4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher/*
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher SSSD
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher Authors:
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher Stephen Gallagher <sgallagh@redhat.com>
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher Copyright (C) 2011 Red Hat
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher This program is free software; you can redistribute it and/or modify
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher it under the terms of the GNU General Public License as published by
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher the Free Software Foundation; either version 3 of the License, or
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher (at your option) any later version.
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher This program is distributed in the hope that it will be useful,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher but WITHOUT ANY WARRANTY; without even the implied warranty of
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher GNU General Public License for more details.
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher You should have received a copy of the GNU General Public License
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher along with this program. If not, see <http://www.gnu.org/licenses/>.
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher*/
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#include <stdlib.h>
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#include <check.h>
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#include <unistd.h>
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#include <sys/types.h>
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#include <sys/stat.h>
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#include <talloc.h>
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4139a7a731f2831963a42b26aac111422be28792Jakub Hrozek#include "tests/common_check.h"
e0c86d21388bffe2e3919e780780c40d96186abbJakub Hrozek#include "lib/ipa_hbac/ipa_hbac.h"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_USER "testuser"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_INVALID_USER "nosuchuser"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_GROUP1 "testgroup1"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_GROUP2 "testgroup2"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_INVALID_GROUP "nosuchgroup"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_SERVICE "testservice"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_INVALID_SERVICE "nosuchservice"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_SERVICEGROUP1 "login_services"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_SERVICEGROUP2 "all_services"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_INVALID_SERVICEGROUP "nosuchservicegroup"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_SRCHOST "client.example.com"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_INVALID_SRCHOST "nosuchsrchost"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_SRCHOSTGROUP1 "site_hosts"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_SRCHOSTGROUP2 "corp_hosts"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher#define HBAC_TEST_INVALID_SRCHOSTGROUP "nosuchsrchostgroup"
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek/* These don't make sense for a user/group/service but they do the job and
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek * every one is from a different codepage */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek/* Latin Extended A - "Czech" */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t user_utf8_lowcase[] = { 0xC4, 0x8D, 'e', 'c', 'h', 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t user_utf8_upcase[] = { 0xC4, 0x8C, 'e', 'c', 'h', 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t user_utf8_lowcase_neg[] = { 0xC4, 0x8E, 'e', 'c', 'h', 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek/* Latin 1 Supplement - "Munchen" */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t service_utf8_lowcase[] = { 'm', 0xC3, 0xBC, 'n', 'c', 'h', 'e', 'n', 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t service_utf8_upcase[] = { 'M', 0xC3, 0x9C, 'N', 'C', 'H', 'E', 'N', 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek/* Greek - "AlphaBetaGamma" */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t srchost_utf8_lowcase[] = { 0xCE, 0xB1, 0xCE, 0xB2, 0xCE, 0xB3, 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t srchost_utf8_upcase[] = { 0xCE, 0x91, 0xCE, 0x92, 0xCE, 0x93, 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek/* Turkish "capital I" and "dotless i" */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t user_lowcase_tr[] = { 0xC4, 0xB1, 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozekconst uint8_t user_upcase_tr[] = { 0x49, 0x0 };
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagherstatic void get_allow_all_rule(TALLOC_CTX *mem_ctx,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule **allow_rule)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule *rule;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create a rule that ALLOWs all services, users and
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher * remote hosts.
