| #!/bin/sh |
| |
| . ../support/simple_eval_tools.sh |
| |
| HEADER com2sec directive |
| |
| SKIPIFNOT NETSNMP_TRANSPORT_UDP_DOMAIN |
| SKIPIF NETSNMP_NO_DEBUGGING |
| |
| # |
| # Begin test |
| # |
| |
| # 401a Test missing CONTEXT |
| CONFIGAGENT 'com2sec -Cn' |
| # 401b Test empty CONTEXT |
| CONFIGAGENT 'com2sec -Cn ""' |
| # 401c Test overlong CONTEXT (34 chars) |
| CONFIGAGENT 'com2sec -Cn 1234567890123456789012345678901234' |
| |
| # 402a Test missing secName |
| CONFIGAGENT 'com2sec' |
| # 402b Test empty secName |
| CONFIGAGENT 'com2sec ""' |
| # 402c Test overlong secName (34 chars) |
| CONFIGAGENT 'com2sec 1234567890123456789012345678901234' |
| # 402d Test valid context and missing secName |
| CONFIGAGENT 'com2sec -Cn 123456789012345678901234567890123' |
| # 402e Test valid context and empty secName |
| CONFIGAGENT 'com2sec -Cn 123456789012345678901234567890123 ""' |
| |
| # 403a Test missing network address |
| CONFIGAGENT 'com2sec t403a' |
| # 403b Test empty network address |
| CONFIGAGENT 'com2sec t403b ""' |
| # 403c Test forbidden value (now why it is forbidden...) |
| CONFIGAGENT 'com2sec t403c NETWORK' |
| |
| # 404a Test missing community |
| CONFIGAGENT 'com2sec t404a default' |
| # 404b Test empty community |
| CONFIGAGENT 'com2sec t404b default ""' |
| # 404c Test forbidden value (now why it is forbidden...) |
| CONFIGAGENT 'com2sec t404c default COMMUNITY' |
| # 404d Test overlong community (255 chars) |
| CONFIGAGENT 'com2sec t404d default 123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345' |
| # 404e Test valid community |
| CONFIGAGENT 'com2sec t404e default 12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234' |
| |
| # 405a Test 'default' configuration |
| CONFIGAGENT 'com2sec t405a default c405a' |
| # 405b Test ip address configuration |
| CONFIGAGENT 'com2sec t405b 10.0.0.0 c405b' |
| # 405c Test valid numeric mask |
| CONFIGAGENT 'com2sec t405c 10.0.0.0/8 c405c' |
| # 405d Test invalid numeric mask (too big) |
| CONFIGAGENT 'com2sec t405d 10.0.0.0/33 c405d' |
| # 405e Test invalid numeric mask (negative) |
| CONFIGAGENT 'com2sec t405e 10.0.0.0/-1 c405e' |
| # 405f Test valid ip address mask |
| CONFIGAGENT 'com2sec t405f 10.0.0.0/255.0.0.0 c405f' |
| # 405g Test invalid ip address mask |
| CONFIGAGENT 'com2sec t405g 10.0.0.0/512.0.0.0 c405g' |
| # 405h Test invalid ip address mask |
| CONFIGAGENT 'com2sec t405h 10.0.0.0/hh c405h' |
| # 405i Test address with 1 bits not covered by the mask |
| CONFIGAGENT 'com2sec t405i 10.0.0.0/3.192.0.0 c405i' |
| # 405j Test that 0.0.0.0 works (alias for default) |
| CONFIGAGENT 'com2sec t405j 0.0.0.0 c405j' |
| # 405k Test that 0.0.0.0/0 works (alias for default) |
| CONFIGAGENT 'com2sec t405k 0.0.0.0/0 c405k' |
| # 405l Test that 0.0.0.0/0.0.0.0 works (alias for default) |
| CONFIGAGENT 'com2sec t405l 0.0.0.0/0.0.0.0 c405l' |
| |
| # 406a Test maximally long address/mask |
| CONFIGAGENT 'com2sec t406a 255.255.255.255/255.255.255.255 c406a' |
| |
| # 407a Test non existant host name |
| CONFIGAGENT 'com2sec t407a no.such.address. c407a' |
| # 407b Test maximally long host name/mask |
| CONFIGAGENT 'com2sec t407b a23456789012345678901234567890123456789012345678901234567890123.a23456789012345678901234567890123456789012345678901234567890123.a23456789012345678901234567890123456789012345678901234567890123.a234567890123456789012345678901234567890123456789012345678901./255.255.255.255 c407b' |
