sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Code
1f3faea046
samba-mirror/source4/torture/ldb/ldb.c

790 lines
28 KiB
C
Raw Normal View History

s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
/*
Unix SMB/CIFS implementation.
Test LDB attribute functions
Copyright (C) Andrew Bartlet <abartlet@samba.org> 2008
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include "includes.h"
#include "lib/events/events.h"
#include "lib/ldb/include/ldb.h"
#include "lib/ldb/include/ldb_errors.h"
#include "lib/ldb-samba/ldif_handlers.h"
#include "ldb_wrap.h"
#include "dsdb/samdb/samdb.h"
#include "param/param.h"
#include "torture/smbtorture.h"
Rename the top-level LDB test to LOCAL-LDB, so it gets picked up by the script that determines the tests to run.
2009-04-24 11:47:55 +04:00
#include "torture/local/proto.h"
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
static const char *sid = "S-1-5-21-4177067393-1453636373-93818737";
s4:torture: data_blob_hex_string() output is now lowercase. Based on the change in commit fb84edabbe9f358031117de2cf78613c704ac600, these tests needs to expect lowercase output.
2009-09-26 00:10:40 +04:00
static const char *hex_sid = "01040000000000051500000081fdf8f815bba456718f9705";
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
static const char *guid = "975ac5fa-35d9-431d-b86a-845bcd34fff9";
static const char *guid2 = "{975ac5fa-35d9-431d-b86a-845bcd34fff9}";
s4:torture: data_blob_hex_string() output is now lowercase. Based on the change in commit fb84edabbe9f358031117de2cf78613c704ac600, these tests needs to expect lowercase output.
2009-09-26 00:10:40 +04:00
static const char *hex_guid = "fac55a97d9351d43b86a845bcd34fff9";
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
s4:torture Add tests for prefixMap custom attribute handler
2009-04-24 11:17:29 +04:00
static const char *prefix_map_newline = "2:1.2.840.113556.1.2\n5:2.16.840.1.101.2.2.3";
static const char *prefix_map_semi = "2:1.2.840.113556.1.2;5:2.16.840.1.101.2.2.3";
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
static bool torture_ldb_attrs(struct torture_context *torture)
{
TALLOC_CTX *mem_ctx = talloc_new(torture);
struct ldb_context *ldb;
const struct ldb_schema_attribute *attr;
struct ldb_val string_sid_blob, binary_sid_blob;
struct ldb_val string_guid_blob, string_guid_blob2, binary_guid_blob;
s4:torture Add tests for prefixMap custom attribute handler
2009-04-24 11:17:29 +04:00
struct ldb_val string_prefix_map_newline_blob, string_prefix_map_semi_blob, string_prefix_map_blob;
struct ldb_val prefix_map_blob;
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
DATA_BLOB sid_blob = strhex_to_data_blob(mem_ctx, hex_sid);
DATA_BLOB guid_blob = strhex_to_data_blob(mem_ctx, hex_guid);
torture_assert(torture,
ldb = ldb_init(mem_ctx, torture->ev),
"Failed to init ldb");
torture_assert_int_equal(torture,
ldb_register_samba_handlers(ldb), 0,
"Failed to register Samba handlers");
ldb_set_utf8_fns(ldb, NULL, wrap_casefold);
/* Test SID behaviour */
torture_assert(torture, attr = ldb_schema_attribute_by_name(ldb, "objectSid"),
"Failed to get objectSid schema attribute");
string_sid_blob = data_blob_string_const(sid);
torture_assert_int_equal(torture,
attr->syntax->ldif_read_fn(ldb, mem_ctx,
&string_sid_blob, &binary_sid_blob), 0,
"Failed to parse string SID");
torture_assert_data_blob_equal(torture, binary_sid_blob, sid_blob,
"Read SID into blob form failed");
torture_assert_int_equal(torture,
attr->syntax->ldif_read_fn(ldb, mem_ctx,
&sid_blob, &binary_sid_blob), -1,
"Should have failed to parse binary SID");
torture_assert_int_equal(torture,
attr->syntax->ldif_write_fn(ldb, mem_ctx, &binary_sid_blob, &string_sid_blob), 0,
"Failed to parse binary SID");
torture_assert_data_blob_equal(torture,
