20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#include <talloc.h>

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#include <tevent.h>

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#include <errno.h>

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#include <popt.h>

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#include "tests/cmocka/common_mock.h"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#include "tests/cmocka/common_mock_resp.h"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#include "db/sysdb.h"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#include "responder/common/responder_cache_req.h"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TESTS_PATH "tp_" BASE_FILE_STEM

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_CONF_DB "test_responder_cache_req_conf.ldb"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_DOM_NAME "responder_cache_req_test"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_ID_PROVIDER "ldap"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_USER_NAME "test-user"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_UPN "upn@upndomain.com"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_USER_ID 1000

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_GROUP_NAME "test-group"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_GROUP_ID 1000

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_USER_NAME2 "test-user2"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define TEST_GROUP_NAME2 "test-group2"

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define new_single_domain_test(test) \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers cmocka_unit_test_setup_teardown(test_ ## test, \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers test_single_domain_setup, \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers test_single_domain_teardown)

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define new_multi_domain_test(test) \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers cmocka_unit_test_setup_teardown(test_ ## test, \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers test_multi_domain_setup, \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers test_multi_domain_teardown)

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers#define run_cache_req(ctx, send_fn, done_fn, dom, crp, lookup, expret) do { \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers TALLOC_CTX *req_mem_ctx; \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers struct tevent_req *req; \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers errno_t ret; \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers req_mem_ctx = talloc_new(global_talloc_context); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers check_leaks_push(req_mem_ctx); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers req = send_fn(req_mem_ctx, ctx->tctx->ev, ctx->rctx, \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers ctx->ncache, 10, crp, \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers (dom == NULL ? NULL : dom->name), lookup); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers assert_non_null(req); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers tevent_req_set_callback(req, done_fn, ctx); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers ret = test_ev_loop(ctx->tctx); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers assert_int_equal(ret, expret); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers assert_true(check_leaks_pop(req_mem_ctx)); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers talloc_free(req_mem_ctx); \

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers} while (0)

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sieversstruct cache_req_test_ctx {

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers struct sss_test_ctx *tctx;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers struct resp_ctx *rctx;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers struct sss_nc_ctx *ncache;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers struct ldb_result *result;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers struct sss_domain_info *domain;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers char *name;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers bool dp_called;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers bool create_user;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers bool create_group;

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers};

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sieversconst char *domains[] = {"responder_cache_req_test_a",

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers "responder_cache_req_test_b",

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers "responder_cache_req_test_c",

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers "responder_cache_req_test_d",

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers NULL};

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers

20bbd54f603994a3cc211d2795de16550882ed8dKay Sieversstruct cli_protocol_version *register_cli_protocol_version(void)

20bbd54f603994a3cc211d2795de16550882ed8dKay Sievers{

dbf61afb29e016fe1b4ac48312a782df1d60a3e6Kay Sievers static struct cli_protocol_version version[] = {

dbf61afb29e016fe1b4ac48312a782df1d60a3e6Kay Sievers { 0, NULL, NULL }

dbf61afb29e016fe1b4ac48312a782df1d60a3e6Kay Sievers };

dbf61afb29e016fe1b4ac48312a782df1d60a3e6Kay Sievers

dbf61afb29e016fe1b4ac48312a782df1d60a3e6Kay Sievers return version;

2001208c2ab631a69896d1f670c26846b70d1fb7Kay Sievers}

2001208c2ab631a69896d1f670c26846b70d1fb7Kay Sievers

2001208c2ab631a69896d1f670c26846b70d1fb7Kay Sieversstatic void cache_req_user_by_name_test_done(struct tevent_req *req)

2001208c2ab631a69896d1f670c26846b70d1fb7Kay Sievers{

2001208c2ab631a69896d1f670c26846b70d1fb7Kay Sievers struct cache_req_test_ctx *ctx = NULL;

2001208c2ab631a69896d1f670c26846b70d1fb7Kay Sievers

2001208c2ab631a69896d1f670c26846b70d1fb7Kay Sievers ctx = tevent_req_callback_data(req, struct cache_req_test_ctx);