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule = talloc_zero(mem_ctx, struct hbac_rule);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rule == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->enabled = true;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->services = talloc_zero(rule, struct hbac_rule_element);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rule->services == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->services->category = HBAC_CATEGORY_ALL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->services->names = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->services->groups = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->users = talloc_zero(rule, struct hbac_rule_element);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rule->users == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->users->category = HBAC_CATEGORY_ALL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->users->names = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->users->groups = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->targethosts = talloc_zero(rule, struct hbac_rule_element);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rule->targethosts == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->targethosts->category = HBAC_CATEGORY_ALL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->targethosts->names = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->targethosts->groups = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->srchosts = talloc_zero(rule, struct hbac_rule_element);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rule->srchosts == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->srchosts->category = HBAC_CATEGORY_ALL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->srchosts->names = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rule->srchosts->groups = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher *allow_rule = rule;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagherstatic void get_test_user(TALLOC_CTX *mem_ctx,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_request_element **user)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_request_element *new_user;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_user = talloc_zero(mem_ctx, struct hbac_request_element);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (new_user == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_user->name = talloc_strdup(new_user, HBAC_TEST_USER);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_user->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_user->groups = talloc_array(new_user, const char *, 3);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_user->groups == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_user->groups[0] = talloc_strdup(new_user->groups, HBAC_TEST_GROUP1);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_user->groups[0] == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_user->groups[1] = talloc_strdup(new_user->groups, HBAC_TEST_GROUP2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_user->groups[1] == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_user->groups[2] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher *user = new_user;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagherstatic void get_test_service(TALLOC_CTX *mem_ctx,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_request_element **service)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_request_element *new_service;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_service = talloc_zero(mem_ctx, struct hbac_request_element);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (new_service == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_service->name = talloc_strdup(new_service, HBAC_TEST_SERVICE);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_service->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_service->groups = talloc_array(new_service, const char *, 3);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_service->groups == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_service->groups[0] = talloc_strdup(new_service->groups, HBAC_TEST_SERVICEGROUP1);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_service->groups[0] == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_service->groups[1] = talloc_strdup(new_service->groups, HBAC_TEST_SERVICEGROUP2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_service->groups[1] == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_service->groups[2] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher *service = new_service;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagherstatic void get_test_srchost(TALLOC_CTX *mem_ctx,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_request_element **srchost)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_request_element *new_srchost;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_srchost = talloc_zero(mem_ctx, struct hbac_request_element);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (new_srchost == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
05d7defd242466f376af8eb0d06ea49fb8320224Lukas Slebodnik new_srchost->name = talloc_strdup(new_srchost, HBAC_TEST_SRCHOST);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_srchost->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_srchost->groups = talloc_array(new_srchost, const char *, 3);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_srchost->groups == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
05d7defd242466f376af8eb0d06ea49fb8320224Lukas Slebodnik new_srchost->groups[0] = talloc_strdup(new_srchost->groups,
05d7defd242466f376af8eb0d06ea49fb8320224Lukas Slebodnik HBAC_TEST_SRCHOSTGROUP1);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_srchost->groups[0] == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
05d7defd242466f376af8eb0d06ea49fb8320224Lukas Slebodnik new_srchost->groups[1] = talloc_strdup(new_srchost->groups,
05d7defd242466f376af8eb0d06ea49fb8320224Lukas Slebodnik HBAC_TEST_SRCHOSTGROUP2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(new_srchost->groups[1] == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher new_srchost->groups[2] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher *srchost = new_srchost;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherSTART_TEST(ipa_hbac_test_allow_all)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher enum hbac_eval_result result;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher TALLOC_CTX *test_ctx;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule **rules;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_eval_req *eval_req;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov struct hbac_info *info = NULL;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher test_ctx = talloc_new(global_talloc_context);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create a request */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher eval_req = talloc_zero(test_ctx, struct hbac_eval_req);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (eval_req == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_user(eval_req, &eval_req->user);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_service(eval_req, &eval_req->service);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_srchost(eval_req, &eval_req->srchost);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create the rules to evaluate against */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules = talloc_array(test_ctx, struct hbac_rule *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rules == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_allow_all_rule(rules, &rules[0]);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->name = talloc_strdup(rules[0], "Allow All");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_ALLOW,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_ALLOW),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher talloc_free(test_ctx);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherEND_TEST
