summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--Makefile.am14
-rw-r--r--src/tests/cmocka/test_sss_idmap.c421
2 files changed, 434 insertions, 1 deletions
diff --git a/Makefile.am b/Makefile.am
index 88e29fff..62f21af6 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -147,7 +147,8 @@ if HAVE_CMOCKA
test-io \
sss_nss_idmap-tests \
dyndns-tests \
- fqnames-tests
+ fqnames-tests \
+ test_sss_idmap
endif
check_PROGRAMS = \
@@ -1298,6 +1299,17 @@ fqnames_tests_LDADD = \
$(SSSD_INTERNAL_LTLIBS) \
libsss_test_common.la
+test_sss_idmap_SOURCES = \
+ $(TEST_MOCK_OBJ) \
+ src/tests/cmocka/test_sss_idmap.c
+test_sss_idmap_CFLAGS = \
+ $(AM_CFLAGS)
+test_sss_idmap_LDADD = \
+ $(CMOCKA_LIBS) \
+ libsss_idmap.la \
+ $(SSSD_INTERNAL_LTLIBS) \
+ libsss_test_common.la
+
endif
noinst_PROGRAMS = pam_test_client
diff --git a/src/tests/cmocka/test_sss_idmap.c b/src/tests/cmocka/test_sss_idmap.c
new file mode 100644
index 00000000..2f6a67d7
--- /dev/null
+++ b/src/tests/cmocka/test_sss_idmap.c
@@ -0,0 +1,421 @@
+/*
+ Authors:
+ Sumit Bose <sbose@redhat.com>
+
+ Copyright (C) 2013 Red Hat
+
+ SSSD tests: Unit tests for libsss_idmap
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+#include <popt.h>
+
+#include "tests/cmocka/common_mock.h"
+
+#include "lib/idmap/sss_idmap.h"
+
+#define TEST_RANGE_MIN 200000
+#define TEST_RANGE_MAX 399999
+#define TEST_DOM_NAME "test.dom"
+#define TEST_DOM_SID "S-1-5-21-123-456-789"
+
+#define TEST_2_RANGE_MIN 600000
+#define TEST_2_RANGE_MAX 799999
+#define TEST_2_DOM_NAME "test2.dom"
+#define TEST_2_DOM_SID "S-1-5-21-987-654-321"
+
+#define TEST_OFFSET 1000000
+#define TEST_OFFSET_STR "1000000"
+
+struct test_ctx {
+ TALLOC_CTX *mem_idmap;
+ struct sss_idmap_ctx *idmap_ctx;
+};
+
+static void *idmap_talloc(size_t size, void *pvt)
+{
+ return talloc_size(pvt, size);
+}
+
+static void idmap_free(void *ptr, void *pvt)
+{
+ talloc_free(ptr);
+}
+
+void test_sss_idmap_setup(void **state)
+{
+ struct test_ctx *test_ctx;
+ enum idmap_error_code err;
+
+ assert_true(leak_check_setup());
+
+ test_ctx = talloc_zero(global_talloc_context, struct test_ctx);
+ assert_non_null(test_ctx);
+
+ check_leaks_push(test_ctx);
+
+ test_ctx->mem_idmap = talloc_new(test_ctx);
+ assert_non_null(test_ctx->mem_idmap);
+
+ err = sss_idmap_init(idmap_talloc, test_ctx->mem_idmap, idmap_free,
+ &test_ctx->idmap_ctx);
+ assert_int_equal(err, IDMAP_SUCCESS);
+
+ *state = test_ctx;
+}
+
+void setup_ranges(struct test_ctx *test_ctx, bool external_mapping,
+ bool second_domain)
+{
+ struct sss_idmap_range range;
+ enum idmap_error_code err;
+ const char *name;
+ const char *sid;
+
+ assert_non_null(test_ctx);
+
+ if (second_domain) {
+ range.min = TEST_2_RANGE_MIN;
+ range.max = TEST_2_RANGE_MAX;
+ name = TEST_2_DOM_NAME;
+ sid = TEST_2_DOM_SID;
+ } else {
+ range.min = TEST_RANGE_MIN;
+ range.max = TEST_RANGE_MAX;
+ name = TEST_DOM_NAME;
+ sid = TEST_DOM_SID;
+ }
+
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, name, sid, &range, NULL,
+ 0, external_mapping);
+ assert_int_equal(err, IDMAP_SUCCESS);
+
