| Server IP : 85.214.239.14 / Your IP : 13.58.77.244 Web Server : Apache/2.4.62 (Debian) System : Linux h2886529.stratoserver.net 4.9.0 #1 SMP Tue Jan 9 19:45:01 MSK 2024 x86_64 User : www-data ( 33) PHP Version : 7.4.18 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : OFF | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /proc/2/cwd/proc/self/root/proc/self/root/usr/share/augeas/lenses/dist/tests/ |
Upload File : |
module Test_pg_hba =
(* Main test *)
let conf ="# TYPE DATABASE USER CIDR-ADDRESS METHOD
local all all ident sameuser
# IPv4 local connections:
host all all 127.0.0.1/32 md5
# Remote connections by hostname:
host all all foo.example.com md5
# Remote connections by suffix of hostname/fqdn:
host all all .example.com md5
# IPv6 local connections:
host all all ::1/128 md5
"
test Pg_Hba.lns get conf =
{ "#comment" = "TYPE DATABASE USER CIDR-ADDRESS METHOD" }
{}
{ "1"
{ "type" = "local" }
{ "database" = "all" }
{ "user" = "all" }
{ "method" = "ident"
{ "option" = "sameuser" } }
}
{ "#comment" = "IPv4 local connections:" }
{ "2"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = "127.0.0.1/32" }
{ "method" = "md5" }
}
{ "#comment" = "Remote connections by hostname:" }
{ "3"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = "foo.example.com" }
{ "method" = "md5" }
}
{ "#comment" = "Remote connections by suffix of hostname/fqdn:" }
{ "4"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = ".example.com" }
{ "method" = "md5" }
}
{ "#comment" = "IPv6 local connections:" }
{ "5"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = "::1/128" }
{ "method" = "md5" }
}
(* ------------------------------------------------------------- *)
(* Simple local test *)
test Pg_Hba.lns get "local all all trust\n" =
{ "1"
{ "type" = "local" }
{ "database" = "all" }
{ "user" = "all" }
{ "method" = "trust" }
}
(* Remote test with comma-sparated database names *)
test Pg_Hba.lns get "hostssl db1,db2,db3 +pgusers 127.0.0.1/32 trust\n" =
{ "1"
{ "type" = "hostssl" }
{ "database" = "db1" }
{ "database" = "db2" }
{ "database" = "db3" }
{ "user" = "+pgusers" }
{ "address" = "127.0.0.1/32" }
{ "method" = "trust" }
}
(* Test with comma-sparated user names *)
test Pg_Hba.lns get "hostnossl sameuser u1,u2,u3 127.0.0.1/32 trust\n" =
{ "1"
{ "type" = "hostnossl" }
{ "database" = "sameuser" }
{ "user" = "u1" }
{ "user" = "u2" }
{ "user" = "u3" }
{ "address" = "127.0.0.1/32" }
{ "method" = "trust" }
}
(* Test with quoted database and user names *)
test Pg_Hba.lns get "host \"sameuser\" \"all\" 127.0.0.1/32 trust\n" =
{ "1"
{ "type" = "host" }
{ "database" = "\"sameuser\"" }
{ "user" = "\"all\"" }
{ "address" = "127.0.0.1/32" }
{ "method" = "trust" }
}
(* Test with IP + netmask address format *)
test Pg_Hba.lns get "host all all 192.168.1.1 255.255.0.0 trust\n" =
{ "1"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = "192.168.1.1 255.255.0.0" }
{ "method" = "trust" }
}
(* Test with fqdn as address *)
test Pg_Hba.lns get "host all all foo.example.com md5\n" =
{ "1"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = "foo.example.com" }
{ "method" = "md5" }
}
(* Test with fqdn suffix as address *)
test Pg_Hba.lns get "host all all .example.com md5\n" =
{ "1"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = ".example.com" }
{ "method" = "md5" }
}
(* Local types may not have and address *)
test Pg_Hba.lns get "local all all 127.0.0.1/32 trust\n" = *
(* Remote types must have an address *)
test Pg_Hba.lns get "host all all trust\n" = *
(* The space between the IP and the netmask must not be considered as a
column separator ("method" is missing here) *)
test Pg_Hba.lns get "host all all 192.168.1.1 255.255.0.0\n" = *
(* Ticket #313: support authentication method options *)
test Pg_Hba.lns get "host all all .dev.example.com gss include_realm=0 krb_realm=EXAMPLE.COM map=somemap
host all all .dev.example.com ldap ldapserver=auth.example.com ldaptls=1 ldapprefix=\"uid=\" ldapsuffix=\",ou=people,dc=example,dc=com\"\n" =
{ "1"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = ".dev.example.com" }
{ "method" = "gss"
{ "option" = "include_realm"
{ "value" = "0" } }
{ "option" = "krb_realm"
{ "value" = "EXAMPLE.COM" } }
{ "option" = "map"
{ "value" = "somemap" } } } }
{ "2"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = ".dev.example.com" }
{ "method" = "ldap"
{ "option" = "ldapserver"
{ "value" = "auth.example.com" } }
{ "option" = "ldaptls"
{ "value" = "1" } }
{ "option" = "ldapprefix"
{ "value" = "uid=" } }
{ "option" = "ldapsuffix"
{ "value" = ",ou=people,dc=example,dc=com" } } } }
let conf_issues = "# TYPE DATABASE USER CIDR-ADDRESS METHOD
# Issue 775 - auth-method may contain hyphens
local all all scram-sha-256 sameuser
host all all 127.0.0.1/32 scram-sha-256
"
test Pg_Hba.lns get conf_issues =
{ "#comment" = "TYPE DATABASE USER CIDR-ADDRESS METHOD" }
{ "#comment" = "Issue 775 - auth-method may contain hyphens" }
{ "1"
{ "type" = "local" }
{ "database" = "all" }
{ "user" = "all" }
{ "method" = "scram-sha-256"
{ "option" = "sameuser" } }
}
{ "2"
{ "type" = "host" }
{ "database" = "all" }
{ "user" = "all" }
{ "address" = "127.0.0.1/32" }
{ "method" = "scram-sha-256" }
}
(* Unsupported yet *)
(* test Pg_Hba.lns get "host \"db with spaces\" \"user with spaces\" 127.0.0.1/32 trust\n" =? *)
(* test Pg_Hba.lns get "host \"db,with,commas\" \"user,with,commas\" 127.0.0.1/32 trust\n" =? *)