/*
   Unix SMB/CIFS implementation.
   Samba utility functions
   Copyright (C) Andrew Tridgell 1992-1998
   Copyright (C) Tim Potter      2000-2001
   Copyright (C) Jeremy Allison  1992-2007

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 3 of the License, or
   (at your option) any later version.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/

#include "includes.h"

/****************************************************************************
 Get a port number in host byte order from a sockaddr_storage.
****************************************************************************/

uint16_t get_sockaddr_port(const struct sockaddr_storage *pss)
{
	uint16_t port = 0;

	if (pss->ss_family != AF_INET) {
#if defined(HAVE_IPV6)
		/* IPv6 */
		const struct sockaddr_in6 *sa6 =
			(const struct sockaddr_in6 *)pss;
		port = ntohs(sa6->sin6_port);
#endif
	} else {
		const struct sockaddr_in *sa =
			(const struct sockaddr_in *)pss;
		port = ntohs(sa->sin_port);
	}
	return port;
}

/****************************************************************************
 Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
****************************************************************************/

static char *print_sockaddr_len(char *dest,
			size_t destlen,
			const struct sockaddr *psa,
			socklen_t psalen)
{
	if (destlen > 0) {
		dest[0] = '\0';
	}
	(void)sys_getnameinfo(psa,
			psalen,
			dest, destlen,
			NULL, 0,
			NI_NUMERICHOST);
	return dest;
}

/****************************************************************************
 Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
****************************************************************************/

char *print_sockaddr(char *dest,
			size_t destlen,
			const struct sockaddr_storage *psa)
{
	return print_sockaddr_len(dest, destlen, (struct sockaddr *)psa,
			sizeof(struct sockaddr_storage));
}

/****************************************************************************
 Print out a canonical IPv4 or IPv6 address from a struct sockaddr_storage.
****************************************************************************/

char *print_canonical_sockaddr(TALLOC_CTX *ctx,
			const struct sockaddr_storage *pss)
{
	char addr[INET6_ADDRSTRLEN];
	char *dest = NULL;
	int ret;

	/* Linux getnameinfo() man pages says port is unitialized if
	   service name is NULL. */

	ret = sys_getnameinfo((const struct sockaddr *)pss,
			sizeof(struct sockaddr_storage),
			addr, sizeof(addr),
			NULL, 0,
			NI_NUMERICHOST);
	if (ret != 0) {
		return NULL;
	}

	if (pss->ss_family != AF_INET) {
#if defined(HAVE_IPV6)
		dest = talloc_asprintf(ctx, "[%s]", addr);
#else
		return NULL;
#endif
	} else {
		dest = talloc_asprintf(ctx, "%s", addr);
	}
	
	return dest;
}

/****************************************************************************
 Return the string of an IP address (IPv4 or IPv6).
****************************************************************************/

static const char *get_socket_addr(int fd, char *addr_buf, size_t addr_len)
{
	struct sockaddr_storage sa;
	socklen_t length = sizeof(sa);

	/* Ok, returning a hard coded IPv4 address
 	 * is bogus, but it's just as bogus as a
 	 * zero IPv6 address. No good choice here.
 	 */

	strlcpy(addr_buf, "0.0.0.0", addr_len);

	if (fd == -1) {
		return addr_buf;
	}

	if (getsockname(fd, (struct sockaddr *)&sa, &length) < 0) {
		DEBUG(0,("getsockname failed. Error was %s\n",
			strerror(errno) ));
		return addr_buf;
	}

	return print_sockaddr_len(addr_buf, addr_len, (struct sockaddr *)&sa, length);
}

/****************************************************************************
 Return the port number we've bound to on a socket.
****************************************************************************/

int get_socket_port(int fd)
{
	struct sockaddr_storage sa;
	socklen_t length = sizeof(sa);

	if (fd == -1) {
		return -1;
	}

	if (getsockname(fd, (struct sockaddr *)&sa, &length) < 0) {
		DEBUG(0,("getpeername failed. Error was %s\n",
			strerror(errno) ));
		return -1;
	}

#if defined(HAVE_IPV6)
	if (sa.ss_family == AF_INET6) {
		return ntohs(((struct sockaddr_in6 *)&sa)->sin6_port);
	}
#endif
	if (sa.ss_family == AF_INET) {
		return ntohs(((struct sockaddr_in *)&sa)->sin_port);
	}
	return -1;
}

const char *client_name(int fd)
{
	return get_peer_name(fd,false);
}

const char *client_addr(int fd, char *addr, size_t addrlen)
{
	return get_peer_addr(fd,addr,addrlen);
}

const char *client_socket_addr(int fd, char *addr, size_t addr_len)
{
	return get_socket_addr(fd, addr, addr_len);
}

#if 0
/* Not currently used. JRA. */
int client_socket_port(int fd)
{
	return get_socket_port(fd);
}
#endif

/****************************************************************************
 Accessor functions to make thread-safe code easier later...
****************************************************************************/

void set_smb_read_error(enum smb_read_errors *pre,
			enum smb_read_errors newerr)
{
	if (pre) {
		*pre = newerr;
	}
}

void cond_set_smb_read_error(enum smb_read_errors *pre,
			enum smb_read_errors newerr)
{
	if (pre && *pre == SMB_READ_OK) {
		*pre = newerr;
	}
}

/****************************************************************************
 Determine if a file descriptor is in fact a socket.
****************************************************************************/

bool is_a_socket(int fd)
{
	int v;
	socklen_t l;
	l = sizeof(int);
	return(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&v, &l) == 0);
}

enum SOCK_OPT_TYPES {OPT_BOOL,OPT_INT,OPT_ON};

typedef struct smb_socket_option {
	const char *name;
	int level;
	int option;
	int value;
	int opttype;
} smb_socket_option;

static const smb_socket_option socket_options[] = {
  {"SO_KEEPALIVE", SOL_SOCKET, SO_KEEPALIVE, 0, OPT_BOOL},
  {"SO_REUSEADDR", SOL_SOCKET, SO_REUSEADDR, 0, OPT_BOOL},
  {"SO_BROADCAST", SOL_SOCKET, SO_BROADCAST, 0, OPT_BOOL},
#ifdef TCP_NODELAY
  {"TCP_NODELAY", IPPROTO_TCP, TCP_NODELAY, 0, OPT_BOOL},
#endif
#ifdef TCP_KEEPCNT
  {"TCP_KEEPCNT", IPPROTO_TCP, TCP_KEEPCNT, 0, OPT_INT},
#endif
#ifdef TCP_KEEPIDLE
  {"TCP_KEEPIDLE", IPPROTO_TCP, TCP_KEEPIDLE, 0, OPT_INT},
#endif
#ifdef TCP_KEEPINTVL
  {"TCP_KEEPINTVL", IPPROTO_TCP, TCP_KEEPINTVL, 0, OPT_INT},
#endif
#ifdef IPTOS_LOWDELAY
  {"IPTOS_LOWDELAY", IPPROTO_IP, IP_TOS, IPTOS_LOWDELAY, OPT_ON},
#endif
#ifdef IPTOS_THROUGHPUT
  {"IPTOS_THROUGHPUT", IPPROTO_IP, IP_TOS, IPTOS_THROUGHPUT, OPT_ON},
#endif
#ifdef SO_REUSEPORT
  {"SO_REUSEPORT", SOL_SOCKET, SO_REUSEPORT, 0, OPT_BOOL},
#endif
#ifdef SO_SNDBUF
  {"SO_SNDBUF", SOL_SOCKET, SO_SNDBUF, 0, OPT_INT},
#endif
#ifdef SO_RCVBUF
  {"SO_RCVBUF", SOL_SOCKET, SO_RCVBUF, 0, OPT_INT},
#endif
#ifdef SO_SNDLOWAT
  {"SO_SNDLOWAT", SOL_SOCKET, SO_SNDLOWAT, 0, OPT_INT},
#endif
#ifdef SO_RCVLOWAT
  {"SO_RCVLOWAT", SOL_SOCKET, SO_RCVLOWAT, 0, OPT_INT},
#endif
#ifdef SO_SNDTIMEO
  {"SO_SNDTIMEO", SOL_SOCKET, SO_SNDTIMEO, 0, OPT_INT},
#endif
#ifdef SO_RCVTIMEO
  {"SO_RCVTIMEO", SOL_SOCKET, SO_RCVTIMEO, 0, OPT_INT},
#endif
#ifdef TCP_FASTACK
  {"TCP_FASTACK", IPPROTO_TCP, TCP_FASTACK, 0, OPT_INT},
#endif
#ifdef TCP_QUICKACK
  {"TCP_QUICKACK", IPPROTO_TCP, TCP_QUICKACK, 0, OPT_BOOL},
#endif
  {NULL,0,0,0,0}};

/****************************************************************************
 Print socket options.
****************************************************************************/

static void print_socket_options(int s)
{
	int value;
	socklen_t vlen = 4;
	const smb_socket_option *p = &socket_options[0];

	/* wrapped in if statement to prevent streams
	 * leak in SCO Openserver 5.0 */
	/* reported on samba-technical  --jerry */
	if ( DEBUGLEVEL >= 5 ) {
		DEBUG(5,("Socket options:\n"));
		for (; p->name != NULL; p++) {
			if (getsockopt(s, p->level, p->option,
						(void *)&value, &vlen) == -1) {
				DEBUGADD(5,("\tCould not test socket option %s.\n",
							p->name));
			} else {
				DEBUGADD(5,("\t%s = %d\n",
							p->name,value));
			}
		}
	}
 }

/****************************************************************************
 Set user socket options.
****************************************************************************/

void set_socket_options(int fd, const char *options)
{
	TALLOC_CTX *ctx = talloc_stackframe();
	char *tok;

	while (next_token_talloc(ctx, &options, &tok," \t,")) {
		int ret=0,i;
		int value = 1;
		char *p;
		bool got_value = false;

		if ((p = strchr_m(tok,'='))) {
			*p = 0;
			value = atoi(p+1);
			got_value = true;
		}

		for (i=0;socket_options[i].name;i++)
			if (strequal(socket_options[i].name,tok))
				break;

		if (!socket_options[i].name) {
			DEBUG(0,("Unknown socket option %s\n",tok));
			continue;
		}

		switch (socket_options[i].opttype) {
		case OPT_BOOL:
		case OPT_INT:
			ret = setsockopt(fd,socket_options[i].level,
					socket_options[i].option,
					(char *)&value,sizeof(int));
			break;

		case OPT_ON:
			if (got_value)
				DEBUG(0,("syntax error - %s "
					"does not take a value\n",tok));

			{
				int on = socket_options[i].value;
				ret = setsockopt(fd,socket_options[i].level,
					socket_options[i].option,
					(char *)&on,sizeof(int));
			}
			break;
		}

		if (ret != 0) {
			/* be aware that some systems like Solaris return
			 * EINVAL to a setsockopt() call when the client
			 * sent a RST previously - no need to worry */
			DEBUG(2,("Failed to set socket option %s (Error %s)\n",
				tok, strerror(errno) ));
		}
	}

	TALLOC_FREE(ctx);
	print_socket_options(fd);
}

/****************************************************************************
 Read from a socket.
****************************************************************************/

ssize_t read_udp_v4_socket(int fd,
			char *buf,
			size_t len,
			struct sockaddr_storage *psa)
{
	ssize_t ret;
	socklen_t socklen = sizeof(*psa);
	struct sockaddr_in *si = (struct sockaddr_in *)psa;

	memset((char *)psa,'\0',socklen);

	ret = (ssize_t)sys_recvfrom(fd,buf,len,0,
			(struct sockaddr *)psa,&socklen);
	if (ret <= 0) {
		/* Don't print a low debug error for a non-blocking socket. */
		if (errno == EAGAIN) {
			DEBUG(10,("read_udp_v4_socket: returned EAGAIN\n"));
		} else {
			DEBUG(2,("read_udp_v4_socket: failed. errno=%s\n",
				strerror(errno)));
		}
		return 0;
	}

	if (psa->ss_family != AF_INET) {
		DEBUG(2,("read_udp_v4_socket: invalid address family %d "
			"(not IPv4)\n", (int)psa->ss_family));
		return 0;
	}

	DEBUG(10,("read_udp_v4_socket: ip %s port %d read: %lu\n",
			inet_ntoa(si->sin_addr),
			si->sin_port,
			(unsigned long)ret));

	return ret;
}

/****************************************************************************
 Read data from a file descriptor with a timout in msec.
 mincount = if timeout, minimum to read before returning
 maxcount = number to be read.
 time_out = timeout in milliseconds
 NB. This can be called with a non-socket fd, don't change
 sys_read() to sys_recv() or other socket call.
****************************************************************************/

