qa/setup.051

   1 #! /bin/sh
   2 #
   3
   4 . $PCP_DIR/etc/pcp.env
   5 . ./common.check
   6
   7 # get valid hostnames: $remote_1, $remote_2, etc.
   8 #
   9 . ./051.hosts
  10
  11 host=`hostname`
  12 if [ -z "$host" ]
  13 then
  14     echo "Cannot discover local host name!"
  15     exit 1
  16 fi
  17
  18 ipaddr=`_host_to_ipaddr $host`
  19 if [ -z "$ipaddr" ]
  20 then
  21     echo "Cannot translate hostname ($host) to an IP address!"
  22     exit 1
  23 fi
  24
  25 rm -rf 051.work
  26 mkdir 051.work
  27 cd 051.work
  28
  29 ##############################################################################
  30 # The die.* tests die automatically by themselves.
  31
  32 cat >die.001 <<End-of-File
  33 # Test whitespace in "[access]" token
  34
  35 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
  36
  37 [access]
  38
  39 die!
  40 End-of-File
  41
  42 cat >die.002 <<End-of-File
  43 # Test whitespace in "[access]" token
  44
  45 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
  46
  47 [ access]
  48
  49 die!
  50 End-of-File
  51
  52 cat >die.003 <<End-of-File
  53 # Test whitespace in "[access]" token
  54
  55 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
  56
  57 [ access ]
  58
  59 die!
  60 End-of-File
  61
  62 cat >die.004 <<End-of-File
  63 # Test whitespace in "[access]" token
  64
  65 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
  66
  67 [
  68 # what the &^*%# is this doing here!?
  69 access
  70  ]
  71
  72 die!
  73 End-of-File
  74
  75 cat >die.005 <<End-of-File
  76 # Test missing host list
  77
  78 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
  79
  80 [access]
  81 allow : all;
  82
  83 die!
  84 End-of-File
  85
  86 cat >die.006 <<End-of-File
  87 # Test missing comma in host list
  88
  89 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
  90
  91 [access]
  92 allow $remote_1 $remote_2: all;
  93
  94 die!
  95 End-of-File
  96
  97 cat >die.007 <<End-of-File
  98 # Test extra comma in host list
  99
 100 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 101
 102 [access]
 103 allow $remote_1,: all;
 104
 105 die!
 106 End-of-File
 107
 108 cat >die.008 <<End-of-File
 109 # Test missing colon after host list
 110
 111 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 112
 113 [access]
 114 allow $remote_1 all;
 115
 116 die!
 117 End-of-File
 118
 119 cat >die.009 <<End-of-File
 120 # Test extra comma and missing colon after host list
 121
 122 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 123
 124 [access]
 125 allow $remote_1, all;
 126
 127 die!
 128 End-of-File
 129
 130 cat >die.010 <<End-of-File
 131 # Test missing semicolon
 132
 133 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 134
 135 [access]
 136 allow $remote_1: all
 137
 138 die!
 139 End-of-File
 140
 141 cat >die.011 <<End-of-File
 142 # Test statement with lotsa whitespace and comments interspersed.
 143
 144 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 145
 146 [access]
 147 # I think
 148    allow#that I
 149 #will never
 150            $remote_1
 151
 152
 153
 154 #see
 155         :   #a thing as beautiful
 156 all
 157 # as
 158 # the bottom of my in-tray
 159
 160 ;
 161
 162         die here!
 163 End-of-File
 164
 165 cat >die.012 <<End-of-File
 166 # Test all operation types.
 167
 168 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 169
 170 [access]
 171
 172 allow $remote_1 : fetch;
 173 allow $remote_1 : store;
 174 allow $remote_1 : all;
 175 allow $remote_1 : maximum 666 connections;
 176
 177 die!
 178 End-of-File
 179
 180 cat >die.013 <<End-of-File
 181 # Test all operations in a single permission list.
 182
 183 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 184
 185 [access]
 186 allow $remote_1: fetch, store, maximum 666 connections;
 187
 188 die!
 189 End-of-File
 190
 191 cat >die.014 <<End-of-File
 192 # Test clash of "all" with a specific operation.
