mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
35fbc7bbda
This is consistent with the test names used by selftest, should make the names less confusing and easier to integrate with other tools. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104
958 lines
24 KiB
C
958 lines
24 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
|
|
local testing of the nss wrapper
|
|
|
|
Copyright (C) Guenther Deschner 2009-2010
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
|
|
#ifndef NSS_WRAPPER
|
|
#define NSS_WRAPPER
|
|
#endif
|
|
|
|
#include "torture/torture.h"
|
|
#include "lib/replace/system/passwd.h"
|
|
|
|
static bool copy_passwd(struct torture_context *tctx,
|
|
const struct passwd *pwd,
|
|
struct passwd *p)
|
|
{
|
|
p->pw_name = talloc_strdup(tctx, pwd->pw_name);
|
|
p->pw_passwd = talloc_strdup(tctx, pwd->pw_passwd);
|
|
p->pw_uid = pwd->pw_uid;
|
|
p->pw_gid = pwd->pw_gid;
|
|
p->pw_gecos = talloc_strdup(tctx, pwd->pw_gecos);
|
|
p->pw_dir = talloc_strdup(tctx, pwd->pw_dir);
|
|
p->pw_shell = talloc_strdup(tctx, pwd->pw_shell);
|
|
|
|
return true;
|
|
}
|
|
|
|
static void print_passwd(struct passwd *pwd)
|
|
{
|
|
printf("%s:%s:%lu:%lu:%s:%s:%s\n",
|
|
pwd->pw_name,
|
|
pwd->pw_passwd,
|
|
(unsigned long)pwd->pw_uid,
|
|
(unsigned long)pwd->pw_gid,
|
|
pwd->pw_gecos,
|
|
pwd->pw_dir,
|
|
pwd->pw_shell);
|
|
}
|
|
|
|
|
|
static bool test_nwrap_getpwnam(struct torture_context *tctx,
|
|
const char *name,
|
|
struct passwd *pwd_p)
|
|
{
|
|
struct passwd *pwd;
|
|
|
|
torture_comment(tctx, "Testing getpwnam: %s\n", name);
|
|
|
|
pwd = getpwnam(name);
|
|
if (pwd) {
|
|
print_passwd(pwd);
|
|
}
|
|
|
|
if (pwd_p) {
|
|
copy_passwd(tctx, pwd, pwd_p);
|
|
}
|
|
|
|
return pwd ? true : false;
|
|
}
|
|
|
|
static bool test_nwrap_getpwnam_r(struct torture_context *tctx,
|
|
const char *name,
|
|
struct passwd *pwd_p)
|
|
{
|
|
struct passwd pwd, *pwdp;
|
|
char buffer[4096];
|
|
int ret;
|
|
|
|
torture_comment(tctx, "Testing getpwnam_r: %s\n", name);
|
|
|
|
ret = getpwnam_r(name, &pwd, buffer, sizeof(buffer), &pwdp);
|
|
if (ret != 0) {
|
|
if (ret != ENOENT) {
|
|
torture_comment(tctx, "got %d return code\n", ret);
|
|
}
|
|
return false;
|
|
}
|
|
|
|
print_passwd(&pwd);
|
|
|
|
if (pwd_p) {
|
|
copy_passwd(tctx, &pwd, pwd_p);
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_getpwuid(struct torture_context *tctx,
|
|
uid_t uid,
|
|
struct passwd *pwd_p)
|
|
{
|
|
struct passwd *pwd;
|
|
|
|
torture_comment(tctx, "Testing getpwuid: %lu\n", (unsigned long)uid);
|
|
|
|
pwd = getpwuid(uid);
|
|
if (pwd) {
|
|
print_passwd(pwd);
|
|
}
|
|
|
|
if (pwd_p) {
|
|
copy_passwd(tctx, pwd, pwd_p);
|
|
}
|
|
|
|
return pwd ? true : false;
|
|
}
|
|
|
|
static bool test_nwrap_getpwuid_r(struct torture_context *tctx,
|
|
uid_t uid,
|
|
struct passwd *pwd_p)
|
|
{
|
|
struct passwd pwd, *pwdp;
|
|
char buffer[4096];
|
|
int ret;
|
|
|
|
torture_comment(tctx, "Testing getpwuid_r: %lu\n", (unsigned long)uid);
|
|
|
|
ret = getpwuid_r(uid, &pwd, buffer, sizeof(buffer), &pwdp);
|
|
if (ret != 0) {
|
|
if (ret != ENOENT) {
|
|
torture_comment(tctx, "got %d return code\n", ret);
|
|
}
|
|
return false;
|
|
}
|
|
|
|
print_passwd(&pwd);
|
|
|
|
if (pwd_p) {
|
|
copy_passwd(tctx, &pwd, pwd_p);
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