NTSTATUS read_fd_with_timeout(int fd, char *buf,
				  size_t mincnt, size_t maxcnt,
				  unsigned int time_out,
				  size_t *size_ret)
{
	fd_set fds;
	int selrtn;
	ssize_t readret;
	size_t nread = 0;
	struct timeval timeout;
	char addr[INET6_ADDRSTRLEN];
	int save_errno;

	/* just checking .... */
	if (maxcnt <= 0)
		return NT_STATUS_OK;

	/* Blocking read */
	if (time_out == 0) {
		if (mincnt == 0) {
			mincnt = maxcnt;
		}

		while (nread < mincnt) {
			readret = sys_read(fd, buf + nread, maxcnt - nread);

			if (readret == 0) {
				DEBUG(5,("read_fd_with_timeout: "
					"blocking read. EOF from client.\n"));
				return NT_STATUS_END_OF_FILE;
			}

			if (readret == -1) {
				save_errno = errno;
				if (fd == get_client_fd()) {
					/* Try and give an error message
					 * saying what client failed. */
					DEBUG(0,("read_fd_with_timeout: "
						"client %s read error = %s.\n",
						get_peer_addr(fd,addr,sizeof(addr)),
						strerror(save_errno) ));
				} else {
					DEBUG(0,("read_fd_with_timeout: "
						"read error = %s.\n",
						strerror(save_errno) ));
				}
				return map_nt_error_from_unix(save_errno);
			}
			nread += readret;
		}
		goto done;
	}

	/* Most difficult - timeout read */
	/* If this is ever called on a disk file and
	   mincnt is greater then the filesize then
	   system performance will suffer severely as
	   select always returns true on disk files */

	/* Set initial timeout */
	timeout.tv_sec = (time_t)(time_out / 1000);
	timeout.tv_usec = (long)(1000 * (time_out % 1000));

	for (nread=0; nread < mincnt; ) {
		FD_ZERO(&fds);
		FD_SET(fd,&fds);

		selrtn = sys_select_intr(fd+1,&fds,NULL,NULL,&timeout);

		/* Check if error */
		if (selrtn == -1) {
			save_errno = errno;
			/* something is wrong. Maybe the socket is dead? */
			if (fd == get_client_fd()) {
				/* Try and give an error message saying
				 * what client failed. */
				DEBUG(0,("read_fd_with_timeout: timeout "
				"read for client %s. select error = %s.\n",
				get_peer_addr(fd,addr,sizeof(addr)),
				strerror(save_errno) ));
			} else {
				DEBUG(0,("read_fd_with_timeout: timeout "
				"read. select error = %s.\n",
				strerror(save_errno) ));
			}
			return map_nt_error_from_unix(save_errno);
		}

		/* Did we timeout ? */
		if (selrtn == 0) {
			DEBUG(10,("read_fd_with_timeout: timeout read. "
				"select timed out.\n"));
			return NT_STATUS_IO_TIMEOUT;
		}

		readret = sys_read(fd, buf+nread, maxcnt-nread);

		if (readret == 0) {
			/* we got EOF on the file descriptor */
			DEBUG(5,("read_fd_with_timeout: timeout read. "
				"EOF from client.\n"));
			return NT_STATUS_END_OF_FILE;
		}

		if (readret == -1) {
			save_errno = errno;
			/* the descriptor is probably dead */
			if (fd == get_client_fd()) {
				/* Try and give an error message
				 * saying what client failed. */
				DEBUG(0,("read_fd_with_timeout: timeout "
					"read to client %s. read error = %s.\n",
					get_peer_addr(fd,addr,sizeof(addr)),
					strerror(save_errno) ));
			} else {
				DEBUG(0,("read_fd_with_timeout: timeout "
					"read. read error = %s.\n",
					strerror(save_errno) ));
			}
			return map_nt_error_from_unix(errno);
		}

		nread += readret;
	}

 done:
	/* Return the number we got */
	if (size_ret) {
		*size_ret = nread;
	}
	return NT_STATUS_OK;
}

/****************************************************************************
 Read data from an fd, reading exactly N bytes.
 NB. This can be called with a non-socket fd, don't add dependencies
 on socket calls.
****************************************************************************/

NTSTATUS read_data(int fd, char *buffer, size_t N)
{
	return read_fd_with_timeout(fd, buffer, N, N, 0, NULL);
}

/****************************************************************************
 Write all data from an iov array
 NB. This can be called with a non-socket fd, don't add dependencies
 on socket calls.
****************************************************************************/

ssize_t write_data_iov(int fd, const struct iovec *orig_iov, int iovcnt)
{
	int i;
	size_t to_send;
	ssize_t thistime;
	size_t sent;
	struct iovec *iov_copy, *iov;

	to_send = 0;
	for (i=0; i<iovcnt; i++) {
		to_send += orig_iov[i].iov_len;
	}

	thistime = sys_writev(fd, orig_iov, iovcnt);
	if ((thistime <= 0) || (thistime == to_send)) {
		return thistime;
	}
	sent = thistime;

	/*
	 * We could not send everything in one call. Make a copy of iov that
	 * we can mess with. We keep a copy of the array start in iov_copy for
	 * the TALLOC_FREE, because we're going to modify iov later on,
	 * discarding elements.
	 */

	iov_copy = (struct iovec *)TALLOC_MEMDUP(
		talloc_tos(), orig_iov, sizeof(struct iovec) * iovcnt);

	if (iov_copy == NULL) {
		errno = ENOMEM;
		return -1;
	}
	iov = iov_copy;

	while (sent < to_send) {
		/*
		 * We have to discard "thistime" bytes from the beginning
		 * iov array, "thistime" contains the number of bytes sent
		 * via writev last.
		 */
		while (thistime > 0) {
			if (thistime < iov[0].iov_len) {
				char *new_base =
					(char *)iov[0].iov_base + thistime;
				iov[0].iov_base = (void *)new_base;
				iov[0].iov_len -= thistime;
				break;
			}
			thistime -= iov[0].iov_len;
			iov += 1;
			iovcnt -= 1;
		}

		thistime = sys_writev(fd, iov, iovcnt);
		if (thistime <= 0) {
			break;
		}
		sent += thistime;
	}

	TALLOC_FREE(iov_copy);
	return sent;
}

/****************************************************************************
 Write data to a fd.
 NB. This can be called with a non-socket fd, don't add dependencies
 on socket calls.
****************************************************************************/

ssize_t write_data(int fd, const char *buffer, size_t N)
{
	ssize_t ret;
	struct iovec iov;

	iov.iov_base = CONST_DISCARD(void *, buffer);
	iov.iov_len = N;

	ret = write_data_iov(fd, &iov, 1);
	if (ret >= 0) {
		return ret;
	}

	if (fd == get_client_fd()) {
		char addr[INET6_ADDRSTRLEN];
		/*
		 * Try and give an error message saying what client failed.
		 */
		DEBUG(0, ("write_data: write failure in writing to client %s. "
			  "Error %s\n", get_peer_addr(fd,addr,sizeof(addr)),
			  strerror(errno)));
	} else {
		DEBUG(0,("write_data: write failure. Error = %s\n",
			 strerror(errno) ));
	}

	return -1;
}

/****************************************************************************
 Send a keepalive packet (rfc1002).
****************************************************************************/

bool send_keepalive(int client)
{
	unsigned char buf[4];

	buf[0] = SMBkeepalive;
	buf[1] = buf[2] = buf[3] = 0;

	return(write_data(client,(char *)buf,4) == 4);
}

/****************************************************************************
 Read 4 bytes of a smb packet and return the smb length of the packet.
 Store the result in the buffer.
 This version of the function will return a length of zero on receiving
 a keepalive packet.
 Timeout is in milliseconds.
****************************************************************************/

NTSTATUS read_smb_length_return_keepalive(int fd, char *inbuf,
					  unsigned int timeout,
					  size_t *len)
{
	int msg_type;
	NTSTATUS status;

	status = read_fd_with_timeout(fd, inbuf, 4, 4, timeout, NULL);

	if (!NT_STATUS_IS_OK(status)) {
		return status;
	}

	*len = smb_len(inbuf);
	msg_type = CVAL(inbuf,0);

	if (msg_type == SMBkeepalive) {
		DEBUG(5,("Got keepalive packet\n"));
	}

	DEBUG(10,("got smb length of %lu\n",(unsigned long)(*len)));

	return NT_STATUS_OK;
}

/****************************************************************************
 Read 4 bytes of a smb packet and return the smb length of the packet.
 Store the result in the buffer. This version of the function will
 never return a session keepalive (length of zero).
 Timeout is in milliseconds.
****************************************************************************/

NTSTATUS read_smb_length(int fd, char *inbuf, unsigned int timeout,
			 size_t *len)
{
	uint8_t msgtype = SMBkeepalive;

	while (msgtype == SMBkeepalive) {
		NTSTATUS status;

		status = read_smb_length_return_keepalive(fd, inbuf, timeout,
							  len);
		if (!NT_STATUS_IS_OK(status)) {
			return status;
		}

		msgtype = CVAL(inbuf, 0);
	}

	DEBUG(10,("read_smb_length: got smb length of %lu\n",
		  (unsigned long)len));

	return NT_STATUS_OK;
}

/****************************************************************************
 Read an smb from a fd.
 The timeout is in milliseconds.
 This function will return on receipt of a session keepalive packet.
 maxlen is the max number of bytes to return, not including the 4 byte
 length. If zero it means buflen limit.
 Doesn't check the MAC on signed packets.
****************************************************************************/

NTSTATUS receive_smb_raw(int fd, char *buffer, size_t buflen, unsigned int timeout,
			 size_t maxlen, size_t *p_len)
{
	size_t len;
	NTSTATUS status;

	status = read_smb_length_return_keepalive(fd,buffer,timeout,&len);

	if (!NT_STATUS_IS_OK(status)) {
		DEBUG(10, ("receive_smb_raw: %s!\n", nt_errstr(status)));
		return status;
	}

	if (len > buflen) {
		DEBUG(0,("Invalid packet length! (%lu bytes).\n",
					(unsigned long)len));
		return NT_STATUS_INVALID_PARAMETER;
	}

	if(len > 0) {
		if (maxlen) {
			len = MIN(len,maxlen);
		}

		status = read_fd_with_timeout(
			fd, buffer+4, len, len, timeout, &len);

		if (!NT_STATUS_IS_OK(status)) {
			return status;
		}

		/* not all of samba3 properly checks for packet-termination
		 * of strings. This ensures that we don't run off into
		 * empty space. */
		SSVAL(buffer+4,len, 0);
	}

	*p_len = len;
	return NT_STATUS_OK;
}

/****************************************************************************
 Open a socket of the specified type, port, and address for incoming data.
****************************************************************************/

int open_socket_in(int type,
		uint16_t port,
		int dlevel,
		const struct sockaddr_storage *psock,
		bool rebind)
{
	struct sockaddr_storage sock;
	int res;
	socklen_t slen = sizeof(struct sockaddr_in);

	sock = *psock;

#if defined(HAVE_IPV6)
	if (sock.ss_family == AF_INET6) {
		((struct sockaddr_in6 *)&sock)->sin6_port = htons(port);
		slen = sizeof(struct sockaddr_in6);
	}
#endif
	if (sock.ss_family == AF_INET) {
		((struct sockaddr_in *)&sock)->sin_port = htons(port);
	}

	res = socket(sock.ss_family, type, 0 );
	if( res == -1 ) {
		if( DEBUGLVL(0) ) {
			dbgtext( "open_socket_in(): socket() call failed: " );
			dbgtext( "%s\n", strerror( errno ) );
		}
		return -1;
	}

	/* This block sets/clears the SO_REUSEADDR and possibly SO_REUSEPORT. */
	{
		int val = rebind ? 1 : 0;
		if( setsockopt(res,SOL_SOCKET,SO_REUSEADDR,
					(char *)&val,sizeof(val)) == -1 ) {
			if( DEBUGLVL( dlevel ) ) {
				dbgtext( "open_socket_in(): setsockopt: " );
				dbgtext( "SO_REUSEADDR = %s ",
						val?"true":"false" );
				dbgtext( "on port %d failed ", port );
				dbgtext( "with error = %s\n", strerror(errno) );
			}
		}
#ifdef SO_REUSEPORT
		if( setsockopt(res,SOL_SOCKET,SO_REUSEPORT,
					(char *)&val,sizeof(val)) == -1 ) {
			if( DEBUGLVL( dlevel ) ) {
				dbgtext( "open_socket_in(): setsockopt: ");
				dbgtext( "SO_REUSEPORT = %s ",
						val?"true":"false");
				dbgtext( "on port %d failed ", port);
				dbgtext( "with error = %s\n", strerror(errno));
			}
		}
#endif /* SO_REUSEPORT */
	}

