH, "w")

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik conf.write(contents)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik conf.close()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik os.chmod(config.CONF_PATH, stat.S_IRUSR | stat.S_IWUSR)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik request.addfinalizer(lambda: os.unlink(config.CONF_PATH))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef stop_sssd():

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik pid_file = open(config.PIDFILE_PATH, "r")

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik pid = int(pid_file.read())

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik os.kill(pid, signal.SIGTERM)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik while True:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik try:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik os.kill(pid, signal.SIGCONT)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik except:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik break

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik time.sleep(1)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef create_sssd_fixture(request):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik """Start sssd and add teardown for stopping it and removing state"""

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik if subprocess.call(["sssd", "-D", "-f"]) != 0:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik raise Exception("sssd start failed")

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik def teardown():

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik try:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik stop_sssd()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik except:

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik pass

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik for path in os.listdir(config.DB_PATH):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik os.unlink(config.DB_PATH + "/" + path)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik for path in os.listdir(config.MCACHE_PATH):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik os.unlink(config.MCACHE_PATH + "/" + path)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik request.addfinalizer(teardown)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef load_data_to_ldap(request, ldap_conn):

a190e39ea4f2c084091be1cd37a3c6e3b603540eNikolai Kondrashov ent_list = ldap_ent.List(ldap_conn.ds_inst.base_dn)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user1", 1001, 2001)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user2", 1002, 2002)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user3", 1003, 2003)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user11", 1011, 2001)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user12", 1012, 2002)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user13", 1013, 2003)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user21", 1021, 2001)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user22", 1022, 2002)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_user("user23", 1023, 2003)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_group("group1", 2001, ["user1", "user11", "user21"])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_group("group2", 2002, ["user2", "user12", "user22"])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_group("group3", 2003, ["user3", "user13", "user23"])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_group("group0x", 2000, ["user1", "user2", "user3"])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_group("group1x", 2010, ["user11", "user12", "user13"])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent_list.add_group("group2x", 2020, ["user21", "user22", "user23"])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik create_ldap_fixture(request, ldap_conn, ent_list)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik@pytest.fixture

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef sanity_rfc2307(request, ldap_conn):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik load_data_to_ldap(request, ldap_conn)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik conf = unindent("""\

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik """).format(**locals())

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik create_conf_fixture(request, conf)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik create_sssd_fixture(request)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik return None

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik@pytest.fixture

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef fqname_rfc2307(request, ldap_conn):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik load_data_to_ldap(request, ldap_conn)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik conf = unindent("""\

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik """).format(**locals())

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik create_conf_fixture(request, conf)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik create_sssd_fixture(request)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik return None

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik@pytest.fixture

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef fqname_case_insensitive_rfc2307(request, ldap_conn):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik load_data_to_ldap(request, ldap_conn)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik conf = unindent("""\

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik """).format(**locals())

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik create_conf_fixture(request, conf)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik create_sssd_fixture(request)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik return None

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek@pytest.fixture

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židekdef zero_timeout_rfc2307(request, ldap_conn):

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek load_data_to_ldap(request, ldap_conn)

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek conf = unindent("""\

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek """).format(**locals())

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek create_conf_fixture(request, conf)

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek create_sssd_fixture(request)

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek return None

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef test_getpwnam(ldap_conn, sanity_rfc2307):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user1',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1001', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1001,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1001', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user2',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user2', passwd='*', uid=1002, gid=2002,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1002', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1002,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user2', passwd='*', uid=1002, gid=2002,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1002', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user3',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user3', passwd='*', uid=1003, gid=2003,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1003', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1003,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user3', passwd='*', uid=1003, gid=2003,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1003', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user11',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user11', passwd='*', uid=1011, gid=2001,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1011', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1011,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user11', passwd='*', uid=1011, gid=2001,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1011', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user12',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user12', passwd='*', uid=1012, gid=2002,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1012', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1012,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user12', passwd='*', uid=1012, gid=2002,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1012', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user13',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user13', passwd='*', uid=1013, gid=2003,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1013', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1013,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user13', passwd='*', uid=1013, gid=2003,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1013', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user21',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user21', passwd='*', uid=1021, gid=2001,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1021', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1021,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user21', passwd='*', uid=1021, gid=2001,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1021', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user22',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user22', passwd='*', uid=1022, gid=2002,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1022', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1022,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user22', passwd='*', uid=1022, gid=2002,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1022', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 'user23',

