34 #include <kadm5/admin.h>
42 #define ADMIN_PASSWORD "admin"
67  * authenticate to kadmin/changepw; otherwise authenticate to kadmin/admin.  If
111     void *handle = get_handle("admin");  in create_simple_policy()
123     void *handle = get_handle("admin");  in delete_policy()
133     void *handle = get_handle("admin");  in compare_policy()
162     void *handle = get_handle("admin");  in create_simple_princ()
178     void *handle = get_handle("admin");  in delete_princ()
199     void *handle = get_handle("admin");  in compare_princ()
290     handle = get_handle("admin");  in test_chpass()
299     cpw_test_fail("admin", hist_princ, "pw", KADM5_PROTECT_PRINCIPAL);  in test_chpass()
304         cpw_test_succeed("admin/modify", princ, "pw2");  in test_chpass()
305         cpw_test_fail("admin/none", princ, "pw3", KADM5_AUTH_CHANGEPW);  in test_chpass()
306         cpw_test_fail("$admin", princ, "pw3", KADM5_AUTH_CHANGEPW);  in test_chpass()
311     cpw_test_fail("admin", NULL, "pw", EINVAL);  in test_chpass()
346     cpol_test_fail("admin", &ent, 0x10000000, KADM5_BAD_MASK);  in test_create_policy()
349     handle = get_handle("admin");  in test_create_policy()
354     cpol_test_compare("admin", &ent, KADM5_PW_MIN_LIFE);  in test_create_policy()
356     cpol_test_compare("admin", &ent, KADM5_PW_MIN_LIFE);  in test_create_policy()
359     cpol_test_compare("admin", &ent, KADM5_PW_MAX_LIFE);  in test_create_policy()
361     cpol_test_compare("admin", &ent, KADM5_PW_MAX_LIFE);  in test_create_policy()
364     cpol_test_fail("admin", &ent, KADM5_PW_MIN_LENGTH, KADM5_BAD_LENGTH);  in test_create_policy()
366     cpol_test_compare("admin", &ent, KADM5_PW_MIN_LENGTH);  in test_create_policy()
369     cpol_test_fail("admin", &ent, KADM5_PW_MIN_CLASSES, KADM5_BAD_CLASS);  in test_create_policy()
371     cpol_test_compare("admin", &ent, KADM5_PW_MIN_CLASSES);  in test_create_policy()
373     cpol_test_compare("admin", &ent, KADM5_PW_MIN_CLASSES);  in test_create_policy()
375     cpol_test_fail("admin", &ent, KADM5_PW_MIN_CLASSES, KADM5_BAD_CLASS);  in test_create_policy()
378     cpol_test_fail("admin", &ent, KADM5_PW_HISTORY_NUM, KADM5_BAD_HISTORY);  in test_create_policy()
380     cpol_test_compare("admin", &ent, KADM5_PW_HISTORY_NUM);  in test_create_policy()
382     cpol_test_compare("admin", &ent, KADM5_PW_HISTORY_NUM);  in test_create_policy()
386         cpol_test_compare("admin", &ent, KADM5_PW_MAX_FAILURE);  in test_create_policy()
388         cpol_test_compare("admin", &ent,  in test_create_policy()
391         cpol_test_compare("admin", &ent, KADM5_PW_LOCKOUT_DURATION);  in test_create_policy()
397         cpol_test_fail("$admin", &ent, 0, KADM5_AUTH_ADD);  in test_create_policy()
398         cpol_test_fail("admin/none", &ent, 0, KADM5_AUTH_ADD);  in test_create_policy()
399         cpol_test_fail("admin/get", &ent, 0, KADM5_AUTH_ADD);  in test_create_policy()
400         cpol_test_fail("admin/modify", &ent, 0, KADM5_AUTH_ADD);  in test_create_policy()
401         cpol_test_fail("admin/delete", &ent, 0, KADM5_AUTH_ADD);  in test_create_policy()
402         cpol_test_compare("admin/add", &ent, 0);  in test_create_policy()
407     cpol_test_fail("admin", &ent, 0, KADM5_DUP);  in test_create_policy()
