/
githubmirror
/
libuser
Обзор
Документация
Войти
/
githubmirror
/
libuser
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
libuser-0.64
tests/files_test.py
1 500 строк
62 KB
Jakub Hrozek
FILES: Don't allow duplicate IDs by default
10 дек 2018, 12:40
10 дек 2018, 12:40
653c3e6
Код
Авторство
О чём код?
import crypt import libuser import os import os.path import sys import unittest LARGE_ID = 2147483648 workdir = os.environ['workdir'] # Test case order matches the order of function pointers in struct lu_module class Tests(unittest.TestCase): def setUp(self): self.a = libuser.admin() # testUsesElevatedPrivileges # Not provided in Python bindings def testUserLookupName1(self): e = self.a.initUser('user2_1') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user2_1') self.assertIsNotNone(e) self.assertEqual(e[libuser.USERNAME], ['user2_1']) del e e = self.a.lookupUserByName('user2_does_not_exist') self.assertEqual(e, None) def testUserLookupName2(self): # Handling of empty/default values e = self.a.lookupUserByName('empty_user') self.assertIsNotNone(e) self.assertEqual(e[libuser.USERNAME], ['empty_user']) self.assertEqual(e[libuser.USERPASSWORD], ['']) self.assertEqual(e[libuser.UIDNUMBER], [42]) self.assertEqual(e[libuser.GIDNUMBER], [43]) self.assertEqual(e[libuser.GECOS], ['']) self.assertEqual(e[libuser.HOMEDIRECTORY], ['']) self.assertEqual(e[libuser.LOGINSHELL], ['/bin/bash']) self.assertEqual(e[libuser.SHADOWNAME], ['empty_user']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['']) self.assertEqual(e[libuser.SHADOWLASTCHANGE], [-1]) self.assertEqual(e[libuser.SHADOWMIN], [-1]) self.assertEqual(e[libuser.SHADOWMAX], [-1]) self.assertEqual(e[libuser.SHADOWWARNING], [-1]) self.assertEqual(e[libuser.SHADOWINACTIVE], [-1]) self.assertEqual(e[libuser.SHADOWEXPIRE], [-1]) self.assertEqual(e[libuser.SHADOWFLAG], [-1]) def testUserLookupName3(self): # Handling of values that appear to be numbers e = self.a.lookupUserByName('077') self.assertIsNotNone(e) self.assertEqual(e[libuser.USERNAME], ['077']) self.assertEqual(e[libuser.USERPASSWORD], ['077']) self.assertEqual(e[libuser.UIDNUMBER], [230]) self.assertEqual(e[libuser.GIDNUMBER], [231]) self.assertEqual(e[libuser.GECOS], ['077']) self.assertEqual(e[libuser.HOMEDIRECTORY], ['077']) self.assertEqual(e[libuser.LOGINSHELL], ['077']) self.assertEqual(e[libuser.SHADOWNAME], ['077']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['077']) self.assertEqual(e[libuser.SHADOWLASTCHANGE], [77]) self.assertEqual(e[libuser.SHADOWMIN], [77]) self.assertEqual(e[libuser.SHADOWMAX], [77]) self.assertEqual(e[libuser.SHADOWWARNING], [77]) self.assertEqual(e[libuser.SHADOWINACTIVE], [77]) self.assertEqual(e[libuser.SHADOWEXPIRE], [77]) self.assertEqual(e[libuser.SHADOWFLAG], [77]) def testUserLookupId(self): e = self.a.initUser('user3_1') self.a.addUser(e, False, False) uid = e[libuser.UIDNUMBER][0] del e e = self.a.lookupUserById(uid) self.assertIsNotNone(e) self.assertEqual(e[libuser.UIDNUMBER], [uid]) del e e = self.a.lookupUserById(999999) self.assertEqual(e, None) del e e = self.a.lookupUserById(LARGE_ID + 310) self.assertEqual(e, None) def testUserDefault(self): # Test the default/LU_USERNAME = %n preserves usernames that appear to # be numbers e = self.a.initUser('077') self.assertEqual(e[libuser.USERNAME], ['077']) # Setting of USERPASSWORD to "x" tested below def testUserAddPrep(self): # Nothing to do with the "files" module: tests of lu_name_allowed() e = self.a.initUser('very_long_name_123456789_123456789_123456789') self.assertRaises(RuntimeError, self.a.addUser, e, False, False) del e e = self.a.initUser('non_ascii_name_\xff') self.assertRaises(RuntimeError, self.a.addUser, e, False, False) del e e = self.a.initUser('nonprintable_name_\x0a') self.assertRaises(RuntimeError, self.a.addUser, e, False, False) del e e = self.a.initUser('nonprintable_name_\x7f') self.assertRaises(RuntimeError, self.a.addUser, e, False, False) del e e = self.a.initUser('name with spaces') self.assertRaises(RuntimeError, self.a.addUser, e, False, False) del e e = self.a.initUser('-name_with_hyphen') self.assertRaises(RuntimeError, self.a.addUser, e, False, False) del e e = self.a.initUser('0.allowed-Name-TEST_0123456789$') self.a.addUser(e, False, False) def testUserAdd1(self): # A minimal case e = self.a.initUser('user6_1') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user6_1') self.assertIsNotNone(e) self.assertEqual(e[libuser.USERNAME], ['user6_1']) # Default values self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.LOGINSHELL], ['/bin/bash']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!']) self.assertEqual(e[libuser.SHADOWMIN], [0]) self.assertEqual(e[libuser.SHADOWMAX], [99999]) self.assertEqual(e[libuser.SHADOWWARNING], [7]) self.assertEqual(e[libuser.SHADOWINACTIVE], [-1]) self.assertEqual(e[libuser.SHADOWEXPIRE], [-1]) self.assertEqual(e[libuser.SHADOWFLAG], [-1]) def testUserAdd2(self): # A maximal case e = self.a.initUser('user6_2') e[libuser.USERNAME] = 'user6_2username' e[libuser.USERPASSWORD] = '!!baduser6_2' # Should be ignored e[libuser.UIDNUMBER] = 4237 e[libuser.GIDNUMBER] = 3742 e[libuser.GECOS] = 'Full Name,Office,1234,4321' e[libuser.HOMEDIRECTORY] = '/home/user6_2home' e[libuser.LOGINSHELL] = '/sbin/nologinuser6_2' e[libuser.SHADOWPASSWORD] = '!!user6_2' e[libuser.SHADOWLASTCHANGE] = 12681 e[libuser.SHADOWMIN] = 5 e[libuser.SHADOWMAX] = 98765 e[libuser.SHADOWWARNING] = 10 e[libuser.SHADOWINACTIVE] = 8 e[libuser.SHADOWEXPIRE] = 9 e[libuser.SHADOWFLAG] = 255 e[libuser.COMMONNAME] = 'Common Name' e[libuser.GIVENNAME] = 'Given' e[libuser.SN] = 'Surname' e[libuser.ROOMNUMBER] = 404 e[libuser.TELEPHONENUMBER] = 1234 e[libuser.HOMEPHONE] = 4321 e[libuser.EMAIL] = 'user6_2@example.com' self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user6_2username') self.assertIsNotNone(e) self.assertEqual(e[libuser.USERNAME], ['user6_2username']) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.UIDNUMBER], [4237]) self.assertEqual(e[libuser.GIDNUMBER], [3742]) self.assertEqual(e[libuser.GECOS], ['Full