string_sid_blob, data_blob_string_const(sid),
"Write SID into string form failed");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &binary_sid_blob, &string_sid_blob), 0,
"Failed to compare binary and string SID");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &string_sid_blob, &binary_sid_blob), 0,
"Failed to compare string and binary binary SID");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &string_sid_blob, &string_sid_blob), 0,
"Failed to compare string and string SID");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &binary_sid_blob, &binary_sid_blob), 0,
"Failed to compare binary and binary SID");
torture_assert(torture, attr->syntax->comparison_fn(ldb, mem_ctx, &guid_blob, &binary_sid_blob) != 0,
"Failed to distinguish binary GUID and binary SID");
/* Test GUID behaviour */
torture_assert(torture, attr = ldb_schema_attribute_by_name(ldb, "objectGUID"),
"Failed to get objectGUID schema attribute");
string_guid_blob = data_blob_string_const(guid);
torture_assert_int_equal(torture,
attr->syntax->ldif_read_fn(ldb, mem_ctx,
&string_guid_blob, &binary_guid_blob), 0,
"Failed to parse string GUID");
torture_assert_data_blob_equal(torture, binary_guid_blob, guid_blob,
"Read GUID into blob form failed");
string_guid_blob2 = data_blob_string_const(guid2);
torture_assert_int_equal(torture,
attr->syntax->ldif_read_fn(ldb, mem_ctx,
&string_guid_blob2, &binary_guid_blob), 0,
"Failed to parse string GUID");
torture_assert_data_blob_equal(torture, binary_guid_blob, guid_blob,
"Read GUID into blob form failed");
torture_assert_int_equal(torture,
attr->syntax->ldif_read_fn(ldb, mem_ctx,
&guid_blob, &binary_guid_blob), 0,
"Failed to parse binary GUID");
torture_assert_data_blob_equal(torture, binary_guid_blob, guid_blob,
"Read GUID into blob form failed");
torture_assert_int_equal(torture,
attr->syntax->ldif_write_fn(ldb, mem_ctx, &binary_guid_blob, &string_guid_blob), 0,
"Failed to print binary GUID as string");
torture_assert_data_blob_equal(torture, string_sid_blob, data_blob_string_const(sid),
"Write SID into string form failed");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &binary_guid_blob, &string_guid_blob), 0,
"Failed to compare binary and string GUID");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &string_guid_blob, &binary_guid_blob), 0,
"Failed to compare string and binary binary GUID");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &string_guid_blob, &string_guid_blob), 0,
"Failed to compare string and string GUID");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &binary_guid_blob, &binary_guid_blob), 0,
"Failed to compare binary and binary GUID");
s4:torture Add tests for prefixMap custom attribute handler
2009-04-24 11:17:29 +04:00
string_prefix_map_newline_blob = data_blob_string_const(prefix_map_newline);
string_prefix_map_semi_blob = data_blob_string_const(prefix_map_semi);
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
s4:torture Add tests for prefixMap custom attribute handler
2009-04-24 11:17:29 +04:00
/* Test prefixMap behaviour */
torture_assert(torture, attr = ldb_schema_attribute_by_name(ldb, "prefixMap"),
"Failed to get prefixMap schema attribute");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &string_prefix_map_newline_blob, &string_prefix_map_semi_blob), 0,
"Failed to compare prefixMap with newlines and prefixMap with semicolons");
torture_assert_int_equal(torture,
attr->syntax->ldif_read_fn(ldb, mem_ctx, &string_prefix_map_newline_blob, &prefix_map_blob), 0,
"Failed to read prefixMap with newlines");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &string_prefix_map_newline_blob, &prefix_map_blob), 0,
"Failed to compare prefixMap with newlines and prefixMap binary");
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