2001208c2ab631a69896d1f670c26846b70d1fb7Kay Sievers

946f1825751919a176cd0039002a514de0c9c70fHannes Reinecke ctx->tctx->error = cache_req_user_by_name_recv(ctx, req,

946f1825751919a176cd0039002a514de0c9c70fHannes Reinecke &ctx->result,

491d152dbddb85bc8c309ba24133c99219c8d300Kay Sievers &ctx->domain,

946f1825751919a176cd0039002a514de0c9c70fHannes Reinecke &ctx->name);

946f1825751919a176cd0039002a514de0c9c70fHannes Reinecke talloc_zfree(req);

ctx->tctx->done = true;

}

static void cache_req_user_by_id_test_done(struct tevent_req *req)

{

struct cache_req_test_ctx *ctx = NULL;

ctx = tevent_req_callback_data(req, struct cache_req_test_ctx);

ctx->tctx->error = cache_req_user_by_id_recv(ctx, req,

&ctx->result, &ctx->domain);

talloc_zfree(req);

ctx->tctx->done = true;

}

static void cache_req_group_by_name_test_done(struct tevent_req *req)

{

struct cache_req_test_ctx *ctx = NULL;

ctx = tevent_req_callback_data(req, struct cache_req_test_ctx);

ctx->tctx->error = cache_req_group_by_name_recv(ctx, req,

&ctx->result,

&ctx->domain,

&ctx->name);

talloc_zfree(req);

ctx->tctx->done = true;

}

static void cache_req_group_by_id_test_done(struct tevent_req *req)

{

struct cache_req_test_ctx *ctx = NULL;

ctx = tevent_req_callback_data(req, struct cache_req_test_ctx);

ctx->tctx->error = cache_req_group_by_id_recv(ctx, req,

&ctx->result, &ctx->domain);

talloc_zfree(req);

ctx->tctx->done = true;

}

static void prepare_user(TALLOC_CTX *mem_ctx,

struct sss_domain_info *domain,

uint64_t timeout,

time_t time)

{

struct sysdb_attrs *attrs;

errno_t ret;

attrs = sysdb_new_attrs(mem_ctx);

assert_non_null(attrs);

ret = sysdb_attrs_add_string(attrs, SYSDB_UPN, TEST_UPN);

assert_int_equal(ret, EOK);

ret = sysdb_store_user(domain, TEST_USER_NAME, "pwd",

TEST_USER_ID, TEST_GROUP_ID, NULL, NULL, NULL,

"cn=test-user,dc=test", attrs, NULL,

timeout, time);

assert_int_equal(ret, EOK);

}

static void run_user_by_name(struct cache_req_test_ctx *test_ctx,

struct sss_domain_info *domain,

int cache_refresh_percent,

errno_t exp_ret)

{

run_cache_req(test_ctx, cache_req_user_by_name_send,

cache_req_user_by_name_test_done, domain,

cache_refresh_percent, TEST_USER_NAME, exp_ret);

}

static errno_t run_user_by_upn(struct cache_req_test_ctx *test_ctx,

struct sss_domain_info *domain,

int cache_refresh_percent,

errno_t exp_ret)

{

run_cache_req(test_ctx, cache_req_user_by_name_send,

cache_req_user_by_name_test_done, domain,

cache_refresh_percent, TEST_UPN, exp_ret);

}

static errno_t run_user_by_id(struct cache_req_test_ctx *test_ctx,

struct sss_domain_info *domain,

int cache_refresh_percent,

errno_t exp_ret)

{

run_cache_req(test_ctx, cache_req_user_by_id_send,

cache_req_user_by_id_test_done, domain,

cache_refresh_percent, TEST_USER_ID, exp_ret);

}

static void check_user(struct cache_req_test_ctx *test_ctx,

struct sss_domain_info *exp_dom)

{

const char *ldbname;

const char *ldbupn;

uid_t ldbuid;

assert_non_null(test_ctx->result);

assert_int_equal(test_ctx->result->count, 1);

assert_non_null(test_ctx->result->msgs);

assert_non_null(test_ctx->result->msgs[0]);

ldbname = ldb_msg_find_attr_as_string(test_ctx->result->msgs[0],

SYSDB_NAME, NULL);

assert_non_null(ldbname);

assert_string_equal(ldbname, TEST_USER_NAME);

ldbupn = ldb_msg_find_attr_as_string(test_ctx->result->msgs[0],

SYSDB_UPN, NULL);

assert_non_null(ldbupn);

assert_string_equal(ldbupn, TEST_UPN);

ldbuid = ldb_msg_find_attr_as_uint(test_ctx->result->msgs[0],

SYSDB_UIDNUM, 0);

assert_int_equal(ldbuid, TEST_USER_ID);

assert_non_null(test_ctx->domain);

assert_string_equal(exp_dom->name, test_ctx->domain->name);

