#!/bin/sh

. ../support/simple_eval_tools.sh

HEADER com2sec directive

SKIPIFNOT NETSNMP_TRANSPORT_UDP_DOMAIN

SKIPIF NETSNMP_NO_DEBUGGING

#

# Begin test

#

# 401a Test missing CONTEXT

CONFIGAGENT 'com2sec -Cn'

# 401b Test empty CONTEXT

CONFIGAGENT 'com2sec -Cn ""'

# 401c Test overlong CONTEXT (33 chars)

CONFIGAGENT 'com2sec -Cn 123456789012345678901234567890123 secname default com'

# 402a Test missing secName

CONFIGAGENT 'com2sec'

# 402b Test empty secName

CONFIGAGENT 'com2sec ""'

# 402c Test overlong secName (33 chars)

CONFIGAGENT 'com2sec 123456789012345678901234567890123 default com'

# 402d Test valid context and missing secName

CONFIGAGENT 'com2sec -Cn 12345678901234567890123456789012'

# 402e Test valid context and empty secName

CONFIGAGENT 'com2sec -Cn 12345678901234567890123456789012 ""'

# 403a Test missing network address

CONFIGAGENT 'com2sec t403a'

# 403b Test empty network address

CONFIGAGENT 'com2sec t403b ""'

# 403c Test forbidden value (now why it is forbidden...)

CONFIGAGENT 'com2sec t403c NETWORK'

# 404a Test missing community

CONFIGAGENT 'com2sec t404a default'

# 404b Test empty community

CONFIGAGENT 'com2sec t404b default ""'

# 404c Test forbidden value (now why it is forbidden...)

CONFIGAGENT 'com2sec t404c default COMMUNITY'

# 404d Test overlong community (255 chars)

CONFIGAGENT 'com2sec t404d default 12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567'

# 404e Test valid community

CONFIGAGENT 'com2sec t404e default 1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456'

# 405a Test 'default' configuration

CONFIGAGENT 'com2sec t405a default c405a'

# 405b Test ip address configuration

CONFIGAGENT 'com2sec t405b 10.0.0.0 c405b'

# 405c Test valid numeric mask

CONFIGAGENT 'com2sec t405c 10.0.0.0/8 c405c'

# 405d Test invalid numeric mask (too big)

CONFIGAGENT 'com2sec t405d 10.0.0.0/33 c405d'

# 405e Test invalid numeric mask (negative)

CONFIGAGENT 'com2sec t405e 10.0.0.0/-1 c405e'

# 405f Test valid ip address mask

CONFIGAGENT 'com2sec t405f 10.0.0.0/255.0.0.0 c405f'

# 405g Test invalid ip address mask

CONFIGAGENT 'com2sec t405g 10.0.0.0/512.0.0.0 c405g'

# 405h Test invalid ip address mask

CONFIGAGENT 'com2sec t405h 10.0.0.0/hh c405h'

# 405i Test address with 1 bits not covered by the mask

CONFIGAGENT 'com2sec t405i 10.0.0.0/3.192.0.0 c405i'

# 405j Test that 0.0.0.0 works (alias for default)

CONFIGAGENT 'com2sec t405j 0.0.0.0 c405j'

# 405k Test that 0.0.0.0/0 works (alias for default)

CONFIGAGENT 'com2sec t405k 0.0.0.0/0 c405k'

# 405l Test that 0.0.0.0/0.0.0.0 works (alias for default)

CONFIGAGENT 'com2sec t405l 0.0.0.0/0.0.0.0 c405l'

# 406a Test maximally long address/mask

CONFIGAGENT 'com2sec t406a 255.255.255.255/255.255.255.255 c406a'

# 407a Test non existant host name

CONFIGAGENT 'com2sec t407a no.such.address. c407a'

# 407b Test maximally long host name/mask

CONFIGAGENT 'com2sec t407b a23456789012345678901234567890123456789012345678901234567890123.a23456789012345678901234567890123456789012345678901234567890123.a23456789012345678901234567890123456789012345678901234567890123.a234567890123456789012345678901234567890123456789012345678901./255.255.255.255 c407b'

# 408 Lookup tests, require network access

# 408a Test lookup returning a single host

CONFIGAGENT 'com2sec t408a onea.net-snmp.org c408a'