411     cpol_test_fail("admin", &ent, 0, EINVAL);  in test_create_policy()
413     cpol_test_fail("admin", &ent, 0, KADM5_BAD_POLICY);  in test_create_policy()
415     cpol_test_fail("admin", &ent, 0, KADM5_BAD_POLICY);  in test_create_policy()
419     cpol_test_fail("admin", NULL, 0, EINVAL);  in test_create_policy()
454     cprinc_test_fail("admin", &ent, 0x100000, "", KADM5_BAD_MASK);  in test_create_principal()
455     cprinc_test_fail("admin", &ent, KADM5_LAST_PWD_CHANGE, "pw",  in test_create_principal()
457     cprinc_test_fail("admin", &ent, KADM5_MOD_TIME, "pw", KADM5_BAD_MASK);  in test_create_principal()
458     cprinc_test_fail("admin", &ent, KADM5_MOD_NAME, "pw", KADM5_BAD_MASK);  in test_create_principal()
459     cprinc_test_fail("admin", &ent, KADM5_MKVNO, "pw", KADM5_BAD_MASK);  in test_create_principal()
460     cprinc_test_fail("admin", &ent, KADM5_AUX_ATTRIBUTES, "pw",  in test_create_principal()
464     handle = get_handle("admin");  in test_create_principal()
469     cprinc_test_fail("admin", &ent, 0, "", KADM5_PASS_Q_TOOSHORT);  in test_create_principal()
471     cprinc_test_fail("admin", &ent, KADM5_POLICY, "tP", KADM5_PASS_Q_TOOSHORT);  in test_create_principal()
472     cprinc_test_fail("admin", &ent, KADM5_POLICY, "testpassword",  in test_create_principal()
474     cprinc_test_fail("admin", &ent, KADM5_POLICY, "Abyssinia",  in test_create_principal()
477     cprinc_test_compare("admin", &ent, 0, "pw");  in test_create_principal()
479     cprinc_test_compare("admin", &ent, KADM5_POLICY, "pw");  in test_create_principal()
480     cprinc_test_compare("admin/rename", &ent, KADM5_POLICY, "pw");  in test_create_principal()
484     cprinc_test_compare("admin", &ent, KADM5_POLICY, "NotinTheDictionary");  in test_create_principal()
485     cprinc_test_compare("admin", &ent, KADM5_PRINC_EXPIRE_TIME, "pw");  in test_create_principal()
486     cprinc_test_compare("admin", &ent, KADM5_PW_EXPIRATION, "pw");  in test_create_principal()
487     cprinc_test_compare("admin", &ent, KADM5_POLICY | KADM5_PW_EXPIRATION,  in test_create_principal()
490     cprinc_test_compare("admin", &ent, KADM5_PW_EXPIRATION, "pw");  in test_create_principal()
491     cprinc_test_compare("admin", &ent, KADM5_POLICY | KADM5_PW_EXPIRATION,  in test_create_principal()
494     cprinc_test_compare("admin", &ent, KADM5_POLICY | KADM5_PW_EXPIRATION,  in test_create_principal()
497     cprinc_test_compare("admin", &ent, KADM5_POLICY | KADM5_PW_EXPIRATION,  in test_create_principal()
503         cprinc_test_fail("$admin", &ent, 0, "pw", KADM5_AUTH_ADD);  in test_create_principal()
504         cprinc_test_fail("admin/none", &ent, 0, "pw", KADM5_AUTH_ADD);  in test_create_principal()
505         cprinc_test_fail("admin/get", &ent, 0, "pw", KADM5_AUTH_ADD);  in test_create_principal()
506         cprinc_test_fail("admin/modify", &ent, 0, "pw", KADM5_AUTH_ADD);  in test_create_principal()
507         cprinc_test_fail("admin/delete", &ent, 0, "pw", KADM5_AUTH_ADD);  in test_create_principal()
512     cprinc_test_fail("admin", &ent, 0, "pw", KADM5_DUP);  in test_create_principal()
516     cprinc_test_fail("admin", NULL, 0, "pw", EINVAL);  in test_create_principal()
543     dpol_test_fail("admin", "delete-policy-test", KADM5_UNK_POLICY);  in test_delete_policy()