+ range.min += TEST_OFFSET;
+ range.max += TEST_OFFSET;
+
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, name, sid, &range, NULL,
+ TEST_OFFSET, external_mapping);
+ assert_int_equal(err, IDMAP_SUCCESS);
+}
+
+void test_sss_idmap_setup_with_domains(void **state) {
+ struct test_ctx *test_ctx;
+
+ test_sss_idmap_setup(state);
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+ assert_non_null(test_ctx);
+
+ setup_ranges(test_ctx, false, false);
+}
+
+void test_sss_idmap_setup_with_external_mappings(void **state) {
+ struct test_ctx *test_ctx;
+
+ test_sss_idmap_setup(state);
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+ assert_non_null(test_ctx);
+
+ setup_ranges(test_ctx, true, false);
+}
+
+void test_sss_idmap_setup_with_both(void **state) {
+ struct test_ctx *test_ctx;
+
+ test_sss_idmap_setup(state);
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+ assert_non_null(test_ctx);
+
+ setup_ranges(test_ctx, false, false);
+ setup_ranges(test_ctx, true, true);
+}
+
+void test_sss_idmap_teardown(void **state)
+{
+ struct test_ctx *test_ctx;
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+
+ assert_non_null(test_ctx);
+
+ talloc_free(test_ctx->idmap_ctx);
+ talloc_free(test_ctx->mem_idmap);
+ assert_true(check_leaks_pop(test_ctx) == true);
+ talloc_free(test_ctx);
+ assert_true(leak_check_teardown());
+}
+
+void test_add_domain(void **state)
+{
+ struct test_ctx *test_ctx;
+ enum idmap_error_code err;
+ struct sss_idmap_range range;
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+
+ assert_non_null(test_ctx);
+
+ range.min = TEST_RANGE_MIN;
+ range.max = TEST_RANGE_MAX;
+
+ err = sss_idmap_add_domain(test_ctx->idmap_ctx, TEST_DOM_NAME, TEST_DOM_SID,
+ &range);
+ assert_int_equal(err, IDMAP_SUCCESS);
+
+ err = sss_idmap_add_domain(test_ctx->idmap_ctx, TEST_DOM_NAME, TEST_DOM_SID,
+ &range);
+ assert_int_equal(err, IDMAP_COLLISION);
+
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, TEST_DOM_NAME,
+ TEST_DOM_SID, &range, NULL, 0, false);
+ assert_int_equal(err, IDMAP_COLLISION);
+
+ range.min = TEST_RANGE_MIN + TEST_OFFSET;
+ range.max = TEST_RANGE_MAX + TEST_OFFSET;
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, TEST_DOM_NAME,
+ TEST_DOM_SID, &range, NULL, 0, false);
+ assert_int_equal(err, IDMAP_COLLISION);
+
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, TEST_DOM_NAME"X",
+ TEST_DOM_SID, &range, NULL, TEST_OFFSET,
+ false);
+ assert_int_equal(err, IDMAP_COLLISION);
+
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, TEST_DOM_NAME,
+ TEST_DOM_SID"1", &range, NULL, TEST_OFFSET,
+ false);
+ assert_int_equal(err, IDMAP_COLLISION);
+
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, TEST_DOM_NAME,
+ TEST_DOM_SID, &range, NULL, TEST_OFFSET,
+ true);
+ assert_int_equal(err, IDMAP_COLLISION);
+
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, TEST_DOM_NAME,
+ TEST_DOM_SID, &range, NULL, TEST_OFFSET,
+ false);
+ assert_int_equal(err, IDMAP_SUCCESS);
+
+ range.min = TEST_RANGE_MIN + 2 * TEST_OFFSET;
+ range.max = TEST_RANGE_MAX + 2 * TEST_OFFSET;