static bool copy_group(struct torture_context *tctx,
|
|
const struct group *grp,
|
|
struct group *g)
|
|
{
|
|
int i;
|
|
|
|
g->gr_name = talloc_strdup(tctx, grp->gr_name);
|
|
g->gr_passwd = talloc_strdup(tctx, grp->gr_passwd);
|
|
g->gr_gid = grp->gr_gid;
|
|
g->gr_mem = NULL;
|
|
|
|
for (i=0; grp->gr_mem && grp->gr_mem[i]; i++) {
|
|
g->gr_mem = talloc_realloc(tctx, g->gr_mem, char *, i + 2);
|
|
g->gr_mem[i] = talloc_strdup(g->gr_mem, grp->gr_mem[i]);
|
|
g->gr_mem[i+1] = NULL;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static void print_group(struct group *grp)
|
|
{
|
|
int i;
|
|
printf("%s:%s:%lu:",
|
|
grp->gr_name,
|
|
grp->gr_passwd,
|
|
(unsigned long)grp->gr_gid);
|
|
|
|
if ((grp->gr_mem == NULL) || !grp->gr_mem[0]) {
|
|
printf("\n");
|
|
return;
|
|
}
|
|
|
|
for (i=0; grp->gr_mem[i+1]; i++) {
|
|
printf("%s,", grp->gr_mem[i]);
|
|
}
|
|
printf("%s\n", grp->gr_mem[i]);
|
|
}
|
|
|
|
static bool test_nwrap_getgrnam(struct torture_context *tctx,
|
|
const char *name,
|
|
struct group *grp_p)
|
|
{
|
|
struct group *grp;
|
|
|
|
torture_comment(tctx, "Testing getgrnam: %s\n", name);
|
|
|
|
grp = getgrnam(name);
|
|
if (grp) {
|
|
print_group(grp);
|
|
}
|
|
|
|
if (grp_p) {
|
|
copy_group(tctx, grp, grp_p);
|
|
}
|
|
|
|
return grp ? true : false;
|
|
}
|
|
|
|
static bool test_nwrap_getgrnam_r(struct torture_context *tctx,
|
|
const char *name,
|
|
struct group *grp_p)
|
|
{
|
|
struct group grp, *grpp;
|
|
char buffer[4096];
|
|
int ret;
|
|
|
|
torture_comment(tctx, "Testing getgrnam_r: %s\n", name);
|
|
|
|
ret = getgrnam_r(name, &grp, buffer, sizeof(buffer), &grpp);
|
|
if (ret != 0) {
|
|
if (ret != ENOENT) {
|
|
torture_comment(tctx, "got %d return code\n", ret);
|
|
}
|
|
return false;
|
|
}
|
|
|
|
print_group(&grp);
|
|
|
|
if (grp_p) {
|
|
copy_group(tctx, &grp, grp_p);
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
static bool test_nwrap_getgrgid(struct torture_context *tctx,
|
|
gid_t gid,
|
|
struct group *grp_p)
|
|
{
|
|
struct group *grp;
|
|
|
|
torture_comment(tctx, "Testing getgrgid: %lu\n", (unsigned long)gid);
|
|
|
|
grp = getgrgid(gid);
|
|
if (grp) {
|
|
print_group(grp);
|
|
}
|
|
|
|
if (grp_p) {
|
|
copy_group(tctx, grp, grp_p);
|
|
}
|
|
|
|
return grp ? true : false;
|
|
}
|
|
|
|
static bool test_nwrap_getgrgid_r(struct torture_context *tctx,
|
|
gid_t gid,
|
|
struct group *grp_p)
|
|
{
|
|
struct group grp, *grpp;
|
|
char buffer[4096];
|
|
int ret;
|
|
|
|
torture_comment(tctx, "Testing getgrgid_r: %lu\n", (unsigned long)gid);
|
|
|
|
ret = getgrgid_r(gid, &grp, buffer, sizeof(buffer), &grpp);
|
|
if (ret != 0) {
|
|
if (ret != ENOENT) {
|
|
torture_comment(tctx, "got %d return code\n", ret);
|
|
}
|
|
return false;
|
|
}
|
|
|
|
print_group(&grp);
|
|
|
|
if (grp_p) {
|
|
copy_group(tctx, &grp, grp_p);
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_enum_passwd(struct torture_context *tctx,
|
|
struct passwd **pwd_array_p,
|
|
size_t *num_pwd_p)
|
|
{
|
|
struct passwd *pwd;
|
|
struct passwd *pwd_array = NULL;
|
|
size_t num_pwd = 0;
|
|
|
|
torture_comment(tctx, "Testing setpwent\n");
|
|
setpwent();
|
|
|
|
while ((pwd = getpwent()) != NULL) {
|
|
torture_comment(tctx, "Testing getpwent\n");
|
|
|
|
print_passwd(pwd);
|
|
