168dba163c
The old name "common" clashes with the convention of system test directory naming. It appears as a system test directory, but it only contains helper files. To reduce confusion and to allow automatic detection of issues with possibly missing test files, rename the helper directory to "_common". The leading underscore indicates the directory is different and the its name can no longer be confused with regular system test directories.
232 lines
8.6 KiB
Bash
232 lines
8.6 KiB
Bash
#!/bin/sh
|
|
|
|
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
set -e
|
|
|
|
. ../conf.sh
|
|
|
|
status=0
|
|
n=0
|
|
|
|
DIGOPTS="@10.53.0.1 -p ${PORT} +nocookie"
|
|
RNDCCMD="$RNDC -c ../_common/rndc.conf -p ${CONTROLPORT} -s"
|
|
|
|
newtest() {
|
|
n=$((n + 1))
|
|
echo_i "${1} (${n})"
|
|
ret=0
|
|
}
|
|
|
|
test_update() {
|
|
host="$1"
|
|
type="$2"
|
|
cmd="$3"
|
|
digout="$4"
|
|
should_fail="$5"
|
|
|
|
cat <<EOF > ns1/update.txt
|
|
server 10.53.0.1 ${PORT}
|
|
update add $host $cmd
|
|
send
|
|
EOF
|
|
|
|
newtest "testing update for $host $type $cmd${comment:+ }$comment"
|
|
$NSUPDATE -k ns1/ddns.key ns1/update.txt > /dev/null 2>&1 || {
|
|
[ "$should_fail" ] || \
|
|
echo_i "update failed for $host $type $cmd"
|
|
return 1
|
|
}
|
|
|
|
out=$($DIG $DIGOPTS -t $type -q $host | grep -E "^$host")
|
|
lines=$(echo "$out" | grep "$digout" | wc -l)
|
|
[ $lines -eq 1 ] || {
|
|
[ "$should_fail" ] || \
|
|
echo_i "dig output incorrect for $host $type $cmd: $out"
|
|
return 1
|
|
}
|
|
return 0
|
|
}
|
|
|
|
test_update testdc1.example.nil. A "86400 A 10.53.0.10" "10.53.0.10" || ret=1
|
|
status=$((status + ret))
|
|
|
|
test_update testdc2.example.nil. A "86400 A 10.53.0.11" "10.53.0.11" || ret=1
|
|
status=$((status + ret))
|
|
|
|
test_update testdc3.example.nil. A "86400 A 10.53.0.10" "10.53.0.10" || ret=1
|
|
status=$((status + ret))
|
|
|
|
test_update deny.example.nil. TXT "86400 TXT helloworld" "helloworld" should_fail && ret=1
|
|
status=$((status + ret))
|
|
|
|
newtest "testing nxrrset"
|
|
$DIG $DIGOPTS testdc1.example.nil AAAA > dig.out.$n || ret=1
|
|
grep "status: NOERROR" dig.out.$n > /dev/null || ret=1
|
|
grep "ANSWER: 0" dig.out.$n > /dev/null || ret=1
|
|
status=$((status + ret))
|
|
|
|
newtest "testing prerequisites are checked correctly"
|
|
cat > ns1/update.txt << EOF
|
|
server 10.53.0.1 ${PORT}
|
|
prereq nxdomain testdc3.example.nil
|
|
update add testdc3.example.nil 86500 in a 10.53.0.12
|
|
send
|
|
EOF
|
|
$NSUPDATE -k ns1/ddns.key ns1/update.txt > /dev/null 2>&1 && ret=1
|
|
out=$($DIG $DIGOPTS +short a testdc3.example.nil)
|
|
[ "$out" = "10.53.0.12" ] && ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing passing client info into DLZ driver"
|
|
out=$($DIG $DIGOPTS +short -t txt -q source-addr.example.nil | grep -v '^;')
|
|
addr=$(eval echo "$out" | cut -f1 -d'#')
|
|
[ "$addr" = "10.53.0.1" ] || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing DLZ driver is cleaned up on reload"
|
|
rndc_reload ns1 10.53.0.1
|
|
for i in 0 1 2 3 4 5 6 7 8 9; do
|
|
ret=0
|
|