	/* now we've got a socket - we need to bind it */
	if (bind(res, (struct sockaddr *)&sock, slen) == -1 ) {
		if( DEBUGLVL(dlevel) && (port == SMB_PORT1 ||
				port == SMB_PORT2 || port == NMB_PORT) ) {
			char addr[INET6_ADDRSTRLEN];
			print_sockaddr(addr, sizeof(addr),
					&sock);
			dbgtext( "bind failed on port %d ", port);
			dbgtext( "socket_addr = %s.\n", addr);
			dbgtext( "Error = %s\n", strerror(errno));
		}
		close(res);
		return -1;
	}

	DEBUG( 10, ( "bind succeeded on port %d\n", port ) );
	return( res );
 }

struct open_socket_out_state {
	int fd;
	struct event_context *ev;
	struct sockaddr_storage ss;
	socklen_t salen;
	uint16_t port;
	int wait_nsec;
};

static void open_socket_out_connected(struct tevent_req *subreq);

static int open_socket_out_state_destructor(struct open_socket_out_state *s)
{
	if (s->fd != -1) {
		close(s->fd);
	}
	return 0;
}

/****************************************************************************
 Create an outgoing socket. timeout is in milliseconds.
**************************************************************************/

struct tevent_req *open_socket_out_send(TALLOC_CTX *mem_ctx,
					struct event_context *ev,
					const struct sockaddr_storage *pss,
					uint16_t port,
					int timeout)
{
	char addr[INET6_ADDRSTRLEN];
	struct tevent_req *result, *subreq;
	struct open_socket_out_state *state;
	NTSTATUS status;

	result = tevent_req_create(mem_ctx, &state,
				   struct open_socket_out_state);
	if (result == NULL) {
		return NULL;
	}
	state->ev = ev;
	state->ss = *pss;
	state->port = port;
	state->wait_nsec = 10000;
	state->salen = -1;

	state->fd = socket(state->ss.ss_family, SOCK_STREAM, 0);
	if (state->fd == -1) {
		status = map_nt_error_from_unix(errno);
		goto post_status;
	}
	talloc_set_destructor(state, open_socket_out_state_destructor);

	if (!tevent_req_set_endtime(
		    result, ev, timeval_current_ofs(0, timeout*1000))) {
		goto fail;
	}

#if defined(HAVE_IPV6)
	if (pss->ss_family == AF_INET6) {
		struct sockaddr_in6 *psa6;
		psa6 = (struct sockaddr_in6 *)&state->ss;
		psa6->sin6_port = htons(port);
		if (psa6->sin6_scope_id == 0
		    && IN6_IS_ADDR_LINKLOCAL(&psa6->sin6_addr)) {
			setup_linklocal_scope_id(
				(struct sockaddr *)&(state->ss));
		}
		state->salen = sizeof(struct sockaddr_in6);
	}
#endif
	if (pss->ss_family == AF_INET) {
		struct sockaddr_in *psa;
		psa = (struct sockaddr_in *)&state->ss;
		psa->sin_port = htons(port);
		state->salen = sizeof(struct sockaddr_in);
	}

	if (pss->ss_family == AF_UNIX) {
		state->salen = sizeof(struct sockaddr_un);
	}

	print_sockaddr(addr, sizeof(addr), &state->ss);
	DEBUG(3,("Connecting to %s at port %u\n", addr,	(unsigned int)port));

	subreq = async_connect_send(state, state->ev, state->fd,
				    (struct sockaddr *)&state->ss,
				    state->salen);
	if ((subreq == NULL)
	    || !tevent_req_set_endtime(
		    subreq, state->ev,
		    timeval_current_ofs(0, state->wait_nsec))) {
		goto fail;
	}
	tevent_req_set_callback(subreq, open_socket_out_connected, result);
	return result;

 post_status:
	tevent_req_nterror(result, status);
	return tevent_req_post(result, ev);
 fail:
	TALLOC_FREE(result);
	return NULL;
}

static void open_socket_out_connected(struct tevent_req *subreq)
{
	struct tevent_req *req =
		tevent_req_callback_data(subreq, struct tevent_req);
	struct open_socket_out_state *state =
		tevent_req_data(req, struct open_socket_out_state);
	int ret;
	int sys_errno;

	ret = async_connect_recv(subreq, &sys_errno);
	TALLOC_FREE(subreq);
	if (ret == 0) {
		tevent_req_done(req);
		return;
	}

	if (
#ifdef ETIMEDOUT
		(sys_errno == ETIMEDOUT) ||
#endif
		(sys_errno == EINPROGRESS) ||
		(sys_errno == EALREADY) ||
		(sys_errno == EAGAIN)) {

		/*
		 * retry
		 */

		if (state->wait_nsec < 250000) {
			state->wait_nsec *= 1.5;
		}

		subreq = async_connect_send(state, state->ev, state->fd,
					    (struct sockaddr *)&state->ss,
					    state->salen);
		if (tevent_req_nomem(subreq, req)) {
			return;
		}
		if (!tevent_req_set_endtime(
			    subreq, state->ev,
			    timeval_current_ofs(0, state->wait_nsec))) {
			tevent_req_nterror(req, NT_STATUS_NO_MEMORY);
			return;
		}
		tevent_req_set_callback(subreq, open_socket_out_connected, req);
		return;
	}

#ifdef EISCONN
	if (sys_errno == EISCONN) {
		tevent_req_done(req);
		return;
	}
#endif

	/* real error */
	tevent_req_nterror(req, map_nt_error_from_unix(sys_errno));
}

NTSTATUS open_socket_out_recv(struct tevent_req *req, int *pfd)
{
	struct open_socket_out_state *state =
		tevent_req_data(req, struct open_socket_out_state);
	NTSTATUS status;

	if (tevent_req_is_nterror(req, &status)) {
		return status;
	}
	*pfd = state->fd;
	state->fd = -1;
	return NT_STATUS_OK;
}

NTSTATUS open_socket_out(const struct sockaddr_storage *pss, uint16_t port,
			 int timeout, int *pfd)
{
	TALLOC_CTX *frame = talloc_stackframe();
	struct event_context *ev;
	struct tevent_req *req;
	NTSTATUS status = NT_STATUS_NO_MEMORY;

	ev = event_context_init(frame);
	if (ev == NULL) {
		goto fail;
	}

	req = open_socket_out_send(frame, ev, pss, port, timeout);
	if (req == NULL) {
		goto fail;
	}
	if (!tevent_req_poll(req, ev)) {
		status = NT_STATUS_INTERNAL_ERROR;
		goto fail;
	}
	status = open_socket_out_recv(req, pfd);
 fail:
	TALLOC_FREE(frame);
	return status;
}

struct open_socket_out_defer_state {
	struct event_context *ev;
	struct sockaddr_storage ss;
	uint16_t port;
	int timeout;
	int fd;
};

static void open_socket_out_defer_waited(struct tevent_req *subreq);
static void open_socket_out_defer_connected(struct tevent_req *subreq);

struct tevent_req *open_socket_out_defer_send(TALLOC_CTX *mem_ctx,
					      struct event_context *ev,
					      struct timeval wait_time,
					      const struct sockaddr_storage *pss,
					      uint16_t port,
					      int timeout)
{
	struct tevent_req *req, *subreq;
	struct open_socket_out_defer_state *state;

	req = tevent_req_create(mem_ctx, &state,
				struct open_socket_out_defer_state);
	if (req == NULL) {
		return NULL;
	}
	state->ev = ev;
	state->ss = *pss;
	state->port = port;
	state->timeout = timeout;

	subreq = tevent_wakeup_send(
		state, ev,
		timeval_current_ofs(wait_time.tv_sec, wait_time.tv_usec));
	if (subreq == NULL) {
		goto fail;
	}
	tevent_req_set_callback(subreq, open_socket_out_defer_waited, req);
	return req;
 fail:
	TALLOC_FREE(req);
	return NULL;
}

static void open_socket_out_defer_waited(struct tevent_req *subreq)
{
	struct tevent_req *req = tevent_req_callback_data(
		subreq, struct tevent_req);
	struct open_socket_out_defer_state *state = tevent_req_data(
		req, struct open_socket_out_defer_state);
	bool ret;

	ret = tevent_wakeup_recv(subreq);
	TALLOC_FREE(subreq);
	if (!ret) {
		tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
		return;
	}

	subreq = open_socket_out_send(state, state->ev, &state->ss,
				      state->port, state->timeout);
	if (tevent_req_nomem(subreq, req)) {
		return;
	}
	tevent_req_set_callback(subreq, open_socket_out_defer_connected, req);
}

static void open_socket_out_defer_connected(struct tevent_req *subreq)
{
	struct tevent_req *req = tevent_req_callback_data(
		subreq, struct tevent_req);
	struct open_socket_out_defer_state *state = tevent_req_data(
		req, struct open_socket_out_defer_state);
	NTSTATUS status;

	status = open_socket_out_recv(subreq, &state->fd);
	TALLOC_FREE(subreq);
	if (!NT_STATUS_IS_OK(status)) {
		tevent_req_nterror(req, status);
		return;
	}
	tevent_req_done(req);
}

NTSTATUS open_socket_out_defer_recv(struct tevent_req *req, int *pfd)
{
	struct open_socket_out_defer_state *state = tevent_req_data(
		req, struct open_socket_out_defer_state);
	NTSTATUS status;

	if (tevent_req_is_nterror(req, &status)) {
		return status;
	}
	*pfd = state->fd;
	state->fd = -1;
	return NT_STATUS_OK;
}

/*******************************************************************
 Create an outgoing TCP socket to the first addr that connects.

 This is for simultaneous connection attempts to port 445 and 139 of a host
 or for simultatneous connection attempts to multiple DCs at once.  We return
 a socket fd of the first successful connection.

 @param[in] addrs list of Internet addresses and ports to connect to
 @param[in] num_addrs number of address/port pairs in the addrs list
 @param[in] timeout time after which we stop waiting for a socket connection
            to succeed, given in milliseconds
 @param[out] fd_index the entry in addrs which we successfully connected to
 @param[out] fd fd of the open and connected socket
 @return true on a successful connection, false if all connection attempts
         failed or we timed out
*******************************************************************/

bool open_any_socket_out(struct sockaddr_storage *addrs, int num_addrs,
			 int timeout, int *fd_index, int *fd)
{
	int i, resulting_index, res;
	int *sockets;
	bool good_connect;

	fd_set r_fds, wr_fds;
	struct timeval tv;
	int maxfd;

	int connect_loop = 10000; /* 10 milliseconds */

	timeout *= 1000; 	/* convert to microseconds */

	sockets = SMB_MALLOC_ARRAY(int, num_addrs);

	if (sockets == NULL)
		return false;

	resulting_index = -1;

	for (i=0; i<num_addrs; i++)
		sockets[i] = -1;

	for (i=0; i<num_addrs; i++) {
		sockets[i] = socket(addrs[i].ss_family, SOCK_STREAM, 0);
		if (sockets[i] < 0)
			goto done;
		set_blocking(sockets[i], false);
	}

 connect_again:
	good_connect = false;

	for (i=0; i<num_addrs; i++) {
		const struct sockaddr * a = 
		    (const struct sockaddr *)&(addrs[i]);

		if (sockets[i] == -1)
			continue;

		if (sys_connect(sockets[i], a) == 0) {
			/* Rather unlikely as we are non-blocking, but it
			 * might actually happen. */
			resulting_index = i;
			goto done;
		}

		if (errno == EINPROGRESS || errno == EALREADY ||
#ifdef EISCONN
			errno == EISCONN ||
#endif
		    errno == EAGAIN || errno == EINTR) {
			/* These are the error messages that something is
			   progressing. */
			good_connect = true;
		} else if (errno != 0) {
			/* There was a direct error */
			close(sockets[i]);
			sockets[i] = -1;
		}
	}

	if (!good_connect) {
		/* All of the connect's resulted in real error conditions */
		goto done;
	}

