Server IP : 85.214.239.14 / Your IP : 3.143.17.175 Web Server : Apache/2.4.62 (Debian) System : Linux h2886529.stratoserver.net 4.9.0 #1 SMP Tue Jan 9 19:45:01 MSK 2024 x86_64 User : www-data ( 33) PHP Version : 7.4.18 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : OFF | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /proc/3/root/usr/share/augeas/lenses/dist/tests/ |
Upload File : |
module Test_pg_hba = (* Main test *) let conf ="# TYPE DATABASE USER CIDR-ADDRESS METHOD local all all ident sameuser # IPv4 local connections: host all all 127.0.0.1/32 md5 # Remote connections by hostname: host all all foo.example.com md5 # Remote connections by suffix of hostname/fqdn: host all all .example.com md5 # IPv6 local connections: host all all ::1/128 md5 " test Pg_Hba.lns get conf = { "#comment" = "TYPE DATABASE USER CIDR-ADDRESS METHOD" } {} { "1" { "type" = "local" } { "database" = "all" } { "user" = "all" } { "method" = "ident" { "option" = "sameuser" } } } { "#comment" = "IPv4 local connections:" } { "2" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = "127.0.0.1/32" } { "method" = "md5" } } { "#comment" = "Remote connections by hostname:" } { "3" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = "foo.example.com" } { "method" = "md5" } } { "#comment" = "Remote connections by suffix of hostname/fqdn:" } { "4" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = ".example.com" } { "method" = "md5" } } { "#comment" = "IPv6 local connections:" } { "5" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = "::1/128" } { "method" = "md5" } } (* ------------------------------------------------------------- *) (* Simple local test *) test Pg_Hba.lns get "local all all trust\n" = { "1" { "type" = "local" } { "database" = "all" } { "user" = "all" } { "method" = "trust" } } (* Remote test with comma-sparated database names *) test Pg_Hba.lns get "hostssl db1,db2,db3 +pgusers 127.0.0.1/32 trust\n" = { "1" { "type" = "hostssl" } { "database" = "db1" } { "database" = "db2" } { "database" = "db3" } { "user" = "+pgusers" } { "address" = "127.0.0.1/32" } { "method" = "trust" } } (* Test with comma-sparated user names *) test Pg_Hba.lns get "hostnossl sameuser u1,u2,u3 127.0.0.1/32 trust\n" = { "1" { "type" = "hostnossl" } { "database" = "sameuser" } { "user" = "u1" } { "user" = "u2" } { "user" = "u3" } { "address" = "127.0.0.1/32" } { "method" = "trust" } } (* Test with quoted database and user names *) test Pg_Hba.lns get "host \"sameuser\" \"all\" 127.0.0.1/32 trust\n" = { "1" { "type" = "host" } { "database" = "\"sameuser\"" } { "user" = "\"all\"" } { "address" = "127.0.0.1/32" } { "method" = "trust" } } (* Test with IP + netmask address format *) test Pg_Hba.lns get "host all all 192.168.1.1 255.255.0.0 trust\n" = { "1" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = "192.168.1.1 255.255.0.0" } { "method" = "trust" } } (* Test with fqdn as address *) test Pg_Hba.lns get "host all all foo.example.com md5\n" = { "1" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = "foo.example.com" } { "method" = "md5" } } (* Test with fqdn suffix as address *) test Pg_Hba.lns get "host all all .example.com md5\n" = { "1" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = ".example.com" } { "method" = "md5" } } (* Local types may not have and address *) test Pg_Hba.lns get "local all all 127.0.0.1/32 trust\n" = * (* Remote types must have an address *) test Pg_Hba.lns get "host all all trust\n" = * (* The space between the IP and the netmask must not be considered as a column separator ("method" is missing here) *) test Pg_Hba.lns get "host all all 192.168.1.1 255.255.0.0\n" = * (* Ticket #313: support authentication method options *) test Pg_Hba.lns get "host all all .dev.example.com gss include_realm=0 krb_realm=EXAMPLE.COM map=somemap host all all .dev.example.com ldap ldapserver=auth.example.com ldaptls=1 ldapprefix=\"uid=\" ldapsuffix=\",ou=people,dc=example,dc=com\"\n" = { "1" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = ".dev.example.com" } { "method" = "gss" { "option" = "include_realm" { "value" = "0" } } { "option" = "krb_realm" { "value" = "EXAMPLE.COM" } } { "option" = "map" { "value" = "somemap" } } } } { "2" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = ".dev.example.com" } { "method" = "ldap" { "option" = "ldapserver" { "value" = "auth.example.com" } } { "option" = "ldaptls" { "value" = "1" } } { "option" = "ldapprefix" { "value" = "uid=" } } { "option" = "ldapsuffix" { "value" = ",ou=people,dc=example,dc=com" } } } } let conf_issues = "# TYPE DATABASE USER CIDR-ADDRESS METHOD # Issue 775 - auth-method may contain hyphens local all all scram-sha-256 sameuser host all all 127.0.0.1/32 scram-sha-256 " test Pg_Hba.lns get conf_issues = { "#comment" = "TYPE DATABASE USER CIDR-ADDRESS METHOD" } { "#comment" = "Issue 775 - auth-method may contain hyphens" } { "1" { "type" = "local" } { "database" = "all" } { "user" = "all" } { "method" = "scram-sha-256" { "option" = "sameuser" } } } { "2" { "type" = "host" } { "database" = "all" } { "user" = "all" } { "address" = "127.0.0.1/32" } { "method" = "scram-sha-256" } } (* Unsupported yet *) (* test Pg_Hba.lns get "host \"db with spaces\" \"user with spaces\" 127.0.0.1/32 trust\n" =? *) (* test Pg_Hba.lns get "host \"db,with,commas\" \"user,with,commas\" 127.0.0.1/32 trust\n" =? *)