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherSTART_TEST(ipa_hbac_test_allow_user)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher enum hbac_eval_result result;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher TALLOC_CTX *test_ctx;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule **rules;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_eval_req *eval_req;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov struct hbac_info *info = NULL;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher test_ctx = talloc_new(global_talloc_context);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create a request */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher eval_req = talloc_zero(test_ctx, struct hbac_eval_req);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (eval_req == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_user(eval_req, &eval_req->user);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_service(eval_req, &eval_req->service);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_srchost(eval_req, &eval_req->srchost);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create the rules to evaluate against */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules = talloc_array(test_ctx, struct hbac_rule *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rules == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_allow_all_rule(rules, &rules[0]);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Modify the rule to allow only a specific user */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->name = talloc_strdup(rules[0], "Allow user");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->category = HBAC_CATEGORY_NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->names = talloc_array(rules[0], const char *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->users->names == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->names[0] = HBAC_TEST_USER;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->names[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_ALLOW,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_ALLOW),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Negative test */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->names[0] = HBAC_TEST_INVALID_USER;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_DENY,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_DENY),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher talloc_free(test_ctx);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherEND_TEST
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub HrozekSTART_TEST(ipa_hbac_test_allow_utf8)
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek{
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek enum hbac_eval_result result;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek TALLOC_CTX *test_ctx;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek struct hbac_rule **rules;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek struct hbac_eval_req *eval_req;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov struct hbac_info *info = NULL;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek test_ctx = talloc_new(global_talloc_context);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Create a request */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek eval_req = talloc_zero(test_ctx, struct hbac_eval_req);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_if (eval_req == NULL);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek get_test_user(eval_req, &eval_req->user);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek get_test_service(eval_req, &eval_req->service);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek get_test_srchost(eval_req, &eval_req->srchost);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Override the with UTF8 values */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek eval_req->user->name = (const char *) &user_utf8_lowcase;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek eval_req->srchost->name = (const char *) &srchost_utf8_lowcase;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek eval_req->service->name = (const char *) &service_utf8_lowcase;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Create the rules to evaluate against */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules = talloc_array(test_ctx, struct hbac_rule *, 2);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_if (rules == NULL);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek get_allow_all_rule(rules, &rules[0]);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->name = talloc_strdup(rules[0], "Allow user");
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_if(rules[0]->name == NULL);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->users->category = HBAC_CATEGORY_NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Modify the rule to allow only a specific user */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->users->names = talloc_array(rules[0], const char *, 2);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_if(rules[0]->users->names == NULL);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->users->names[0] = (const char *) &user_utf8_upcase;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->users->names[1] = NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Modify the rule to allow only a specific service */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->services->category = HBAC_CATEGORY_NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->services->names = talloc_array(rules[0], const char *, 2);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_if(rules[0]->services->names == NULL);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->services->names[0] = (const char *) &service_utf8_upcase;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->services->names[1] = NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Modify the rule to allow only a specific service */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->srchosts->category = HBAC_CATEGORY_NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->srchosts->names = talloc_array(rules[0], const char *, 2);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_if(rules[0]->services->names == NULL);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->srchosts->names[0] = (const char *) &srchost_utf8_upcase;
e1622d0d430a2ae4fca4fe4f9a83caf95500a853Petr Cech rules[0]->srchosts->names[1] = NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[1] = NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Evaluate the rules */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek result = hbac_evaluate(rules, eval_req, &info);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_unless(result == HBAC_EVAL_ALLOW,
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek "Expected [%s], got [%s]; "
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek "Error: [%s]",
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek hbac_result_string(HBAC_EVAL_ALLOW),
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek hbac_result_string(result),
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Negative test - a different letter */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->users->names[0] = (const char *) &user_utf8_lowcase_neg;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Evaluate the rules */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek result = hbac_evaluate(rules, eval_req, &info);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_unless(result == HBAC_EVAL_DENY,
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek "Expected [%s], got [%s]; "
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek "Error: [%s]",
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek hbac_result_string(HBAC_EVAL_DENY),
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek hbac_result_string(result),
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Negative test - Turkish dotless i. We cannot know that capital I
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek * casefolds into dotless i unless we know the language is Turkish */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek eval_req->user->name = (const char *) &user_lowcase_tr;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek rules[0]->users->names[0] = (const char *) &user_upcase_tr;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek /* Evaluate the rules */
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek result = hbac_evaluate(rules, eval_req, &info);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek fail_unless(result == HBAC_EVAL_DENY,
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek "Expected [%s], got [%s]; "
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek "Error: [%s]",
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek hbac_result_string(HBAC_EVAL_DENY),
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek hbac_result_string(result),
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek talloc_free(test_ctx);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek}
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub HrozekEND_TEST