	/* Lets see if any of the connect attempts succeeded */

	maxfd = 0;
	FD_ZERO(&wr_fds);
	FD_ZERO(&r_fds);

	for (i=0; i<num_addrs; i++) {
		if (sockets[i] == -1)
			continue;
		FD_SET(sockets[i], &wr_fds);
		FD_SET(sockets[i], &r_fds);
		if (sockets[i]>maxfd)
			maxfd = sockets[i];
	}

	tv.tv_sec = 0;
	tv.tv_usec = connect_loop;

	res = sys_select_intr(maxfd+1, &r_fds, &wr_fds, NULL, &tv);

	if (res < 0)
		goto done;

	if (res == 0)
		goto next_round;

	for (i=0; i<num_addrs; i++) {

		if (sockets[i] == -1)
			continue;

		/* Stevens, Network Programming says that if there's a
		 * successful connect, the socket is only writable. Upon an
		 * error, it's both readable and writable. */

		if (FD_ISSET(sockets[i], &r_fds) &&
		    FD_ISSET(sockets[i], &wr_fds)) {
			/* readable and writable, so it's an error */
			close(sockets[i]);
			sockets[i] = -1;
			continue;
		}

		if (!FD_ISSET(sockets[i], &r_fds) &&
		    FD_ISSET(sockets[i], &wr_fds)) {
			/* Only writable, so it's connected */
			resulting_index = i;
			goto done;
		}
	}

 next_round:

	timeout -= connect_loop;
	if (timeout <= 0)
		goto done;
	connect_loop *= 1.5;
	if (connect_loop > timeout)
		connect_loop = timeout;
	goto connect_again;

 done:
	for (i=0; i<num_addrs; i++) {
		if (i == resulting_index)
			continue;
		if (sockets[i] >= 0)
			close(sockets[i]);
	}

	if (resulting_index >= 0) {
		*fd_index = resulting_index;
		*fd = sockets[*fd_index];
		set_blocking(*fd, true);
	}

	free(sockets);

	return (resulting_index >= 0);
}
/****************************************************************************
 Open a connected UDP socket to host on port
**************************************************************************/

int open_udp_socket(const char *host, int port)
{
	struct sockaddr_storage ss;
	int res;

	if (!interpret_string_addr(&ss, host, 0)) {
		DEBUG(10,("open_udp_socket: can't resolve name %s\n",
			host));
		return -1;
	}

	res = socket(ss.ss_family, SOCK_DGRAM, 0);
	if (res == -1) {
		return -1;
	}

#if defined(HAVE_IPV6)
	if (ss.ss_family == AF_INET6) {
		struct sockaddr_in6 *psa6;
		psa6 = (struct sockaddr_in6 *)&ss;
		psa6->sin6_port = htons(port);
		if (psa6->sin6_scope_id == 0
				&& IN6_IS_ADDR_LINKLOCAL(&psa6->sin6_addr)) {
			setup_linklocal_scope_id(
				(struct sockaddr *)&ss);
		}
	}
#endif
        if (ss.ss_family == AF_INET) {
                struct sockaddr_in *psa;
                psa = (struct sockaddr_in *)&ss;
                psa->sin_port = htons(port);
        }

	if (sys_connect(res,(struct sockaddr *)&ss)) {
		close(res);
		return -1;
	}

	return res;
}

/*******************************************************************
 Return the IP addr of the remote end of a socket as a string.
 Optionally return the struct sockaddr_storage.
 ******************************************************************/

static const char *get_peer_addr_internal(int fd,
				char *addr_buf,
				size_t addr_buf_len,
				struct sockaddr *pss,
				socklen_t *plength)
{
	struct sockaddr_storage ss;
	socklen_t length = sizeof(ss);

	strlcpy(addr_buf,"0.0.0.0",addr_buf_len);

	if (fd == -1) {
		return addr_buf;
	}

	if (pss == NULL) {
		pss = (struct sockaddr *)&ss;
		plength = &length;
	}

	if (getpeername(fd, (struct sockaddr *)pss, plength) < 0) {
		DEBUG(0,("getpeername failed. Error was %s\n",
					strerror(errno) ));
		return addr_buf;
	}

	print_sockaddr_len(addr_buf,
			addr_buf_len,
			pss,
			*plength);
	return addr_buf;
}

/*******************************************************************
 Matchname - determine if host name matches IP address. Used to
 confirm a hostname lookup to prevent spoof attacks.
******************************************************************/

static bool matchname(const char *remotehost,
		const struct sockaddr *pss,
		socklen_t len)
{
	struct addrinfo *res = NULL;
	struct addrinfo *ailist = NULL;
	char addr_buf[INET6_ADDRSTRLEN];
	bool ret = interpret_string_addr_internal(&ailist,
			remotehost,
			AI_ADDRCONFIG|AI_CANONNAME);

	if (!ret || ailist == NULL) {
		DEBUG(3,("matchname: getaddrinfo failed for "
			"name %s [%s]\n",
			remotehost,
			gai_strerror(ret) ));
		return false;
	}

	/*
	 * Make sure that getaddrinfo() returns the "correct" host name.
	 */

	if (ailist->ai_canonname == NULL ||
		(!strequal(remotehost, ailist->ai_canonname) &&
		 !strequal(remotehost, "localhost"))) {
		DEBUG(0,("matchname: host name/name mismatch: %s != %s\n",
			 remotehost,
			 ailist->ai_canonname ?
				 ailist->ai_canonname : "(NULL)"));
		freeaddrinfo(ailist);
		return false;
	}

	/* Look up the host address in the address list we just got. */
	for (res = ailist; res; res = res->ai_next) {
		if (!res->ai_addr) {
			continue;
		}
		if (sockaddr_equal((const struct sockaddr *)res->ai_addr,
					(struct sockaddr *)pss)) {
			freeaddrinfo(ailist);
			return true;
		}
	}

	/*
	 * The host name does not map to the original host address. Perhaps
	 * someone has compromised a name server. More likely someone botched
	 * it, but that could be dangerous, too.
	 */

	DEBUG(0,("matchname: host name/address mismatch: %s != %s\n",
		print_sockaddr_len(addr_buf,
			sizeof(addr_buf),
			pss,
			len),
		 ailist->ai_canonname ? ailist->ai_canonname : "(NULL)"));

	if (ailist) {
		freeaddrinfo(ailist);
	}
	return false;
}

/*******************************************************************
 Deal with the singleton cache.
******************************************************************/

struct name_addr_pair {
	struct sockaddr_storage ss;
	const char *name;
};

/*******************************************************************
 Lookup a name/addr pair. Returns memory allocated from memcache.
******************************************************************/

static bool lookup_nc(struct name_addr_pair *nc)
{
	DATA_BLOB tmp;

	ZERO_STRUCTP(nc);

	if (!memcache_lookup(
			NULL, SINGLETON_CACHE,
			data_blob_string_const_null("get_peer_name"),
			&tmp)) {
		return false;
	}

	memcpy(&nc->ss, tmp.data, sizeof(nc->ss));
	nc->name = (const char *)tmp.data + sizeof(nc->ss);
	return true;
}

/*******************************************************************
 Save a name/addr pair.
******************************************************************/

static void store_nc(const struct name_addr_pair *nc)
{
	DATA_BLOB tmp;
	size_t namelen = strlen(nc->name);

	tmp = data_blob(NULL, sizeof(nc->ss) + namelen + 1);
	if (!tmp.data) {
		return;
	}
	memcpy(tmp.data, &nc->ss, sizeof(nc->ss));
	memcpy(tmp.data+sizeof(nc->ss), nc->name, namelen+1);

	memcache_add(NULL, SINGLETON_CACHE,
			data_blob_string_const_null("get_peer_name"),
			tmp);
	data_blob_free(&tmp);
}

/*******************************************************************
 Return the DNS name of the remote end of a socket.
******************************************************************/

const char *get_peer_name(int fd, bool force_lookup)
{
	struct name_addr_pair nc;
	char addr_buf[INET6_ADDRSTRLEN];
	struct sockaddr_storage ss;
	socklen_t length = sizeof(ss);
	const char *p;
	int ret;
	char name_buf[MAX_DNS_NAME_LENGTH];
	char tmp_name[MAX_DNS_NAME_LENGTH];

	/* reverse lookups can be *very* expensive, and in many
	   situations won't work because many networks don't link dhcp
	   with dns. To avoid the delay we avoid the lookup if
	   possible */
	if (!lp_hostname_lookups() && (force_lookup == false)) {
		length = sizeof(nc.ss);
		nc.name = get_peer_addr_internal(fd, addr_buf, sizeof(addr_buf),
			(struct sockaddr *)&nc.ss, &length);
		store_nc(&nc);
		lookup_nc(&nc);
		return nc.name ? nc.name : "UNKNOWN";
	}

	lookup_nc(&nc);

	memset(&ss, '\0', sizeof(ss));
	p = get_peer_addr_internal(fd, addr_buf, sizeof(addr_buf), (struct sockaddr *)&ss, &length);

	/* it might be the same as the last one - save some DNS work */
	if (sockaddr_equal((struct sockaddr *)&ss, (struct sockaddr *)&nc.ss)) {
		return nc.name ? nc.name : "UNKNOWN";
	}

	/* Not the same. We need to lookup. */
	if (fd == -1) {
		return "UNKNOWN";
	}

	/* Look up the remote host name. */
	ret = sys_getnameinfo((struct sockaddr *)&ss,
			length,
			name_buf,
			sizeof(name_buf),
			NULL,
			0,
			0);

	if (ret) {
		DEBUG(1,("get_peer_name: getnameinfo failed "
			"for %s with error %s\n",
			p,
			gai_strerror(ret)));
		strlcpy(name_buf, p, sizeof(name_buf));
	} else {
		if (!matchname(name_buf, (struct sockaddr *)&ss, length)) {
			DEBUG(0,("Matchname failed on %s %s\n",name_buf,p));
			strlcpy(name_buf,"UNKNOWN",sizeof(name_buf));
		}
	}

	/* can't pass the same source and dest strings in when you
	   use --enable-developer or the clobber_region() call will
	   get you */

	strlcpy(tmp_name, name_buf, sizeof(tmp_name));
	alpha_strcpy(name_buf, tmp_name, "_-.", sizeof(name_buf));
	if (strstr(name_buf,"..")) {
		strlcpy(name_buf, "UNKNOWN", sizeof(name_buf));
	}

	nc.name = name_buf;
	nc.ss = ss;

	store_nc(&nc);
	lookup_nc(&nc);
	return nc.name ? nc.name : "UNKNOWN";
}

/*******************************************************************
 Return the IP addr of the remote end of a socket as a string.
 ******************************************************************/

const char *get_peer_addr(int fd, char *addr, size_t addr_len)
{
	return get_peer_addr_internal(fd, addr, addr_len, NULL, NULL);
}

/*******************************************************************
 Create protected unix domain socket.