Name,Office,1234,4321']) self.assertEqual(e[libuser.HOMEDIRECTORY], ['/home/user6_2home']) self.assertEqual(e[libuser.LOGINSHELL], ['/sbin/nologinuser6_2']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!user6_2'], ) self.assertEqual(e[libuser.SHADOWLASTCHANGE], [12681]) self.assertEqual(e[libuser.SHADOWMIN], [5]) self.assertEqual(e[libuser.SHADOWMAX], [98765]) self.assertEqual(e[libuser.SHADOWWARNING], [10]) self.assertEqual(e[libuser.SHADOWINACTIVE], [8]) self.assertEqual(e[libuser.SHADOWEXPIRE], [9]) self.assertEqual(e[libuser.SHADOWFLAG], [255]) # Not stored by the modules # self.assertEqual(e[libuser.COMMONNAME], ['Common Name']) # self.assertEqual(e[libuser.GIVENNAME], ['Given']) # self.assertEqual(e[libuser.SN], ['Surname']) # self.assertEqual(e[libuser.ROOMNUMBER], [404]) # self.assertEqual(e[libuser.TELEPHONENUMBER], [1234]) # self.assertEqual(e[libuser.HOMEPHONE], [4321]) # self.assertEqual(e[libuser.EMAIL], ['user6_2@example.com']) def testUserAdd3(self): # Large IDs. e = self.a.initUser('user6_3') e[libuser.UIDNUMBER] = LARGE_ID + 630 e[libuser.GIDNUMBER] = LARGE_ID + 631 self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user6_3') self.assertIsNotNone(e) self.assertEqual(e[libuser.USERNAME], ['user6_3']) self.assertEqual(e[libuser.UIDNUMBER], [LARGE_ID + 630]) self.assertEqual(e[libuser.GIDNUMBER], [LARGE_ID + 631]) def testUserAdd4(self): # Error handling when creating the home directory e = self.a.initUser('user6_4') e[libuser.HOMEDIRECTORY] = os.path.join(workdir, 'this_doesnt_exist', 'user6_4') self.assertRaises(RuntimeError, self.a.addUser, e, mkmailspool = False) def testUserAdd5(self): # Non-absolute home directories e = self.a.initUser('user6_5') e[libuser.HOMEDIRECTORY] = 'this_is_a_relative_path' self.assertRaises(RuntimeError, self.a.addUser, e, mkmailspool = False) def testUserAdd6(self): # ':' in field values # libuser.USERPASSWORD not tested because lu_shadow_user_add_prep() # always replaces it by 'x'. libuser.UIDNUMBER not tested because # ent_has_name_and_id() interprets the value as a number. for field in (libuser.USERNAME, libuser.GIDNUMBER, libuser.GECOS, libuser.HOMEDIRECTORY, libuser.SHADOWPASSWORD, libuser.SHADOWLASTCHANGE, libuser.SHADOWMIN, libuser.SHADOWMAX, libuser.SHADOWWARNING, libuser.SHADOWINACTIVE, libuser.SHADOWEXPIRE): e = self.a.initUser('user_6_6' + field) e[field] = str(e[field][0]) + ':x' self.assertRaises(RuntimeError, self.a.addUser, e, False, False) # libuser.SHADOWFLAG not tested because it is parsed as an integer e = self.a.initUser('user_6_6' + libuser.LOGINSHELL) e[libuser.LOGINSHELL] = e[libuser.LOGINSHELL][0] + ':x' self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user_6_6' + libuser.LOGINSHELL) self.assertIn(':', e[libuser.LOGINSHELL][0]) def testUserAdd7(self): # Let the user specify dangerous/dubious home directory paths explicitly for name in ('.', '..'): e = self.a.initUser(name) e[libuser.HOMEDIRECTORY] = '/home/' + name self.a.addUser(e, False, False) del e e = self.a.lookupUserByName(name) self.assertEqual(e[libuser.HOMEDIRECTORY], ['/home/' + name]) self.a.deleteUser(e, False, False) e = self.a.initUser('user6_7') e[libuser.HOMEDIRECTORY] = '/home/..' self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user6_7') self.assertEqual(e[libuser.HOMEDIRECTORY], ['/home/..']) # ... but never create such home directory paths by default for name in ('.', '..'): e = self.a.initUser(name) self.assertRaises(RuntimeError, self.a.addUser, e, False, False) def testUserAdd8(self): # Adding duplicate entries e = self.a.initUser('user6_8') self.a.addUser(e, False, False) del e e = self.a.initUser('user6_8') self.assertRaises(RuntimeError, self.a.addUser, e, False, False) def testUserAdd9(self): # '\n' in field values # libuser.USERPASSWORD not tested because lu_shadow_user_add_prep() # always replaces it by 'x'. libuser.UIDNUMBER not tested because # ent_has_name_and_id() interprets the value as a number. for field in (libuser.USERNAME, libuser.GIDNUMBER, libuser.GECOS, libuser.HOMEDIRECTORY, libuser.LOGINSHELL, libuser.SHADOWPASSWORD, libuser.SHADOWLASTCHANGE, libuser.SHADOWMIN, libuser.SHADOWMAX, libuser.SHADOWWARNING, libuser.SHADOWINACTIVE, libuser.SHADOWEXPIRE, libuser.SHADOWFLAG): e = self.a.initUser('user_6_9' + field) e[field] = str(e[field][0]) + '\nx' self.assertRaises(RuntimeError, self.a.addUser, e, False, False) def testUserAdd10(self): # Adding a duplicate user UID e = self.a.initUser('user6_10') self.a.addUser(e, False, False) e2 = self.a.initUser('user6_10_2') e2[libuser.UIDNUMBER] = e[libuser.UIDNUMBER] self.assertRaises(RuntimeError, self.a.addUser, e2, False, False) def testUserMod1(self): # A minimal case e = self.a.initUser('user7_1') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_1') self.assertNotEqual(e[libuser.GECOS], ['user7newGECOS']) e[libuser.GECOS] = 'user7newGECOS' self.a.modifyUser(e, False) del e e = self.a.lookupUserByName('user7_1') self.assertEqual(e[libuser.GECOS], ['user7newGECOS']) def testUserMod2(self): # A maximal case, including renaming e = self.a.initUser('user7_2') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_2') self.assertNotEqual(e[libuser.USERNAME], ['user7_2username']) e[libuser.USERNAME] = 'user7_2username' self.assertNotEqual(e[libuser.USERPASSWORD], ['!!pwuser7_2']) e[libuser.USERPASSWORD] = '!!pwuser7_2' self.assertNotEqual(e[libuser.UIDNUMBER], [4238]) e[libuser.UIDNUMBER] = 4238 self.assertNotEqual(e[libuser.GIDNUMBER], [3742]) e[libuser.GIDNUMBER] = 3742 self.assertNotEqual(e[libuser.GECOS], ['Full Name,Office,1234,4321']) e[libuser.GECOS] = 'Full Name,Office,1234,4321' self.assertNotEqual(e[libuser.HOMEDIRECTORY], ['/home/user7_2home']) e[libuser.HOMEDIRECTORY] = '/home/user7_2home' self.assertNotEqual(e[libuser.LOGINSHELL], ['/sbin/nologinuser7_2']) e[libuser.LOGINSHELL] = '/sbin/nologinuser7_2' self.assertNotEqual(e[libuser.SHADOWPASSWORD], ['!!user7_2']) e[libuser.SHADOWPASSWORD] = '!!user7_2' self.assertNotEqual(e[libuser.SHADOWLASTCHANGE], [12681]) e[libuser.SHADOWLASTCHANGE] = 12681 self.assertNotEqual(e[libuser.SHADOWMIN], [5]) e[libuser.SHADOWMIN] = 5 self.assertNotEqual(e[libuser.SHADOWMAX], [98765]) e[libuser.SHADOWMAX] = 98765 self.assertNotEqual(e[libuser.SHADOWWARNING], [10]) e[libuser.SHADOWWARNING] = 10 