546     dpol_test_fail("admin", "", KADM5_BAD_POLICY);  in test_delete_policy()
550     dpol_test_succeed("admin/delete", "delete-policy-test");  in test_delete_policy()
556     dpol_test_succeed("admin", "delete-policy-test");  in test_delete_policy()
562         dpol_test_fail("$admin", "test-pol", KADM5_AUTH_DELETE);  in test_delete_policy()
563         dpol_test_fail("admin/none", "test-pol", KADM5_AUTH_DELETE);  in test_delete_policy()
564         dpol_test_fail("admin/add", "test-pol", KADM5_AUTH_DELETE);  in test_delete_policy()
569     dpol_test_fail("admin", NULL, EINVAL);  in test_delete_policy()
595     dprinc_test_fail("admin", princ, KADM5_UNK_PRINC);  in test_delete_principal()
599     dprinc_test_succeed("admin/delete", princ);  in test_delete_principal()
604         dprinc_test_fail("$admin", princ, KADM5_AUTH_DELETE);  in test_delete_principal()
605         dprinc_test_fail("admin/add", princ, KADM5_AUTH_DELETE);  in test_delete_principal()
606         dprinc_test_fail("admin/modify", princ, KADM5_AUTH_DELETE);  in test_delete_principal()
607         dprinc_test_fail("admin/get", princ, KADM5_AUTH_DELETE);  in test_delete_principal()
608         dprinc_test_fail("admin/none", princ, KADM5_AUTH_DELETE);  in test_delete_principal()
613     dprinc_test_fail("admin", NULL, EINVAL);  in test_delete_principal()
644     dpol_test_fail("admin", "unknown-policy", KADM5_UNK_POLICY);  in test_get_policy()
647     gpol_test_fail("admin", "", KADM5_BAD_POLICY);  in test_get_policy()
648     gpol_test_fail("admin", NULL, EINVAL);  in test_get_policy()
654         gpol_test_fail("admin/none", "test-pol", KADM5_AUTH_GET);  in test_get_policy()
655         gpol_test_fail("admin/add", "test-pol", KADM5_AUTH_GET);  in test_get_policy()
656         gpol_test_succeed("admin/get", "test-pol");  in test_get_policy()
692     krb5_principal admin_princ = parse_princ("admin");  in test_get_principal()
693     krb5_principal admin_none_princ = parse_princ("admin/none");  in test_get_principal()
697     gprinc_test_fail("admin", princ, KADM5_UNK_PRINC);  in test_get_principal()
703     gprinc_test_succeed("admin/none", admin_none_princ);  in test_get_principal()
704     gprinc_test_succeed("$admin", admin_princ);  in test_get_principal()
705     gprinc_test_succeed("admin/get", princ);  in test_get_principal()
710         gprinc_test_fail("$admin", princ, KADM5_AUTH_GET);  in test_get_principal()
711         gprinc_test_fail("admin/none", princ, KADM5_AUTH_GET);  in test_get_principal()
712         gprinc_test_fail("admin/add", princ, KADM5_AUTH_GET);  in test_get_principal()
713         gprinc_test_fail("admin/modify", princ, KADM5_AUTH_GET);  in test_get_principal()
714         gprinc_test_fail("admin/delete", princ, KADM5_AUTH_GET);  in test_get_principal()
718     handle = get_handle("admin");  in test_get_principal()
737     gprinc_test_fail("admin", NULL, EINVAL);  in test_get_principal()
769     check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
772     check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
776     check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
779     check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
784     check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