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherSTART_TEST(ipa_hbac_test_allow_group)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher enum hbac_eval_result result;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher TALLOC_CTX *test_ctx;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule **rules;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_eval_req *eval_req;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov struct hbac_info *info = NULL;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher test_ctx = talloc_new(global_talloc_context);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create a request */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher eval_req = talloc_zero(test_ctx, struct hbac_eval_req);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (eval_req == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_user(eval_req, &eval_req->user);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_service(eval_req, &eval_req->service);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_srchost(eval_req, &eval_req->srchost);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create the rules to evaluate against */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules = talloc_array(test_ctx, struct hbac_rule *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rules == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_allow_all_rule(rules, &rules[0]);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Modify the rule to allow only a group of users */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->name = talloc_strdup(rules[0], "Allow group");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->category = HBAC_CATEGORY_NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->names = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->groups = talloc_array(rules[0], const char *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->users->groups == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->groups[0] = HBAC_TEST_GROUP1;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->groups[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_ALLOW,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_ALLOW),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Negative test */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->users->groups[0] = HBAC_TEST_INVALID_GROUP;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_DENY,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_DENY),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher talloc_free(test_ctx);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherEND_TEST
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherSTART_TEST(ipa_hbac_test_allow_svc)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher enum hbac_eval_result result;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher TALLOC_CTX *test_ctx;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule **rules;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_eval_req *eval_req;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov struct hbac_info *info = NULL;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher test_ctx = talloc_new(global_talloc_context);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create a request */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher eval_req = talloc_zero(test_ctx, struct hbac_eval_req);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (eval_req == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_user(eval_req, &eval_req->user);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_service(eval_req, &eval_req->service);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_srchost(eval_req, &eval_req->srchost);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create the rules to evaluate against */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules = talloc_array(test_ctx, struct hbac_rule *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rules == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_allow_all_rule(rules, &rules[0]);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Modify the rule to allow only a specific service */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->name = talloc_strdup(rules[0], "Allow service");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->category = HBAC_CATEGORY_NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->names = talloc_array(rules[0], const char *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->services->names == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->names[0] = HBAC_TEST_SERVICE;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->names[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_ALLOW,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_ALLOW),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Negative test */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->names[0] = HBAC_TEST_INVALID_SERVICE;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_DENY,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_DENY),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher talloc_free(test_ctx);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherEND_TEST
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherSTART_TEST(ipa_hbac_test_allow_svcgroup)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher enum hbac_eval_result result;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher TALLOC_CTX *test_ctx;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule **rules;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_eval_req *eval_req;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov struct hbac_info *info = NULL;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher test_ctx = talloc_new(global_talloc_context);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create a request */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher eval_req = talloc_zero(test_ctx, struct hbac_eval_req);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (eval_req == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_user(eval_req, &eval_req->user);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_service(eval_req, &eval_req->service);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_srchost(eval_req, &eval_req->srchost);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create the rules to evaluate against */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules = talloc_array(test_ctx, struct hbac_rule *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rules == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_allow_all_rule(rules, &rules[0]);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Modify the rule to allow only a group of users */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->name = talloc_strdup(rules[0], "Allow servicegroup");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->category = HBAC_CATEGORY_NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->names = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->groups = talloc_array(rules[0], const char *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->services->groups == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->groups[0] = HBAC_TEST_SERVICEGROUP1;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->groups[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_ALLOW,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_ALLOW),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Negative test */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->services->groups[0] = HBAC_TEST_INVALID_SERVICEGROUP;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_DENY,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_DENY),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher talloc_free(test_ctx);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherEND_TEST
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherSTART_TEST(ipa_hbac_test_allow_srchost)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher enum hbac_eval_result result;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher TALLOC_CTX *test_ctx;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule **rules;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_eval_req *eval_req;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov struct hbac_info *info = NULL;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher test_ctx = talloc_new(global_talloc_context);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create a request */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher eval_req = talloc_zero(test_ctx, struct hbac_eval_req);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (eval_req == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_user(eval_req, &eval_req->user);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_service(eval_req, &eval_req->service);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_srchost(eval_req, &eval_req->srchost);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create the rules to evaluate against */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules = talloc_array(test_ctx, struct hbac_rule *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rules == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_allow_all_rule(rules, &rules[0]);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Modify the rule to allow only a specific service */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->name = talloc_strdup(rules[0], "Allow srchost");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->category = HBAC_CATEGORY_NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->names = talloc_array(rules[0], const char *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->srchosts->names == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->names[0] = HBAC_TEST_SRCHOST;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->names[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_ALLOW,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_ALLOW),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Negative test */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->names[0] = HBAC_TEST_INVALID_SRCHOST;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_DENY,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