self.assertNotEqual(e[libuser.SHADOWINACTIVE], [8]) e[libuser.SHADOWINACTIVE] = 8 self.assertNotEqual(e[libuser.SHADOWEXPIRE], [9]) e[libuser.SHADOWEXPIRE] = 9 self.assertNotEqual(e[libuser.SHADOWFLAG], [255]) e[libuser.SHADOWFLAG] = 255 self.a.modifyUser(e, False) del e e = self.a.lookupUserByName('user7_2') self.assertEqual(e, None) del e e = self.a.lookupUserByName('user7_2username') self.assertIsNotNone(e) self.assertEqual(e[libuser.USERNAME], ['user7_2username']) self.assertEqual(e[libuser.USERPASSWORD], ['!!pwuser7_2']) self.assertEqual(e[libuser.UIDNUMBER], [4238]) self.assertEqual(e[libuser.GIDNUMBER], [3742]) self.assertEqual(e[libuser.GECOS], ['Full Name,Office,1234,4321']) self.assertEqual(e[libuser.HOMEDIRECTORY], ['/home/user7_2home']) self.assertEqual(e[libuser.LOGINSHELL], ['/sbin/nologinuser7_2']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!user7_2']) self.assertEqual(e[libuser.SHADOWLASTCHANGE], [12681]) self.assertEqual(e[libuser.SHADOWMIN], [5]) self.assertEqual(e[libuser.SHADOWMAX], [98765]) self.assertEqual(e[libuser.SHADOWWARNING], [10]) self.assertEqual(e[libuser.SHADOWINACTIVE], [8]) self.assertEqual(e[libuser.SHADOWEXPIRE], [9]) self.assertEqual(e[libuser.SHADOWFLAG], [255]) def testUserMod3(self): # Large IDs e = self.a.initUser('user7_3') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_3') self.assertNotEqual(e[libuser.UIDNUMBER], [LARGE_ID + 730]) e[libuser.UIDNUMBER] = LARGE_ID + 730 self.assertNotEqual(e[libuser.GIDNUMBER], [LARGE_ID + 731]) e[libuser.GIDNUMBER] = LARGE_ID + 731 self.a.modifyUser(e, False) del e e = self.a.lookupUserByName('user7_3') self.assertIsNotNone(e) self.assertEqual(e[libuser.UIDNUMBER], [LARGE_ID + 730]) self.assertEqual(e[libuser.GIDNUMBER], [LARGE_ID + 731]) def testUserMod4(self): # Some of the attributes are not present e = self.a.initUser('user7_4') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_4') e.clear(libuser.SHADOWFLAG) e.clear(libuser.SHADOWMAX) self.a.modifyUser(e, False) del e e = self.a.lookupUserByName('user7_4') self.assertIsNotNone(e) self.assertEqual(e[libuser.SHADOWMAX], [-1]) self.assertEqual(e[libuser.SHADOWFLAG], [-1]) def testUserMod5(self): # ':' in field values # libuser.USERPASSWORD not tested because lu_shadow_user_add_prep() # always replaces it by 'x'. libuser.UIDNUMBER not tested because # ent_has_name_and_id() interprets the value as a number. for field in (libuser.USERNAME, libuser.USERPASSWORD, libuser.GIDNUMBER, libuser.GECOS, libuser.HOMEDIRECTORY, libuser.SHADOWPASSWORD, libuser.SHADOWLASTCHANGE, libuser.SHADOWMIN, libuser.SHADOWMAX, libuser.SHADOWWARNING, libuser.SHADOWINACTIVE, libuser.SHADOWEXPIRE): e = self.a.initUser('user7_5' + field) self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_5' + field) self.assertIsNotNone(e) self.assertNotIn(':', str(e[field][0])) e[field] = str(e[field][0]) + ':x' self.assertRaises(RuntimeError, self.a.modifyUser, e, False) # libuser.SHADOWFLAG not tested because it is parsed as an integer e = self.a.initUser('user7_5') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_5') self.assertIsNotNone(e) self.assertNotIn(':', e[libuser.LOGINSHELL][0]) e[libuser.LOGINSHELL] = e[libuser.LOGINSHELL][0] + ':x' self.a.modifyUser(e, False) del e e = self.a.lookupUserByName('user7_5') self.assertIsNotNone(e) self.assertIn(':', e[libuser.LOGINSHELL][0]) def testUserMod6(self): # Nothing to do with the files module: test lu_name_allowed is called. e = self.a.initUser('user7_6') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_6') e[libuser.USERNAME] = 'very_long_name_123456789_123456789_123456789' self.assertRaises(RuntimeError, self.a.modifyUser, e, False) del e def testUserMod7(self): # Renaming to create duplicate entries e = self.a.initUser('user7_7') self.a.addUser(e, False, False) del e e = self.a.initUser('user7_8') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_8') e[libuser.USERNAME] = 'user7_7' self.assertRaises(RuntimeError, self.a.modifyUser, e, False) def testUserMod8(self): # '\n' in field values # libuser.USERPASSWORD not tested because lu_shadow_user_add_prep() # always replaces it by 'x'. libuser.UIDNUMBER not tested because # ent_has_name_and_id() interprets the value as a number. for field in (libuser.USERNAME, libuser.USERPASSWORD, libuser.GIDNUMBER, libuser.GECOS, libuser.HOMEDIRECTORY, libuser.LOGINSHELL, libuser.SHADOWPASSWORD, libuser.SHADOWLASTCHANGE, libuser.SHADOWMIN, libuser.SHADOWMAX, libuser.SHADOWWARNING, libuser.SHADOWINACTIVE, libuser.SHADOWEXPIRE, libuser.SHADOWFLAG): e = self.a.initUser('user7_9' + field) self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_9' + field) self.assertIsNotNone(e) self.assertNotIn('\n', str(e[field][0])) e[field] = str(e[field][0]) + '\nx' self.assertRaises(RuntimeError, self.a.modifyUser, e, False) def testUserMod9(self): # Attempt to modify to create UID duplicates e = self.a.initUser('user7_9') self.a.addUser(e, False, False) e_uid = e[libuser.UIDNUMBER] del e e = self.a.initUser('user7_9_2') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user7_9_2') e[libuser.UIDNUMBER] = e_uid self.assertRaises(RuntimeError, self.a.modifyUser, e, False) def testUserDel(self): e = self.a.initUser('user8_1') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user8_1') self.assertIsNotNone(e) self.a.deleteUser(e, False, False) del e e = self.a.lookupUserByName('user8_1') self.assertEqual(e, None) def testUserLock1(self): e = self.a.initUser('user9_1') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user9_1') self.a.setpassUser(e, '00as1wm0AZG56', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['00as1wm0AZG56']) self.a.lockUser(e) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!00as1wm0AZG56']) def testUserLock2(self): e = self.a.initUser('user9_2') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user9_2') self.a.setpassUser(e, '!!00as1wm0AZG56', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!00as1wm0AZG56']) self.a.lockUser(e) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!00as1wm0AZG56']) def testUserUnlock1(self): e = self.a.initUser('user10_1') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user10_1') self.a.setpassUser(e, '!!00as1wm0AZG56', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!00as1wm0AZG56']) self.a.unlockUser(e) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['00as1wm0AZG56']) def testUserUnlock2(self): e = self.a.initUser('user10_2') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user10_2') self.a.setpassUser(e, '00as1wm0AZG56', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['00as1wm0AZG56']) self.a.unlockUser(e) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['00as1wm0AZG56']) def testUserUnlock3(self): e = self.a.initUser('user10_3') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user10_3') self.a.setpassUser(e, '!!', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!']) self.a.unlockUser(e) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['']) def testUserUnlockNonempty1(self): e = self.a.initUser('user32_1') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user32_1') self.a.setpassUser(e, '!!00as1wm0AZG56', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!00as1wm0AZG56']) self.a.unlockUser(e, True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['00as1wm0AZG56']) def testUserUnlockNonempty2(self): e = self.a.initUser('user32_2') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user32_2') self.a.setpassUser(e, '00as1wm0AZG56', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['00as1wm0AZG56']) self.a.unlockUser(e, True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['00as1wm0AZG56']) def testUserUnlockNonempty3(self): e = self.a.initUser('user32_3') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user32_3') self.a.setpassUser(e, '!!', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!']) self.assertRaises(RuntimeError, self.a.unlockUser, e, True) del e e = self.a.lookupUserByName('user32_3') self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!']) def testUserIslocked1(self): e = self.a.initUser('user11_1') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user11_1') self.a.setpassUser(e, '!!01aK1FxKE9YVU', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!01aK1FxKE9YVU']) self.assertEqual(self.a.userIsLocked(e), 1) def testUserIslocked2(self): e = self.a.initUser('user11_2') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user11_2') self.a.setpassUser(e, '01aK1FxKE9YVU', True) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['01aK1FxKE9YVU']) self.assertEqual(self.a.userIsLocked(e), 0) def testUserSetpass1(self): e = self.a.initUser('user12_1') e[libuser.SHADOWPASSWORD] = '02oawyZdjhhpg' e[libuser.SHADOWLASTCHANGE] = 100 self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user12_1') self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['02oawyZdjhhpg']) self.assertEqual(e[libuser.SHADOWLASTCHANGE], [100]) self.a.setpassUser(e, 'password', False) del e e = self.a.lookupUserByName('user12_1') self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD][0][:3], '$1$') crypted = crypt.crypt('password', e[libuser.SHADOWPASSWORD][0]) self.assertEqual(e[libuser.SHADOWPASSWORD], [crypted]) self.assertGreater(e[libuser.SHADOWLASTCHANGE][0], 10000) def testUserSetpass2(self): # Forcing the non-shadow password to 'x' e = self.a.initUser('user12_2') e[libuser.USERPASSWORD] = '*' e[libuser.SHADOWPASSWORD] = '08lnuxCM.c36E' self.a.addUser(e, False, False) del e # shadow module's addUser forces USERPASSWORD to 'x' e = self.a.lookupUserByName('user12_2') self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['08lnuxCM.c36E']) e[libuser.USERPASSWORD] = '*' self.a.modifyUser(e, False) del e e = self.a.lookupUserByName('user12_2') self.assertEqual(e[libuser.USERPASSWORD], ['*']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['08lnuxCM.c36E']) self.a.setpassUser(e, 'password', False) self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD][0][:3], '$1$') crypted = crypt.crypt('password', e[libuser.SHADOWPASSWORD][0]) self.assertEqual(e[libuser.SHADOWPASSWORD], [crypted]) def testUserSetpass3(self): # Overriding an invalid encrypted password e = self.a.lookupUserByName('user12_3') self.assertEqual(e[libuser.USERPASSWORD], ['*']) self.assertRaises(KeyError, lambda: e[libuser.SHADOWPASSWORD]) self.a.setpassUser(e, 'password', False) crypted = crypt.crypt('password', e[libuser.USERPASSWORD][0]) self.assertEqual(e[libuser.USERPASSWORD], [crypted]) self.assertEqual(e[libuser.USERPASSWORD][0][:3], '$1$') self.assertRaises(KeyError, lambda: e[libuser.SHADOWPASSWORD]) def testUserSetpass4(self): # ':' in field value e = self.a.initUser('user12_4') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user12_4') self.assertNotIn(':', e[libuser.SHADOWPASSWORD][0]) self.assertRaises(SystemError, self.a.setpassUser, e, 'a:b', True) self.a.setpassUser(e, 'a:b', False) del e e = self.a.lookupUserByName('user12_4') self.assertEqual(e[libuser.SHADOWPASSWORD][0][:3], '$1$') self.assertNotIn(':', e[libuser.SHADOWPASSWORD][0]) crypted = crypt.crypt('a:b', e[libuser.SHADOWPASSWORD][0]) self.assertEqual(e[libuser.SHADOWPASSWORD], [crypted]) def testUserSetpass5(self): # '\n' in field value e = self.a.initUser('user12_5') self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user12_5') self.assertNotIn('\n', e[libuser.SHADOWPASSWORD][0]) self.assertRaises(SystemError, self.a.setpassUser, e, 'a\nb', True) self.a.setpassUser(e, 'a\nb', False) del e e = self.a.lookupUserByName('user12_5') self.assertEqual(e[libuser.SHADOWPASSWORD][0][:3], '$1$') self.assertNotIn('\n', e[libuser.SHADOWPASSWORD][0]) crypted = crypt.crypt('a\nb', e[libuser.SHADOWPASSWORD][0]) self.assertEqual(e[libuser.SHADOWPASSWORD], [crypted]) def testUserRemovepass(self): e = self.a.initUser('user13_1') e[libuser.SHADOWPASSWORD] = '03dgZm5nZvqOc' e[libuser.SHADOWLASTCHANGE] = 100 self.a.addUser(e, False, False) del e e = self.a.lookupUserByName('user13_1') self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['03dgZm5nZvqOc']) self.assertEqual(e[libuser.SHADOWLASTCHANGE], [100]) self.a.removepassUser(e) del e e = self.a.lookupUserByName('user13_1') self.assertEqual(e[libuser.USERPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['']) self.assertGreater(e[libuser.SHADOWLASTCHANGE][0], 10000) def testUsersEnumerate1(self): e = self.a.initUser('user14_1') self.a.addUser(e, False, False) e = self.a.initUser('user14_2') self.a.addUser(e, False, False) v = sorted(self.a.enumerateUsers('user14*')) self.assertEqual(v, ['user14_1', 'user14_2']) def testUsersEnumerate2(self): v = [name for name in self.a.enumerateUsers('*') if name.startswith('-') or name.startswith('+')] self.assertEqual(v, []) def testUsersEnumerateByGroup1(self): gid = 1501 # Hopefully unique e = self.a.initGroup('group15_1') e[libuser.GIDNUMBER] = gid e[libuser.MEMBERNAME] = 'user15_2' self.a.addGroup(e) e = self.a.initUser('user15_1') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) e = self.a.initUser('user15_2') e[libuser.GIDNUMBER] = gid + 10 self.a.addUser(e, False, False) v = sorted(self.a.enumerateUsersByGroup('group15_1')) self.assertEqual(v, ['user15_1', 'user15_2']) def testUsersEnumerateByGroup2(self): gid = 1502 # Hopefully unique e = self.a.initGroup('group15_2') e[libuser.GIDNUMBER] = gid self.a.addGroup(e) e = self.a.initUser('user15_3') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) self.assertEqual(self.a.enumerateUsersByGroup('group15_2'), ['user15_3']) def testUsersEnumerateByGroup3(self): gid = 1503 # Hopefully unique e = self.a.initGroup('group15_3') e[libuser.GIDNUMBER] = gid e[libuser.MEMBERNAME] = 'user15_4' self.a.addGroup(e) e = self.a.initUser('user15_4') e[libuser.GIDNUMBER] = gid + 10 self.a.addUser(e, False, False) self.assertEqual(self.a.enumerateUsersByGroup('group15_3'), ['user15_4']) def testUsersEnumerateByGroup4(self): # Data set up in files_test self.assertEqual(self.a.enumerateUsersByGroup('group15_4'), []) def testUsersEnumerateByGroupFull1(self): gid = 3401 # Hopefully unique e = self.a.initGroup('group34_1') e[libuser.GIDNUMBER] = gid e[libuser.MEMBERNAME] = 'user34_2' self.a.addGroup(e) e = self.a.initUser('user34_1') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) e = self.a.initUser('user34_2') e[libuser.GIDNUMBER] = gid + 10 self.a.addUser(e, False, False) v = sorted([x[libuser.USERNAME] for x in self.a.enumerateUsersByGroupFull('group34_1')]) self.assertEqual(v, [['user34_1'], ['user34_2']]) def testUsersEnumerateByGroupFull2(self): gid = 3402 # Hopefully unique e = self.a.initGroup('group34_2') e[libuser.GIDNUMBER] = gid self.a.addGroup(e) e = self.a.initUser('user34_3') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) v = [x[libuser.USERNAME] for x in self.a.enumerateUsersByGroupFull('group34_2')] self.assertEqual(v, [['user34_3']]) def testUsersEnumerateByGroupFull3(self): gid = 3403 # Hopefully unique e = self.a.initGroup('group34_3') e[libuser.GIDNUMBER] = gid e[libuser.MEMBERNAME] = 'user34_4' self.a.addGroup(e) e = self.a.initUser('user34_4') e[libuser.GIDNUMBER] = gid + 10 self.a.addUser(e, False, False) v = [x[libuser.USERNAME] for x in self.a.enumerateUsersByGroupFull('group34_3')] self.assertEqual(v, [['user34_4']]) def testUsersEnumerateFull1(self): e = self.a.initUser('user16_1') self.a.addUser(e, False, False) e = self.a.initUser('user16_2') self.a.addUser(e, False, False) v = sorted([x[libuser.USERNAME] for x in self.a.enumerateUsersFull('user16*')]) self.assertEqual(v, [['user16_1'], ['user16_2']]) def testUsersEnumerateFull2(self): v = [x[libuser.USERNAME] for x in self.a.enumerateUsersFull('*')] v = [name for (name,) in v if name.startswith('-') or name.startswith('+')] self.assertEqual(v, []) def testUsersEnumerateFull3(self): # Only the user name is matched e = self.a.initUser('user16_3') self.a.addUser(e, False, False) self.assertEqual(self.a.enumerateUsersFull('user16_3:*'), []) def testGroupLookupName1(self): e = self.a.initGroup('group17_1') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group17_1') self.assertIsNotNone(e) self.assertEqual(e[libuser.GROUPNAME], ['group17_1']) del e e = self.a.lookupGroupByName('group17_does_not_exist') self.assertEqual(e, None) def testGroupLookupName2(self): # Handling of empty/default values e = self.a.lookupGroupByName('empty_group') self.assertIsNotNone(e) self.assertEqual(e[libuser.GROUPNAME], ['empty_group']) self.assertEqual(e[libuser.GROUPPASSWORD], ['']) self.assertEqual(e[libuser.GIDNUMBER], [44]) self.assertRaises(KeyError, lambda: e[libuser.MEMBERNAME]) self.assertEqual(e[libuser.SHADOWPASSWORD], ['']) self.assertRaises(KeyError, lambda: e[libuser.ADMINISTRATORNAME]) def testGroupLookupName3(self): # Handling of values that appear to be numbers e = self.a.lookupGroupByName('077') self.assertIsNotNone(e) self.assertEqual(e[libuser.GROUPNAME], ['077']) self.assertEqual(e[libuser.GROUPPASSWORD], ['077']) self.assertEqual(e[libuser.GIDNUMBER], [1730]) self.assertEqual(e[libuser.MEMBERNAME], ['077']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['077']) self.assertEqual(e[libuser.ADMINISTRATORNAME], ['077']) def testGroupLookupId(self): e = self.a.initGroup('group18_1') self.a.addGroup(e) gid = e[libuser.GIDNUMBER][0] del e e = self.a.lookupGroupById(gid) self.assertIsNotNone(e) self.assertEqual(e[libuser.GIDNUMBER], [gid]) del e e = self.a.lookupGroupById(999999) self.assertEqual(e, None) del e e = self.a.lookupGroupById(LARGE_ID + 1810) self.assertEqual(e, None) def testGroupDefault(self): # Test the default/LU_GROUPNAME = %n preserves groupnames that appear # to be numbers e = self.a.initGroup('077') self.assertEqual(e[libuser.GROUPNAME], ['077']) # testGroupAddPrep # Setting of GROUPPASSWORD to "x" tested below def testGroupAdd1(self): # A minimal case e = self.a.initGroup('group21_1') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group21_1') self.assertIsNotNone(e) self.assertEqual(e[libuser.GROUPNAME], ['group21_1']) # Default values self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!']) def testGroupAdd2(self): # A maximal case e = self.a.initGroup('group21_2') e[libuser.GROUPNAME] = 'group21_2groupname' e[libuser.GROUPPASSWORD] = '!!badgroup21_2' # Should be ignored e[libuser.GIDNUMBER] = 4237 e[libuser.MEMBERNAME] = ['group21_2member1', 'group21_2member2'] e[libuser.SHADOWPASSWORD] = '!!group21_2' self.a.addGroup(e) del e e = self.a.lookupGroupByName('group21_2groupname') self.assertIsNotNone(e) self.assertEqual(e[libuser.GROUPNAME], ['group21_2groupname']) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.GIDNUMBER], [4237]) v = sorted(e[libuser.MEMBERNAME]) self.assertEqual(v, ['group21_2member1', 'group21_2member2']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!group21_2']) def testGroupAdd3(self): # Large IDs e = self.a.initGroup('group21_3') e[libuser.GIDNUMBER] = LARGE_ID + 2130 self.a.addGroup(e) del e e = self.a.lookupGroupByName('group21_3') self.assertIsNotNone(e) self.assertEqual(e[libuser.GROUPNAME], ['group21_3']) self.assertEqual(e[libuser.GIDNUMBER], [LARGE_ID + 2130]) def testGroupAdd4(self): # ':' in field values # libuser.GROUPPASSWORD not tested because lu_shadow_group_add_prep() # always replaces it by 'x'. libuser.GIDNUMBER not tested because # ent_has_name_and_id() interprets the value as a number. for field in (libuser.GROUPNAME, libuser.SHADOWPASSWORD, libuser.ADMINISTRATORNAME): e = self.a.initGroup('group_21_4' + field) if e.has_key(field): e[field] = str(e[field][0]) + ':x' else: e[field] = field + ':x' self.assertRaises(RuntimeError, self.a.addGroup, e) e = self.a.initGroup('group21_4' + libuser.MEMBERNAME) e[libuser.MEMBERNAME] = 'group21_4:member' self.a.addGroup(e) del e e = self.a.lookupGroupByName('group21_4' + libuser.MEMBERNAME) self.assertEqual(e[libuser.MEMBERNAME], ['group21_4:member']) def testGroupAdd5(self): # Adding duplicate entries e = self.a.initGroup('group21_5') self.a.addGroup(e) del e e = self.a.initGroup('group21_5') self.assertRaises(RuntimeError, self.a.addGroup, e) def testGroupAdd6(self): # '\n' in field values # libuser.GROUPPASSWORD not tested because lu_shadow_group_add_prep() # always replaces it by 'x'. libuser.GIDNUMBER not tested because # ent_has_name_and_id() interprets the value as a number. for field in (libuser.GROUPNAME, libuser.SHADOWPASSWORD, libuser.MEMBERNAME, libuser.ADMINISTRATORNAME): e = self.a.initGroup('group_21_6' + field) if e.has_key(field): e[field] = str(e[field][0]) + '\nx' else: e[field] = field + '\nx' self.assertRaises(RuntimeError, self.a.addGroup, e) def testGroupAdd7(self): # Adding a duplicate group GID e = self.a.initGroup('group21_7') e[libuser.MEMBERNAME] = ['group21_7member1', 'group21_7member2'] self.a.addGroup(e) e_gid = e[libuser.GIDNUMBER] del e e_dup = self.a.initGroup('group21_7_dup') self.assertNotEqual(e_dup[libuser.GIDNUMBER], [e_gid]) e_dup[libuser.GIDNUMBER] = e_gid self.assertRaises(RuntimeError, self.a.modifyGroup, e_dup) def testGroupMod1(self): # A minimal case e = self.a.initGroup('group22_1') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group22_1') self.assertRaises(KeyError, lambda x: x[libuser.MEMBERNAME], e) e[libuser.MEMBERNAME] = 'group22_1member' self.a.modifyGroup(e) del e e = self.a.lookupGroupByName('group22_1') self.assertEqual(e[libuser.MEMBERNAME], ['group22_1member']) def testGroupMod2(self): # A maximal case, including renaming e = self.a.initGroup('group22_2') e[libuser.MEMBERNAME] = ['group22_2member1', 'group22_2member2'] self.a.addGroup(e) del e e = self.a.lookupGroupByName('group22_2') self.assertNotEqual(e[libuser.GROUPNAME], ['group22_2groupname']) e[libuser.GROUPNAME] = 'group22_2groupname' self.assertNotEqual(e[libuser.GROUPPASSWORD], ['!!grgroup22_2']) e[libuser.GROUPPASSWORD] = '!!grgroup22_2' self.assertNotEqual(e[libuser.GIDNUMBER], [4237]) e[libuser.GIDNUMBER] = 4238 v = sorted(e[libuser.MEMBERNAME]) self.assertNotEqual(v, ['group22_2member1', 'group22_2member3']) e[libuser.MEMBERNAME] = ['group22_2member1', 'group22_2member3'] self.assertNotEqual(e[libuser.SHADOWPASSWORD], ['!!group22_2']) e[libuser.SHADOWPASSWORD] = '!!group22_2' self.a.modifyGroup(e) del e e = self.a.lookupGroupByName('group22_2') self.assertEqual(e, None) del e e = self.a.lookupGroupByName('group22_2groupname') self.assertIsNotNone(e) self.assertEqual(e[libuser.GROUPNAME], ['group22_2groupname']) self.assertEqual(e[libuser.GROUPPASSWORD], ['!!grgroup22_2']) self.assertEqual(e[libuser.GIDNUMBER], [4238]) v = e[libuser.MEMBERNAME] v.sort() self.assertEqual(v, ['group22_2member1', 'group22_2member3']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!group22_2']) def testGroupMod3(self): # Large IDs e = self.a.initGroup('group22_3') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group22_3') self.assertNotEqual(e[libuser.GIDNUMBER], [LARGE_ID + 2230]) e[libuser.GIDNUMBER] = LARGE_ID + 2230 self.a.modifyGroup(e) del e e = self.a.lookupGroupByName('group22_3') self.assertIsNotNone(e) self.assertEqual(e[libuser.GIDNUMBER], [LARGE_ID + 2230]) def testGroupMod4(self): # ':' in field values # libuser.GIDNUMBER not tested because ent_has_name_and_id() interprets # the value as a number. for field in (libuser.GROUPNAME, libuser.GROUPPASSWORD, libuser.SHADOWPASSWORD, libuser.ADMINISTRATORNAME): e = self.a.initGroup('group22_4' + field) self.a.addGroup(e) del e e = self.a.lookupGroupByName('group22_4' + field) self.assertIsNotNone(e) if e.has_key(field): self.assertNotIn(':', str(e[field][0])) e[field] = str(e[field][0]) + ':x' else: e[field] = field + ':x' self.assertRaises(RuntimeError, self.a.modifyGroup, e) e = self.a.initGroup('group22_4' + libuser.MEMBERNAME) self.a.addGroup(e) del e e = self.a.lookupGroupByName('group22_4' + libuser.MEMBERNAME) self.assertIsNotNone(e) self.assertFalse(e.has_key(libuser.MEMBERNAME)) e[libuser.MEMBERNAME] = 'group22_4:member' self.a.modifyGroup(e) del e e = self.a.lookupGroupByName('group22_4' + libuser.MEMBERNAME) self.assertIsNotNone(e) self.assertEqual(e[libuser.MEMBERNAME], ['group22_4:member']) def testGroupMod5(self): # Nothing to do with the files module: test lu_name_allowed is called. e = self.a.initGroup('group22_5') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group22_5') e[libuser.GROUPNAME] = 'very_long_name_123456789_123456789_123456789' self.assertRaises(RuntimeError, self.a.modifyGroup, e) del e def testGroupMod6(self): # Renaming to create duplicate entries e = self.a.initGroup('group22_6') self.a.addGroup(e) del e e = self.a.initGroup('group22_7') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group22_7') e[libuser.GROUPNAME] = 'group22_6' self.assertRaises(RuntimeError, self.a.modifyGroup, e) def testGroupMod7(self): # '\n' in field values # libuser.GIDNUMBER