JezK
Edit File: dns_wildcard.py
# Unix SMB/CIFS implementation. # Copyright (C) Andrew Bartlett 2007 # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see <http://www.gnu.org/licenses/>. # import sys from samba import credentials from samba.dcerpc import dns, dnsserver from samba.dnsserver import record_from_string from samba.tests.subunitrun import SubunitOptions, TestProgram from samba import werror, WERRORError from samba.tests.dns_base import DNSTest import samba.getopt as options import optparse parser = optparse.OptionParser( "dns_wildcard.py <server name> <server ip> [options]") sambaopts = options.SambaOptions(parser) parser.add_option_group(sambaopts) # This timeout only has relevance when testing against Windows # Format errors tend to return patchy responses, so a timeout is needed. parser.add_option("--timeout", type="int", dest="timeout", help="Specify timeout for DNS requests") # To run against Windows # python python/samba/tests/dns_wildcard.py computer_name ip # -U"Administrator%admin_password" # --realm=Domain_name # --timeout 10 # # use command line creds if available credopts = options.CredentialsOptions(parser) parser.add_option_group(credopts) subunitopts = SubunitOptions(parser) parser.add_option_group(subunitopts) opts, args = parser.parse_args() lp = sambaopts.get_loadparm() creds = credopts.get_credentials(lp) timeout = opts.timeout if len(args) < 2: parser.print_usage() sys.exit(1) server_name = args[0] server_ip = args[1] creds.set_krb_forwardable(credentials.NO_KRB_FORWARDABLE) WILDCARD_IP = "1.1.1.1" WILDCARD = "*.wildcardtest" EXACT_IP = "1.1.1.2" EXACT = "exact.wildcardtest" LEVEL2_WILDCARD_IP = "1.1.1.3" LEVEL2_WILDCARD = "*.level2.wildcardtest" LEVEL2_EXACT_IP = "1.1.1.4" LEVEL2_EXACT = "exact.level2.wildcardtest" class TestWildCardQueries(DNSTest): def setUp(self): super(TestWildCardQueries, self).setUp() global server, server_ip, lp, creds, timeout self.server = server_name self.server_ip = server_ip self.lp = lp self.creds = creds self.timeout = timeout # Create the dns records self.dns_records = [(dns.DNS_QTYPE_A, "%s.%s" % (WILDCARD, self.get_dns_domain()), WILDCARD_IP), (dns.DNS_QTYPE_A, "%s.%s" % (EXACT, self.get_dns_domain()), EXACT_IP), (dns.DNS_QTYPE_A, ("%s.%s" % ( LEVEL2_WILDCARD, self.get_dns_domain())), LEVEL2_WILDCARD_IP), (dns.DNS_QTYPE_A, ("%s.%s" % ( LEVEL2_EXACT, self.get_dns_domain())), LEVEL2_EXACT_IP)] c = self.dns_connect() for (typ, name, data) in self.dns_records: self.add_record(c, typ, name, data) def tearDown(self): c = self.dns_connect() for (typ, name, data) in self.dns_records: self.delete_record(c, typ, name, data) def dns_connect(self): binding_str = "ncacn_ip_tcp:%s[sign]" % self.server_ip return dnsserver.dnsserver(binding_str, self.lp, self.creds) def delete_record(self, dns_conn, typ, name, data): rec = record_from_string(typ, data) del_rec_buf = dnsserver.DNS_RPC_RECORD_BUF() del_rec_buf.rec = rec try: dns_conn.DnssrvUpdateRecord2(dnsserver.DNS_CLIENT_VERSION_LONGHORN, 0, self.server, self.get_dns_domain(), name, None, del_rec_buf) except WERRORError as e: # Ignore record does not exist errors if e.args[0] != werror.WERR_DNS_ERROR_NAME_DOES_NOT_EXIST: raise e def add_record(self, dns_conn, typ, name, data): rec = record_from_string(typ, data) add_rec_buf = dnsserver.DNS_RPC_RECORD_BUF() add_rec_buf.rec = rec try: dns_conn.DnssrvUpdateRecord2(dnsserver.DNS_CLIENT_VERSION_LONGHORN, 0, self.server, self.get_dns_domain(), name, add_rec_buf, None) except WERRORError as e: raise e def test_one_a_query_match_wildcard(self): "Query an A record, should match the wildcard entry" p = self.make_name_packet(dns.DNS_OPCODE_QUERY) questions = [] # Check the record name = "miss.wildcardtest.%s" % self.get_dns_domain() q = self.make_name_question(name, dns.DNS_QTYPE_A, dns.DNS_QCLASS_IN) questions.append(q) self.finish_name_packet(p, questions) (response, response_packet) =\ self.dns_transaction_udp(p, host=self.server_ip) self.assert_dns_rcode_equals(response, dns.DNS_RCODE_OK) self.assert_dns_opcode_equals(response, dns.DNS_OPCODE_QUERY) self.assertEqual(response.ancount, 1) self.assertEqual(response.answers[0].rr_type, dns.DNS_QTYPE_A) self.assertEqual(response.answers[0].rdata, WILDCARD_IP) def test_one_a_query_match_wildcard_2_labels(self): """ Query an A record, should match the wild card entry have two labels to the left of the wild card target. """ p = self.make_name_packet(dns.DNS_OPCODE_QUERY) questions = [] # Check the record name = "label2.label1.wildcardtest.