e504025b074f3e13bbb888272ea1fe11d2bbb8bcLukas Slebodnik "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_DENY),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher talloc_free(test_ctx);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherEND_TEST
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherSTART_TEST(ipa_hbac_test_allow_srchostgroup)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher enum hbac_eval_result result;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher TALLOC_CTX *test_ctx;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_rule **rules;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher struct hbac_eval_req *eval_req;
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov struct hbac_info *info = NULL;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher test_ctx = talloc_new(global_talloc_context);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create a request */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher eval_req = talloc_zero(test_ctx, struct hbac_eval_req);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (eval_req == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_user(eval_req, &eval_req->user);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_service(eval_req, &eval_req->service);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_test_srchost(eval_req, &eval_req->srchost);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Create the rules to evaluate against */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules = talloc_array(test_ctx, struct hbac_rule *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if (rules == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher get_allow_all_rule(rules, &rules[0]);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Modify the rule to allow only a group of users */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->name = talloc_strdup(rules[0], "Allow srchostgroup");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->name == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->category = HBAC_CATEGORY_NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->names = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->groups = talloc_array(rules[0], const char *, 2);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_if(rules[0]->srchosts->groups == NULL);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->groups[0] = HBAC_TEST_SRCHOSTGROUP1;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->groups[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[1] = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_ALLOW,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_ALLOW),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Negative test */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher rules[0]->srchosts->groups[0] = HBAC_TEST_INVALID_SRCHOSTGROUP;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rules[0], &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs == 0);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* Evaluate the rules */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher result = hbac_evaluate(rules, eval_req, &info);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher fail_unless(result == HBAC_EVAL_DENY,
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Expected [%s], got [%s]; "
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher "Error: [%s]",
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(HBAC_EVAL_DENY),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher hbac_result_string(result),
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher info ? hbac_error_string(info->code):"Unknown");
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov hbac_free_info(info);
fa580a250eda739500e4a45a158ea73b5d4094abNikolai Kondrashov info = NULL;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher talloc_free(test_ctx);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherEND_TEST
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen GallagherSTART_TEST(ipa_hbac_test_incomplete)
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher{
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher TALLOC_CTX *test_ctx;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher struct hbac_rule *rule;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher bool is_valid;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher uint32_t missing_attrs;
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher test_ctx = talloc_new(global_talloc_context);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher rule = talloc_zero(test_ctx, struct hbac_rule);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher /* Validate this rule */
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher is_valid = hbac_rule_is_complete(rule, &missing_attrs);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_if(is_valid);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs | HBAC_RULE_ELEMENT_USERS);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs | HBAC_RULE_ELEMENT_SERVICES);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs | HBAC_RULE_ELEMENT_TARGETHOSTS);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher fail_unless(missing_attrs | HBAC_RULE_ELEMENT_SOURCEHOSTS);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher talloc_free(test_ctx);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher}
a72e9289fe001c85a17acd667ca31d692fd99605Stephen GallagherEND_TEST
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen GallagherSuite *hbac_test_suite (void)
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher Suite *s = suite_create ("HBAC");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher TCase *tc_hbac = tcase_create("HBAC_rules");
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tcase_add_checked_fixture(tc_hbac,
4139a7a731f2831963a42b26aac111422be28792Jakub Hrozek ck_leak_check_setup,
4139a7a731f2831963a42b26aac111422be28792Jakub Hrozek ck_leak_check_teardown);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tcase_add_test(tc_hbac, ipa_hbac_test_allow_all);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tcase_add_test(tc_hbac, ipa_hbac_test_allow_user);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tcase_add_test(tc_hbac, ipa_hbac_test_allow_group);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tcase_add_test(tc_hbac, ipa_hbac_test_allow_svc);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tcase_add_test(tc_hbac, ipa_hbac_test_allow_svcgroup);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tcase_add_test(tc_hbac, ipa_hbac_test_allow_srchost);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tcase_add_test(tc_hbac, ipa_hbac_test_allow_srchostgroup);
3654a0c49e5ef3f24e2af29b34a13ff651a94c3dJakub Hrozek tcase_add_test(tc_hbac, ipa_hbac_test_allow_utf8);
a72e9289fe001c85a17acd667ca31d692fd99605Stephen Gallagher tcase_add_test(tc_hbac, ipa_hbac_test_incomplete);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher suite_add_tcase(s, tc_hbac);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher return s;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagherint main(int argc, const char *argv[])
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher{
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher int number_failed;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher tests_set_cwd();
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher Suite *s = hbac_test_suite();
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher SRunner *sr = srunner_create(s);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher /* If CK_VERBOSITY is set, use that, otherwise it defaults to CK_NORMAL */
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher srunner_run_all(sr, CK_ENV);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher number_failed = srunner_ntests_failed (sr);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher srunner_free (sr);
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher return (number_failed == 0) ? EXIT_SUCCESS : EXIT_FAILURE;
4dd615c01357b8715711aad6820ba9595d3ad377Stephen Gallagher}