transaction_test: Add more authentication tests to run as user

So that it's possible also to verify an info text conversation
This commit is contained in:
Marco Trevisan (Treviño)
2023-09-19 18:21:03 +02:00
parent ca3e79e605
commit 1cab6e699c
3 changed files with 45 additions and 0 deletions

View File

@@ -0,0 +1,2 @@
# Custom stack to deny permit, independent of the user name/pass
auth requisite pam_deny.so

View File

@@ -0,0 +1,3 @@
# Custom stack to always permit, independent of the user name/pass
auth optional pam_echo.so This is an info message for user %u on %s
auth required pam_permit.so

View File

@@ -204,6 +204,46 @@ func TestPAM_ConfDir_FailNoServiceOrUnsupported(t *testing.T) {
} }
} }
func TestPAM_ConfDir_InfoMessage(t *testing.T) {
u, _ := user.Current()
var infoText string
tx, err := StartConfDir("echo-service", u.Username,
ConversationFunc(func(s Style, msg string) (string, error) {
switch s {
case TextInfo:
infoText = msg
return "", nil
}
return "", errors.New("unexpected")
}), "test-services")
if err != nil {
t.Fatalf("start #error: %v", err)
}
err = tx.Authenticate(0)
if err != nil {
t.Fatalf("authenticate #error: %v", err)
}
if infoText != "This is an info message for user " + u.Username + " on echo-service" {
t.Fatalf("Unexpected info message: %v", infoText)
}
}
func TestPAM_ConfDir_Deny(t *testing.T) {
u, _ := user.Current()
tx, err := StartConfDir("deny-service", u.Username, Credentials{}, "test-services")
if err != nil {
t.Fatalf("start #error: %v", err)
}
err = tx.Authenticate(0)
if err == nil {
t.Fatalf("authenticate #expected an error")
}
s := err.Error()
if len(s) == 0 {
t.Fatalf("error #expected an error message")
}
}
func TestItem(t *testing.T) { func TestItem(t *testing.T) {
tx, _ := StartFunc("passwd", "test", func(s Style, msg string) (string, error) { tx, _ := StartFunc("passwd", "test", func(s Style, msg string) (string, error) {
return "", nil return "", nil