}

static void prepare_group(TALLOC_CTX *mem_ctx,

struct sss_domain_info *domain,

uint64_t timeout,

time_t time)

{

errno_t ret;

ret = sysdb_store_group(domain, TEST_GROUP_NAME, TEST_GROUP_ID, NULL,

timeout, time);

assert_int_equal(ret, EOK);

}

static void run_group_by_name(struct cache_req_test_ctx *test_ctx,

struct sss_domain_info *domain,

int cache_refresh_percent,

errno_t exp_ret)

{

run_cache_req(test_ctx, cache_req_group_by_name_send,

cache_req_group_by_name_test_done, domain,

cache_refresh_percent, TEST_GROUP_NAME, exp_ret);

}

static void run_group_by_id(struct cache_req_test_ctx *test_ctx,

struct sss_domain_info *domain,

int cache_refresh_percent,

errno_t exp_ret)

{

run_cache_req(test_ctx, cache_req_group_by_id_send,

cache_req_group_by_id_test_done, domain,

cache_refresh_percent, TEST_GROUP_ID, exp_ret);

}

static void check_group(struct cache_req_test_ctx *test_ctx,

struct sss_domain_info *exp_dom)

{

const char *ldbname;

gid_t ldbgid;

assert_non_null(test_ctx->result);

assert_int_equal(test_ctx->result->count, 1);

assert_non_null(test_ctx->result->msgs);

assert_non_null(test_ctx->result->msgs[0]);

ldbname = ldb_msg_find_attr_as_string(test_ctx->result->msgs[0],

SYSDB_NAME, NULL);

assert_non_null(ldbname);

assert_string_equal(ldbname, TEST_GROUP_NAME);

ldbgid = ldb_msg_find_attr_as_uint(test_ctx->result->msgs[0],

SYSDB_GIDNUM, 0);

assert_int_equal(ldbgid, TEST_USER_ID);

assert_non_null(test_ctx->domain);

assert_string_equal(exp_dom->name, test_ctx->domain->name);

}

struct tevent_req *

__wrap_sss_dp_get_account_send(TALLOC_CTX *mem_ctx,

struct resp_ctx *rctx,

struct sss_domain_info *dom,

bool fast_reply,

enum sss_dp_acct_type type,

const char *opt_name,

uint32_t opt_id,

const char *extra)

{

struct cache_req_test_ctx *ctx = NULL;

errno_t ret;

ctx = sss_mock_ptr_type(struct cache_req_test_ctx*);

ctx->dp_called = true;

if (ctx->create_user) {

prepare_user(ctx, ctx->tctx->dom, 1000, time(NULL));

}

if (ctx->create_group) {

ret = sysdb_store_group(ctx->tctx->dom, TEST_GROUP_NAME,

TEST_GROUP_ID, NULL, 1000, time(NULL));

assert_int_equal(ret, EOK);

}

return test_req_succeed_send(mem_ctx, rctx->ev);

}

static int test_single_domain_setup(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

errno_t ret;

test_dom_suite_setup(TESTS_PATH);

test_ctx = talloc_zero(NULL, struct cache_req_test_ctx);

assert_non_null(test_ctx);

*state = test_ctx;

test_ctx->tctx = create_dom_test_ctx(test_ctx, TESTS_PATH, TEST_CONF_DB,

TEST_DOM_NAME, TEST_ID_PROVIDER, NULL);

assert_non_null(test_ctx->tctx);

test_ctx->rctx = mock_rctx(test_ctx, test_ctx->tctx->ev,

test_ctx->tctx->dom, NULL);

assert_non_null(test_ctx->rctx);

ret = sss_ncache_init(test_ctx, &test_ctx->ncache);

assert_int_equal(ret, EOK);

return 0;

}

static int test_single_domain_teardown(void **state)