if (pwd_array_p && num_pwd_p) {
|
|
pwd_array = talloc_realloc(tctx, pwd_array, struct passwd, num_pwd+1);
|
|
torture_assert(tctx, pwd_array, "out of memory");
|
|
copy_passwd(tctx, pwd, &pwd_array[num_pwd]);
|
|
num_pwd++;
|
|
}
|
|
}
|
|
|
|
torture_comment(tctx, "Testing endpwent\n");
|
|
endpwent();
|
|
|
|
if (pwd_array_p) {
|
|
*pwd_array_p = pwd_array;
|
|
}
|
|
if (num_pwd_p) {
|
|
*num_pwd_p = num_pwd;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_enum_r_passwd(struct torture_context *tctx,
|
|
struct passwd **pwd_array_p,
|
|
size_t *num_pwd_p)
|
|
{
|
|
struct passwd pwd, *pwdp;
|
|
struct passwd *pwd_array = NULL;
|
|
size_t num_pwd = 0;
|
|
char buffer[4096];
|
|
int ret;
|
|
|
|
torture_comment(tctx, "Testing setpwent\n");
|
|
setpwent();
|
|
|
|
while (1) {
|
|
torture_comment(tctx, "Testing getpwent_r\n");
|
|
|
|
ret = getpwent_r(&pwd, buffer, sizeof(buffer), &pwdp);
|
|
if (ret != 0) {
|
|
if (ret != ENOENT) {
|
|
torture_comment(tctx, "got %d return code\n", ret);
|
|
}
|
|
break;
|
|
}
|
|
print_passwd(&pwd);
|
|
if (pwd_array_p && num_pwd_p) {
|
|
pwd_array = talloc_realloc(tctx, pwd_array, struct passwd, num_pwd+1);
|
|
torture_assert(tctx, pwd_array, "out of memory");
|
|
copy_passwd(tctx, &pwd, &pwd_array[num_pwd]);
|
|
num_pwd++;
|
|
}
|
|
}
|
|
|
|
torture_comment(tctx, "Testing endpwent\n");
|
|
endpwent();
|
|
|
|
if (pwd_array_p) {
|
|
*pwd_array_p = pwd_array;
|
|
}
|
|
if (num_pwd_p) {
|
|
*num_pwd_p = num_pwd;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool torture_assert_passwd_equal(struct torture_context *tctx,
|
|
const struct passwd *p1,
|
|
const struct passwd *p2,
|
|
const char *comment)
|
|
{
|
|
torture_assert_str_equal(tctx, p1->pw_name, p2->pw_name, comment);
|
|
torture_assert_str_equal(tctx, p1->pw_passwd, p2->pw_passwd, comment);
|
|
torture_assert_int_equal(tctx, p1->pw_uid, p2->pw_uid, comment);
|
|
torture_assert_int_equal(tctx, p1->pw_gid, p2->pw_gid, comment);
|
|
torture_assert_str_equal(tctx, p1->pw_gecos, p2->pw_gecos, comment);
|
|
torture_assert_str_equal(tctx, p1->pw_dir, p2->pw_dir, comment);
|
|
torture_assert_str_equal(tctx, p1->pw_shell, p2->pw_shell, comment);
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_passwd(struct torture_context *tctx)
|
|
{
|
|
int i;
|
|
struct passwd *pwd, pwd1, pwd2;
|
|
size_t num_pwd;
|
|
|
|
torture_assert(tctx, test_nwrap_enum_passwd(tctx, &pwd, &num_pwd),
|
|
"failed to enumerate passwd");
|
|
|
|
for (i=0; i < num_pwd; i++) {
|
|
torture_assert(tctx, test_nwrap_getpwnam(tctx, pwd[i].pw_name, &pwd1),
|
|
"failed to call getpwnam for enumerated user");
|
|
torture_assert_passwd_equal(tctx, &pwd[i], &pwd1,
|
|
"getpwent and getpwnam gave different results");
|
|
torture_assert(tctx, test_nwrap_getpwuid(tctx, pwd[i].pw_uid, &pwd2),
|
|
"failed to call getpwuid for enumerated user");
|
|
torture_assert_passwd_equal(tctx, &pwd[i], &pwd2,
|
|
"getpwent and getpwuid gave different results");
|
|
torture_assert_passwd_equal(tctx, &pwd1, &pwd2,
|
|
"getpwnam and getpwuid gave different results");
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_passwd_r(struct torture_context *tctx)
|
|
{
|
|
int i;
|
|
struct passwd *pwd, pwd1, pwd2;
|
|
size_t num_pwd;
|
|
|
|
torture_assert(tctx, test_nwrap_enum_r_passwd(tctx, &pwd, &num_pwd),
