1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
# ========================================================================== #
# #
# KVMD - The main Pi-KVM daemon. #
# #
# Copyright (C) 2018 Maxim Devaev <[email protected]> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation, either version 3 of the License, or #
# (at your option) any later version. #
# #
# This program is distributed in the hope that it will be useful, #
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
# GNU General Public License for more details. #
# #
# You should have received a copy of the GNU General Public License #
# along with this program. If not, see <https://www.gnu.org/licenses/>. #
# #
# ========================================================================== #
import asyncio
import pwd
from typing import Dict
from typing import AsyncGenerator
from typing import Optional
import pytest
from kvmd import aioproc
from . import get_configured_auth_service
# =====
_UID = 1500
_USER = "foobar"
_PASSWD = "query"
# =====
async def _run_process(cmd: str, input: Optional[str]=None) -> None: # pylint: disable=redefined-builtin
proc = await asyncio.create_subprocess_exec(
*cmd.split(" "),
stdin=(asyncio.subprocess.PIPE if input is not None else None),
preexec_fn=aioproc.ignore_sigint,
)
await proc.communicate(input.encode() if input is not None else None)
assert proc.returncode == 0
@pytest.fixture(name="test_user")
async def _test_user() -> AsyncGenerator[None, None]:
with pytest.raises(KeyError):
pwd.getpwnam(_USER)
await _run_process(f"useradd -u {_UID} -s /bin/bash {_USER}")
await _run_process("chpasswd", input=f"{_USER}:{_PASSWD}\n")
assert pwd.getpwnam(_USER).pw_uid == _UID
try:
yield
finally:
await _run_process(f"userdel -r {_USER}")
with pytest.raises(KeyError):
pwd.getpwnam(_USER)
# =====
@pytest.mark.asyncio
@pytest.mark.parametrize("kwargs", [
{},
{"allow_users": [_USER]},
{"allow_uids_at": _UID},
])
async def test_ok(test_user, kwargs: Dict) -> None: # type: ignore
_ = test_user
async with get_configured_auth_service("pam", **kwargs) as service:
assert not (await service.authorize(_USER, "invalid_password"))
assert (await service.authorize(_USER, _PASSWD))
@pytest.mark.asyncio
@pytest.mark.parametrize("kwargs", [
{"allow_users": ["root"]},
{"deny_users": [_USER]},
{"allow_uids_at": _UID + 1},
])
async def test_fail(test_user, kwargs: Dict) -> None: # type: ignore
_ = test_user
async with get_configured_auth_service("pam", **kwargs) as service:
assert not (await service.authorize(_USER, "invalid_password"))
assert not (await service.authorize(_USER, _PASSWD))
|