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user23', passwd='*', uid=1023, gid=2003,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1023', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_passwd_by_uid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 1023,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(name='user23', passwd='*', uid=1023, gid=2003,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik gecos='1023', shell='/bin/bash'))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef test_getpwnam_with_mc(ldap_conn, sanity_rfc2307):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik test_getpwnam(ldap_conn, sanity_rfc2307)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik stop_sssd()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik test_getpwnam(ldap_conn, sanity_rfc2307)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef test_getgrnam_simple(ldap_conn, sanity_rfc2307):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name("group1", dict(name="group1", gid=2001))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(2001, dict(name="group1", gid=2001))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name("group2", dict(name="group2", gid=2002))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(2002, dict(name="group2", gid=2002))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name("group3", dict(name="group3", gid=2003))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(2003, dict(name="group3", gid=2003))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name("group0x", dict(name="group0x", gid=2000))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(2000, dict(name="group0x", gid=2000))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name("group1x", dict(name="group1x", gid=2010))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(2010, dict(name="group1x", gid=2010))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name("group2x", dict(name="group2x", gid=2020))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(2020, dict(name="group2x", gid=2020))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef test_getgrnam_simple_with_mc(ldap_conn, sanity_rfc2307):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik test_getgrnam_simple(ldap_conn, sanity_rfc2307)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik stop_sssd()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik test_getgrnam_simple(ldap_conn, sanity_rfc2307)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef test_getgrnam_membership(ldap_conn, sanity_rfc2307):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "group1",

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user1", "user11", "user21")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 2001,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user1", "user11", "user21")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "group2",

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user2", "user12", "user22")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 2002,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user2", "user12", "user22")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "group3",

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user3", "user13", "user23")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 2003,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user3", "user13", "user23")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "group0x",

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user1", "user2", "user3")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 2000,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user1", "user2", "user3")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "group1x",

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user11", "user12", "user13")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 2010,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user11", "user12", "user13")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_name(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "group2x",

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user21", "user22", "user23")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ent.assert_group_by_gid(

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik 2020,

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik dict(mem=ent.contains_only("user21", "user22", "user23")))

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef test_getgrnam_membership_with_mc(ldap_conn, sanity_rfc2307):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik test_getgrnam_membership(ldap_conn, sanity_rfc2307)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik stop_sssd()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik test_getgrnam_membership(ldap_conn, sanity_rfc2307)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef assert_user_gids_equal(user, expected_gids):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik (res, errno, gids) = sssd_id.get_user_gids(user)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "Could not find groups for user %s, %d" % (user, errno)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert sorted(gids) == sorted(expected_gids), \

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik "result: %s\n expected %s" % (

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ", ".join(["%s" % s for s in sorted(gids)]),

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik ", ".join(["%s" % s for s in sorted(expected_gids)])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik )

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef test_initgroups(ldap_conn, sanity_rfc2307):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user1', [2000, 2001])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user2', [2000, 2002])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user3', [2000, 2003])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user11', [2010, 2001])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user12', [2010, 2002])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user13', [2010, 2003])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user21', [2020, 2001])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user22', [2020, 2002])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik assert_user_gids_equal('user23', [2020, 2003])

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnikdef test_initgroups_with_mc(ldap_conn, sanity_rfc2307):

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik test_initgroups(ldap_conn, sanity_rfc2307)

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik stop_sssd()

a2c10cf31d14bac598f5cd008973375c3f9575a6Lukas Slebodnik test_initgroups(ldap_conn, sanity_rfc2307)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef test_initgroups_fqname_with_mc(ldap_conn, fqname_rfc2307):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_user_gids_equal('user1@LDAP', [2000, 2001])

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik stop_sssd()

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_user_gids_equal('user1@LDAP', [2000, 2001])

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef assert_initgroups_equal(user, primary_gid, expected_gids):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik (res, errno, gids) = sssd_id.call_sssd_initgroups(user, primary_gid)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik "Could not find groups for user %s, %d" % (user, errno)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert sorted(gids) == sorted(expected_gids), \

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik "result: %s\n expected %s" % (

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik ", ".join(["%s" % s for s in sorted(gids)]),

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik ", ".join(["%s" % s for s in sorted(expected_gids)])

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik )

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef assert_stored_last_initgroups(user1_case1, user1_case2, user1_case_last,