|
|
"failed to enumerate passwd");
|
|
|
|
for (i=0; i < num_pwd; i++) {
|
|
torture_assert(tctx, test_nwrap_getpwnam_r(tctx, pwd[i].pw_name, &pwd1),
|
|
"failed to call getpwnam_r for enumerated user");
|
|
torture_assert_passwd_equal(tctx, &pwd[i], &pwd1,
|
|
"getpwent_r and getpwnam_r gave different results");
|
|
torture_assert(tctx, test_nwrap_getpwuid_r(tctx, pwd[i].pw_uid, &pwd2),
|
|
"failed to call getpwuid_r for enumerated user");
|
|
torture_assert_passwd_equal(tctx, &pwd[i], &pwd2,
|
|
"getpwent_r and getpwuid_r gave different results");
|
|
torture_assert_passwd_equal(tctx, &pwd1, &pwd2,
|
|
"getpwnam_r and getpwuid_r gave different results");
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_passwd_r_cross(struct torture_context *tctx)
|
|
{
|
|
int i;
|
|
struct passwd *pwd, pwd1, pwd2, pwd3, pwd4;
|
|
size_t num_pwd;
|
|
|
|
torture_assert(tctx, test_nwrap_enum_r_passwd(tctx, &pwd, &num_pwd),
|
|
"failed to enumerate passwd");
|
|
|
|
for (i=0; i < num_pwd; i++) {
|
|
torture_assert(tctx, test_nwrap_getpwnam_r(tctx, pwd[i].pw_name, &pwd1),
|
|
"failed to call getpwnam_r for enumerated user");
|
|
torture_assert_passwd_equal(tctx, &pwd[i], &pwd1,
|
|
"getpwent_r and getpwnam_r gave different results");
|
|
torture_assert(tctx, test_nwrap_getpwuid_r(tctx, pwd[i].pw_uid, &pwd2),
|
|
"failed to call getpwuid_r for enumerated user");
|
|
torture_assert_passwd_equal(tctx, &pwd[i], &pwd2,
|
|
"getpwent_r and getpwuid_r gave different results");
|
|
torture_assert_passwd_equal(tctx, &pwd1, &pwd2,
|
|
"getpwnam_r and getpwuid_r gave different results");
|
|
torture_assert(tctx, test_nwrap_getpwnam(tctx, pwd[i].pw_name, &pwd3),
|
|
"failed to call getpwnam for enumerated user");
|
|
torture_assert_passwd_equal(tctx, &pwd[i], &pwd3,
|
|
"getpwent_r and getpwnam gave different results");
|
|
torture_assert(tctx, test_nwrap_getpwuid(tctx, pwd[i].pw_uid, &pwd4),
|
|
"failed to call getpwuid for enumerated user");
|
|
torture_assert_passwd_equal(tctx, &pwd[i], &pwd4,
|
|
"getpwent_r and getpwuid gave different results");
|
|
torture_assert_passwd_equal(tctx, &pwd3, &pwd4,
|
|
"getpwnam and getpwuid gave different results");
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_enum_group(struct torture_context *tctx,
|
|
struct group **grp_array_p,
|
|
size_t *num_grp_p)
|
|
{
|
|
struct group *grp;
|
|
struct group *grp_array = NULL;
|
|
size_t num_grp = 0;
|
|
|
|
torture_comment(tctx, "Testing setgrent\n");
|
|
setgrent();
|
|
|
|
while ((grp = getgrent()) != NULL) {
|
|
torture_comment(tctx, "Testing getgrent\n");
|
|
|
|
print_group(grp);
|
|
if (grp_array_p && num_grp_p) {
|
|
grp_array = talloc_realloc(tctx, grp_array, struct group, num_grp+1);
|
|
torture_assert(tctx, grp_array, "out of memory");
|
|
copy_group(tctx, grp, &grp_array[num_grp]);
|
|
num_grp++;
|
|
}
|
|
}
|
|
|
|
torture_comment(tctx, "Testing endgrent\n");
|
|
endgrent();
|
|
|
|
if (grp_array_p) {
|
|
*grp_array_p = grp_array;
|
|
}
|
|
if (num_grp_p) {
|
|
*num_grp_p = num_grp;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_enum_r_group(struct torture_context *tctx,
|
|
struct group **grp_array_p,
|
|
size_t *num_grp_p)
|
|
{
|
|
struct group grp, *grpp;
|
|
struct group *grp_array = NULL;
|
|
size_t num_grp = 0;
|
|