{

talloc_zfree(*state);

test_dom_suite_cleanup(TESTS_PATH, TEST_CONF_DB, TEST_DOM_NAME);

return 0;

}

static int test_multi_domain_setup(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

errno_t ret;

test_dom_suite_setup(TESTS_PATH);

test_ctx = talloc_zero(NULL, struct cache_req_test_ctx);

assert_non_null(test_ctx);

*state = test_ctx;

test_ctx->tctx = create_multidom_test_ctx(test_ctx, TESTS_PATH,

TEST_CONF_DB, domains,

TEST_ID_PROVIDER, NULL);

assert_non_null(test_ctx->tctx);

test_ctx->rctx = mock_rctx(test_ctx, test_ctx->tctx->ev,

test_ctx->tctx->dom, NULL);

assert_non_null(test_ctx->rctx);

ret = sss_ncache_init(test_ctx, &test_ctx->ncache);

assert_int_equal(ret, EOK);

return 0;

}

static int test_multi_domain_teardown(void **state)

{

talloc_zfree(*state);

test_multidom_suite_cleanup(TESTS_PATH, TEST_CONF_DB, domains);

return 0;

}

void test_user_by_name_multiple_domains_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

struct sss_domain_info *domain = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_d", true);

assert_non_null(domain);

prepare_user(test_ctx, domain, 1000, time(NULL));

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

mock_parse_inp(TEST_USER_NAME, NULL, ERR_OK);

/* Test. */

run_user_by_name(test_ctx, NULL, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, domain);

}

void test_user_by_name_multiple_domains_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

mock_parse_inp(TEST_USER_NAME, NULL, ERR_OK);

/* Test. */

run_user_by_name(test_ctx, NULL, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_user_by_name_multiple_domains_parse(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

struct sss_domain_info *domain = NULL;

TALLOC_CTX *req_mem_ctx = NULL;

struct tevent_req *req = NULL;

const char *name = TEST_USER_NAME;

const char *fqn = NULL;

errno_t ret;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Add user to the first domain with different uid then test user. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_a", true);

assert_non_null(domain);

ret = sysdb_store_user(domain, name, "pwd", 2000, 1000,

NULL, NULL, NULL, "cn=test-user,dc=test", NULL,

NULL, 1000, time(NULL));

assert_int_equal(ret, EOK);

/* Add test user to the last domain. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_d", true);

assert_non_null(domain);

prepare_user(test_ctx, domain, 1000, time(NULL));

/* Append domain name to the username. */

fqn = talloc_asprintf(test_ctx, "%s@%s", name,

"responder_cache_req_test_d");

assert_non_null(fqn);

/* Mock values. */

mock_parse_inp(name, "responder_cache_req_test_d", ERR_OK);

/* Test. */

req_mem_ctx = talloc_new(global_talloc_context);

check_leaks_push(req_mem_ctx);

req = cache_req_user_by_name_send(req_mem_ctx, test_ctx->tctx->ev,

test_ctx->rctx, test_ctx->ncache, 10, 0,

NULL, fqn);

assert_non_null(req);

tevent_req_set_callback(req, cache_req_user_by_name_test_done, test_ctx);

ret = test_ev_loop(test_ctx->tctx);

assert_int_equal(ret, ERR_OK);

assert_true(check_leaks_pop(req_mem_ctx));

assert_false(test_ctx->dp_called);

check_user(test_ctx, domain);

assert_non_null(test_ctx->name);

assert_string_equal(name, test_ctx->name);

}

void test_user_by_name_cache_valid(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, 1000, time(NULL));

/* Test. */

run_user_by_name(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_name_cache_expired(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, -1000, time(NULL));

/* Mock values. */

/* DP should be contacted */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

/* Test. */

run_user_by_name(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_name_cache_midpoint(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, 50, time(NULL) - 26);

/* Mock values. */

/* DP should be contacted without callback */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

/* Test. */

run_user_by_name(test_ctx, test_ctx->tctx->dom, 50, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_name_ncache(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

errno_t ret;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

ret = sss_ncache_set_user(test_ctx->ncache, false,

test_ctx->tctx->dom, TEST_USER_NAME);

assert_int_equal(ret, EOK);