# 408a Test lookup returning multiple hosts

CONFIGAGENT 'com2sec t408b twoa.net-snmp.org c408b'

# Default agent setup

CONFIGAGENT "[snmp] persistentdir $SNMP_TMP_PERSISTENTDIR"

# Dummy config to prevent the basic_setup warning

CONFIGAGENT 'rocommunity public 127.0.0.0/8'

AGENT_FLAGS='-Dnetsnmp_udp_parse_security,netsnmp_udp6_parse_security,netsnmp_unix_parse_security'

STARTAGENT

SAVECHECKAGENT() {

    CHECKAGENT "$@"

    if [ "x$return_value" != "x0" ] ; then

        FINISHED

    fi

}

SAVECHECKAGENT 'line 1: Error: missing CONTEXT_NAME parameter'

SAVECHECKAGENT 'line 2: Error: missing NAME parameter'

SAVECHECKAGENT 'line 3: Error: context name too long'

CHECKAGENTCOUNT atleastone 'line 4: Error: Blank line following com2sec token.'

SAVECHECKAGENT 'line 5: Error: empty NAME parameter'

SAVECHECKAGENT 'line 6: Error: security name too long'

SAVECHECKAGENT 'line 7: Error: missing NAME parameter'

SAVECHECKAGENT 'line 8: Error: empty NAME parameter'

SAVECHECKAGENT 'line 9: Error: missing SOURCE parameter'

SAVECHECKAGENT 'line 10: Error: empty SOURCE parameter'

SAVECHECKAGENT 'line 11: Error: example config NETWORK not properly configured'

SAVECHECKAGENT 'line 12: Error: missing COMMUNITY parameter'

SAVECHECKAGENT 'line 13: Error: empty COMMUNITY parameter'

SAVECHECKAGENT 'line 14: Error: example config COMMUNITY not properly configured'

SAVECHECKAGENT 'line 15: Error: community name too long'

SAVECHECKAGENT '<"1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456", 0.0.0.0/0.0.0.0> => "t404e"'

SAVECHECKAGENT '<"c405a", 0.0.0.0/0.0.0.0> => "t405a"'

SAVECHECKAGENT '<"c405b", 10.0.0.0/255.255.255.255> => "t405b"'

SAVECHECKAGENT '<"c405c", 10.0.0.0/255.0.0.0> => "t405c"'

SAVECHECKAGENT 'line 20: Error: bad mask length'

SAVECHECKAGENT 'line 21: Error: bad mask length'

SAVECHECKAGENT '<"c405f", 10.0.0.0/255.0.0.0> => "t405f"'

SAVECHECKAGENT 'line 23: Error: bad mask'

SAVECHECKAGENT 'line 24: Error: bad mask'

SAVECHECKAGENT 'line 25: Error: source/mask mismatch'

SAVECHECKAGENT '<"c405j", 0.0.0.0/255.255.255.255> => "t405j"'

SAVECHECKAGENT '<"c405k", 0.0.0.0/0.0.0.0> => "t405k"'

SAVECHECKAGENT '<"c405l", 0.0.0.0/0.0.0.0> => "t405l"'

SAVECHECKAGENT '<"c406a", 255.255.255.255/255.255.255.255> => "t406a"'

SAVECHECKAGENT 'line 30: Error:' # msg from h_strerror so it varies

SAVECHECKAGENT 'line 31: Error:' # msg from h_strerror so it varies

CHECKAGENT '<"c408a"'

if [ "$snmp_last_test_result" -eq 0 ] ; then

  CHECKAGENT 'line 32: Error:'

  if [ "$snmp_last_test_result" -ne 1 ] ; then

    return_value=1

    FINISHED

  fi

elif [ "$snmp_last_test_result" -ne 1 ] ; then

  return_value=1

  FINISHED

fi

CHECKAGENT '<"c408b"'

if [ "$snmp_last_test_result" -eq 0 ] ; then

  CHECKAGENT 'line 33: Error:'

  if [ "$snmp_last_test_result" -ne 1 ] ; then

    return_value=1

  fi

elif [ "$snmp_last_test_result" -ne 1 ] ; then

  return_value=1

fi

FINISHED