char buffer[4096];
|
|
int ret;
|
|
|
|
torture_comment(tctx, "Testing setgrent\n");
|
|
setgrent();
|
|
|
|
while (1) {
|
|
torture_comment(tctx, "Testing getgrent_r\n");
|
|
|
|
ret = getgrent_r(&grp, buffer, sizeof(buffer), &grpp);
|
|
if (ret != 0) {
|
|
if (ret != ENOENT) {
|
|
torture_comment(tctx, "got %d return code\n", ret);
|
|
}
|
|
break;
|
|
}
|
|
print_group(&grp);
|
|
if (grp_array_p && num_grp_p) {
|
|
grp_array = talloc_realloc(tctx, grp_array, struct group, num_grp+1);
|
|
torture_assert(tctx, grp_array, "out of memory");
|
|
copy_group(tctx, &grp, &grp_array[num_grp]);
|
|
num_grp++;
|
|
}
|
|
}
|
|
|
|
torture_comment(tctx, "Testing endgrent\n");
|
|
endgrent();
|
|
|
|
if (grp_array_p) {
|
|
*grp_array_p = grp_array;
|
|
}
|
|
if (num_grp_p) {
|
|
*num_grp_p = num_grp;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool torture_assert_group_equal(struct torture_context *tctx,
|
|
const struct group *g1,
|
|
const struct group *g2,
|
|
const char *comment)
|
|
{
|
|
int i;
|
|
torture_assert_str_equal(tctx, g1->gr_name, g2->gr_name, comment);
|
|
torture_assert_str_equal(tctx, g1->gr_passwd, g2->gr_passwd, comment);
|
|
torture_assert_int_equal(tctx, g1->gr_gid, g2->gr_gid, comment);
|
|
if (g1->gr_mem && !g2->gr_mem) {
|
|
return false;
|
|
}
|
|
if (!g1->gr_mem && g2->gr_mem) {
|
|
return false;
|
|
}
|
|
if (!g1->gr_mem && !g2->gr_mem) {
|
|
return true;
|
|
}
|
|
for (i=0; g1->gr_mem[i] && g2->gr_mem[i]; i++) {
|
|
torture_assert_str_equal(tctx, g1->gr_mem[i], g2->gr_mem[i], comment);
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_group(struct torture_context *tctx)
|
|
{
|
|
int i;
|
|
struct group *grp, grp1, grp2;
|
|
size_t num_grp;
|
|
|
|
torture_assert(tctx, test_nwrap_enum_group(tctx, &grp, &num_grp),
|
|
"failed to enumerate group");
|
|
|
|
for (i=0; i < num_grp; i++) {
|
|
torture_assert(tctx, test_nwrap_getgrnam(tctx, grp[i].gr_name, &grp1),
|
|
"failed to call getgrnam for enumerated user");
|
|
torture_assert_group_equal(tctx, &grp[i], &grp1,
|
|
"getgrent and getgrnam gave different results");
|
|
torture_assert(tctx, test_nwrap_getgrgid(tctx, grp[i].gr_gid, &grp2),
|
|
"failed to call getgrgid for enumerated user");
|
|
torture_assert_group_equal(tctx, &grp[i], &grp2,
|
|
"getgrent and getgrgid gave different results");
|
|
torture_assert_group_equal(tctx, &grp1, &grp2,
|
|
"getgrnam and getgrgid gave different results");
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_group_r(struct torture_context *tctx)
|
|
{
|
|
int i;
|
|
struct group *grp, grp1, grp2;
|
|
size_t num_grp;
|
|
|
|
torture_assert(tctx, test_nwrap_enum_r_group(tctx, &grp, &num_grp),
|
|
"failed to enumerate group");
|
|
|
|
for (i=0; i < num_grp; i++) {
|
|
torture_assert(tctx, test_nwrap_getgrnam_r(tctx, grp[i].gr_name, &grp1),
|
|
"failed to call getgrnam_r for enumerated user");
|
|
torture_assert_group_equal(tctx, &grp[i], &grp1,
|
|
"getgrent_r and getgrnam_r gave different results");
|
|
torture_assert(tctx, test_nwrap_getgrgid_r(tctx, grp[i].gr_gid, &grp2),
|
|
"failed to call getgrgid_r for enumerated user");
|
|
torture_assert_group_equal(tctx, &grp[i], &grp2,
|
|
"getgrent_r and getgrgid_r gave different results");
|
|
torture_assert_group_equal(tctx, &grp1, &grp2,
|
|
"getgrnam_r and getgrgid_r gave different results");