787     check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
792     ret = kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
797     ret = kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
804     check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
810     handle = get_handle("admin");  in test_init_destroy()
824     ret = kadm5_init(ctx, "admin", "admin", KADM5_ADMIN_SERVICE, &params,  in test_init_destroy()
831     ret = kadm5_init(ctx, "admin", "admin", KADM5_ADMIN_SERVICE, &params,  in test_init_destroy()
838     ret = kadm5_init(ctx, "admin", "admin", KADM5_ADMIN_SERVICE, &params,  in test_init_destroy()
846     check(kadm5_init(ctx, "admin@KRBTEST.COM", "admin", KADM5_ADMIN_SERVICE,  in test_init_destroy()
852     check(kadm5_init(context, "admin@KRBTEST.COM", "admin",  in test_init_destroy()
865         check(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE,  in test_init_destroy()
871         check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE,  in test_init_destroy()
878         check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE,  in test_init_destroy()
883         check_fail(kadm5_init_with_creds(context, "admin", cc,  in test_init_destroy()
888         /* Succeeds with cache containing kadmin/admin cred. */  in test_init_destroy()
889         kinit(cc, "admin", "admin", KADM5_ADMIN_SERVICE);  in test_init_destroy()
890         check(kadm5_init_with_creds(context, "admin", cc, KADM5_ADMIN_SERVICE,  in test_init_destroy()
896         kinit(cc, "admin", "admin", KADM5_CHANGEPW_SERVICE);  in test_init_destroy()
897         check(kadm5_init_with_creds(context, "admin", cc,  in test_init_destroy()
903         kinit(cc, "admin", "admin", NULL);  in test_init_destroy()
904         check_fail(kadm5_init_with_creds(context, "admin", cc,  in test_init_destroy()
910         check_fail(kadm5_init(context, "admin", "admin", "user", NULL,  in test_init_destroy()
915         check_fail(kadm5_init(context, "admin", "admin", "noexist", NULL,  in test_init_destroy()
920         check_fail(kadm5_init(context, "admin", "admin", "admin", NULL,  in test_init_destroy()
925         check_fail(kadm5_init(context, "admin", "wrong", KADM5_ADMIN_SERVICE,  in test_init_destroy()
930         check_fail(kadm5_init(context, NULL, "admin", KADM5_ADMIN_SERVICE,  in test_init_destroy()
935         check_fail(kadm5_init(context, "noexist", "admin", KADM5_ADMIN_SERVICE,  in test_init_destroy()
940         check_fail(kadm5_init(context, "noexist@KRBTEST.COM", "admin",  in test_init_destroy()
946         check_fail(kadm5_init(context, "noexist@BAD.REALM", "admin",  in test_init_destroy()
951         check_fail(kadm5_init(context, "admin@BAD.REALM", "admin",  in test_init_destroy()
960         check_fail(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE,  in test_init_destroy()
971         check(kadm5_init(context, "admin", "admin", KADM5_ADMIN_SERVICE,  in test_init_destroy()
986         check(kadm5_init(context, "admin", "wrong", KADM5_ADMIN_SERVICE, NULL,  in test_init_destroy()
991         check(kadm5_init(context, "admin", "admin", NULL, NULL,  in test_init_destroy()
996         check(kadm5_init(context, "admin", "admin", "foobar", NULL,  in test_init_destroy()