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik primary_gid, expected_gids):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_initgroups_equal(user1_case1, primary_gid, expected_gids)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_initgroups_equal(user1_case2, primary_gid, expected_gids)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_initgroups_equal(user1_case_last, primary_gid, expected_gids)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik stop_sssd()

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user = user1_case1

137d5dd0dba48f647e5f8b3976ddb78d65dc77a5Lukas Slebodnik (res, errno, _) = sssd_id.call_sssd_initgroups(user, primary_gid)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert res == sssd_id.NssReturnCode.UNAVAIL, \

137d5dd0dba48f647e5f8b3976ddb78d65dc77a5Lukas Slebodnik "Initgroups for user shoudl fail user %s, %d, %d" % (user, res, errno)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user = user1_case2

137d5dd0dba48f647e5f8b3976ddb78d65dc77a5Lukas Slebodnik (res, errno, _) = sssd_id.call_sssd_initgroups(user, primary_gid)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert res == sssd_id.NssReturnCode.UNAVAIL, \

137d5dd0dba48f647e5f8b3976ddb78d65dc77a5Lukas Slebodnik "Initgroups for user shoudl fail user %s, %d, %d" % (user, res, errno)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik # Just last invocation of initgroups shoudl PASS

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik # Otherwise, we would not be able to invalidate it

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_initgroups_equal(user1_case_last, primary_gid, expected_gids)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef test_initgroups_case_insensitive_with_mc1(ldap_conn,

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik fqname_case_insensitive_rfc2307):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case1 = 'User1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case2 = 'uSer1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case_last = 'usEr1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik primary_gid = 2001

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik expected_gids = [2000, 2001]

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_stored_last_initgroups(user1_case1, user1_case2, user1_case_last,

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik primary_gid, expected_gids)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef test_initgroups_case_insensitive_with_mc2(ldap_conn,

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik fqname_case_insensitive_rfc2307):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case1 = 'usEr1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case2 = 'User1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case_last = 'uSer1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik primary_gid = 2001

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik expected_gids = [2000, 2001]

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_stored_last_initgroups(user1_case1, user1_case2, user1_case_last,

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik primary_gid, expected_gids)

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnikdef test_initgroups_case_insensitive_with_mc3(ldap_conn,

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik fqname_case_insensitive_rfc2307):

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case1 = 'uSer1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case2 = 'usEr1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik user1_case_last = 'User1@LDAP'

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik primary_gid = 2001

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik expected_gids = [2000, 2001]

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik assert_stored_last_initgroups(user1_case1, user1_case2, user1_case_last,

cb8c24707275c5bda7310d67e7f46c75d3ac36eaLukas Slebodnik primary_gid, expected_gids)

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnikdef run_simple_test_with_initgroups():

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_passwd_by_name(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik 'user1',

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik gecos='1001', shell='/bin/bash'))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_passwd_by_uid(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik 1001,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik gecos='1001', shell='/bin/bash'))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_group_by_name(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik "group1",

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(mem=ent.contains_only("user1", "user11", "user21")))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_group_by_gid(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik 2001,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(mem=ent.contains_only("user1", "user11", "user21")))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # unrelated group to user1

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_group_by_name(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik "group2",

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(mem=ent.contains_only("user2", "user12", "user22")))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_group_by_gid(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik 2002,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(mem=ent.contains_only("user2", "user12", "user22")))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik assert_initgroups_equal("user1", 2001, [2000, 2001])

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnikdef test_invalidation_of_gids_after_initgroups(ldap_conn, sanity_rfc2307):

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # the sssd cache was empty and not all user's group were

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # resolved with getgr{nm,gid}. Therefore there is a change in

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # group membership => user groups should be invalidated

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik run_simple_test_with_initgroups()

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik assert_initgroups_equal("user1", 2001, [2000, 2001])

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik stop_sssd()

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_passwd_by_name(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik 'user1',

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik gecos='1001', shell='/bin/bash'))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_passwd_by_uid(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik 1001,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik gecos='1001', shell='/bin/bash'))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # unrelated group to user1 must be returned

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_group_by_name(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik "group2",

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(mem=ent.contains_only("user2", "user12", "user22")))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik ent.assert_group_by_gid(

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik 2002,

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik dict(mem=ent.contains_only("user2", "user12", "user22")))

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik assert_initgroups_equal("user1", 2001, [2000, 2001])

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # user groups must be invalidated

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik for group in ["group1", "group0x"]:

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik with pytest.raises(KeyError):

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik grp.getgrnam(group)

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik for gid in [2000, 2001]:

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik with pytest.raises(KeyError):

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik grp.getgrgid(gid)

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnikdef test_initgroups_without_change_in_membership(ldap_conn, sanity_rfc2307):

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # the sssd cache was empty and not all user's group were

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # resolved with getgr{nm,gid}. Therefore there is a change in

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # group membership => user groups should be invalidated

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik run_simple_test_with_initgroups()

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # invalidate cache

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik subprocess.call(["sss_cache", "-E"])

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # all users and groups will be just refreshed from LDAP

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # but there will not be a change in group membership

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # user groups should not be invlaidated

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik run_simple_test_with_initgroups()

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik stop_sssd()

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik # everything should be in memory cache

c3baf4d7c0cbd139d96fd04f6b3c175d2f99de6cLukas Slebodnik run_simple_test_with_initgroups()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef assert_mc_records_for_user1():

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik ent.assert_passwd_by_name(

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik 'user1',

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik gecos='1001', shell='/bin/bash'))

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik ent.assert_passwd_by_uid(

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik 1001,

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik gecos='1001', shell='/bin/bash'))

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik ent.assert_group_by_name(

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik "group1",

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik dict(mem=ent.contains_only("user1", "user11", "user21")))

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik ent.assert_group_by_gid(

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik 2001,

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik dict(mem=ent.contains_only("user1", "user11", "user21")))

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik ent.assert_group_by_name(

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik "group0x",

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik dict(mem=ent.contains_only("user1", "user2", "user3")))

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik ent.assert_group_by_gid(

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik 2000,

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik dict(mem=ent.contains_only("user1", "user2", "user3")))

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_initgroups_equal("user1", 2001, [2000, 2001])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef assert_missing_mc_records_for_user1():

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik with pytest.raises(KeyError):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik pwd.getpwnam("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik with pytest.raises(KeyError):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik pwd.getpwuid(1001)

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik for gid in [2000, 2001]:

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik with pytest.raises(KeyError):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik grp.getgrgid(gid)

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik for group in ["group0x", "group1"]:

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik with pytest.raises(KeyError):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik grp.getgrnam(group)

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, err, _) = sssd_id.call_sssd_initgroups("user1", 2001)

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.UNAVAIL, \

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik "Initgroups should not find anything after invalidation of mc.\n" \

137d5dd0dba48f647e5f8b3976ddb78d65dc77a5Lukas Slebodnik "User user1, errno:%d" % err

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_user_before_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-u", "user1"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_user_after_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-u", "user1"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_users_before_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-U"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_users_after_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-U"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_group_before_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-g", "group1"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_group_after_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-g", "group1"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_groups_before_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-G"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_groups_after_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-G"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_everything_before_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-E"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnikdef test_invalidate_everything_after_stop(ldap_conn, sanity_rfc2307):

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik # initialize cache with full ID

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik (res, errno, _) = sssd_id.get_user_groups("user1")

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert res == sssd_id.NssReturnCode.SUCCESS, \

1584db9c0b15ee239bd4e163c4ecaf6909b1b11bPavel Reichl "Could not find groups for user1, %d" % errno

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_mc_records_for_user1()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik stop_sssd()

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik subprocess.call(["sss_cache", "-E"])

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik

089db891b8a7a94b5666e8cffb1d7b359d6aeb6eLukas Slebodnik assert_missing_mc_records_for_user1()

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnikdef get_random_string(length):

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik return ''.join([random.choice(string.ascii_letters + string.digits)

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik for n in range(length)])

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnikclass MemoryCache(object):

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik SIZEOF_UINT32_T = 4

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik def __init__(self, path):

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik with open(path, "rb") as fin:

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik fin.seek(4 * self.SIZEOF_UINT32_T)

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik self.seed = struct.unpack('i', fin.read(4))[0]

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik self.data_size = struct.unpack('i', fin.read(4))[0]

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik self.ft_size = struct.unpack('i', fin.read(4))[0]

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik hash_len = struct.unpack('i', fin.read(4))[0]

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik self.hash_size = hash_len / self.SIZEOF_UINT32_T

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik def sss_nss_mc_hash(self, key):

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik input_key = key + '\0'

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik input_len = len(key) + 1

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik murmur_hash = pysss_murmur.murmurhash3(input_key, input_len, self.seed)