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_group_r_cross(struct torture_context *tctx)
|
|
{
|
|
int i;
|
|
struct group *grp, grp1, grp2, grp3, grp4;
|
|
size_t num_grp;
|
|
|
|
torture_assert(tctx, test_nwrap_enum_r_group(tctx, &grp, &num_grp),
|
|
"failed to enumerate group");
|
|
|
|
for (i=0; i < num_grp; i++) {
|
|
torture_assert(tctx, test_nwrap_getgrnam_r(tctx, grp[i].gr_name, &grp1),
|
|
"failed to call getgrnam_r for enumerated user");
|
|
torture_assert_group_equal(tctx, &grp[i], &grp1,
|
|
"getgrent_r and getgrnam_r gave different results");
|
|
torture_assert(tctx, test_nwrap_getgrgid_r(tctx, grp[i].gr_gid, &grp2),
|
|
"failed to call getgrgid_r for enumerated user");
|
|
torture_assert_group_equal(tctx, &grp[i], &grp2,
|
|
"getgrent_r and getgrgid_r gave different results");
|
|
torture_assert_group_equal(tctx, &grp1, &grp2,
|
|
"getgrnam_r and getgrgid_r gave different results");
|
|
torture_assert(tctx, test_nwrap_getgrnam(tctx, grp[i].gr_name, &grp3),
|
|
"failed to call getgrnam for enumerated user");
|
|
torture_assert_group_equal(tctx, &grp[i], &grp3,
|
|
"getgrent_r and getgrnam gave different results");
|
|
torture_assert(tctx, test_nwrap_getgrgid(tctx, grp[i].gr_gid, &grp4),
|
|
"failed to call getgrgid for enumerated user");
|
|
torture_assert_group_equal(tctx, &grp[i], &grp4,
|
|
"getgrent_r and getgrgid gave different results");
|
|
torture_assert_group_equal(tctx, &grp3, &grp4,
|
|
"getgrnam and getgrgid gave different results");
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_getgrouplist(struct torture_context *tctx,
|
|
const char *user,
|
|
gid_t gid,
|
|
gid_t **gids_p,
|
|
int *num_gids_p)
|
|
{
|
|
int ret;
|
|
int num_groups = 0;
|
|
gid_t *groups = NULL;
|
|
|
|
torture_comment(tctx, "Testing getgrouplist: %s\n", user);
|
|
|
|
ret = getgrouplist(user, gid, NULL, &num_groups);
|
|
if (ret == -1 || num_groups != 0) {
|
|
|
|
groups = talloc_array(tctx, gid_t, num_groups);
|
|
torture_assert(tctx, groups, "out of memory\n");
|
|
|
|
ret = getgrouplist(user, gid, groups, &num_groups);
|
|
}
|
|
|
|
torture_assert(tctx, (ret != -1), "failed to call getgrouplist");
|
|
|
|
torture_comment(tctx, "%s is member in %d groups\n", user, num_groups);
|
|
|
|
if (gids_p) {
|
|
*gids_p = groups;
|
|
}
|
|
if (num_gids_p) {
|
|
*num_gids_p = num_groups;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_user_in_group(struct torture_context *tctx,
|
|
const struct passwd *pwd,
|
|
const struct group *grp)
|
|
{
|
|
int i;
|
|
|
|
for (i=0; grp->gr_mem && grp->gr_mem[i] != NULL; i++) {
|
|
if (strequal(grp->gr_mem[i], pwd->pw_name)) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
static bool test_nwrap_membership_user(struct torture_context *tctx,
|
|
const struct passwd *pwd,
|
|
struct group *grp_array,
|
|
size_t num_grp)
|
|
{
|
|
int num_user_groups = 0;
|
|
int num_user_groups_from_enum = 0;
|
|
gid_t *user_groups = NULL;
|
|
int g, i;
|
|
bool primary_group_had_user_member = false;
|
|
|
|
torture_assert(tctx, test_nwrap_getgrouplist(tctx,
|
|
pwd->pw_name,
|
|
pwd->pw_gid,
|
|
&user_groups,
|
|
&num_user_groups),
|
|
"failed to test getgrouplist");
|
|
|
|
for (g=0; g < num_user_groups; g++) {
|
|
torture_assert(tctx, test_nwrap_getgrgid(tctx, user_groups[g], NULL),