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, TEST_DOM_NAME"-nosid",
+ NULL, &range, NULL, TEST_OFFSET,
+ false);
+ assert_int_equal(err, IDMAP_SID_INVALID);
+
+ err = sss_idmap_add_domain_ex(test_ctx->idmap_ctx, TEST_DOM_NAME"-nosid",
+ NULL, &range, NULL, TEST_OFFSET,
+ true);
+ assert_int_equal(err, IDMAP_SUCCESS);
+}
+
+void test_map_id(void **state)
+{
+ struct test_ctx *test_ctx;
+ enum idmap_error_code err;
+ uint32_t id;
+ char *sid = NULL;
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+
+ assert_non_null(test_ctx);
+
+ err = sss_idmap_sid_to_unix(test_ctx->idmap_ctx, TEST_DOM_SID"1-1", &id);
+ assert_int_equal(err, IDMAP_NO_DOMAIN);
+
+ err = sss_idmap_sid_to_unix(test_ctx->idmap_ctx, TEST_DOM_SID"-400000",
+ &id);
+ assert_int_equal(err, IDMAP_NO_RANGE);
+
+ err = sss_idmap_unix_to_sid(test_ctx->idmap_ctx, TEST_OFFSET - 1, &sid);
+ assert_int_equal(err, IDMAP_NO_DOMAIN);
+
+ err = sss_idmap_sid_to_unix(test_ctx->idmap_ctx, TEST_DOM_SID"-0", &id);
+ assert_int_equal(err, IDMAP_SUCCESS);
+ assert_int_equal(id, TEST_RANGE_MIN);
+
+ err = sss_idmap_unix_to_sid(test_ctx->idmap_ctx, id, &sid);
+ assert_int_equal(err, IDMAP_SUCCESS);
+ assert_string_equal(sid, TEST_DOM_SID"-0");
+
+ err = sss_idmap_sid_to_unix(test_ctx->idmap_ctx,
+ TEST_DOM_SID"-"TEST_OFFSET_STR, &id);
+ assert_int_equal(err, IDMAP_SUCCESS);
+ assert_int_equal(id, TEST_RANGE_MIN+TEST_OFFSET);
+
+ err = sss_idmap_unix_to_sid(test_ctx->idmap_ctx, id, &sid);
+ assert_int_equal(err, IDMAP_SUCCESS);
+ assert_string_equal(sid, TEST_DOM_SID"-"TEST_OFFSET_STR);
+}
+
+void test_map_id_external(void **state)
+{
+ struct test_ctx *test_ctx;
+ enum idmap_error_code err;
+ uint32_t id;
+ char *sid = NULL;
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+
+ assert_non_null(test_ctx);
+
+ err = sss_idmap_sid_to_unix(test_ctx->idmap_ctx, TEST_DOM_SID"1-1", &id);
+ assert_int_equal(err, IDMAP_NO_DOMAIN);
+
+ err = sss_idmap_sid_to_unix(test_ctx->idmap_ctx, TEST_DOM_SID"-400000",
+ &id);
+ assert_int_equal(err, IDMAP_EXTERNAL);
+
+ err = sss_idmap_unix_to_sid(test_ctx->idmap_ctx, TEST_OFFSET - 1, &sid);
+ assert_int_equal(err, IDMAP_NO_DOMAIN);
+
+ err = sss_idmap_sid_to_unix(test_ctx->idmap_ctx, TEST_DOM_SID"-0", &id);
+ assert_int_equal(err, IDMAP_EXTERNAL);
+
+ err = sss_idmap_unix_to_sid(test_ctx->idmap_ctx, TEST_RANGE_MIN, &sid);
+ assert_int_equal(err, IDMAP_EXTERNAL);
+
+ err = sss_idmap_sid_to_unix(test_ctx->idmap_ctx,
+ TEST_DOM_SID"-"TEST_OFFSET_STR, &id);
+ assert_int_equal(err, IDMAP_EXTERNAL);
+
+ err = sss_idmap_unix_to_sid(test_ctx->idmap_ctx,
+ TEST_RANGE_MIN + TEST_OFFSET, &sid);
+ assert_int_equal(err, IDMAP_EXTERNAL);
+}
+
+void test_check_sid_id(void **state)
+{
+ struct test_ctx *test_ctx;
+ enum idmap_error_code err;
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+
+ assert_non_null(test_ctx);
+
+ err = sss_idmap_check_sid_unix(test_ctx->idmap_ctx, TEST_DOM_SID"-400000",
+ TEST_RANGE_MIN-1);
+ assert_int_equal(err, IDMAP_NO_RANGE);
+
+ err = sss_idmap_check_sid_unix(test_ctx->idmap_ctx, TEST_DOM_SID"-400000",
+ TEST_RANGE_MIN);