 Some unixes cannot set permissions on a ux-dom-sock, so we
 have to make sure that the directory contains the protection
 permissions instead.
 ******************************************************************/

int create_pipe_sock(const char *socket_dir,
		     const char *socket_name,
		     mode_t dir_perms)
{
#ifdef HAVE_UNIXSOCKET
	struct sockaddr_un sunaddr;
	struct stat st;
	int sock;
	mode_t old_umask;
	char *path = NULL;

	old_umask = umask(0);

	/* Create the socket directory or reuse the existing one */

	if (lstat(socket_dir, &st) == -1) {
		if (errno == ENOENT) {
			/* Create directory */
			if (mkdir(socket_dir, dir_perms) == -1) {
				DEBUG(0, ("error creating socket directory "
					"%s: %s\n", socket_dir,
					strerror(errno)));
				goto out_umask;
			}
		} else {
			DEBUG(0, ("lstat failed on socket directory %s: %s\n",
				socket_dir, strerror(errno)));
			goto out_umask;
		}
	} else {
		/* Check ownership and permission on existing directory */
		if (!S_ISDIR(st.st_mode)) {
			DEBUG(0, ("socket directory %s isn't a directory\n",
				socket_dir));
			goto out_umask;
		}
		if ((st.st_uid != sec_initial_uid()) ||
				((st.st_mode & 0777) != dir_perms)) {
			DEBUG(0, ("invalid permissions on socket directory "
				"%s\n", socket_dir));
			goto out_umask;
		}
	}

	/* Create the socket file */

	sock = socket(AF_UNIX, SOCK_STREAM, 0);

	if (sock == -1) {
		DEBUG(0, ("create_pipe_sock: socket error %s\n",
			strerror(errno) ));
                goto out_close;
	}

	if (asprintf(&path, "%s/%s", socket_dir, socket_name) == -1) {
                goto out_close;
	}

	unlink(path);
	memset(&sunaddr, 0, sizeof(sunaddr));
	sunaddr.sun_family = AF_UNIX;
	strlcpy(sunaddr.sun_path, path, sizeof(sunaddr.sun_path));

	if (bind(sock, (struct sockaddr *)&sunaddr, sizeof(sunaddr)) == -1) {
		DEBUG(0, ("bind failed on pipe socket %s: %s\n", path,
			strerror(errno)));
		goto out_close;
	}

	if (listen(sock, 5) == -1) {
		DEBUG(0, ("listen failed on pipe socket %s: %s\n", path,
			strerror(errno)));
		goto out_close;
	}

	SAFE_FREE(path);

	umask(old_umask);
	return sock;

out_close:
	SAFE_FREE(path);
	if (sock != -1)
		close(sock);

out_umask:
	umask(old_umask);
	return -1;

#else
        DEBUG(0, ("create_pipe_sock: No Unix sockets on this system\n"));
        return -1;
#endif /* HAVE_UNIXSOCKET */
}

/****************************************************************************
 Get my own canonical name, including domain.
****************************************************************************/

const char *get_mydnsfullname(void)
{
	struct addrinfo *res = NULL;
	char my_hostname[HOST_NAME_MAX];
	bool ret;
	DATA_BLOB tmp;

	if (memcache_lookup(NULL, SINGLETON_CACHE,
			data_blob_string_const_null("get_mydnsfullname"),
			&tmp)) {
		SMB_ASSERT(tmp.length > 0);
		return (const char *)tmp.data;
	}

	/* get my host name */
	if (gethostname(my_hostname, sizeof(my_hostname)) == -1) {
		DEBUG(0,("get_mydnsfullname: gethostname failed\n"));
		return NULL;
	}

	/* Ensure null termination. */
	my_hostname[sizeof(my_hostname)-1] = '\0';

	ret = interpret_string_addr_internal(&res,
				my_hostname,
				AI_ADDRCONFIG|AI_CANONNAME);

	if (!ret || res == NULL) {
		DEBUG(3,("get_mydnsfullname: getaddrinfo failed for "
			"name %s [%s]\n",
			my_hostname,
			gai_strerror(ret) ));
		return NULL;
	}

	/*
	 * Make sure that getaddrinfo() returns the "correct" host name.
	 */

	if (res->ai_canonname == NULL) {
		DEBUG(3,("get_mydnsfullname: failed to get "
			"canonical name for %s\n",
			my_hostname));
		freeaddrinfo(res);
		return NULL;
	}

	/* This copies the data, so we must do a lookup
	 * afterwards to find the value to return.
	 */

	memcache_add(NULL, SINGLETON_CACHE,
			data_blob_string_const_null("get_mydnsfullname"),
			data_blob_string_const_null(res->ai_canonname));

	if (!memcache_lookup(NULL, SINGLETON_CACHE,
			data_blob_string_const_null("get_mydnsfullname"),
			&tmp)) {
		tmp = data_blob_talloc(talloc_tos(), res->ai_canonname,
				strlen(res->ai_canonname) + 1);
	}

	freeaddrinfo(res);

	return (const char *)tmp.data;
}

/************************************************************
 Is this my name ?
************************************************************/

bool is_myname_or_ipaddr(const char *s)
{
	TALLOC_CTX *ctx = talloc_tos();
	char addr[INET6_ADDRSTRLEN];
	char *name = NULL;
	const char *dnsname;
	char *servername = NULL;

	if (!s) {
		return false;
	}

	/* Santize the string from '\\name' */
	name = talloc_strdup(ctx, s);
	if (!name) {
		return false;
	}

	servername = strrchr_m(name, '\\' );
	if (!servername) {
		servername = name;
	} else {
		servername++;
	}

	/* Optimize for the common case */
	if (strequal(servername, global_myname())) {
		return true;
	}

	/* Check for an alias */
	if (is_myname(servername)) {
		return true;
	}

	/* Check for loopback */
	if (strequal(servername, "127.0.0.1") ||
			strequal(servername, "::1")) {
		return true;
	}

	if (strequal(servername, "localhost")) {
		return true;
	}

	/* Maybe it's my dns name */
	dnsname = get_mydnsfullname();
	if (dnsname && strequal(servername, dnsname)) {
		return true;
	}

	/* Handle possible CNAME records - convert to an IP addr. */
	if (!is_ipaddress(servername)) {
		/* Use DNS to resolve the name, but only the first address */
		struct sockaddr_storage ss;
		if (interpret_string_addr(&ss, servername, 0)) {
			print_sockaddr(addr,
					sizeof(addr),
					&ss);
			servername = addr;
		}
	}

	/* Maybe its an IP address? */
	if (is_ipaddress(servername)) {
		struct sockaddr_storage ss;
		struct iface_struct *nics;
		int i, n;

		if (!interpret_string_addr(&ss, servername, AI_NUMERICHOST)) {
			return false;
		}

		if (ismyaddr((struct sockaddr *)&ss)) {
			return true;
		}

		if (is_zero_addr((struct sockaddr *)&ss) || 
			is_loopback_addr((struct sockaddr *)&ss)) {
			return false;
		}

		n = get_interfaces(talloc_tos(), &nics);
		for (i=0; i<n; i++) {
			if (sockaddr_equal((struct sockaddr *)&nics[i].ip, (struct sockaddr *)&ss)) {
				TALLOC_FREE(nics);
				return true;
			}
		}
		TALLOC_FREE(nics);
	}

	/* No match */
	return false;
}

struct getaddrinfo_state {
	const char *node;
	const char *service;
	const struct addrinfo *hints;
	struct addrinfo *res;
	int ret;
};

static void getaddrinfo_do(void *private_data);
static void getaddrinfo_done(struct tevent_req *subreq);

struct tevent_req *getaddrinfo_send(TALLOC_CTX *mem_ctx,
				    struct tevent_context *ev,
				    struct fncall_context *ctx,
				    const char *node,
				    const char *service,
				    const struct addrinfo *hints)
{
	struct tevent_req *req, *subreq;
	struct getaddrinfo_state *state;

	req = tevent_req_create(mem_ctx, &state, struct getaddrinfo_state);
	if (req == NULL) {
		return NULL;
	}

	state->node = node;
	state->service = service;
	state->hints = hints;

	subreq = fncall_send(state, ev, ctx, getaddrinfo_do, state);
	if (tevent_req_nomem(subreq, req)) {
		return tevent_req_post(req, ev);
	}
	tevent_req_set_callback(subreq, getaddrinfo_done, req);
	return req;
}

static void getaddrinfo_do(void *private_data)
{
	struct getaddrinfo_state *state =
		(struct getaddrinfo_state *)private_data;

	state->ret = getaddrinfo(state->node, state->service, state->hints,
				 &state->res);
}

static void getaddrinfo_done(struct tevent_req *subreq)
{
	struct tevent_req *req = tevent_req_callback_data(
		subreq, struct tevent_req);
	int ret, err;

	ret = fncall_recv(subreq, &err);
	TALLOC_FREE(subreq);
	if (ret == -1) {
		tevent_req_error(req, err);
		return;
	}
	tevent_req_done(req);
}

int getaddrinfo_recv(struct tevent_req *req, struct addrinfo **res)
{
	struct getaddrinfo_state *state = tevent_req_data(
		req, struct getaddrinfo_state);
	int err;