s4:torture Add tests for prefixMap custom attribute handler
2009-04-24 11:17:29 +04:00
torture_assert_int_equal(torture,
attr->syntax->ldif_write_fn(ldb, mem_ctx, &prefix_map_blob, &string_prefix_map_blob), 0,
"Failed to write prefixMap");
torture_assert_int_equal(torture,
attr->syntax->comparison_fn(ldb, mem_ctx, &string_prefix_map_blob, &prefix_map_blob), 0,
"Failed to compare prefixMap ldif write and prefixMap binary");
torture_assert_data_blob_equal(torture, string_prefix_map_blob, string_prefix_map_semi_blob,
"Failed to compare prefixMap ldif write and prefixMap binary");
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
talloc_free(mem_ctx);
return true;
}
static bool torture_ldb_dn_attrs(struct torture_context *torture)
{
TALLOC_CTX *mem_ctx = talloc_new(torture);
struct ldb_context *ldb;
const struct ldb_dn_extended_syntax *attr;
struct ldb_val string_sid_blob, binary_sid_blob;
struct ldb_val string_guid_blob, binary_guid_blob;
struct ldb_val hex_sid_blob, hex_guid_blob;
DATA_BLOB sid_blob = strhex_to_data_blob(mem_ctx, hex_sid);
DATA_BLOB guid_blob = strhex_to_data_blob(mem_ctx, hex_guid);
torture_assert(torture,
ldb = ldb_init(mem_ctx, torture->ev),
"Failed to init ldb");
torture_assert_int_equal(torture,
ldb_register_samba_handlers(ldb), 0,
"Failed to register Samba handlers");
ldb_set_utf8_fns(ldb, NULL, wrap_casefold);
/* Test SID behaviour */
torture_assert(torture, attr = ldb_dn_extended_syntax_by_name(ldb, "SID"),
"Failed to get SID DN syntax");
string_sid_blob = data_blob_string_const(sid);
torture_assert_int_equal(torture,
attr->read_fn(ldb, mem_ctx,
&string_sid_blob, &binary_sid_blob), 0,
"Failed to parse string SID");
torture_assert_data_blob_equal(torture, binary_sid_blob, sid_blob,
"Read SID into blob form failed");
hex_sid_blob = data_blob_string_const(hex_sid);
torture_assert_int_equal(torture,
attr->read_fn(ldb, mem_ctx,
&hex_sid_blob, &binary_sid_blob), 0,
"Failed to parse HEX SID");
torture_assert_data_blob_equal(torture, binary_sid_blob, sid_blob,
"Read SID into blob form failed");
torture_assert_int_equal(torture,
attr->read_fn(ldb, mem_ctx,
&sid_blob, &binary_sid_blob), -1,
"Should have failed to parse binary SID");
torture_assert_int_equal(torture,
attr->write_hex_fn(ldb, mem_ctx, &sid_blob, &hex_sid_blob), 0,
"Failed to parse binary SID");
torture_assert_data_blob_equal(torture,
hex_sid_blob, data_blob_string_const(hex_sid),
"Write SID into HEX string form failed");
torture_assert_int_equal(torture,
attr->write_clear_fn(ldb, mem_ctx, &sid_blob, &string_sid_blob), 0,
"Failed to parse binary SID");
torture_assert_data_blob_equal(torture,
string_sid_blob, data_blob_string_const(sid),
"Write SID into clear string form failed");
/* Test GUID behaviour */
torture_assert(torture, attr = ldb_dn_extended_syntax_by_name(ldb, "GUID"),
"Failed to get GUID DN syntax");
string_guid_blob = data_blob_string_const(guid);
torture_assert_int_equal(torture,
attr->read_fn(ldb, mem_ctx,
&string_guid_blob, &binary_guid_blob), 0,
"Failed to parse string GUID");
torture_assert_data_blob_equal(torture, binary_guid_blob, guid_blob,
"Read GUID into blob form failed");
hex_guid_blob = data_blob_string_const(hex_guid);
torture_assert_int_equal(torture,
attr->read_fn(ldb, mem_ctx,
&hex_guid_blob, &binary_guid_blob), 0,
"Failed to parse HEX GUID");
torture_assert_data_blob_equal(torture, binary_guid_blob, guid_blob,
"Read GUID into blob form failed");
torture_assert_int_equal(torture,
attr->read_fn(ldb, mem_ctx,
&guid_blob, &binary_guid_blob), -1,
"Should have failed to parse binary GUID");
torture_assert_int_equal(torture,
attr->write_hex_fn(ldb, mem_ctx, &guid_blob, &hex_guid_blob), 0,
"Failed to parse binary GUID");
torture_assert_data_blob_equal(torture,
hex_guid_blob, data_blob_string_const(hex_guid),