grep 'dlz_example: shutting down zone example.nil' ns1/named.run > /dev/null 2>&1 || ret=1
|
|
[ "$ret" -eq 0 ] && break
|
|
sleep 1
|
|
done
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing multiple DLZ drivers"
|
|
test_update testdc1.alternate.nil. A "86400 A 10.53.0.10" "10.53.0.10" || ret=1
|
|
status=$((status + ret))
|
|
|
|
newtest "testing AXFR from DLZ drivers"
|
|
$DIG $DIGOPTS +noall +answer axfr example.nil > dig.out.example.ns1.test$n || ret=1
|
|
lines=$(cat dig.out.example.ns1.test$n | wc -l)
|
|
[ ${lines:-0} -eq 4 ] || ret=1
|
|
$DIG $DIGOPTS +noall +answer axfr alternate.nil > dig.out.alternate.ns1.test$n || ret=1
|
|
lines=$(cat dig.out.alternate.ns1.test$n | wc -l)
|
|
[ ${lines:-0} -eq 5 ] || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing AXFR denied from DLZ drivers"
|
|
$DIG $DIGOPTS -b 10.53.0.5 +noall +answer axfr example.nil > dig.out.example.ns1.test$n || ret=1
|
|
grep "; Transfer failed" dig.out.example.ns1.test$n > /dev/null || ret=1
|
|
$DIG $DIGOPTS -b 10.53.0.5 +noall +answer axfr alternate.nil > dig.out.alternate.ns1.test$n || ret=1
|
|
grep "; Transfer failed" dig.out.alternate.ns1.test$n > /dev/null || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing AXFR denied based on view ACL"
|
|
# 10.53.0.1 should be disallowed
|
|
$DIG $DIGOPTS -b 10.53.0.1 +noall +answer axfr example.org > dig.out.example.ns1.test$n.1 || ret=1
|
|
grep "; Transfer failed" dig.out.example.ns1.test$n.1 > /dev/null || ret=1
|
|
# 10.53.0.2 should be allowed
|
|
$DIG $DIGOPTS -b 10.53.0.2 +noall +answer axfr example.org > dig.out.example.ns1.test$n.2 || ret=1
|
|
grep "; Transfer failed" dig.out.example.ns1.test$n.2 > /dev/null && ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing unsearched/unregistered DLZ zone is not found"
|
|
$DIG $DIGOPTS +noall +answer ns other.nil > dig.out.ns1.test$n || ret=1
|
|
grep "3600.IN.NS.other.nil." dig.out.ns1.test$n > /dev/null && ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing unsearched/registered DLZ zone is found"
|
|
$DIG $DIGOPTS +noall +answer ns zone.nil > dig.out.ns1.test$n || ret=1
|
|
grep "3600.IN.NS.zone.nil." dig.out.ns1.test$n > /dev/null || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing unsearched/registered DLZ zone is found"
|
|
$DIG $DIGOPTS +noall +answer ns zone.nil > dig.out.ns1.test$n || ret=1
|
|
grep "3600.IN.NS.zone.nil." dig.out.ns1.test$n > /dev/null || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing correct behavior with findzone returning ISC_R_NOMORE"
|
|
$DIG $DIGOPTS +noall a test.example.com > /dev/null 2>&1 || ret=1
|
|
# we should only find one logged lookup per searched DLZ database
|
|
lines=$(grep "dlz_findzonedb.*test\.example\.com.*example.nil" ns1/named.run | wc -l)
|
|
[ $lines -eq 1 ] || ret=1
|
|
lines=$(grep "dlz_findzonedb.*test\.example\.com.*alternate.nil" ns1/named.run | wc -l)
|
|
[ $lines -eq 1 ] || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing findzone can return different results per client"
|
|
$DIG $DIGOPTS -b 10.53.0.1 +noall a test.example.net > /dev/null 2>&1 || ret=1