	if (tevent_req_is_unix_error(req, &err)) {
		switch(err) {
		case ENOMEM:
			return EAI_MEMORY;
		default:
			return EAI_FAIL;
		}
	}
	if (state->ret == 0) {
		*res = state->res;
	}
	return state->ret;
}
n1293' href='#n1293'>1293</a>
<a id='n1294' href='#n1294'>1294</a>
<a id='n1295' href='#n1295'>1295</a>
<a id='n1296' href='#n1296'>1296</a>
<a id='n1297' href='#n1297'>1297</a>
<a id='n1298' href='#n1298'>1298</a>
<a id='n1299' href='#n1299'>1299</a>
<a id='n1300' href='#n1300'>1300</a>
<a id='n1301' href='#n1301'>1301</a>
<a id='n1302' href='#n1302'>1302</a>
<a id='n1303' href='#n1303'>1303</a>
<a id='n1304' href='#n1304'>1304</a>
<a id='n1305' href='#n1305'>1305</a>
<a id='n1306' href='#n1306'>1306</a>
<a id='n1307' href='#n1307'>1307</a>
<a id='n1308' href='#n1308'>1308</a>
<a id='n1309' href='#n1309'>1309</a>
<a id='n1310' href='#n1310'>1310</a>
<a id='n1311' href='#n1311'>1311</a>
<a id='n1312' href='#n1312'>1312</a>
<a id='n1313' href='#n1313'>1313</a>
<a id='n1314' href='#n1314'>1314</a>
<a id='n1315' href='#n1315'>1315</a>
<a id='n1316' href='#n1316'>1316</a>
<a id='n1317' href='#n1317'>1317</a>
<a id='n1318' href='#n1318'>1318</a>
<a id='n1319' href='#n1319'>1319</a>
<a id='n1320' href='#n1320'>1320</a>
<a id='n1321' href='#n1321'>1321</a>
<a id='n1322' href='#n1322'>1322</a>
<a id='n1323' href='#n1323'>1323</a>
<a id='n1324' href='#n1324'>1324</a>
<a id='n1325' href='#n1325'>1325</a>
<a id='n1326' href='#n1326'>1326</a>
<a id='n1327' href='#n1327'>1327</a>
<a id='n1328' href='#n1328'>1328</a>
<a id='n1329' href='#n1329'>1329</a>
<a id='n1330' href='#n1330'>1330</a>
<a id='n1331' href='#n1331'>1331</a>
<a id='n1332' href='#n1332'>1332</a>
<a id='n1333' href='#n1333'>1333</a>
<a id='n1334' href='#n1334'>1334</a>
<a id='n1335' href='#n1335'>1335</a>
<a id='n1336' href='#n1336'>1336</a>
<a id='n1337' href='#n1337'>1337</a>
<a id='n1338' href='#n1338'>1338</a>
<a id='n1339' href='#n1339'>1339</a>
<a id='n1340' href='#n1340'>1340</a>
<a id='n1341' href='#n1341'>1341</a>
<a id='n1342' href='#n1342'>1342</a>
<a id='n1343' href='#n1343'>1343</a>
<a id='n1344' href='#n1344'>1344</a>
<a id='n1345' href='#n1345'>1345</a>
<a id='n1346' href='#n1346'>1346</a>
<a id='n1347' href='#n1347'>1347</a>
<a id='n1348' href='#n1348'>1348</a>
<a id='n1349' href='#n1349'>1349</a>
<a id='n1350' href='#n1350'>1350</a>
<a id='n1351' href='#n1351'>1351</a>
<a id='n1352' href='#n1352'>1352</a>
<a id='n1353' href='#n1353'>1353</a>
<a id='n1354' href='#n1354'>1354</a>
<a id='n1355' href='#n1355'>1355</a>
<a id='n1356' href='#n1356'>1356</a>
<a id='n1357' href='#n1357'>1357</a>
<a id='n1358' href='#n1358'>1358</a>
<a id='n1359' href='#n1359'>1359</a>
<a id='n1360' href='#n1360'>1360</a>
<a id='n1361' href='#n1361'>1361</a>
<a id='n1362' href='#n1362'>1362</a>
<a id='n1363' href='#n1363'>1363</a>
<a id='n1364' href='#n1364'>1364</a>
<a id='n1365' href='#n1365'>1365</a>
<a id='n1366' href='#n1366'>1366</a>
<a id='n1367' href='#n1367'>1367</a>
<a id='n1368' href='#n1368'>1368</a>
<a id='n1369' href='#n1369'>1369</a>
<a id='n1370' href='#n1370'>1370</a>
<a id='n1371' href='#n1371'>1371</a>
<a id='n1372' href='#n1372'>1372</a>
<a id='n1373' href='#n1373'>1373</a>
<a id='n1374' href='#n1374'>1374</a>
<a id='n1375' href='#n1375'>1375</a>
<a id='n1376' href='#n1376'>1376</a>
<a id='n1377' href='#n1377'>1377</a>
<a id='n1378' href='#n1378'>1378</a>
<a id='n1379' href='#n1379'>1379</a>
<a id='n1380' href='#n1380'>1380</a>
<a id='n1381' href='#n1381'>1381</a>
<a id='n1382' href='#n1382'>1382</a>
<a id='n1383' href='#n1383'>1383</a>
<a id='n1384' href='#n1384'>1384</a>
<a id='n1385' href='#n1385'>1385</a>
<a id='n1386' href='#n1386'>1386</a>
<a id='n1387' href='#n1387'>1387</a>
<a id='n1388' href='#n1388'>1388</a>
<a id='n1389' href='#n1389'>1389</a>
<a id='n1390' href='#n1390'>1390</a>
<a id='n1391' href='#n1391'>1391</a>
<a id='n1392' href='#n1392'>1392</a>
<a id='n1393' href='#n1393'>1393</a>
<a id='n1394' href='#n1394'>1394</a>
<a id='n1395' href='#n1395'>1395</a>
<a id='n1396' href='#n1396'>1396</a>
<a id='n1397' href='#n1397'>1397</a>
<a id='n1398' href='#n1398'>1398</a>
<a id='n1399' href='#n1399'>1399</a>
<a id='n1400' href='#n1400'>1400</a>
<a id='n1401' href='#n1401'>1401</a>
<a id='n1402' href='#n1402'>1402</a>
<a id='n1403' href='#n1403'>1403</a>
<a id='n1404' href='#n1404'>1404</a>
<a id='n1405' href='#n1405'>1405</a>
<a id='n1406' href='#n1406'>1406</a>
<a id='n1407' href='#n1407'>1407</a>
<a id='n1408' href='#n1408'>1408</a>
<a id='n1409' href='#n1409'>1409</a>
<a id='n1410' href='#n1410'>1410</a>
<a id='n1411' href='#n1411'>1411</a>
<a id='n1412' href='#n1412'>1412</a>
<a id='n1413' href='#n1413'>1413</a>
<a id='n1414' href='#n1414'>1414</a>
<a id='n1415' href='#n1415'>1415</a>
<a id='n1416' href='#n1416'>1416</a>
<a id='n1417' href='#n1417'>1417</a>
<a id='n1418' href='#n1418'>1418</a>
<a id='n1419' href='#n1419'>1419</a>
<a id='n1420' href='#n1420'>1420</a>
<a id='n1421' href='#n1421'>1421</a>
<a id='n1422' href='#n1422'>1422</a>
<a id='n1423' href='#n1423'>1423</a>
<a id='n1424' href='#n1424'>1424</a>
<a id='n1425' href='#n1425'>1425</a>
<a id='n1426' href='#n1426'>1426</a>
<a id='n1427' href='#n1427'>1427</a>
<a id='n1428' href='#n1428'>1428</a>
<a id='n1429' href='#n1429'>1429</a>
<a id='n1430' href='#n1430'>1430</a>
<a id='n1431' href='#n1431'>1431</a>
<a id='n1432' href='#n1432'>1432</a>
<a id='n1433' href='#n1433'>1433</a>
<a id='n1434' href='#n1434'>1434</a>
<a id='n1435' href='#n1435'>1435</a>
<a id='n1436' href='#n1436'>1436</a>
<a id='n1437' href='#n1437'>1437</a>
<a id='n1438' href='#n1438'>1438</a>
<a id='n1439' href='#n1439'>1439</a>
<a id='n1440' href='#n1440'>1440</a>
<a id='n1441' href='#n1441'>1441</a>
<a id='n1442' href='#n1442'>1442</a>
<a id='n1443' href='#n1443'>1443</a>
<a id='n1444' href='#n1444'>1444</a>
<a id='n1445' href='#n1445'>1445</a>
<a id='n1446' href='#n1446'>1446</a>
<a id='n1447' href='#n1447'>1447</a>
<a id='n1448' href='#n1448'>1448</a>
<a id='n1449' href='#n1449'>1449</a>
<a id='n1450' href='#n1450'>1450</a>
<a id='n1451' href='#n1451'>1451</a>
<a id='n1452' href='#n1452'>1452</a>
<a id='n1453' href='#n1453'>1453</a>
<a id='n1454' href='#n1454'>1454</a>
<a id='n1455' href='#n1455'>1455</a>
<a id='n1456' href='#n1456'>1456</a>
<a id='n1457' href='#n1457'>1457</a>
<a id='n1458' href='#n1458'>1458</a>
<a id='n1459' href='#n1459'>1459</a>
<a id='n1460' href='#n1460'>1460</a>
<a id='n1461' href='#n1461'>1461</a>
<a id='n1462' href='#n1462'>1462</a>
<a id='n1463' href='#n1463'>1463</a>
<a id='n1464' href='#n1464'>1464</a>
<a id='n1465' href='#n1465'>1465</a>
<a id='n1466' href='#n1466'>1466</a>
<a id='n1467' href='#n1467'>1467</a>
<a id='n1468' href='#n1468'>1468</a>
<a id='n1469' href='#n1469'>1469</a>
<a id='n1470' href='#n1470'>1470</a>
<a id='n1471' href='#n1471'>1471</a>
<a id='n1472' href='#n1472'>1472</a>
<a id='n1473' href='#n1473'>1473</a>
<a id='n1474' href='#n1474'>1474</a>
<a id='n1475' href='#n1475'>1475</a>
<a id='n1476' href='#n1476'>1476</a>
<a id='n1477' href='#n1477'>1477</a>
<a id='n1478' href='#n1478'>1478</a>
<a id='n1479' href='#n1479'>1479</a>
<a id='n1480' href='#n1480'>1480</a>
<a id='n1481' href='#n1481'>1481</a>
<a id='n1482' href='#n1482'>1482</a>
<a id='n1483' href='#n1483'>1483</a>
<a id='n1484' href='#n1484'>1484</a>
<a id='n1485' href='#n1485'>1485</a>
<a id='n1486' href='#n1486'>1486</a>
<a id='n1487' href='#n1487'>1487</a>
<a id='n1488' href='#n1488'>1488</a>
<a id='n1489' href='#n1489'>1489</a>
<a id='n1490' href='#n1490'>1490</a>
<a id='n1491' href='#n1491'>1491</a>
<a id='n1492' href='#n1492'>1492</a>
<a id='n1493' href='#n1493'>1493</a>
<a id='n1494' href='#n1494'>1494</a>
<a id='n1495' href='#n1495'>1495</a>
<a id='n1496' href='#n1496'>1496</a>
<a id='n1497' href='#n1497'>1497</a>
<a id='n1498' href='#n1498'>1498</a>
<a id='n1499' href='#n1499'>1499</a>
<a id='n1500' href='#n1500'>1500</a>
<a id='n1501' href='#n1501'>1501</a>
<a id='n1502' href='#n1502'>1502</a>
<a id='n1503' href='#n1503'>1503</a>
<a id='n1504' href='#n1504'>1504</a>
<a id='n1505' href='#n1505'>1505</a>
<a id='n1506' href='#n1506'>1506</a>
<a id='n1507' href='#n1507'>1507</a>
<a id='n1508' href='#n1508'>1508</a>
<a id='n1509' href='#n1509'>1509</a>
<a id='n1510' href='#n1510'>1510</a>
<a id='n1511' href='#n1511'>1511</a>
<a id='n1512' href='#n1512'>1512</a>
<a id='n1513' href='#n1513'>1513</a>
<a id='n1514' href='#n1514'>1514</a>
<a id='n1515' href='#n1515'>1515</a>
<a id='n1516' href='#n1516'>1516</a>
<a id='n1517' href='#n1517'>1517</a>
<a id='n1518' href='#n1518'>1518</a>
<a id='n1519' href='#n1519'>1519</a>
<a id='n1520' href='#n1520'>1520</a>
<a id='n1521' href='#n1521'>1521</a>
<a id='n1522' href='#n1522'>1522</a>
<a id='n1523' href='#n1523'>1523</a>
<a id='n1524' href='#n1524'>1524</a>
<a id='n1525' href='#n1525'>1525</a>
<a id='n1526' href='#n1526'>1526</a>
<a id='n1527' href='#n1527'>1527</a>
<a id='n1528' href='#n1528'>1528</a>
<a id='n1529' href='#n1529'>1529</a>
<a id='n1530' href='#n1530'>1530</a>
<a id='n1531' href='#n1531'>1531</a>
<a id='n1532' href='#n1532'>1532</a>
<a id='n1533' href='#n1533'>1533</a>
<a id='n1534' href='#n1534'>1534</a>
<a id='n1535' href='#n1535'>1535</a>
<a id='n1536' href='#n1536'>1536</a>
<a id='n1537' href='#n1537'>1537</a>
<a id='n1538' href='#n1538'>1538</a>
<a id='n1539' href='#n1539'>1539</a>
<a id='n1540' href='#n1540'>1540</a>
<a id='n1541' href='#n1541'>1541</a>
<a id='n1542' href='#n1542'>1542</a>
<a id='n1543' href='#n1543'>1543</a>
<a id='n1544' href='#n1544'>1544</a>
<a id='n1545' href='#n1545'>1545</a>
<a id='n1546' href='#n1546'>1546</a>
<a id='n1547' href='#n1547'>1547</a>
<a id='n1548' href='#n1548'>1548</a>
<a id='n1549' href='#n1549'>1549</a>
<a id='n1550' href='#n1550'>1550</a>
<a id='n1551' href='#n1551'>1551</a>
<a id='n1552' href='#n1552'>1552</a>
<a id='n1553' href='#n1553'>1553</a>
<a id='n1554' href='#n1554'>1554</a>
<a id='n1555' href='#n1555'>1555</a>
<a id='n1556' href='#n1556'>1556</a>
<a id='n1557' href='#n1557'>1557</a>
<a id='n1558' href='#n1558'>1558</a>
<a id='n1559' href='#n1559'>1559</a>
<a id='n1560' href='#n1560'>1560</a>
<a id='n1561' href='#n1561'>1561</a>
<a id='n1562' href='#n1562'>1562</a>
<a id='n1563' href='#n1563'>1563</a>
<a id='n1564' href='#n1564'>1564</a>
<a id='n1565' href='#n1565'>1565</a>
<a id='n1566' href='#n1566'>1566</a>
<a id='n1567' href='#n1567'>1567</a>
<a id='n1568' href='#n1568'>1568</a>
<a id='n1569' href='#n1569'>1569</a>
<a id='n1570' href='#n1570'>1570</a>
<a id='n1571' href='#n1571'>1571</a>
<a id='n1572' href='#n1572'>1572</a>
<a id='n1573' href='#n1573'>1573</a>
<a id='n1574' href='#n1574'>1574</a>
<a id='n1575' href='#n1575'>1575</a>
<a id='n1576' href='#n1576'>1576</a>
<a id='n1577' href='#n1577'>1577</a>
<a id='n1578' href='#n1578'>1578</a>
<a id='n1579' href='#n1579'>1579</a>
<a id='n1580' href='#n1580'>1580</a>
<a id='n1581' href='#n1581'>1581</a>
<a id='n1582' href='#n1582'>1582</a>
<a id='n1583' href='#n1583'>1583</a>
<a id='n1584' href='#n1584'>1584</a>
<a id='n1585' href='#n1585'>1585</a>
<a id='n1586' href='#n1586'>1586</a>
<a id='n1587' href='#n1587'>1587</a>
<a id='n1588' href='#n1588'>1588</a>
<a id='n1589' href='#n1589'>1589</a>
<a id='n1590' href='#n1590'>1590</a>
<a id='n1591' href='#n1591'>1591</a>
<a id='n1592' href='#n1592'>1592</a>
<a id='n1593' href='#n1593'>1593</a>
<a id='n1594' href='#n1594'>1594</a>
<a id='n1595' href='#n1595'>1595</a>
<a id='n1596' href='#n1596'>1596</a>
<a id='n1597' href='#n1597'>1597</a>
<a id='n1598' href='#n1598'>1598</a>
<a id='n1599' href='#n1599'>1599</a>
<a id='n1600' href='#n1600'>1600</a>
<a id='n1601' href='#n1601'>1601</a>
<a id='n1602' href='#n1602'>1602</a>
<a id='n1603' href='#n1603'>1603</a>
<a id='n1604' href='#n1604'>1604</a>
<a id='n1605' href='#n1605'>1605</a>
<a id='n1606' href='#n1606'>1606</a>
<a id='n1607' href='#n1607'>1607</a>
<a id='n1608' href='#n1608'>1608</a>
<a id='n1609' href='#n1609'>1609</a>
<a id='n1610' href='#n1610'>1610</a>
<a id='n1611' href='#n1611'>1611</a>
<a id='n1612' href='#n1612'>1612</a>
<a id='n1613' href='#n1613'>1613</a>
<a id='n1614' href='#n1614'>1614</a>
<a id='n1615' href='#n1615'>1615</a>
<a id='n1616' href='#n1616'>1616</a>
<a id='n1617' href='#n1617'>1617</a>
<a id='n1618' href='#n1618'>1618</a>
<a id='n1619' href='#n1619'>1619</a>
<a id='n1620' href='#n1620'>1620</a>
<a id='n1621' href='#n1621'>1621</a>
<a id='n1622' href='#n1622'>1622</a>
<a id='n1623' href='#n1623'>1623</a>
<a id='n1624' href='#n1624'>1624</a>
<a id='n1625' href='#n1625'>1625</a>
<a id='n1626' href='#n1626'>1626</a>
<a id='n1627' href='#n1627'>1627</a>
<a id='n1628' href='#n1628'>1628</a>
<a id='n1629' href='#n1629'>1629</a>
<a id='n1630' href='#n1630'>1630</a>
<a id='n1631' href='#n1631'>1631</a>
<a id='n1632' href='#n1632'>1632</a>
<a id='n1633' href='#n1633'>1633</a>
<a id='n1634' href='#n1634'>1634</a>
<a id='n1635' href='#n1635'>1635</a>
<a id='n1636' href='#n1636'>1636</a>
<a id='n1637' href='#n1637'>1637</a>
<a id='n1638' href='#n1638'>1638</a>
<a id='n1639' href='#n1639'>1639</a>
<a id='n1640' href='#n1640'>1640</a>
<a id='n1641' href='#n1641'>1641</a>
<a id='n1642' href='#n1642'>1642</a>
<a id='n1643' href='#n1643'>1643</a>
<a id='n1644' href='#n1644'>1644</a>
<a id='n1645' href='#n1645'>1645</a>
<a id='n1646' href='#n1646'>1646</a>
<a id='n1647' href='#n1647'>1647</a>
<a id='n1648' href='#n1648'>1648</a>
<a id='n1649' href='#n1649'>1649</a>
<a id='n1650' href='#n1650'>1650</a>
<a id='n1651' href='#n1651'>1651</a>
<a id='n1652' href='#n1652'>1652</a>
<a id='n1653' href='#n1653'>1653</a>
<a id='n1654' href='#n1654'>1654</a>
<a id='n1655' href='#n1655'>1655</a>
<a id='n1656' href='#n1656'>1656</a>
<a id='n1657' href='#n1657'>1657</a>
<a id='n1658' href='#n1658'>1658</a>
<a id='n1659' href='#n1659'>1659</a>
<a id='n1660' href='#n1660'>1660</a>
<a id='n1661' href='#n1661'>1661</a>
<a id='n1662' href='#n1662'>1662</a>
<a id='n1663' href='#n1663'>1663</a>
<a id='n1664' href='#n1664'>1664</a>
<a id='n1665' href='#n1665'>1665</a>
<a id='n1666' href='#n1666'>1666</a>
<a id='n1667' href='#n1667'>1667</a>
<a id='n1668' href='#n1668'>1668</a>
<a id='n1669' href='#n1669'>1669</a>
<a id='n1670' href='#n1670'>1670</a>
<a id='n1671' href='#n1671'>1671</a>
<a id='n1672' href='#n1672'>1672</a>
<a id='n1673' href='#n1673'>1673</a>
<a id='n1674' href='#n1674'>1674</a>
<a id='n1675' href='#n1675'>1675</a>
<a id='n1676' href='#n1676'>1676</a>
<a id='n1677' href='#n1677'>1677</a>
<a id='n1678' href='#n1678'>1678</a>
<a id='n1679' href='#n1679'>1679</a>
<a id='n1680' href='#n1680'>1680</a>
</pre></td>
<td class='lines'><pre><code><span class="hl slc">#!/usr/bin/python</span>
<span class="hl str">&#39;&#39;&#39;</span>
<span class="hl str">Created on Sep 18, 2009</span>
<span class="hl str"></span>
<span class="hl str">&#64;author: sgallagh</span>
<span class="hl str">&#39;&#39;&#39;</span>
<span class="hl kwa">import</span> unittest
<span class="hl kwa">import</span> os
<span class="hl kwa">from</span> stat <span class="hl kwa">import</span> <span class="hl opt">*</span>