| |
| # 408 Lookup tests, require network access |
| # 408a Test lookup returning a single host |
| CONFIGAGENT 'com2sec t408a www.ietf.org c408a' |
| # 408a Test lookup returning multiple hosts |
| CONFIGAGENT 'com2sec t408b www.google.com c408b' |
| |
| # Default agent setup |
| CONFIGAGENT "[snmp] persistentdir $SNMP_TMP_PERSISTENTDIR" |
| # Dummy config to prevent the basic_setup warning |
| CONFIGAGENT 'rocommunity public 127.0.0.0/8' |
| |
| AGENT_FLAGS='-Dnetsnmp_udp_parse_security,netsnmp_udp6_parse_security,netsnmp_unix_parse_security' |
| |
| STARTAGENT |
| |
| SAVECHECKAGENT() { |
| CHECKAGENT "$@" |
| if [ "x$return_value" != "x0" ] ; then |
| FINISHED |
| fi |
| } |
| |
| SAVECHECKAGENT 'line 1: Error: missing CONTEXT_NAME parameter' |
| SAVECHECKAGENT 'line 2: Error: missing NAME parameter' |
| SAVECHECKAGENT 'line 3: Error: context name too long' |
| CHECKAGENTCOUNT atleastone 'line 4: Error: Blank line following com2sec token.' |
| SAVECHECKAGENT 'line 5: Error: empty NAME parameter' |
| SAVECHECKAGENT 'line 6: Error: security name too long' |
| SAVECHECKAGENT 'line 7: Error: missing NAME parameter' |
| SAVECHECKAGENT 'line 8: Error: empty NAME parameter' |
| SAVECHECKAGENT 'line 9: Error: missing SOURCE parameter' |
| SAVECHECKAGENT 'line 10: Error: empty SOURCE parameter' |
| SAVECHECKAGENT 'line 11: Error: example config NETWORK not properly configured' |
| SAVECHECKAGENT 'line 12: Error: missing COMMUNITY parameter' |
| SAVECHECKAGENT 'line 13: Error: empty COMMUNITY parameter' |
| SAVECHECKAGENT 'line 14: Error: example config COMMUNITY not properly configured' |
| SAVECHECKAGENT 'line 15: Error: community name too long' |
| SAVECHECKAGENT '<"12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234", 0.0.0.0/0.0.0.0> => "t404e"' |
| SAVECHECKAGENT '<"c405a", 0.0.0.0/0.0.0.0> => "t405a"' |
| SAVECHECKAGENT '<"c405b", 10.0.0.0/255.255.255.255> => "t405b"' |
| SAVECHECKAGENT '<"c405c", 10.0.0.0/255.0.0.0> => "t405c"' |
| SAVECHECKAGENT 'line 20: Error: bad mask length' |
| SAVECHECKAGENT 'line 21: Error: bad mask length' |
| SAVECHECKAGENT '<"c405f", 10.0.0.0/255.0.0.0> => "t405f"' |
| SAVECHECKAGENT 'line 23: Error: bad mask' |
| SAVECHECKAGENT 'line 24: Error: bad mask' |
| SAVECHECKAGENT 'line 25: Error: source/mask mismatch' |
| SAVECHECKAGENT '<"c405j", 0.0.0.0/255.255.255.255> => "t405j"' |
| SAVECHECKAGENT '<"c405k", 0.0.0.0/0.0.0.0> => "t405k"' |
| SAVECHECKAGENT '<"c405l", 0.0.0.0/0.0.0.0> => "t405l"' |
| SAVECHECKAGENT '<"c406a", 255.255.255.255/255.255.255.255> => "t406a"' |
| SAVECHECKAGENT 'line 30: Error:' # msg from h_strerror so it varies |
| SAVECHECKAGENT 'line 31: Error:' # msg from h_strerror so it varies |
| |
| CHECKAGENT '<"c408a"' |
| if [ "$snmp_last_test_result" -eq 0 ] ; then |
| CHECKAGENT 'line 32: Error:' |
| if [ "$snmp_last_test_result" -ne 1 ] ; then |
| return_value=1 |
| FINISHED |
| fi |
| elif [ "$snmp_last_test_result" -ne 1 ] ; then |
| return_value=1 |
| FINISHED |
| fi |
| |
| CHECKAGENT '<"c408b"' |
| if [ "$snmp_last_test_result" -eq 0 ] ; then |
| CHECKAGENT 'line 33: Error:' |
| if [ "$snmp_last_test_result" -ne 1 ] ; then |
| return_value=1 |
| fi |
| elif [ "$snmp_last_test_result" -ne 1 ] ; then |
| return_value=1 |
| fi |
| |
| FINISHED |