"Write GUID into HEX string form failed");
torture_assert_int_equal(torture,
attr->write_clear_fn(ldb, mem_ctx, &guid_blob, &string_guid_blob), 0,
"Failed to parse binary GUID");
torture_assert_data_blob_equal(torture,
string_guid_blob, data_blob_string_const(guid),
"Write GUID into clear string form failed");
talloc_free(mem_ctx);
return true;
}
static bool torture_ldb_dn_extended(struct torture_context *torture)
{
TALLOC_CTX *mem_ctx = talloc_new(torture);
struct ldb_context *ldb;
struct ldb_dn *dn, *dn2;
DATA_BLOB sid_blob = strhex_to_data_blob(mem_ctx, hex_sid);
DATA_BLOB guid_blob = strhex_to_data_blob(mem_ctx, hex_guid);
const char *dn_str = "cn=admin,cn=users,dc=samba,dc=org";
torture_assert(torture,
ldb = ldb_init(mem_ctx, torture->ev),
"Failed to init ldb");
torture_assert_int_equal(torture,
ldb_register_samba_handlers(ldb), 0,
"Failed to register Samba handlers");
ldb_set_utf8_fns(ldb, NULL, wrap_casefold);
/* Check behaviour of a normal DN */
torture_assert(torture,
dn = ldb_dn_new(mem_ctx, ldb, dn_str),
"Failed to create a 'normal' DN");
torture_assert(torture,
ldb_dn_validate(dn),
"Failed to validate 'normal' DN");
torture_assert(torture, ldb_dn_has_extended(dn) == false,
"Should not find plain DN to be 'extended'");
torture_assert(torture, ldb_dn_get_extended_component(dn, "SID") == NULL,
"Should not find an SID on plain DN");
torture_assert(torture, ldb_dn_get_extended_component(dn, "GUID") == NULL,
"Should not find an GUID on plain DN");
torture_assert(torture, ldb_dn_get_extended_component(dn, "WKGUID") == NULL,
"Should not find an WKGUID on plain DN");
/* Now make an extended DN */
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<GUID=%s>;<SID=%s>;%s",
guid, sid, dn_str),
"Failed to create an 'extended' DN");
torture_assert(torture,
dn2 = ldb_dn_copy(mem_ctx, dn),
"Failed to copy the 'extended' DN");
talloc_free(dn);
dn = dn2;
torture_assert(torture,
ldb_dn_validate(dn),
"Failed to validate 'extended' DN");
torture_assert(torture, ldb_dn_has_extended(dn) == true,
"Should find extended DN to be 'extended'");
torture_assert(torture, ldb_dn_get_extended_component(dn, "SID") != NULL,
"Should find an SID on extended DN");
torture_assert(torture, ldb_dn_get_extended_component(dn, "GUID") != NULL,
"Should find an GUID on extended DN");
torture_assert_data_blob_equal(torture, *ldb_dn_get_extended_component(dn, "SID"), sid_blob,
"Extended DN SID incorect");
torture_assert_data_blob_equal(torture, *ldb_dn_get_extended_component(dn, "GUID"), guid_blob,
"Extended DN GUID incorect");
torture_assert_str_equal(torture, ldb_dn_get_linearized(dn), dn_str,
"linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_casefold(dn), strupper_talloc(mem_ctx, dn_str),
"casefolded DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_component_name(dn, 0), "cn",
"componet zero incorrect");
torture_assert_data_blob_equal(torture, *ldb_dn_get_component_val(dn, 0), data_blob_string_const("admin"),
"componet zero incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 1),
talloc_asprintf(mem_ctx, "<GUID=%s>;<SID=%s>;%s",
guid, sid, dn_str),
"Clear extended linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 0),
talloc_asprintf(mem_ctx, "<GUID=%s>;<SID=%s>;%s",
hex_guid, hex_sid, dn_str),
"HEX extended linearized DN incorrect");
torture_assert(torture, ldb_dn_remove_child_components(dn, 1) == true,
"Failed to remove DN child");
torture_assert(torture, ldb_dn_has_extended(dn) == false,
"Extended DN flag should be cleared after child element removal");
torture_assert(torture, ldb_dn_get_extended_component(dn, "SID") == NULL,
"Should not find an SID on DN");
torture_assert(torture, ldb_dn_get_extended_component(dn, "GUID") == NULL,
"Should not find an GUID on DN");