<span class="hl kwa">import</span> SSSDConfig

<span class="hl kwa">class</span> <span class="hl kwd">SSSDConfigTestValid</span><span class="hl opt">(</span>unittest<span class="hl opt">.</span>TestCase<span class="hl opt">):</span>
    <span class="hl kwa">def</span> <span class="hl kwd">setUp</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">tearDown</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testServices</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-valid.conf&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Validate services</span>
        services <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_services</span><span class="hl opt">()</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span> <span class="hl kwa">in</span> services<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;nss&#39;</span> <span class="hl kwa">in</span> services<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;pam&#39;</span> <span class="hl kwa">in</span> services<span class="hl opt">)</span>

        <span class="hl slc">#Verify service attributes</span>
        sssd_service <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_service</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>
        service_opts <span class="hl opt">=</span> sssd_service<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>


        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;services&#39;</span> <span class="hl kwa">in</span> service_opts<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">())</span>
        service_list <span class="hl opt">=</span> sssd_service<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;nss&#39;</span> <span class="hl kwa">in</span> service_list<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;pam&#39;</span> <span class="hl kwa">in</span> service_list<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;domains&#39;</span> <span class="hl kwa">in</span> service_opts<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;reconnection_retries&#39;</span> <span class="hl kwa">in</span> service_opts<span class="hl opt">)</span>

        <span class="hl kwa">del</span> sssdconfig
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                     srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">delete_service</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>
        new_sssd_service <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_service</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">);</span>
        new_options <span class="hl opt">=</span> new_sssd_service<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">();</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span> <span class="hl kwa">in</span> new_options<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">],</span> <span class="hl kwb">int</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;command&#39;</span> <span class="hl kwa">in</span> new_options<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;command&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">],</span> <span class="hl kwb">str</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;reconnection_retries&#39;</span> <span class="hl kwa">in</span> new_options<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">],</span> <span class="hl kwb">int</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;services&#39;</span> <span class="hl kwa">in</span> new_options<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">],</span> <span class="hl kwb">int</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;domains&#39;</span> <span class="hl kwa">in</span> new_options<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;domains&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">],</span> <span class="hl kwb">list</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;domains&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">],</span> <span class="hl kwb">str</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;sbus_timeout&#39;</span> <span class="hl kwa">in</span> new_options<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;sbus_timeout&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">],</span> <span class="hl kwb">int</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;re_expression&#39;</span> <span class="hl kwa">in</span> new_options<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;re_expression&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">],</span> <span class="hl kwb">str</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;full_name_format&#39;</span> <span class="hl kwa">in</span> new_options<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>new_options<span class="hl opt">[</span><span class="hl str">&#39;full_name_format&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">],</span> <span class="hl kwb">str</span><span class="hl opt">)</span>

        <span class="hl kwa">del</span> sssdconfig

    <span class="hl kwa">def</span> <span class="hl kwd">testDomains</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-valid.conf&quot;</span><span class="hl opt">)</span>

        <span class="hl slc">#Validate domain list</span>
        domains <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_domains</span><span class="hl opt">()</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;LOCAL&#39;</span> <span class="hl kwa">in</span> domains<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;LDAP&#39;</span> <span class="hl kwa">in</span> domains<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;PROXY&#39;</span> <span class="hl kwa">in</span> domains<span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;IPA&#39;</span> <span class="hl kwa">in</span> domains<span class="hl opt">)</span>

        <span class="hl slc">#Verify domain attributes</span>
        ipa_domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_domain</span><span class="hl opt">(</span><span class="hl str">&#39;IPA&#39;</span><span class="hl opt">)</span>
        domain_opts <span class="hl opt">=</span> ipa_domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span> <span class="hl kwa">in</span> domain_opts<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;id_provider&#39;</span> <span class="hl kwa">in</span> domain_opts<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;auth_provider&#39;</span> <span class="hl kwa">in</span> domain_opts<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">())</span>

        <span class="hl kwa">del</span> sssdconfig

    <span class="hl kwa">def</span> <span class="hl kwd">testListProviders</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>
        junk_domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_domain</span><span class="hl opt">(</span><span class="hl str">&#39;junk&#39;</span><span class="hl opt">)</span>
        providers <span class="hl opt">=</span> junk_domain<span class="hl opt">.</span><span class="hl kwd">list_providers</span><span class="hl opt">()</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;ldap&#39;</span> <span class="hl kwa">in</span> providers<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">())</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testCreateNewLocalConfig</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>

        local_domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_domain</span><span class="hl opt">(</span><span class="hl str">&#39;LOCAL&#39;</span><span class="hl opt">)</span>
        local_domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;local&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>
        local_domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span> <span class="hl num">1</span><span class="hl opt">)</span>
        local_domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;default_shell&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;/bin/tcsh&#39;</span><span class="hl opt">)</span>
        local_domain<span class="hl opt">.</span><span class="hl kwd">set_active</span><span class="hl opt">(</span><span class="hl kwa">True</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">save_domain</span><span class="hl opt">(</span>local_domain<span class="hl opt">)</span>

        of <span class="hl opt">=</span> <span class="hl str">&#39;/tmp/testCreateNewLocalConfig.conf&#39;</span>

        <span class="hl slc">#Ensure the output file doesn&#39;t exist</span>
        <span class="hl kwa">try</span><span class="hl opt">:</span>
            os<span class="hl opt">.</span><span class="hl kwd">unlink</span><span class="hl opt">(</span>of<span class="hl opt">)</span>
        <span class="hl kwa">except</span><span class="hl opt">:</span>
            <span class="hl kwa">pass</span>

        <span class="hl slc">#Write out the file</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">write</span><span class="hl opt">(</span>of<span class="hl opt">)</span>

        <span class="hl slc">#Verify that the output file has the correct permissions</span>
        mode <span class="hl opt">=</span> os<span class="hl opt">.</span><span class="hl kwd">stat</span><span class="hl opt">(</span>of<span class="hl opt">)[</span>ST_MODE<span class="hl opt">]</span>

        <span class="hl slc">#Output files should not be readable or writable by</span>
        <span class="hl slc">#non-owners, and should not be executable by anyone</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl kwd">S_IMODE</span><span class="hl opt">(</span>mode<span class="hl opt">) &amp;</span> <span class="hl num">0177</span><span class="hl opt">)</span>

        <span class="hl slc">#Remove the output file</span>
        os<span class="hl opt">.</span><span class="hl kwd">unlink</span><span class="hl opt">(</span>of<span class="hl opt">)</span>


    <span class="hl kwa">def</span> <span class="hl kwd">testCreateNewLDAPConfig</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>

        ldap_domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_domain</span><span class="hl opt">(</span><span class="hl str">&#39;LDAP&#39;</span><span class="hl opt">)</span>
        ldap_domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;ldap&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>
        ldap_domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span> <span class="hl num">1</span><span class="hl opt">)</span>
        ldap_domain<span class="hl opt">.</span><span class="hl kwd">set_active</span><span class="hl opt">(</span><span class="hl kwa">True</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">save_domain</span><span class="hl opt">(</span>ldap_domain<span class="hl opt">)</span>

        of <span class="hl opt">=</span> <span class="hl str">&#39;/tmp/testCreateNewLDAPConfig.conf&#39;</span>

        <span class="hl slc">#Ensure the output file doesn&#39;t exist</span>
        <span class="hl kwa">try</span><span class="hl opt">:</span>
            os<span class="hl opt">.</span><span class="hl kwd">unlink</span><span class="hl opt">(</span>of<span class="hl opt">)</span>
        <span class="hl kwa">except</span><span class="hl opt">:</span>
            <span class="hl kwa">pass</span>

        <span class="hl slc">#Write out the file</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">write</span><span class="hl opt">(</span>of<span class="hl opt">)</span>

        <span class="hl slc">#Verify that the output file has the correct permissions</span>
        mode <span class="hl opt">=</span> os<span class="hl opt">.</span><span class="hl kwd">stat</span><span class="hl opt">(</span>of<span class="hl opt">)[</span>ST_MODE<span class="hl opt">]</span>