%s" % self.get_dns_domain() q = self.make_name_question(name, dns.DNS_QTYPE_A, dns.DNS_QCLASS_IN) questions.append(q) self.finish_name_packet(p, questions) (response, response_packet) =\ self.dns_transaction_udp(p, host=self.server_ip) self.assert_dns_rcode_equals(response, dns.DNS_RCODE_OK) self.assert_dns_opcode_equals(response, dns.DNS_OPCODE_QUERY) self.assertEqual(response.ancount, 1) self.assertEqual(response.answers[0].rr_type, dns.DNS_QTYPE_A) self.assertEqual(response.answers[0].rdata, WILDCARD_IP) def test_one_a_query_wildcard_entry(self): "Query the wildcard entry" p = self.make_name_packet(dns.DNS_OPCODE_QUERY) questions = [] # Check the record name = "%s.%s" % (WILDCARD, self.get_dns_domain()) q = self.make_name_question(name, dns.DNS_QTYPE_A, dns.DNS_QCLASS_IN) questions.append(q) self.finish_name_packet(p, questions) (response, response_packet) =\ self.dns_transaction_udp(p, host=self.server_ip) self.assert_dns_rcode_equals(response, dns.DNS_RCODE_OK) self.assert_dns_opcode_equals(response, dns.DNS_OPCODE_QUERY) self.assertEqual(response.ancount, 1) self.assertEqual(response.answers[0].rr_type, dns.DNS_QTYPE_A) self.assertEqual(response.answers[0].rdata, WILDCARD_IP) def test_one_a_query_exact_match(self): """Query an entry that matches the wild card but has an exact match as well. """ p = self.make_name_packet(dns.DNS_OPCODE_QUERY) questions = [] # Check the record name = "%s.%s" % (EXACT, self.get_dns_domain()) q = self.make_name_question(name, dns.DNS_QTYPE_A, dns.DNS_QCLASS_IN) questions.append(q) self.finish_name_packet(p, questions) (response, response_packet) =\ self.dns_transaction_udp(p, host=self.server_ip) self.assert_dns_rcode_equals(response, dns.DNS_RCODE_OK) self.assert_dns_opcode_equals(response, dns.DNS_OPCODE_QUERY) self.assertEqual(response.ancount, 1) self.assertEqual(response.answers[0].rr_type, dns.DNS_QTYPE_A) self.assertEqual(response.answers[0].rdata, EXACT_IP) def test_one_a_query_match_wildcard_l2(self): "Query an A record, should match the level 2 wildcard entry" p = self.make_name_packet(dns.DNS_OPCODE_QUERY) questions = [] # Check the record name = "miss.level2.wildcardtest.%s" % self.get_dns_domain() q = self.make_name_question(name, dns.DNS_QTYPE_A, dns.DNS_QCLASS_IN) questions.append(q) self.finish_name_packet(p, questions) (response, response_packet) =\ self.dns_transaction_udp(p, host=self.server_ip) self.assert_dns_rcode_equals(response, dns.DNS_RCODE_OK) self.assert_dns_opcode_equals(response, dns.DNS_OPCODE_QUERY) self.assertEqual(response.ancount, 1) self.assertEqual(response.answers[0].rr_type, dns.DNS_QTYPE_A) self.assertEqual(response.answers[0].rdata, LEVEL2_WILDCARD_IP) def test_one_a_query_match_wildcard_l2_2_labels(self): """Query an A record, should match the level 2 wild card entry have two labels to the left of the wild card target """ p = self.make_name_packet(dns.DNS_OPCODE_QUERY) questions = [] # Check the record name = "label1.label2.level2.wildcardtest.%s" % self.get_dns_domain() q = self.make_name_question(name, dns.DNS_QTYPE_A, dns.DNS_QCLASS_IN) questions.append(q) self.finish_name_packet(p, questions) (response, response_packet) =\ self.dns_transaction_udp(p, host=self.server_ip) self.assert_dns_rcode_equals(response, dns.DNS_RCODE_OK) self.assert_dns_opcode_equals(response, dns.DNS_OPCODE_QUERY) self.assertEqual(response.ancount, 1) self.assertEqual(response.answers[0].rr_type, dns.DNS_QTYPE_A) self.assertEqual(response.answers[0].rdata, LEVEL2_WILDCARD_IP) def test_one_a_query_exact_match_l2(self): """Query an entry that matches the wild card but has an exact match as well. """ p = self.make_name_packet(dns.DNS_OPCODE_QUERY) questions = [] # Check the record name = "%s.%s" % (LEVEL2_EXACT, self.get_dns_domain()) q = self.make_name_question(name, dns.DNS_QTYPE_A, dns.DNS_QCLASS_IN) questions.append(q) self.finish_name_packet(p, questions) (response, response_packet) =\ self.dns_transaction_udp(p, host=self.server_ip) self.assert_dns_rcode_equals(response, dns.DNS_RCODE_OK) self.assert_dns_opcode_equals(response, dns.DNS_OPCODE_QUERY) self.assertEqual(response.ancount, 1) self.assertEqual(response.answers[0].rr_type, dns.DNS_QTYPE_A) self.assertEqual(response.answers[0].rdata, LEVEL2_EXACT_IP) def test_one_a_query_wildcard_entry_l2(self): "Query the level 2 wildcard entry" p = self.make_name_packet(dns.DNS_OPCODE_QUERY) questions = [] # Check the record name = "%s.%s" % (LEVEL2_WILDCARD, self.get_dns_domain()) q = self.make_name_question(name, dns.DNS_QTYPE_A, dns.DNS_QCLASS_IN) questions.append(q) self.finish_name_packet(p, questions) (response, response_packet) =\ self.dns_transaction_udp(p, host=self.server_ip) self.assert_dns_rcode_equals(response, dns.DNS_RCODE_OK) self.assert_dns_opcode_equals(response, dns.DNS_OPCODE_QUERY) self.assertEqual(response.ancount, 1) self.assertEqual(response.answers[0].rr_type, dns.DNS_QTYPE_A) self.assertEqual(response.answers[0].rdata, LEVEL2_WILDCARD_IP) TestProgram(module=__name__, opts=subunitopts)