/* TODO: test setting these in the other order, and ensure it still comes out 'GUID first' */
torture_assert_int_equal(torture, ldb_dn_set_extended_component(dn, "GUID", &guid_blob), 0,
"Failed to set a GUID on DN");
torture_assert_int_equal(torture, ldb_dn_set_extended_component(dn, "SID", &sid_blob), 0,
"Failed to set a SID on DN");
torture_assert_data_blob_equal(torture, *ldb_dn_get_extended_component(dn, "SID"), sid_blob,
"Extended DN SID incorect");
torture_assert_data_blob_equal(torture, *ldb_dn_get_extended_component(dn, "GUID"), guid_blob,
"Extended DN GUID incorect");
torture_assert_str_equal(torture, ldb_dn_get_linearized(dn), "cn=users,dc=samba,dc=org",
"linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 1),
talloc_asprintf(mem_ctx, "<GUID=%s>;<SID=%s>;%s",
guid, sid, "cn=users,dc=samba,dc=org"),
"Clear extended linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 0),
talloc_asprintf(mem_ctx, "<GUID=%s>;<SID=%s>;%s",
hex_guid, hex_sid, "cn=users,dc=samba,dc=org"),
"HEX extended linearized DN incorrect");
/* Now check a 'just GUID' DN (clear format) */
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<GUID=%s>",
guid),
"Failed to create an 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn),
"Failed to validate 'extended' DN");
torture_assert(torture, ldb_dn_has_extended(dn) == true,
"Should find extended DN to be 'extended'");
torture_assert(torture, ldb_dn_get_extended_component(dn, "SID") == NULL,
"Should not find an SID on this DN");
torture_assert_int_equal(torture, ldb_dn_get_comp_num(dn), 0,
"Should not find an 'normal' componet on this DN");
torture_assert(torture, ldb_dn_get_extended_component(dn, "GUID") != NULL,
"Should find an GUID on this DN");
torture_assert_data_blob_equal(torture, *ldb_dn_get_extended_component(dn, "GUID"), guid_blob,
"Extended DN GUID incorect");
torture_assert_str_equal(torture, ldb_dn_get_linearized(dn), "",
"linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 1),
talloc_asprintf(mem_ctx, "<GUID=%s>",
guid),
"Clear extended linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 0),
talloc_asprintf(mem_ctx, "<GUID=%s>",
hex_guid),
"HEX extended linearized DN incorrect");
/* Now check a 'just GUID' DN (HEX format) */
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<GUID=%s>",
hex_guid),
"Failed to create an 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn),
"Failed to validate 'extended' DN");
torture_assert(torture, ldb_dn_has_extended(dn) == true,
"Should find extended DN to be 'extended'");
torture_assert(torture, ldb_dn_get_extended_component(dn, "SID") == NULL,
"Should not find an SID on this DN");
torture_assert(torture, ldb_dn_get_extended_component(dn, "GUID") != NULL,
"Should find an GUID on this DN");
torture_assert_data_blob_equal(torture, *ldb_dn_get_extended_component(dn, "GUID"), guid_blob,
"Extended DN GUID incorect");
torture_assert_str_equal(torture, ldb_dn_get_linearized(dn), "",
"linearized DN incorrect");
/* Now check a 'just SID' DN (clear format) */
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<SID=%s>",
sid),
"Failed to create an 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn),
"Failed to validate 'extended' DN");
torture_assert(torture, ldb_dn_has_extended(dn) == true,
"Should find extended DN to be 'extended'");
torture_assert(torture, ldb_dn_get_extended_component(dn, "GUID") == NULL,
"Should not find an SID on this DN");
torture_assert(torture, ldb_dn_get_extended_component(dn, "SID") != NULL,
"Should find an SID on this DN");
torture_assert_data_blob_equal(torture, *ldb_dn_get_extended_component(dn, "SID"), sid_blob,
"Extended DN SID incorect");
torture_assert_str_equal(torture, ldb_dn_get_linearized(dn), "",
"linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 1),
talloc_asprintf(mem_ctx, "<SID=%s>",