 193
 194 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 195
 196 [access]
 197 allow $remote_1: all, fetch;
 198
 199 die!
 200 End-of-File
 201
 202 cat >die.015 <<End-of-File
 203 # Test that "all" works with a connection limit.
 204
 205 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 206
 207 [access]
 208 allow $remote_1: all, maximum 666 connections;
 209
 210 die!
 211 End-of-File
 212
 213 cat >die.016 <<End-of-File
 214 # Test that specific operations work with a connection limit.
 215
 216 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 217
 218 [access]
 219 allow $remote_1: fetch, store, maximum 666 connections;
 220
 221 die!
 222 End-of-File
 223
 224 cat >die.017 <<End-of-File
 225 # Test that a connection limit fails in a disallow.
 226
 227 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 228
 229 [access]
 230 disallow $remote_1: store, maximum 666 connections;
 231
 232 die!
 233 End-of-File
 234
 235 cat >die.018 <<End-of-File
 236 # Test that a connection limit fails in a disallow with except.
 237
 238 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 239
 240 [access]
 241 disallow $remote_1: all except fetch, maximum 666 connections;
 242
 243 die!
 244 End-of-File
 245
 246 cat >die.019 <<End-of-File
 247 # Test that a connection limit is OK in an allow with an except.
 248
 249 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 250
 251 [access]
 252 allow $remote_1: all except store, maximum 666 connections;
 253
 254 die!
 255 End-of-File
 256
 257 cat >die.020 <<End-of-File
 258 # Test that a bogus hostname is detected
 259
 260 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 261
 262 [access]
 263 allow error...mebourne : fetch;
 264
 265 die!
 266 End-of-File
 267
 268 cat >die.021 <<End-of-File
 269 # Test a no such host condition
 270 #
 271 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 272
 273 [access]
 274 allow nosuchhost.melbourne.sgi.com : fetch;
 275
 276 die!
 277 End-of-File
 278
 279 cat >die.022 <<End-of-File
 280 # Test that a bogus IP address
 281
 282 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 283
 284 [access]
 285 allow 192.2.3.999 : fetch;
 286
 287 die!
 288 End-of-File
 289
 290 cat >die.023 <<End-of-File
 291 # Test bad wildcard detection in IP address
 292
 293 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 294
 295 [access]
 296 allow 192.*.2 : fetch;
 297
 298 die!
 299 End-of-File
 300
 301 cat >die.024 <<End-of-File
 302 # Test embedded wildcard detection in host name
 303
 304 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 305
 306 [access]
 307 allow *.melbourne : fetch;
 308
 309 die!
 310 End-of-File
 311
 312 cat >die.025 <<End-of-File
 313 # Test wildcard detection in textual host name
 314
 315 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 316
 317 [access]
 318 allow melbourne.* : fetch;
 319
 320 die!
 321 End-of-File
 322
 323 cat >die.026 <<End-of-File
 324 # Test range check for IP address components
 325
 326 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 327
 328 [access]
 329 allow 192.-1.* : fetch;
 330 allow 192.256.* : fetch;
 331
 332 die!
 333 End-of-File
 334
 335 cat >die.027 <<End-of-File
 336 # Test "reinforcing" of permissions
 337
 338 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 339
 340 [access]
 341 allow $remote_1 : fetch;
 342 allow $remote_1 : fetch;
 343
 344 die!
 345 End-of-File
 346
 347 cat >die.028 <<End-of-File
 348 # Test contradictory permissions
 349
 350 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 351
 352 [access]
 353 allow $remote_1 : fetch;
 354 disallow $remote_1 : fetch;
 355
 356 die!
 357 End-of-File
 358
 359 cat >die.029 <<End-of-File
 360 # Test contradictory permissions with host aliasing (IP and name)
 361
 362 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 363
 364 [access]
 365 allow $host : all;
 366 disallow $ipaddr : fetch;
 367
 368 die!
 369 End-of-File
 370
 371 cat >die.030 <<End-of-File
 372 # Test contradictory permissions with host aliasing (different names)
 373
 374 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 375
 376 [access]
 377 allow $remote_1 : all;
 378 disallow $remote_1 : fetch;
 379
 380 die!
