summaryrefslogtreecommitdiffstats
path: root/tests
diff options
context:
space:
mode:
authorJake Chen <jakechentw@gmail.com>2020-06-17 15:25:39 +0800
committerJan Pazdziora <jpazdziora@redhat.com>2020-07-08 23:20:09 +0200
commit622996a9a7d462cdb51cd2a2c5ecd3b00bb48b85 (patch)
tree14499fa48bc1ec4a0a2cc19eb71901240c8e1cb3 /tests
parenta9b23ffac32c9ac3b4fac1f60658d3b08b0c93e3 (diff)
downloadmod_authnz_pam-622996a9a7d462cdb51cd2a2c5ecd3b00bb48b85.tar.gz
mod_authnz_pam-622996a9a7d462cdb51cd2a2c5ecd3b00bb48b85.tar.xz
mod_authnz_pam-622996a9a7d462cdb51cd2a2c5ecd3b00bb48b85.zip
Store password to cache only after passing all PAM checks, including account.
Diffstat (limited to 'tests')
-rwxr-xr-xtests/run.sh5
1 files changed, 5 insertions, 0 deletions
diff --git a/tests/run.sh b/tests/run.sh
index 5a2e291..4fcc98e 100755
--- a/tests/run.sh
+++ b/tests/run.sh
@@ -33,9 +33,14 @@ curl -u bob:Secret -s -D /dev/stdout -o /dev/null http://localhost/authn | tee /
if rpm -ql httpd | grep mod_authn_socache ; then
echo "Testing AuthBasicProvider socache PAM + AuthnCacheProvideFor PAM"
+ rm /etc/pam-account/bob
curl -s -D /dev/stdout -o /dev/null http://localhost/authn | tee /dev/stderr | grep 401
curl -u bob:Secret -s -D /dev/stdout -o /dev/null http://localhost/authn-cached | tee /dev/stderr | grep 401
echo Secret > /etc/pam-auth/bob
+ curl -u bob:Secret -s -D /dev/stdout -o /dev/null http://localhost/authn-cached | tee /dev/stderr | grep 401
+ # rerun the same request, verify that passing auth did not store password into cache
+ curl -u bob:Secret -s -D /dev/stdout -o /dev/null http://localhost/authn-cached | tee /dev/stderr | grep 401
+ touch /etc/pam-account/bob
curl -u bob:Secret -s http://localhost/authn-cached | tee /dev/stderr | grep 'User bob'
echo Secret2 > /etc/pam-auth/bob
curl -u bob:Secret -s -D /dev/stdout -o /dev/null http://localhost/authn | tee /dev/stderr | grep 401