sid),
"Clear extended linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 0),
talloc_asprintf(mem_ctx, "<SID=%s>",
hex_sid),
"HEX extended linearized DN incorrect");
/* Now check a 'just SID' DN (HEX format) */
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<SID=%s>",
hex_sid),
"Failed to create an 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn),
"Failed to validate 'extended' DN");
torture_assert(torture, ldb_dn_has_extended(dn) == true,
"Should find extended DN to be 'extended'");
torture_assert(torture, ldb_dn_get_extended_component(dn, "GUID") == NULL,
"Should not find an SID on this DN");
torture_assert(torture, ldb_dn_get_extended_component(dn, "SID") != NULL,
"Should find an SID on this DN");
torture_assert_data_blob_equal(torture, *ldb_dn_get_extended_component(dn, "SID"), sid_blob,
"Extended DN SID incorect");
torture_assert_str_equal(torture, ldb_dn_get_linearized(dn), "",
"linearized DN incorrect");
talloc_free(mem_ctx);
return true;
}
static bool torture_ldb_dn(struct torture_context *torture)
{
TALLOC_CTX *mem_ctx = talloc_new(torture);
struct ldb_context *ldb;
struct ldb_dn *dn;
struct ldb_dn *child_dn;
struct ldb_dn *typo_dn;
Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints
2009-09-22 04:01:20 +04:00
struct ldb_val val;
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
torture_assert(torture,
ldb = ldb_init(mem_ctx, torture->ev),
"Failed to init ldb");
torture_assert_int_equal(torture,
ldb_register_samba_handlers(ldb), 0,
"Failed to register Samba handlers");
ldb_set_utf8_fns(ldb, NULL, wrap_casefold);
/* Check behaviour of a normal DN */
torture_assert(torture,
dn = ldb_dn_new(mem_ctx, ldb, NULL),
"Failed to create a NULL DN");
torture_assert(torture,
ldb_dn_validate(dn),
"Failed to validate NULL DN");
torture_assert(torture,
ldb_dn_add_base_fmt(dn, "dc=org"),
"Failed to add base DN");
torture_assert(torture,
ldb_dn_add_child_fmt(dn, "dc=samba"),
"Failed to add base DN");
torture_assert_str_equal(torture, ldb_dn_get_linearized(dn), "dc=samba,dc=org",
"linearized DN incorrect");
torture_assert_str_equal(torture, ldb_dn_get_extended_linearized(mem_ctx, dn, 0), "dc=samba,dc=org",
"extended linearized DN incorrect");
/* Check child DN comparisons */
torture_assert(torture,
child_dn = ldb_dn_new(mem_ctx, ldb, "CN=users,DC=SAMBA,DC=org"),
"Failed to create child DN");
torture_assert(torture,
ldb_dn_compare(dn, child_dn) != 0,
"Comparison on dc=samba,dc=org and CN=users,DC=SAMBA,DC=org should != 0");
torture_assert(torture,
ldb_dn_compare_base(child_dn, dn) != 0,
"Base Comparison of CN=users,DC=SAMBA,DC=org and dc=samba,dc=org should != 0");
torture_assert(torture,
ldb_dn_compare_base(dn, child_dn) == 0,
"Base Comparison on dc=samba,dc=org and CN=users,DC=SAMBA,DC=org should == 0");
/* Check comparisons with a truncated DN */
torture_assert(torture,
typo_dn = ldb_dn_new(mem_ctx, ldb, "c=samba,dc=org"),
"Failed to create 'typo' DN");
torture_assert(torture,
ldb_dn_compare(dn, typo_dn) != 0,
"Comparison on dc=samba,dc=org and c=samba,dc=org should != 0");
torture_assert(torture,
ldb_dn_compare_base(typo_dn, dn) != 0,
"Base Comparison of c=samba,dc=org and dc=samba,dc=org should != 0");
torture_assert(torture,
ldb_dn_compare_base(dn, typo_dn) != 0,
"Base Comparison on dc=samba,dc=org and c=samba,dc=org should != 0");
Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints
2009-09-22 04:01:20 +04:00
/* Check DN based on MS-ADTS:3.1.1.5.1.2 Naming Constraints*/
torture_assert(torture,
dn = ldb_dn_new(mem_ctx, ldb, "CN=New\nLine,DC=SAMBA,DC=org"),
"Failed to create a DN with 0xA in it");
s4-ldb: changed the DN checks for \n to warnings a \n is sometimes allowed in AD (eg in deleted DNs). Until we know when is really is allowed, treat it as a warning only.