not tested because ent_has_name_and_id() interprets # the value as a number. for field in (libuser.GROUPNAME, libuser.GROUPPASSWORD, libuser.SHADOWPASSWORD, libuser.MEMBERNAME, libuser.ADMINISTRATORNAME): e = self.a.initGroup('group22_8' + field) self.a.addGroup(e) del e e = self.a.lookupGroupByName('group22_8' + field) self.assertIsNotNone(e) if e.has_key(field): self.assertNotIn('\n', str(e[field][0])) e[field] = str(e[field][0]) + '\nx' else: e[field] = field + '\nx' self.assertRaises(RuntimeError, self.a.modifyGroup, e) def testGroupMod8(self): # GID duplicate tests e = self.a.initGroup('group22_8') e[libuser.MEMBERNAME] = ['group22_8member1', 'group22_8member2'] self.a.addGroup(e) e_gid = e[libuser.GIDNUMBER] del e e_dup = self.a.initGroup('group22_8_2') e_dup[libuser.MEMBERNAME] = ['group22_8member1', 'group22_8member2'] self.a.addGroup(e_dup) del e_dup # Changing GID to e's should not work e_dup = self.a.lookupGroupByName('group22_8_2') self.assertNotEqual(e_dup[libuser.GIDNUMBER], [e_gid]) e_dup[libuser.GIDNUMBER] = e_gid self.assertRaises(RuntimeError, self.a.modifyGroup, e_dup) def testGroupDel(self): e = self.a.initGroup('group23_1') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group23_1') self.assertIsNotNone(e) self.a.deleteGroup(e) del e e = self.a.lookupGroupByName('group23_1') self.assertEqual(e, None) def testGroupLock1(self): e = self.a.initGroup('group24_1') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group24_1') self.a.setpassGroup(e, '04cmES7HM6wtg', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['04cmES7HM6wtg']) self.a.lockGroup(e) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!04cmES7HM6wtg']) def testGroupLock2(self): e = self.a.initGroup('group24_2') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group24_2') self.a.setpassGroup(e, '!!04cmES7HM6wtg', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!04cmES7HM6wtg']) self.a.lockGroup(e) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!04cmES7HM6wtg']) def testGroupUnlock1(self): e = self.a.initGroup('group25_1') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group25_1') self.a.setpassGroup(e, '!!04cmES7HM6wtg', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!04cmES7HM6wtg']) self.a.unlockGroup(e) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['04cmES7HM6wtg']) def testGroupUnlock2(self): e = self.a.initGroup('group25_2') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group25_2') self.a.setpassGroup(e, '04cmES7HM6wtg', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['04cmES7HM6wtg']) self.a.unlockGroup(e) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['04cmES7HM6wtg']) def testGroupUnlock3(self): e = self.a.initGroup('group25_3') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group25_3') self.a.setpassGroup(e, '!!', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!']) self.a.unlockGroup(e) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['']) def testGroupUnlockNonempty1(self): e = self.a.initGroup('group33_1') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group33_1') self.a.setpassGroup(e, '!!04cmES7HM6wtg', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!04cmES7HM6wtg']) self.a.unlockGroup(e, True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['04cmES7HM6wtg']) def testGroupUnlockNonempty2(self): e = self.a.initGroup('group33_2') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group33_2') self.a.setpassGroup(e, '04cmES7HM6wtg', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['04cmES7HM6wtg']) self.a.unlockGroup(e) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['04cmES7HM6wtg']) def testGroupUnlockNonempty3(self): e = self.a.initGroup('group33_3') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group33_3') self.a.setpassGroup(e, '!!', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!']) self.assertRaises(RuntimeError, self.a.unlockGroup, e, True) del e e = self.a.lookupGroupByName('group33_3') self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!']) def testGroupIsLocked1(self): e = self.a.initGroup('group26_1') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group26_1') self.a.setpassGroup(e, '!!05/lfLEyErrp2', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['!!05/lfLEyErrp2']) self.assertEqual(self.a.groupIsLocked(e), 1) def testGroupIsLocked2(self): e = self.a.initGroup('group26_2') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group26_2') self.a.setpassGroup(e, '05/lfLEyErrp2', True) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['05/lfLEyErrp2']) self.assertEqual(self.a.groupIsLocked(e), 0) def testGroupSetpass1(self): e = self.a.initGroup('group27_1') e[libuser.SHADOWPASSWORD] = '06aZrb3pzuu/6' self.a.addGroup(e) del e e = self.a.lookupGroupByName('group27_1') self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['06aZrb3pzuu/6']) self.a.setpassGroup(e, 'password', False) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD][0][:3], '$1$') crypted = crypt.crypt('password', e[libuser.SHADOWPASSWORD][0]) self.assertEqual(e[libuser.SHADOWPASSWORD], [crypted]) def testGroupSetpass2(self): # Forcing the non-shadow password to 'x' e = self.a.initGroup('group27_2') e[libuser.GROUPPASSWORD] = '*' e[libuser.SHADOWPASSWORD] = '07ZZy2Pihe/gg' self.a.addGroup(e) del e # shadow module's addGroup forces GROUPPASSWORD to 'x' e = self.a.lookupGroupByName('group27_2') self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['07ZZy2Pihe/gg']) e[libuser.GROUPPASSWORD] = '*' self.a.modifyGroup(e) del e e = self.a.lookupGroupByName('group27_2') self.assertEqual(e[libuser.GROUPPASSWORD], ['*']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['07ZZy2Pihe/gg']) self.a.setpassGroup(e, 'password', False) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD][0][:3], '$1$') crypted = crypt.crypt('password', e[libuser.SHADOWPASSWORD][0]) self.assertEqual(e[libuser.SHADOWPASSWORD], [crypted]) def testGroupSetpass3(self): # Overriding an invalid encrypted password e = self.a.lookupGroupByName('group27_3') self.assertEqual(e[libuser.GROUPPASSWORD], ['*']) self.assertRaises(KeyError, lambda: e[libuser.SHADOWPASSWORD]) self.a.setpassGroup(e, 'password', False) crypted = crypt.crypt('password', e[libuser.GROUPPASSWORD][0]) self.assertEqual(e[libuser.GROUPPASSWORD], [crypted]) self.assertEqual(e[libuser.GROUPPASSWORD][0][:3], '$1$') self.assertRaises(KeyError, lambda: e[libuser.SHADOWPASSWORD]) def testGroupSetpass4(self): # ':' in field value e = self.a.initGroup('group27_4') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group27_4') self.assertNotIn(':', e[libuser.SHADOWPASSWORD][0]) self.assertRaises(SystemError, self.a.setpassGroup, e, 'a:b', True) self.a.setpassGroup(e, 'a:b', False) del e e = self.a.lookupGroupByName('group27_4') self.assertEqual(e[libuser.SHADOWPASSWORD][0][:3], '$1$') self.assertNotIn(':', e[libuser.SHADOWPASSWORD][0]) crypted = crypt.crypt('a:b', e[libuser.SHADOWPASSWORD][0]) self.assertEqual(e[libuser.SHADOWPASSWORD], [crypted]) def testGroupSetpass4(self): # '\n' in field value e = self.a.initGroup('group27_5') self.a.addGroup(e) del e e = self.a.lookupGroupByName('group27_5') self.assertNotIn('\n', e[libuser.SHADOWPASSWORD][0]) self.assertRaises(SystemError, self.a.setpassGroup, e, 'a\nb', True) self.a.setpassGroup(e, 'a\nb', False) del e e = self.a.lookupGroupByName('group27_5') self.assertEqual(e[libuser.SHADOWPASSWORD][0][:3], '$1$') self.assertNotIn('\n', e[libuser.SHADOWPASSWORD][0]) crypted = crypt.crypt('a\nb', e[libuser.SHADOWPASSWORD][0]) self.assertEqual(e[libuser.SHADOWPASSWORD], [crypted]) def testGroupRemovepass(self): e = self.a.initGroup('group28_1') e[libuser.SHADOWPASSWORD] = '07Js7N.eEhbgs' self.a.addGroup(e) del e e = self.a.lookupGroupByName('group28_1') self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['07Js7N.eEhbgs']) self.a.removepassGroup(e) self.assertEqual(e[libuser.GROUPPASSWORD], ['x']) self.assertEqual(e[libuser.SHADOWPASSWORD], ['']) def testGroupsEnumerate1(self): e = self.a.initGroup('group29_1') self.a.addGroup(e) e = self.a.initGroup('group29_2') self.a.addGroup(e) v = sorted(self.a.enumerateGroups('group29*')) self.assertEqual(v, ['group29_1', 'group29_2']) def testGroupsEnumerate2(self): v = [name for name in self.a.enumerateGroups('*') if name.startswith('-') or name.startswith('+')] self.assertEqual(v, []) def testGroupsEnumerateByUser1(self): gid = 3001 # Hopefully unique e = self.a.initUser('user30_1') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) e = self.a.initGroup('group30_1') e[libuser.GIDNUMBER] = gid self.a.addGroup(e) e = self.a.initGroup('group30_2') e[libuser.GIDNUMBER] = gid + 10 e[libuser.MEMBERNAME] = 'user30_1' self.a.addGroup(e) v = sorted(self.a.enumerateGroupsByUser('user30_1')) self.assertEqual(v, ['group30_1', 'group30_2']) def testGroupsEnumerateByUser2(self): gid = 3002 # Hopefully unique e = self.a.initUser('user30_2') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) e = self.a.initGroup('group30_3') e[libuser.GIDNUMBER] = gid self.a.addGroup(e) self.assertEqual(self.a.enumerateGroupsByUser('user30_2'), ['group30_3']) def testGroupsEnumerateByUser3(self): gid = 3003 # Hopefully unique e = self.a.initUser('user30_3') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) e = self.a.initGroup('group30_4') e[libuser.GIDNUMBER] = gid + 10 e[libuser.MEMBERNAME] = 'user30_3' self.a.addGroup(e) self.assertEqual(self.a.enumerateGroupsByUser('user30_3'), ['group30_4']) def testGroupsEnumerateByUser4(self): # Data set up in files_test self.assertEqual(self.a.enumerateGroupsByUser('user30_4'), []) def testGroupsEnumerateByUserFull1(self): gid = 3501 # Hopefully unique e = self.a.initUser('user35_1') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) e = self.a.initGroup('group35_1') e[libuser.GIDNUMBER] = gid self.a.addGroup(e) e = self.a.initGroup('group35_2') e[libuser.GIDNUMBER] = gid + 10 e[libuser.MEMBERNAME] = 'user35_1' self.a.addGroup(e) v = sorted([x[libuser.GROUPNAME] for x in self.a.enumerateGroupsByUserFull('user35_1')]) self.assertEqual(v, [['group35_1'], ['group35_2']]) def testGroupsEnumerateByUserFull2(self): gid = 3502 # Hopefully unique e = self.a.initUser('user35_2') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) e = self.a.initGroup('group35_3') e[libuser.GIDNUMBER] = gid self.a.addGroup(e) v = [x[libuser.GROUPNAME] for x in self.a.enumerateGroupsByUserFull('user35_2')] self.assertEqual(v, [['group35_3']]) def testGroupsEnumerateByUserFull3(self): gid = 3503 # Hopefully unique e = self.a.initUser('user35_3') e[libuser.GIDNUMBER] = gid self.a.addUser(e, False, False) e = self.a.initGroup('group35_4') e[libuser.GIDNUMBER] = gid + 10 e[libuser.MEMBERNAME] = 'user35_3' self.a.addGroup(e) v = [x[libuser.GROUPNAME] for x in self.a.enumerateGroupsByUserFull('user35_3')] self.assertEqual(v, [['group35_4']]) def testGroupsEnumerateFull1(self): e = self.a.initGroup('group31_1') self.a.addGroup(e) e = self.a.initGroup('group31_2') self.a.addGroup(e) v = sorted([x[libuser.GROUPNAME] for x in self.a.enumerateGroupsFull('group31*')]) self.assertEqual(v, [['group31_1'], ['group31_2']]) def testGroupsEnumerateFull2(self): v = [x[libuser.GROUPNAME] for x in self.a.enumerateGroupsFull('*')] v = [name for (name,) in v if name.startswith('-') or name.startswith('+')] self.assertEqual(v, []) def testGroupsEnumerateFull3(self): # Only the user name is matched e = self.a.initGroup('group31_3') self.a.addGroup(e) self.assertEqual(self.a.enumerateGroupsFull('group31_3:*'), []) # ValidateIdValue is unrelated to the files module. def testValidateIdValue(self): libuser.validateIdValue(0) libuser.validateIdValue(1) libuser.validateIdValue(500) if sys.version_info[0] < 3: libuser.validateIdValue(long(500)) self.assertRaises(TypeError, libuser.validateIdValue, 'abc') # OverflowError if id_t is unsigned, ValueError otherwise self.assertRaises((ValueError, OverflowError), libuser.validateIdValue, -1) self.assertRaises((ValueError, OverflowError), libuser.validateIdValue, -2) self.assertRaises(ValueError, libuser.validateIdValue, libuser.VALUE_INVALID_ID) if libuser.VALUE_INVALID_ID > 0: libuser.validateIdValue(libuser.VALUE_INVALID_ID - 1) if libuser.VALUE_INVALID_ID < 2 ** 64 - 1: self.assertRaises(OverflowError, libuser.validateIdValue, 2 ** 64 - 1) def tearDown(self): del self.a if __name__ == '__main__': unittest.main()