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik return murmur_hash % self.hash_size

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnikdef test_colliding_hashes(ldap_conn, sanity_rfc2307):

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik """

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik first_user = 'user1'

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik # initialize data in memcache

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik ent.assert_passwd_by_name(

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik first_user,

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik gecos='1001', shell='/bin/bash'))

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik mem_cache = MemoryCache(config.MCACHE_PATH + '/passwd')

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik colliding_hash = mem_cache.sss_nss_mc_hash(first_user)

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik while True:

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik # string for colliding hash need to be longer then data for user1

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik # stored in memory cache (almost equivalent to:

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik # `getent passwd user1 | wc -c` ==> 45

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik second_user = get_random_string(80)

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik val = mem_cache.sss_nss_mc_hash(second_user)

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik if val == colliding_hash:

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik break

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik # add new user to LDAP

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik ent_list = ldap_ent.List(ldap_conn.ds_inst.base_dn)

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik ent_list.add_user(second_user, 5001, 5001)

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik ldap_conn.add_s(ent_list[0][0], ent_list[0][1])

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik ent.assert_passwd_by_name(

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik second_user,

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik dict(name=second_user, passwd='*', uid=5001, gid=5001,

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik gecos='5001', shell='/bin/bash'))

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik stop_sssd()

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik # check that both users are stored in cache

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik ent.assert_passwd_by_name(

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik first_user,

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik gecos='1001', shell='/bin/bash'))

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik ent.assert_passwd_by_name(

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik second_user,

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik dict(name=second_user, passwd='*', uid=5001, gid=5001,

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik gecos='5001', shell='/bin/bash'))

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

6dc1de9781ab211a43d24cbaed7969d98abc1cc1Lukas Slebodnik

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnikdef test_removed_mc(ldap_conn, sanity_rfc2307):

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik """

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik ent.assert_passwd_by_name(

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik 'user1',

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik gecos='1001', shell='/bin/bash'))

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik ent.assert_passwd_by_uid(

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik 1001,

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik dict(name='user1', passwd='*', uid=1001, gid=2001,

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik gecos='1001', shell='/bin/bash'))

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik ent.assert_group_by_name("group1", dict(name="group1", gid=2001))

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik ent.assert_group_by_gid(2001, dict(name="group1", gid=2001))

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik stop_sssd()

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik # remove cache without invalidation

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik for path in os.listdir(config.MCACHE_PATH):

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik os.unlink(config.MCACHE_PATH + "/" + path)

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik # sssd is stopped; so the memory cache should not be used

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik # in long living clients (py.test in this case)

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik with pytest.raises(KeyError):

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik pwd.getpwnam('user1')

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik with pytest.raises(KeyError):

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik pwd.getpwuid(1001)

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik with pytest.raises(KeyError):

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik grp.getgrnam('group1')

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik with pytest.raises(KeyError):

b28f5fb097e06a97a45e0ae348e506d9d1432cc8Lukas Slebodnik grp.getgrgid(2001)

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židekdef test_mc_zero_timeout(ldap_conn, zero_timeout_rfc2307):

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek """

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek # No memory cache files must be created

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek assert len(os.listdir(config.MCACHE_PATH)) == 0

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek ent.assert_passwd_by_name(

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek 'user1',

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek dict(name='user1', passwd='*', uid=1001, gid=2001,

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek gecos='1001', shell='/bin/bash'))

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek ent.assert_passwd_by_uid(

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek 1001,

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek dict(name='user1', passwd='*', uid=1001, gid=2001,

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek gecos='1001', shell='/bin/bash'))

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek ent.assert_group_by_name("group1", dict(name="group1", gid=2001))

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek ent.assert_group_by_gid(2001, dict(name="group1", gid=2001))

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek stop_sssd()

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek # sssd is stopped; so the memory cache should not be used

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek # in long living clients (py.test in this case)

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek with pytest.raises(KeyError):

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek pwd.getpwnam('user1')

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek with pytest.raises(KeyError):

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek pwd.getpwuid(1001)

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek with pytest.raises(KeyError):

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek grp.getgrnam('group1')

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek with pytest.raises(KeyError):

ffe29e570a9e885c2f0061c34bb6be2bbd6ab9e4Michal Židek grp.getgrgid(2001)