|
|
"failed to find the group the user is a member of");
|
|
}
|
|
|
|
|
|
for (i=0; i < num_grp; i++) {
|
|
|
|
struct group grp = grp_array[i];
|
|
|
|
if (test_nwrap_user_in_group(tctx, pwd, &grp)) {
|
|
|
|
struct group current_grp;
|
|
num_user_groups_from_enum++;
|
|
|
|
torture_assert(tctx, test_nwrap_getgrnam(tctx, grp.gr_name, ¤t_grp),
|
|
"failed to find the group the user is a member of");
|
|
|
|
if (current_grp.gr_gid == pwd->pw_gid) {
|
|
torture_comment(tctx, "primary group %s of user %s lists user as member\n",
|
|
current_grp.gr_name,
|
|
pwd->pw_name);
|
|
primary_group_had_user_member = true;
|
|
}
|
|
|
|
continue;
|
|
}
|
|
}
|
|
|
|
if (!primary_group_had_user_member) {
|
|
num_user_groups_from_enum++;
|
|
}
|
|
|
|
torture_assert_int_equal(tctx, num_user_groups, num_user_groups_from_enum,
|
|
"getgrouplist and real inspection of grouplist gave different results\n");
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_membership(struct torture_context *tctx)
|
|
{
|
|
const char *old_pwd = getenv("NSS_WRAPPER_PASSWD");
|
|
const char *old_group = getenv("NSS_WRAPPER_GROUP");
|
|
struct passwd *pwd;
|
|
size_t num_pwd;
|
|
struct group *grp;
|
|
size_t num_grp;
|
|
int i;
|
|
|
|
if (!old_pwd || !old_group) {
|
|
torture_comment(tctx, "ENV NSS_WRAPPER_PASSWD or NSS_WRAPPER_GROUP not set\n");
|
|
torture_skip(tctx, "nothing to test\n");
|
|
}
|
|
|
|
torture_assert(tctx, test_nwrap_enum_passwd(tctx, &pwd, &num_pwd),
|
|
"failed to enumerate passwd");
|
|
torture_assert(tctx, test_nwrap_enum_group(tctx, &grp, &num_grp),
|
|
"failed to enumerate group");
|
|
|
|
for (i=0; i < num_pwd; i++) {
|
|
|
|
torture_assert(tctx, test_nwrap_membership_user(tctx, &pwd[i], grp, num_grp),
|
|
"failed to test membership for user");
|
|
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_enumeration(struct torture_context *tctx)
|
|
{
|
|
const char *old_pwd = getenv("NSS_WRAPPER_PASSWD");
|
|
const char *old_group = getenv("NSS_WRAPPER_GROUP");
|
|
|
|
if (!old_pwd || !old_group) {
|
|
torture_comment(tctx, "ENV NSS_WRAPPER_PASSWD or NSS_WRAPPER_GROUP not set\n");
|
|
torture_skip(tctx, "nothing to test\n");
|
|
}
|
|
|
|
torture_assert(tctx, test_nwrap_passwd(tctx),
|
|
"failed to test users");
|
|
torture_assert(tctx, test_nwrap_group(tctx),
|
|
"failed to test groups");
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_reentrant_enumeration(struct torture_context *tctx)
|
|
{
|
|
const char *old_pwd = getenv("NSS_WRAPPER_PASSWD");
|
|
const char *old_group = getenv("NSS_WRAPPER_GROUP");
|
|
|
|
if (!old_pwd || !old_group) {
|
|
torture_comment(tctx, "ENV NSS_WRAPPER_PASSWD or NSS_WRAPPER_GROUP not set\n");
|
|
torture_skip(tctx, "nothing to test\n");
|
|
}
|
|
|
|
torture_comment(tctx, "Testing re-entrant calls\n");
|
|
|
|
torture_assert(tctx, test_nwrap_passwd_r(tctx),
|
|
"failed to test users");
|
|
torture_assert(tctx, test_nwrap_group_r(tctx),
|
|
"failed to test groups");
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_reentrant_enumeration_crosschecks(struct torture_context *tctx)
|
|
{
|
|
const char *old_pwd = getenv("NSS_WRAPPER_PASSWD");
|
|
const char *old_group = getenv("NSS_WRAPPER_GROUP");
|
|
|
|
if (!old_pwd || !old_group) {
|
|
torture_comment(tctx, "ENV NSS_WRAPPER_PASSWD or NSS_WRAPPER_GROUP not set\n");