+ assert_int_equal(err, IDMAP_SUCCESS);
+
+ err = sss_idmap_check_sid_unix(test_ctx->idmap_ctx, TEST_DOM_SID"1-400000",
+ TEST_RANGE_MIN);
+ assert_int_equal(err, IDMAP_SID_UNKNOWN);
+
+ err = sss_idmap_check_sid_unix(test_ctx->idmap_ctx, TEST_DOM_SID"-400000",
+ TEST_RANGE_MAX + TEST_OFFSET);
+ assert_int_equal(err, IDMAP_SUCCESS);
+
+ err = sss_idmap_check_sid_unix(test_ctx->idmap_ctx, TEST_DOM_SID"-400000",
+ TEST_RANGE_MAX + TEST_OFFSET + 1);
+ assert_int_equal(err, IDMAP_NO_RANGE);
+}
+
+void test_has_algorithmic(void **state)
+{
+ struct test_ctx *test_ctx;
+ bool use_id_mapping;
+ enum idmap_error_code err;
+
+ test_ctx = talloc_get_type(*state, struct test_ctx);
+
+ assert_non_null(test_ctx);
+
+ err = sss_idmap_domain_has_algorithmic_mapping(NULL, NULL, &use_id_mapping);
+ assert_int_equal(err, IDMAP_SID_INVALID);
+
+ err = sss_idmap_domain_has_algorithmic_mapping(NULL, TEST_DOM_SID,
+ &use_id_mapping);
+ assert_int_equal(err, IDMAP_CONTEXT_INVALID);
+
+ err = sss_idmap_domain_has_algorithmic_mapping(test_ctx->idmap_ctx, NULL,
+ &use_id_mapping);
+ assert_int_equal(err, IDMAP_SID_INVALID);
+
+ err = sss_idmap_domain_has_algorithmic_mapping(test_ctx->idmap_ctx,
+ TEST_DOM_SID"1",
+ &use_id_mapping);
+ assert_int_equal(err, IDMAP_SID_UNKNOWN);
+
+ err = sss_idmap_domain_has_algorithmic_mapping(test_ctx->idmap_ctx,
+ TEST_DOM_SID,
+ &use_id_mapping);
+ assert_int_equal(err, IDMAP_SUCCESS);
+ assert_true(use_id_mapping);
+
+ err = sss_idmap_domain_has_algorithmic_mapping(test_ctx->idmap_ctx,
+ TEST_2_DOM_SID,
+ &use_id_mapping);
+ assert_int_equal(err, IDMAP_SUCCESS);
+ assert_false(use_id_mapping);
+}
+
+
+int main(int argc, const char *argv[])
+{
+ poptContext pc;
+ int opt;
+ struct poptOption long_options[] = {
+ POPT_AUTOHELP
+ SSSD_DEBUG_OPTS
+ POPT_TABLEEND
+ };
+
+ const UnitTest tests[] = {
+ unit_test_setup_teardown(test_add_domain,
+ test_sss_idmap_setup, test_sss_idmap_teardown),
+ unit_test_setup_teardown(test_map_id,
+ test_sss_idmap_setup_with_domains,
+ test_sss_idmap_teardown),
+ unit_test_setup_teardown(test_map_id_external,
+ test_sss_idmap_setup_with_external_mappings,
+ test_sss_idmap_teardown),
+ unit_test_setup_teardown(test_check_sid_id,
+ test_sss_idmap_setup_with_domains,
+ test_sss_idmap_teardown),
+ unit_test_setup_teardown(test_check_sid_id,
+ test_sss_idmap_setup_with_external_mappings,
+ test_sss_idmap_teardown),
+ unit_test_setup_teardown(test_has_algorithmic,
+ test_sss_idmap_setup_with_both,
+ test_sss_idmap_teardown),
+ };
+
+ /* Set debug level to invalid value so we can deside if -d 0 was used. */
+ debug_level = SSSDBG_INVALID;
+
+ pc = poptGetContext(argv[0], argc, argv, long_options, 0);
+ while((opt = poptGetNextOpt(pc)) != -1) {
+ switch(opt) {
+ default:
+ fprintf(stderr, "\nInvalid option %s: %s\n\n",
+ poptBadOption(pc, 0), poptStrerror(opt));
+ poptPrintUsage(pc, stderr, 0);
+ return 1;
+ }
+ }
+ poptFreeContext(pc);
+
+ DEBUG_INIT(debug_level);
+
+ tests_set_cwd();
+
+ return run_tests(tests);
+}
generated by cgit (git 2.34.1) at 2024-11-25 04:07:19 +0000