1031     mpol_test_compare("admin", &ent, KADM5_PW_MIN_LIFE);  in test_modify_policy()
1033     mpol_test_compare("admin", &ent, KADM5_PW_MIN_LIFE);  in test_modify_policy()
1036     mpol_test_compare("admin", &ent, KADM5_PW_MAX_LIFE);  in test_modify_policy()
1038     mpol_test_compare("admin", &ent, KADM5_PW_MAX_LIFE);  in test_modify_policy()
1041     mpol_test_fail("admin", &ent, KADM5_PW_MIN_LENGTH, KADM5_BAD_LENGTH);  in test_modify_policy()
1043     mpol_test_compare("admin", &ent, KADM5_PW_MIN_LENGTH);  in test_modify_policy()
1046     mpol_test_fail("admin", &ent, KADM5_PW_MIN_CLASSES, KADM5_BAD_CLASS);  in test_modify_policy()
1048     mpol_test_compare("admin", &ent, KADM5_PW_MIN_CLASSES);  in test_modify_policy()
1050     mpol_test_compare("admin", &ent, KADM5_PW_MIN_CLASSES);  in test_modify_policy()
1052     mpol_test_fail("admin", &ent, KADM5_PW_MIN_CLASSES, KADM5_BAD_CLASS);  in test_modify_policy()
1055     mpol_test_fail("admin", &ent, KADM5_PW_HISTORY_NUM, KADM5_BAD_HISTORY);  in test_modify_policy()
1057     mpol_test_compare("admin", &ent, KADM5_PW_HISTORY_NUM);  in test_modify_policy()
1059     mpol_test_compare("admin", &ent, KADM5_PW_HISTORY_NUM);  in test_modify_policy()
1063         mpol_test_compare("admin", &ent, KADM5_PW_MAX_FAILURE);  in test_modify_policy()
1065         mpol_test_compare("admin", &ent, KADM5_PW_FAILURE_COUNT_INTERVAL);  in test_modify_policy()
1067         mpol_test_compare("admin", &ent, KADM5_PW_LOCKOUT_DURATION);  in test_modify_policy()
1073         mpol_test_fail("$admin", &ent, KADM5_PW_MAX_LIFE, KADM5_AUTH_MODIFY);  in test_modify_policy()
1074         mpol_test_fail("admin/none", &ent, KADM5_PW_MAX_LIFE,  in test_modify_policy()
1076         mpol_test_fail("admin/get", &ent, KADM5_PW_MAX_LIFE,  in test_modify_policy()
1078         mpol_test_compare("admin/modify", &ent, KADM5_PW_MAX_LIFE);  in test_modify_policy()
1085     mpol_test_fail("admin", &ent, KADM5_PW_MAX_LIFE, EINVAL);  in test_modify_policy()
1087     mpol_test_fail("admin", &ent, KADM5_PW_MAX_LIFE, KADM5_BAD_POLICY);  in test_modify_policy()
1091     mpol_test_fail("admin", NULL, KADM5_PW_MAX_LIFE, EINVAL);  in test_modify_policy()
1124     mprinc_test_fail("admin", &ent, KADM5_KVNO, KADM5_UNK_PRINC);  in test_modify_principal()
1129     mprinc_test_fail("admin", &ent, KADM5_AUX_ATTRIBUTES, KADM5_BAD_MASK);  in test_modify_principal()
1130     mprinc_test_fail("admin", &ent, KADM5_KEY_DATA, KADM5_BAD_MASK);  in test_modify_principal()
1131     mprinc_test_fail("admin", &ent, KADM5_LAST_FAILED, KADM5_BAD_MASK);  in test_modify_principal()
1132     mprinc_test_fail("admin", &ent, KADM5_LAST_SUCCESS, KADM5_BAD_MASK);  in test_modify_principal()
1133     mprinc_test_fail("admin", &ent, KADM5_LAST_PWD_CHANGE, KADM5_BAD_MASK);  in test_modify_principal()
1134     mprinc_test_fail("admin", &ent, KADM5_MKVNO, KADM5_BAD_MASK);  in test_modify_principal()
1135     mprinc_test_fail("admin", &ent, KADM5_MOD_NAME, KADM5_BAD_MASK);  in test_modify_principal()
1136     mprinc_test_fail("admin", &ent, KADM5_MOD_TIME, KADM5_BAD_MASK);  in test_modify_principal()
1137     mprinc_test_fail("admin", &ent, KADM5_PRINCIPAL, KADM5_BAD_MASK);  in test_modify_principal()
1142     mprinc_test_fail("admin", &ent, KADM5_TL_DATA, KADM5_BAD_TL_TYPE);  in test_modify_principal()