 381 End-of-File
 382
 383 cat >die.031 <<End-of-File
 384 # Test mutually exclusive host lists
 385
 386 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 387
 388 [access]
 389 allow $remote_1, $remote_2 : all;
 390 disallow $remote_3, $remote_4 : store;
 391
 392 die!
 393 End-of-File
 394
 395 cat >die.032 <<End-of-File
 396 # Test overlapping host lists
 397
 398 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 399
 400 [access]
 401 allow $remote_1, $remote_2 : all;
 402 allow $remote_3, $remote_2 : fetch, store;
 403
 404 die!
 405 End-of-File
 406
 407 cat >die.033 <<End-of-File
 408 # Test overlapping host lists with conflict
 409
 410 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 411
 412 [access]
 413 allow $remote_1, $remote_4, $remote_2 : all;
 414 disallow $remote_3, $remote_2, $remote_5 : store;
 415
 416 die!
 417 End-of-File
 418
 419 cat >die.034 <<End-of-File
 420 # Test overlapping host lists with conflicting connection counts
 421
 422 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 423
 424 [access]
 425 allow $remote_1, $remote_4, $remote_2 : all, maximum 30 connections;
 426 allow $remote_3, $remote_2, $remote_5 : fetch, store, maximum 10 connections;
 427
 428 die!
 429 End-of-File
 430
 431 cat >die.035 <<End-of-File
 432 # Test various levels of wildcarding
 433
 434 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 435
 436 [access]
 437 allow 192.68.139.105:   all;
 438 allow 192.68.139.*:     all, maximum 666 connections;
 439 allow 192.68.*:         all except store, maximum 555 connections;
 440 allow 192.*:            fetch, store, maximum 444 connections;
 441 allow *:                fetch, maximum 333 connections;
 442
 443 die!
 444 End-of-File
 445
 446 cat >die.036 <<End-of-File
 447 # Test various levels of wildcarding with several similar setups
 448
 449 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 450
 451 [access]
 452 allow 192.68.139.105:   all;
 453 allow 192.68.139.*:     all, maximum 666 connections;
 454 allow 192.68.*:         all except store, maximum 555 connections;
 455 allow 192.*:            fetch, store, maximum 444 connections;
 456 allow *:                fetch, maximum 333 connections;
 457
 458 allow 193.68.139.105:   all;
 459 allow 193.68.139.*:     all, maximum 666 connections;
 460 allow 193.68.*:         all except store, maximum 555 connections;
 461 allow 193.*:            fetch, store, maximum 444 connections;
 462
 463 allow 194.68.139.105:   all;
 464 allow 194.68.139.*:     all, maximum 666 connections;
 465 allow 194.68.*:         all except store, maximum 555 connections;
 466 allow 194.*:            fetch, store, maximum 444 connections;
 467
 468 die!
 469 End-of-File
 470
 471 cat >die.037 <<End-of-File
 472 # Test reinforcing of disallows
 473
 474 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 475
 476 [access]
 477 disallow $remote_1: fetch;
 478 disallow $remote_1: store;
 479 disallow $remote_1: all;
 480
 481 die!
 482 End-of-File
 483
 484 cat >die.038 <<End-of-File
 485 # Test detection of multiple conflicting explicit connections limits
 486
 487 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 488
 489 [access]
 490 allow $remote_1: maximum 5 connections, fetch, maximum 666 connections;
 491
 492 die!
 493 End-of-File
 494
 495 cat >die.039 <<End-of-File
 496 # Test detection of connections limits immediately after "all except"
 497
 498 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 499
 500 [access]
 501 allow $remote_1: all except maximum 5 connections;
 502
 503 die!
 504 End-of-File
 505
 506 cat >die.040 <<End-of-File
 507 # Test unlimited connections access spec.
 508
 509 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 510
 511 [access]
 512 allow $remote_1: unlimited connections;
 513
 514 die!
 515 End-of-File
 516
 517 cat >die.041 <<End-of-File
 518 # Test clash of unlimited connections with explicit maximum
 519
 520 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 521
 522 [access]
 523 allow $remote_1: unlimited connections;
 524 allow $remote_1: fetch, maximum 666 connections;
 525
 526 die!