/* Test. */

run_user_by_name(test_ctx, test_ctx->tctx->dom, 0, ENOENT);

assert_false(test_ctx->dp_called);

}

void test_user_by_name_missing_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

test_ctx->create_user = true;

/* Test. */

run_user_by_name(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_name_missing_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

/* Test. */

run_user_by_name(test_ctx, test_ctx->tctx->dom, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_user_by_upn_multiple_domains_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

struct sss_domain_info *domain = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_d", true);

assert_non_null(domain);

prepare_user(test_ctx, domain, 1000, time(NULL));

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

mock_parse_inp(NULL, NULL, ERR_DOMAIN_NOT_FOUND);

/* Test. */

run_user_by_upn(test_ctx, NULL, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, domain);

}

void test_user_by_upn_multiple_domains_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

mock_parse_inp(NULL, NULL, ERR_DOMAIN_NOT_FOUND);

/* Test. */

run_user_by_upn(test_ctx, NULL, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_user_by_upn_cache_valid(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, 1000, time(NULL));

/* Mock values. */

mock_parse_inp(NULL, NULL, ERR_DOMAIN_NOT_FOUND);

/* Test. */

run_user_by_upn(test_ctx, NULL, 0, ERR_OK);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_upn_cache_expired(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, -1000, time(NULL));

/* Mock values. */

/* DP should be contacted */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

mock_parse_inp(NULL, NULL, ERR_DOMAIN_NOT_FOUND);

/* Test. */

run_user_by_upn(test_ctx, NULL, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_upn_cache_midpoint(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, 50, time(NULL) - 26);

/* Mock values. */

/* DP should be contacted without callback */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_parse_inp(NULL, NULL, ERR_DOMAIN_NOT_FOUND);

/* Test. */

run_user_by_upn(test_ctx, NULL, 50, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_upn_ncache(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

errno_t ret;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

ret = sss_ncache_set_user(test_ctx->ncache, false,

test_ctx->tctx->dom, TEST_UPN);

assert_int_equal(ret, EOK);

/* Mock values. */

mock_parse_inp(NULL, NULL, ERR_DOMAIN_NOT_FOUND);

/* Test. */

run_user_by_upn(test_ctx, NULL, 0, ENOENT);

assert_false(test_ctx->dp_called);

}

void test_user_by_upn_missing_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

mock_parse_inp(NULL, NULL, ERR_DOMAIN_NOT_FOUND);

test_ctx->create_user = true;

/* Test. */

run_user_by_upn(test_ctx, NULL, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_upn_missing_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

mock_parse_inp(NULL, NULL, ERR_DOMAIN_NOT_FOUND);

/* Test. */

run_user_by_upn(test_ctx, NULL, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_user_by_id_multiple_domains_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

struct sss_domain_info *domain = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_d", true);

assert_non_null(domain);

prepare_user(test_ctx, domain, 1000, time(NULL));

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

/* Test. */

run_user_by_id(test_ctx, NULL, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, domain);

}

void test_user_by_id_multiple_domains_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

/* Test. */

run_user_by_id(test_ctx, NULL, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_user_by_id_cache_valid(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, 1000, time(NULL));

/* Test. */

run_user_by_id(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_id_cache_expired(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, -1000, time(NULL));

/* Mock values. */

/* DP should be contacted. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

/* Test. */

run_user_by_id(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_id_cache_midpoint(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

prepare_user(test_ctx, test_ctx->tctx->dom, 50, time(NULL) - 26);

/* Mock values. */

/* DP should be contacted without callback */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

/* Test. */

run_user_by_id(test_ctx, test_ctx->tctx->dom, 50, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_id_ncache(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

errno_t ret;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup user. */

ret = sss_ncache_set_uid(test_ctx->ncache, false, NULL, TEST_USER_ID);

assert_int_equal(ret, EOK);

/* Test. */

run_user_by_id(test_ctx, test_ctx->tctx->dom, 0, ENOENT);

assert_false(test_ctx->dp_called);

}

void test_user_by_id_missing_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

test_ctx->create_user = true;

/* Test. */

run_user_by_id(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_user(test_ctx, test_ctx->tctx->dom);

}

void test_user_by_id_missing_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

/* Test. */

run_user_by_id(test_ctx, test_ctx->tctx->dom, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_group_by_name_multiple_domains_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

struct sss_domain_info *domain = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_d", true);

assert_non_null(domain);

prepare_group(test_ctx, domain, 1000, time(NULL));