|
|
torture_skip(tctx, "nothing to test\n");
|
|
}
|
|
|
|
torture_comment(tctx, "Testing re-entrant calls with cross checks\n");
|
|
|
|
torture_assert(tctx, test_nwrap_passwd_r_cross(tctx),
|
|
"failed to test users");
|
|
torture_assert(tctx, test_nwrap_group_r_cross(tctx),
|
|
"failed to test groups");
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_passwd_duplicates(struct torture_context *tctx)
|
|
{
|
|
int i, d;
|
|
struct passwd *pwd;
|
|
size_t num_pwd;
|
|
int duplicates = 0;
|
|
|
|
torture_assert(tctx, test_nwrap_enum_passwd(tctx, &pwd, &num_pwd),
|
|
"failed to enumerate passwd");
|
|
|
|
for (i=0; i < num_pwd; i++) {
|
|
const char *current_name = pwd[i].pw_name;
|
|
for (d=0; d < num_pwd; d++) {
|
|
const char *dup_name = pwd[d].pw_name;
|
|
if (d == i) {
|
|
continue;
|
|
}
|
|
if (!strequal(current_name, dup_name)) {
|
|
continue;
|
|
}
|
|
|
|
torture_warning(tctx, "found duplicate names:");
|
|
print_passwd(&pwd[d]);
|
|
print_passwd(&pwd[i]);
|
|
duplicates++;
|
|
}
|
|
}
|
|
|
|
if (duplicates) {
|
|
torture_fail(tctx, talloc_asprintf(tctx, "found %d duplicate names", duplicates));
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool test_nwrap_group_duplicates(struct torture_context *tctx)
|
|
{
|
|
int i, d;
|
|
struct group *grp;
|
|
size_t num_grp;
|
|
int duplicates = 0;
|
|
|
|
torture_assert(tctx, test_nwrap_enum_group(tctx, &grp, &num_grp),
|
|
"failed to enumerate group");
|
|
|
|
for (i=0; i < num_grp; i++) {
|
|
const char *current_name = grp[i].gr_name;
|
|
for (d=0; d < num_grp; d++) {
|
|
const char *dup_name = grp[d].gr_name;
|
|
if (d == i) {
|
|
continue;
|
|
}
|
|
if (!strequal(current_name, dup_name)) {
|
|
continue;
|
|
}
|
|
|
|
torture_warning(tctx, "found duplicate names:");
|
|
print_group(&grp[d]);
|
|
print_group(&grp[i]);
|
|
duplicates++;
|
|
}
|
|
}
|
|
|
|
if (duplicates) {
|
|
torture_fail(tctx, talloc_asprintf(tctx, "found %d duplicate names", duplicates));
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
static bool test_nwrap_duplicates(struct torture_context *tctx)
|
|
{
|
|
const char *old_pwd = getenv("NSS_WRAPPER_PASSWD");
|
|
const char *old_group = getenv("NSS_WRAPPER_GROUP");
|
|
|
|
if (!old_pwd || !old_group) {
|
|
torture_comment(tctx, "ENV NSS_WRAPPER_PASSWD or NSS_WRAPPER_GROUP not set\n");
|
|
torture_skip(tctx, "nothing to test\n");
|
|
}
|
|
|
|
torture_assert(tctx, test_nwrap_passwd_duplicates(tctx),
|
|
"failed to test users");
|
|
torture_assert(tctx, test_nwrap_group_duplicates(tctx),
|
|
"failed to test groups");
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
struct torture_suite *torture_local_nss_wrapper(TALLOC_CTX *mem_ctx)
|
|
{
|
|
struct torture_suite *suite = torture_suite_create(mem_ctx, "nss-wrapper");
|
|
|
|
torture_suite_add_simple_test(suite, "enumeration", test_nwrap_enumeration);
|
|
torture_suite_add_simple_test(suite, "reentrant enumeration", test_nwrap_reentrant_enumeration);
|
|
torture_suite_add_simple_test(suite, "reentrant enumeration crosschecks", test_nwrap_reentrant_enumeration_crosschecks);
|
|
torture_suite_add_simple_test(suite, "membership", test_nwrap_membership);
|
|
torture_suite_add_simple_test(suite, "duplicates", test_nwrap_duplicates);
|
|
|
|
return suite;
|
|
}
|