2009-11-13 11:31:40 +03:00
/* this is a warning until we work out how the DEL: CNs work */
if (ldb_dn_validate(dn) != false) {
torture_warning(torture,
"should have failed to validate a DN with 0xA in it");
}
Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints
2009-09-22 04:01:20 +04:00
s4:torture Silence const warning by use of data_blob_const() This was inspired by one of mdw's const patches Andrew Bartlett
2009-10-22 03:17:35 +04:00
val = data_blob_const("CN=Zer\0,DC=SAMBA,DC=org", 23);
Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints
2009-09-22 04:01:20 +04:00
torture_assert(torture,
NULL == ldb_dn_from_ldb_val(mem_ctx, ldb, &val),
"should fail to create a DN with 0x0 in it");
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
talloc_free(mem_ctx);
return true;
}
static bool torture_ldb_dn_invalid_extended(struct torture_context *torture)
{
TALLOC_CTX *mem_ctx = talloc_new(torture);
struct ldb_context *ldb;
struct ldb_dn *dn;
const char *dn_str = "cn=admin,cn=users,dc=samba,dc=org";
torture_assert(torture,
ldb = ldb_init(mem_ctx, torture->ev),
"Failed to init ldb");
torture_assert_int_equal(torture,
ldb_register_samba_handlers(ldb), 0,
"Failed to register Samba handlers");
ldb_set_utf8_fns(ldb, NULL, wrap_casefold);
/* Check behaviour of a normal DN */
torture_assert(torture,
dn = ldb_dn_new(mem_ctx, ldb, "samba,dc=org"),
"Failed to create a 'normal' invalid DN");
torture_assert(torture,
ldb_dn_validate(dn) == false,
"should have failed to validate 'normal' invalid DN");
/* Now make an extended DN */
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<PID=%s>;%s",
sid, dn_str),
"Failed to create an invalid 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn) == false,
"should have failed to validate 'extended' DN");
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<GUID=%s>%s",
sid, dn_str),
"Failed to create an invalid 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn) == false,
"should have failed to validate 'extended' DN");
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<GUID=%s>;",
sid),
"Failed to create an invalid 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn) == false,
"should have failed to validate 'extended' DN");
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<GUID=%s>;",
hex_sid),
"Failed to create an invalid 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn) == false,
"should have failed to validate 'extended' DN");
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<SID=%s>;",
hex_guid),
"Failed to create an invalid 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn) == false,
"should have failed to validate 'extended' DN");
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<SID=%s>;",
guid),
"Failed to create an invalid 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn) == false,
"should have failed to validate 'extended' DN");
torture_assert(torture,
dn = ldb_dn_new_fmt(mem_ctx, ldb, "<GUID=>"),
"Failed to create an invalid 'extended' DN");
torture_assert(torture,
ldb_dn_validate(dn) == false,
"should have failed to validate 'extended' DN");
return true;
}
Rename the top-level LDB test to LOCAL-LDB, so it gets picked up by the script that determines the tests to run.
2009-04-24 11:47:55 +04:00
struct torture_suite *torture_ldb(TALLOC_CTX *mem_ctx)
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
{
Rename the top-level LDB test to LOCAL-LDB, so it gets picked up by the script that determines the tests to run.
2009-04-24 11:47:55 +04:00
struct torture_suite *suite = torture_suite_create(mem_ctx, "LDB");
if (suite == NULL) {
return NULL;
}
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
torture_suite_add_simple_test(suite, "ATTRS", torture_ldb_attrs);
torture_suite_add_simple_test(suite, "DN-ATTRS", torture_ldb_dn_attrs);
torture_suite_add_simple_test(suite, "DN-EXTENDED", torture_ldb_dn_extended);
torture_suite_add_simple_test(suite, "DN-INVALID-EXTENDED", torture_ldb_dn_invalid_extended);
torture_suite_add_simple_test(suite, "DN", torture_ldb_dn);
suite->description = talloc_strdup(suite, "LDB (samba-specific behaviour) tests");
Rename the top-level LDB test to LOCAL-LDB, so it gets picked up by the script that determines the tests to run.
2009-04-24 11:47:55 +04:00
return suite;
s4:torture: add ldb tests These tests are for both the new extended DN functionality (and were vital in finding bugs during implementation) and for the normal DN parsing and comparison routines. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-12-16 10:45:43 +03:00
}
Copy Permalink