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

mock_parse_inp(TEST_GROUP_NAME, NULL, ERR_OK);

/* Test. */

run_group_by_name(test_ctx, NULL, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_group(test_ctx, domain);

}

void test_group_by_name_multiple_domains_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

mock_parse_inp(TEST_GROUP_NAME, NULL, ERR_OK);

/* Test. */

run_group_by_name(test_ctx, NULL, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_group_by_name_multiple_domains_parse(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

struct sss_domain_info *domain = NULL;

TALLOC_CTX *req_mem_ctx = NULL;

struct tevent_req *req = NULL;

const char *name = TEST_GROUP_NAME;

const char *fqn = NULL;

errno_t ret;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Add group to the first domain. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_a", true);

assert_non_null(domain);

ret = sysdb_store_group(domain, name, 2000, NULL,

1000, time(NULL));

assert_int_equal(ret, EOK);

/* Add group to the last domain, with different gid. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_d", true);

assert_non_null(domain);

prepare_group(test_ctx, domain, 1000, time(NULL));

/* Append domain name to the username. */

fqn = talloc_asprintf(test_ctx, "%s@%s", name,

"responder_cache_req_test_d");

assert_non_null(fqn);

/* Test. */

req_mem_ctx = talloc_new(global_talloc_context);

check_leaks_push(req_mem_ctx);

mock_parse_inp(name, "responder_cache_req_test_d", ERR_OK);

req = cache_req_group_by_name_send(req_mem_ctx, test_ctx->tctx->ev,

test_ctx->rctx, test_ctx->ncache, 10, 0,

NULL, fqn);

assert_non_null(req);

tevent_req_set_callback(req, cache_req_group_by_name_test_done, test_ctx);

ret = test_ev_loop(test_ctx->tctx);

assert_int_equal(ret, ERR_OK);

assert_true(check_leaks_pop(req_mem_ctx));

assert_false(test_ctx->dp_called);

check_group(test_ctx, domain);

assert_non_null(test_ctx->name);

assert_string_equal(name, test_ctx->name);

}

void test_group_by_name_cache_valid(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

prepare_group(test_ctx, test_ctx->tctx->dom, 1000, time(NULL));

/* Test. */

run_group_by_name(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

check_group(test_ctx, test_ctx->tctx->dom);

}

void test_group_by_name_cache_expired(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

prepare_group(test_ctx, test_ctx->tctx->dom, -1000, time(NULL));

/* Mock values. */

/* DP should be contacted */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

/* Test. */

run_group_by_name(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_group(test_ctx, test_ctx->tctx->dom);

}

void test_group_by_name_cache_midpoint(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

prepare_group(test_ctx, test_ctx->tctx->dom, 50, time(NULL) - 26);

/* Mock values. */

/* DP should be contacted without callback */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

/* Test. */

run_group_by_name(test_ctx, test_ctx->tctx->dom, 50, ERR_OK);

assert_true(test_ctx->dp_called);

check_group(test_ctx, test_ctx->tctx->dom);

}

void test_group_by_name_ncache(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

errno_t ret;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

ret = sss_ncache_set_group(test_ctx->ncache, false,

test_ctx->tctx->dom, TEST_GROUP_NAME);

assert_int_equal(ret, EOK);

/* Test. */

run_group_by_name(test_ctx, test_ctx->tctx->dom, 0, ENOENT);

assert_false(test_ctx->dp_called);

}

void test_group_by_name_missing_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

test_ctx->create_group = true;

/* Test. */

run_group_by_name(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_group(test_ctx, test_ctx->tctx->dom);

}

void test_group_by_name_missing_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

/* Test. */

run_group_by_name(test_ctx, test_ctx->tctx->dom, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_group_by_id_multiple_domains_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

struct sss_domain_info *domain = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

domain = find_domain_by_name(test_ctx->tctx->dom,

"responder_cache_req_test_d", true);

assert_non_null(domain);

prepare_group(test_ctx, domain, 1000, time(NULL));

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

/* Test. */

run_group_by_id(test_ctx, NULL, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_group(test_ctx, domain);