|
|
# we should only find one logged lookup per searched DLZ database
|
|
lines=$(grep "dlz_findzonedb.*example\.net.*example.nil" ns1/named.run | wc -l)
|
|
[ $lines -eq 1 ] || ret=1
|
|
lines=$(grep "dlz_findzonedb.*example\.net.*alternate.nil" ns1/named.run | wc -l)
|
|
[ $lines -eq 1 ] || ret=1
|
|
$DIG $DIGOPTS -b 10.53.0.2 +noall a test.example.net > /dev/null 2>&1 || ret=1
|
|
# we should find several logged lookups this time
|
|
lines=$(grep "dlz_findzonedb.*example\.net.*example.nil" ns1/named.run | wc -l)
|
|
[ $lines -gt 2 ] || ret=1
|
|
lines=$(grep "dlz_findzonedb.*example\.net.*alternate.nil" ns1/named.run | wc -l)
|
|
[ $lines -gt 2 ] || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing zone returning oversized data"
|
|
$DIG $DIGOPTS txt too-long.example.nil > dig.out.ns1.test$n 2>&1 || ret=1
|
|
grep "status: SERVFAIL" dig.out.ns1.test$n > /dev/null || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "testing zone returning oversized data at zone origin"
|
|
$DIG $DIGOPTS txt bigcname.domain > dig.out.ns1.test$n 2>&1 || ret=1
|
|
grep "status: SERVFAIL" dig.out.ns1.test$n > /dev/null || ret=1
|
|
[ "$ret" -eq 0 ] || echo_i "failed"
|
|
status=$((status + ret))
|
|
|
|
newtest "checking redirected lookup for nonexistent name"
|
|
$DIG $DIGOPTS @10.53.0.1 unexists a > dig.out.ns1.test$n || ret=1
|
|
grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1
|
|
grep "^unexists.*A.*100.100.100.2" dig.out.ns1.test$n > /dev/null || ret=1
|
|
grep "flags:[^;]* aa[ ;]" dig.out.ns1.test$n > /dev/null || ret=1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=$((status + ret))
|
|
|
|
newtest "checking no redirected lookup for nonexistent type"
|
|
$DIG $DIGOPTS @10.53.0.1 exists aaaa > dig.out.ns1.test$n || ret=1
|
|
grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1
|
|
grep "ANSWER: 0" dig.out.ns1.test$n > /dev/null || ret=1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=$((status + ret))
|
|
|
|
newtest "checking redirected lookup for a long nonexistent name"
|
|
$DIG $DIGOPTS @10.53.0.1 long.name.is.not.there a > dig.out.ns1.test$n || ret=1
|
|
grep "status: NOERROR" dig.out.ns1.test$n > /dev/null || ret=1
|
|
grep "^long.name.*A.*100.100.100.3" dig.out.ns1.test$n > /dev/null || ret=1
|
|
grep "flags:[^;]* aa[ ;]" dig.out.ns1.test$n > /dev/null || ret=1
|
|
lookups=$(grep "lookup #.*\.not\.there" ns1/named.run | wc -l)
|
|
[ "$lookups" -eq 1 ] || ret=1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=$((status + ret))
|
|
|
|
newtest "checking ECS data is passed to driver in clientinfo"
|
|
$DIG $DIGOPTS +short +subnet=192.0/16 source-addr.example.nil txt > dig.out.ns1.test$n.1 || ret=1
|
|
grep "192.0.0.0/16/0" dig.out.ns1.test$n.1 > /dev/null || ret=1
|
|
$DIG $DIGOPTS +short source-addr.example.nil txt > dig.out.ns1.test$n.2 || ret=1
|
|
grep "not.*present" dig.out.ns1.test$n.2 > /dev/null || ret=1
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=$((status + ret))
|
|
|
|
echo_i "exit status: $status"
|
|
[ $status -eq 0 ] || exit 1
|