1146     mprinc_test_fail("admin", &ent, KADM5_FAIL_AUTH_COUNT,  in test_modify_principal()
1151     mprinc_test_compare("admin", &ent, KADM5_PW_EXPIRATION);  in test_modify_principal()
1152     mprinc_test_compare("admin", &ent, KADM5_MAX_LIFE);  in test_modify_principal()
1153     mprinc_test_compare("admin", &ent, KADM5_MAX_RLIFE);  in test_modify_principal()
1154     mprinc_test_compare("admin", &ent, KADM5_FAIL_AUTH_COUNT);  in test_modify_principal()
1155     mprinc_test_compare("admin/modify", &ent, KADM5_PRINC_EXPIRE_TIME);  in test_modify_principal()
1156     mprinc_test_compare("admin", &ent, KADM5_POLICY_CLR);  in test_modify_principal()
1161     mprinc_test_compare("admin", &ent, KADM5_PW_EXPIRATION);  in test_modify_principal()
1163     mprinc_test_compare("admin", &ent, KADM5_POLICY);  in test_modify_principal()
1165     mprinc_test_compare("admin", &ent, KADM5_POLICY);  in test_modify_principal()
1167     mprinc_test_compare("admin", &ent, KADM5_PW_EXPIRATION);  in test_modify_principal()
1168     mprinc_test_compare("admin", &ent, KADM5_POLICY_CLR);  in test_modify_principal()
1172     mprinc_test_compare("admin", &ent, KADM5_PRINC_EXPIRE_TIME);  in test_modify_principal()
1174     mprinc_test_compare("admin", &ent, KADM5_ATTRIBUTES);  in test_modify_principal()
1176     mprinc_test_compare("admin", &ent, KADM5_ATTRIBUTES);  in test_modify_principal()
1178     mprinc_test_compare("admin", &ent, KADM5_ATTRIBUTES);  in test_modify_principal()
1180     mprinc_test_compare("admin", &ent, KADM5_MAX_LIFE);  in test_modify_principal()
1182     mprinc_test_compare("admin", &ent, KADM5_KVNO);  in test_modify_principal()
1187         mprinc_test_fail("$admin", &ent, KADM5_KVNO, KADM5_AUTH_MODIFY);  in test_modify_principal()
1188         mprinc_test_fail("admin/none", &ent, KADM5_KVNO, KADM5_AUTH_MODIFY);  in test_modify_principal()
1189         mprinc_test_fail("admin/get", &ent, KADM5_KVNO, KADM5_AUTH_MODIFY);  in test_modify_principal()
1190         mprinc_test_fail("admin/add", &ent, KADM5_KVNO, KADM5_AUTH_MODIFY);  in test_modify_principal()
1191         mprinc_test_fail("admin/delete", &ent, KADM5_KVNO, KADM5_AUTH_MODIFY);  in test_modify_principal()
1195     handle = get_handle("admin");  in test_modify_principal()
1214     mprinc_test_fail("admin", NULL, KADM5_KVNO, EINVAL);  in test_modify_principal()
1241     krb5_principal admin_princ = parse_princ("admin");  in test_randkey()
1249     handle = get_handle("admin");  in test_randkey()
1268         rnd_test_fail("$admin", user_princ, KADM5_AUTH_CHANGEPW);  in test_randkey()
1269         rnd_test_fail("admin/none", user_princ, KADM5_AUTH_CHANGEPW);  in test_randkey()
1270         rnd_test_fail("admin/delete", user_princ, KADM5_AUTH_CHANGEPW);  in test_randkey()
1271         rnd_test_succeed("admin/modify", user_princ);  in test_randkey()
1272         cpw_test_succeed("admin", user_princ, USER_PASSWORD);  in test_randkey()
1278     rnd_test_succeed("admin/modify", user_princ);  in test_randkey()
1279     cpw_test_succeed("admin", user_princ, USER_PASSWORD);  in test_randkey()
1282     handle = get_handle("$admin");  in test_randkey()
1289     rnd_test_fail("admin", NULL, EINVAL);  in test_randkey()