}

void test_group_by_id_multiple_domains_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return_always(__wrap_sss_dp_get_account_send, test_ctx);

will_return_always(sss_dp_get_account_recv, 0);

/* Test. */

run_group_by_id(test_ctx, NULL, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

void test_group_by_id_cache_valid(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

prepare_group(test_ctx, test_ctx->tctx->dom, 1000, time(NULL));

/* Test. */

run_group_by_id(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

check_group(test_ctx, test_ctx->tctx->dom);

}

void test_group_by_id_cache_expired(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

prepare_group(test_ctx, test_ctx->tctx->dom, -1000, time(NULL));

/* Mock values. */

/* DP should be contacted */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

/* Test. */

run_group_by_id(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_group(test_ctx, test_ctx->tctx->dom);

}

void test_group_by_id_cache_midpoint(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

prepare_group(test_ctx, test_ctx->tctx->dom, 50, time(NULL) - 26);

/* Mock values. */

/* DP should be contacted without callback */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

/* Test. */

run_group_by_id(test_ctx, test_ctx->tctx->dom, 50, ERR_OK);

assert_true(test_ctx->dp_called);

check_group(test_ctx, test_ctx->tctx->dom);

}

void test_group_by_id_ncache(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

errno_t ret;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Setup group. */

ret = sss_ncache_set_gid(test_ctx->ncache, false, NULL, TEST_GROUP_ID);

assert_int_equal(ret, EOK);

/* Test. */

run_group_by_id(test_ctx, test_ctx->tctx->dom, 0, ENOENT);

assert_false(test_ctx->dp_called);

}

void test_group_by_id_missing_found(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

test_ctx->create_group = true;

/* Test. */

run_group_by_id(test_ctx, test_ctx->tctx->dom, 0, ERR_OK);

assert_true(test_ctx->dp_called);

check_group(test_ctx, test_ctx->tctx->dom);

}

void test_group_by_id_missing_notfound(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

/* Mock values. */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

/* Test. */

run_group_by_id(test_ctx, test_ctx->tctx->dom, 0, ENOENT);

assert_true(test_ctx->dp_called);

}

static void cache_req_user_by_filter_test_done(struct tevent_req *req)

{

struct cache_req_test_ctx *ctx = NULL;

ctx = tevent_req_callback_data(req, struct cache_req_test_ctx);

ctx->tctx->error = cache_req_user_by_filter_recv(ctx, req,

&ctx->result,

&ctx->domain);

talloc_zfree(req);

ctx->tctx->done = true;

}

void test_users_by_filter_filter_old(void **state)

{

struct cache_req_test_ctx *test_ctx = NULL;

TALLOC_CTX *req_mem_ctx = NULL;

struct tevent_req *req = NULL;

const char *ldbname = NULL;

errno_t ret;

test_ctx = talloc_get_type_abort(*state, struct cache_req_test_ctx);

test_ctx->create_user = true;

/* This user was updated in distant past, so it wont't be reported by

ret = sysdb_store_user(test_ctx->tctx->dom, TEST_USER_NAME2, "pwd", 1001, 1001,

NULL, NULL, NULL, "cn="TEST_USER_NAME2",dc=test", NULL,

NULL, 1000, 1);

assert_int_equal(ret, EOK);

req_mem_ctx = talloc_new(global_talloc_context);

check_leaks_push(req_mem_ctx);

/* Filters always go to DP */

will_return(__wrap_sss_dp_get_account_send, test_ctx);

mock_account_recv_simple();

req = cache_req_user_by_filter_send(req_mem_ctx, test_ctx->tctx->ev,

test_ctx->rctx,

test_ctx->tctx->dom->name,

"test*");

assert_non_null(req);

tevent_req_set_callback(req, cache_req_user_by_filter_test_done, test_ctx);

ret = test_ev_loop(test_ctx->tctx);

assert_int_equal(ret, ERR_OK);

assert_true(check_leaks_pop(req_mem_ctx));

assert_non_null(test_ctx->result);

assert_int_equal(test_ctx->result->count, 1);

ldbname = ldb_msg_find_attr_as_string(test_ctx->result->msgs[0],

SYSDB_NAME, NULL);

assert_non_null(ldbname);

assert_string_equal(ldbname, TEST_USER_NAME);

}

void test_users_by_filter_notfound(void **state)