 527 End-of-File
 528
 529 cat >die.042 <<End-of-File
 530 # Test reinforcing of unlimited connections
 531
 532 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 533
 534 [access]
 535 allow $remote_1: store, unlimited connections;
 536 allow $remote_1: fetch, unlimited connections;
 537
 538 die!
 539 End-of-File
 540
 541 # Note: no quotes around "End-Of-File" or $host and $ipaddr not expanded
 542
 543 cat >die.043 <<End-of-File
 544 # Test conflicts with localhost aliasing
 545
 546 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 547
 548 [access]
 549 allow localhost: all;
 550 disallow $host: fetch;
 551 disallow $ipaddr : store;
 552
 553 die!
 554 End-of-File
 555
 556 cat >die.044 <<End-of-File
 557 # Check that log advisory and log mandatory no longer work
 558
 559 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 560
 561 [access]
 562 allow $remote_1 : log advisory;
 563 allow $remote_1 : log mandatory;
 564
 565 die!
 566 End-of-File
 567
 568 cat >die.045 <<End-of-File
 569 # Test invalid and valid operations in a single permission list.
 570
 571 sample          254     socket  inet 2077       $PCP_PMDAS_DIR/sample/pmdasample -i 2077
 572
 573 [access]
 574 allow $remote_1: fetch, store, log advisory, log mandatory, maximum 666 connections;
 575
 576 die!
 577 End-of-File
 578
 579 ##############################################################################
 580 # The kill.* tests must be killed as they leave pmcd running.
 581
 582 cat >kill.001 <<End-of-File
 583 # Test various special case tokens and the parser
 584
 585 tricky          128     pipe    binary          \\
 586                         cat "whacko name" \\
 587                         more                     params x-D x-R x-d 43\\
 588 21 back\\\\slash "broken\\
 589 string" \\
 590 abc:def 1;2;3 zzz "#abc\\"def" "x \\"y\\" z" \\#abc #and a comment\\
 591 to_end
 592 End-of-File
 593
 594 #
 595 cat >filter.kill.001 <<'End-of-File'
 596 #! /bin/sh
 597 #
 598 # Filter log from kill.001
 599
 600 . $PCP_DIR/etc/pcp.env
 601
 602 echo "This is  `basename $0` "
 603 echo
 604 sed -e '/No such file/s/^cat:/Cannot open/' \
 605 | tee kill.001.$$ \
 606 | grep -v "Cannot open" \
 607 | sed -e 's/^$//' \
 608         -e '/^[A-Z][a-z][a-z] [A-Z][a-z][a-z]  *[0-9][0-9]* [0-9][0-9]:[0-9][0-9]:[0-9][0-9] [0-9][0-9][0-9][0-9]$/d' \
 609         -e '/^Log for pmcd on/s/ on .*/ on .../' \
 610         -e '/^Log finished/s/finished .*/finished .../' \
 611         -e 's/^\[[A-Z].. [A-Z]..  *[0-9][0-9]* ..:..:..]/[DATE]/' \
 612         -e '/pmcd([0-9][0-9]*)/s//pmcd(PID)/' \
 613         -e '/pcp\[[0-9][0-9]*]/s//pcp[PID]/' \
 614         -e '/^pmcd: PID/s/= .*/= PID/' \
 615         -e '/pmcd caught SIG.* from pid=/s/=[0-9][0-9]*/=N/g' \
 616 | $PCP_AWK_PROG '
 617 /pipe cmd=/             { $4 = "FD"; $5 = "FD" }
 618 /ok .* INADDR_ANY/      { $2 = "FD" }
 619 /ok .*pmcd.socket$/     { next }
 620 /^tricky/       { for ( i = 1 ; i <= NF ; i++ )
 621                     if ( i == 3 ) printf "PID " ; else printf "%s ", $i
 622                     printf "\n"
 623                     next
 624                 }
 625                         { print }
 626 '
 627 echo
 628 echo 'dummy cat agent should have produced "Cannot open" messages:'
 629 grep "Cannot open" kill.001.$$
 630 rm kill.001.$$
 631 End-of-File
 632
 633 chmod u+x filter.kill.001