        <span class="hl slc">#Output files should not be readable or writable by</span>
        <span class="hl slc">#non-owners, and should not be executable by anyone</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl kwd">S_IMODE</span><span class="hl opt">(</span>mode<span class="hl opt">) &amp;</span> <span class="hl num">0177</span><span class="hl opt">)</span>

        <span class="hl slc">#Remove the output file</span>
        os<span class="hl opt">.</span><span class="hl kwd">unlink</span><span class="hl opt">(</span>of<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testModifyExistingConfig</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-valid.conf&quot;</span><span class="hl opt">)</span>

        ldap_domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_domain</span><span class="hl opt">(</span><span class="hl str">&#39;LDAP&#39;</span><span class="hl opt">)</span>
        ldap_domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span> <span class="hl num">3</span><span class="hl opt">)</span>

        ldap_domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>
        ldap_domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;krb5&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>
        ldap_domain<span class="hl opt">.</span><span class="hl kwd">set_active</span><span class="hl opt">(</span><span class="hl kwa">True</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">save_domain</span><span class="hl opt">(</span>ldap_domain<span class="hl opt">)</span>

        of <span class="hl opt">=</span> <span class="hl str">&#39;/tmp/testModifyExistingConfig.conf&#39;</span>

        <span class="hl slc">#Ensure the output file doesn&#39;t exist</span>
        <span class="hl kwa">try</span><span class="hl opt">:</span>
            os<span class="hl opt">.</span><span class="hl kwd">unlink</span><span class="hl opt">(</span>of<span class="hl opt">)</span>
        <span class="hl kwa">except</span><span class="hl opt">:</span>
            <span class="hl kwa">pass</span>

        <span class="hl slc">#Write out the file</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">write</span><span class="hl opt">(</span>of<span class="hl opt">)</span>

        <span class="hl slc">#Verify that the output file has the correct permissions</span>
        mode <span class="hl opt">=</span> os<span class="hl opt">.</span><span class="hl kwd">stat</span><span class="hl opt">(</span>of<span class="hl opt">)[</span>ST_MODE<span class="hl opt">]</span>

        <span class="hl slc">#Output files should not be readable or writable by</span>
        <span class="hl slc">#non-owners, and should not be executable by anyone</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl kwd">S_IMODE</span><span class="hl opt">(</span>mode<span class="hl opt">) &amp;</span> <span class="hl num">0177</span><span class="hl opt">)</span>

        <span class="hl slc">#Remove the output file</span>
        os<span class="hl opt">.</span><span class="hl kwd">unlink</span><span class="hl opt">(</span>of<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testSpaces</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-valid.conf&quot;</span><span class="hl opt">)</span>
        ldap_domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_domain</span><span class="hl opt">(</span><span class="hl str">&#39;LDAP&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>ldap_domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;auth_provider&#39;</span><span class="hl opt">),</span> <span class="hl str">&#39;ldap&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>ldap_domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;id_provider&#39;</span><span class="hl opt">),</span> <span class="hl str">&#39;ldap&#39;</span><span class="hl opt">)</span>

<span class="hl kwa">class</span> <span class="hl kwd">SSSDConfigTestInvalid</span><span class="hl opt">(</span>unittest<span class="hl opt">.</span>TestCase<span class="hl opt">):</span>
    <span class="hl kwa">def</span> <span class="hl kwd">setUp</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">tearDown</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testBadBool</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-invalid-badbool.conf&quot;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span>
                          sssdconfig<span class="hl opt">.</span>get_domain<span class="hl opt">,</span><span class="hl str">&#39;IPA&#39;</span><span class="hl opt">)</span>

<span class="hl kwa">class</span> <span class="hl kwd">SSSDConfigTestSSSDService</span><span class="hl opt">(</span>unittest<span class="hl opt">.</span>TestCase<span class="hl opt">):</span>
    <span class="hl kwa">def</span> <span class="hl kwd">setUp</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        self<span class="hl opt">.</span>schema <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfigSchema</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                                  srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">tearDown</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testInit</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl slc"># Positive test</span>
        service <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDService</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Type Error test</span>
        <span class="hl slc"># Name is not a string</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span> SSSDConfig<span class="hl opt">.</span>SSSDService<span class="hl opt">,</span> <span class="hl num">3</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># TypeError test</span>
        <span class="hl slc"># schema is not an SSSDSchema</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span> SSSDConfig<span class="hl opt">.</span>SSSDService<span class="hl opt">,</span> <span class="hl str">&#39;3&#39;</span><span class="hl opt">,</span> self<span class="hl opt">)</span>

        <span class="hl slc"># ServiceNotRecognizedError test</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>ServiceNotRecognizedError<span class="hl opt">,</span>
                          SSSDConfig<span class="hl opt">.</span>SSSDService<span class="hl opt">,</span> <span class="hl str">&#39;ssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListOptions</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        service <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDService</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        options <span class="hl opt">=</span> service<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;services&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domains&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;sbus_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;re_expression&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;full_name_format&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_rcache_dir&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_timestamps&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_microseconds&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_to_files&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;command&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">]</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">]) ==</span> <span class="hl kwb">tuple</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Option values should be a tuple&quot;</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">] ==</span> <span class="hl kwb">int</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;reconnection_retries should require an int. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">])</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">] ==</span> <span class="hl kwa">None</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;reconnection_retries should not require a subtype. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">])</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">][</span><span class="hl num">3</span><span class="hl opt">] ==</span> <span class="hl kwa">None</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;reconnection_retries should have no default&quot;</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">]) ==</span> <span class="hl kwb">tuple</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Option values should be a tuple&quot;</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">] ==</span> <span class="hl kwb">list</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;services should require an list. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">])</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">] ==</span> <span class="hl kwb">str</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;services should require a subtype of str. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">])</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListMandatoryOptions</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        service <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDService</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        options <span class="hl opt">=</span> service<span class="hl opt">.</span><span class="hl kwd">list_mandatory_options</span><span class="hl opt">()</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;services&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domains&#39;</span><span class="hl opt">]</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">]) ==</span> <span class="hl kwb">tuple</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Option values should be a tuple&quot;</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">] ==</span> <span class="hl kwb">list</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;services should require an list. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">])</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">] ==</span> <span class="hl kwb">str</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;services should require a subtype of str. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">])</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testSetOption</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        service <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDService</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Exactly right</span>
        service<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span> <span class="hl num">2</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>service<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">),</span> <span class="hl num">2</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Allow converting &quot;safe&quot; values</span>
        service<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;2&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>service<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">),</span> <span class="hl num">2</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Remove option if value is None</span>
        service<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span> <span class="hl kwa">None</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;debug_level&#39;</span> <span class="hl kwa">not in</span> service<span class="hl opt">.</span>options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">())</span>

        <span class="hl slc"># Negative test - Nonexistent Option</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoOptionError<span class="hl opt">,</span> service<span class="hl opt">.</span>set_option<span class="hl opt">,</span> <span class="hl str">&#39;nosuchoption&#39;</span><span class="hl opt">,</span> <span class="hl num">1</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative test - Incorrect type</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span> service<span class="hl opt">.</span>set_option<span class="hl opt">,</span> <span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;two&#39;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testGetOption</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        service <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDService</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Single-valued</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>service<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;config_file_version&#39;</span><span class="hl opt">),</span> <span class="hl num">2</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - List of values</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>service<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">), [</span><span class="hl str">&#39;nss&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;pam&#39;</span><span class="hl opt">])</span>

        <span class="hl slc"># Negative Test - Bad Option</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoOptionError<span class="hl opt">,</span> service<span class="hl opt">.</span>get_option<span class="hl opt">,</span> <span class="hl str">&#39;nosuchoption&#39;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testGetAllOptions</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        service <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDService</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc">#Positive test</span>
        options <span class="hl opt">=</span> service<span class="hl opt">.</span><span class="hl kwd">get_all_options</span><span class="hl opt">()</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;config_file_version&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;services&#39;</span><span class="hl opt">]</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testRemoveOption</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        service <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDService</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Remove an option that exists</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>service<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">), [</span><span class="hl str">&#39;nss&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;pam&#39;</span><span class="hl opt">])</span>
        service<span class="hl opt">.</span><span class="hl kwd">remove_option</span><span class="hl opt">(</span><span class="hl str">&#39;services&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoOptionError<span class="hl opt">,</span> service<span class="hl opt">.</span>get_option<span class="hl opt">,</span> <span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Remove an option that doesn&#39;t exist</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoOptionError<span class="hl opt">,</span> service<span class="hl opt">.</span>get_option<span class="hl opt">,</span> <span class="hl str">&#39;nosuchentry&#39;</span><span class="hl opt">)</span>
        service<span class="hl opt">.</span><span class="hl kwd">remove_option</span><span class="hl opt">(</span><span class="hl str">&#39;nosuchentry&#39;</span><span class="hl opt">)</span>

<span class="hl kwa">class</span> <span class="hl kwd">SSSDConfigTestSSSDDomain</span><span class="hl opt">(</span>unittest<span class="hl opt">.</span>TestCase<span class="hl opt">):</span>
    <span class="hl kwa">def</span> <span class="hl kwd">setUp</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        self<span class="hl opt">.</span>schema <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfigSchema</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                                  srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">tearDown</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testInit</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl slc"># Positive Test</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;mydomain&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Name not a string</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span> SSSDConfig<span class="hl opt">.</span>SSSDDomain<span class="hl opt">,</span> <span class="hl num">2</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Schema is not an SSSDSchema</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span> SSSDConfig<span class="hl opt">.</span>SSSDDomain<span class="hl opt">,</span> <span class="hl str">&#39;mydomain&#39;</span><span class="hl opt">,</span> self<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testGetName</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl slc"># Positive Test</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;mydomain&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_name</span><span class="hl opt">(),</span> <span class="hl str">&#39;mydomain&#39;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testSetActive</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl slc">#Positive Test</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;mydomain&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Should default to inactive</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>active<span class="hl opt">)</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_active</span><span class="hl opt">(</span><span class="hl kwa">True</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>active<span class="hl opt">)</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_active</span><span class="hl opt">(</span><span class="hl kwa">False</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>active<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListOptions</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># First test default options</span>
        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;description&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_timestamps&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;min_id&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;max_id&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;try_inotify&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;command&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;enumerate&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;cache_credentials&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;store_legacy_passwords&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;use_fully_qualified_names&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;filter_users&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;filter_groups&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_user_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_group_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_netgroup_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_service_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_autofs_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;lookup_family_order&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;account_cache_expiration&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;dns_resolver_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;dns_discovery_domain&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;override_gid&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;case_sensitive&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;override_homedir&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;id_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;auth_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;access_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;chpass_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;sudo_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;autofs_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;session_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;hostid_provider&#39;</span><span class="hl opt">]</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">]) ==</span> <span class="hl kwb">tuple</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Option values should be a tuple&quot;</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">] ==</span> <span class="hl kwb">int</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;max_id should require an int. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">])</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">] ==</span> <span class="hl kwa">None</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;max_id should not require a subtype. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">])</span>

        <span class="hl slc"># Add a provider and verify that the new options appear</span>
        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;local&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>
        control_list<span class="hl opt">.</span><span class="hl kwd">extend</span><span class="hl opt">(</span>
            <span class="hl opt">[</span><span class="hl str">&#39;default_shell&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;base_directory&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;create_homedir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;remove_homedir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;homedir_umask&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;skel_dir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;mail_dir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;userdel_cmd&#39;</span><span class="hl opt">])</span>

        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Add a provider that has global options and verify that</span>
        <span class="hl slc"># The new options appear.</span>
        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;krb5&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>

        backup_list <span class="hl opt">=</span> control_list<span class="hl opt">[:]</span>
        control_list<span class="hl opt">.</span><span class="hl kwd">extend</span><span class="hl opt">(</span>
            <span class="hl opt">[</span><span class="hl str">&#39;krb5_server&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_realm&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_kpasswd&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_ccachedir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_ccname_template&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_keytab&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_validate&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_store_password_if_offline&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_auth_timeout&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_renewable_lifetime&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_lifetime&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_renew_interval&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_use_fast&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_fast_principal&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_canonicalize&#39;</span><span class="hl opt">])</span>

        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        control_list<span class="hl opt">.</span><span class="hl kwd">extend</span><span class="hl opt">([</span><span class="hl str">&#39;krb5_kdcip&#39;</span><span class="hl opt">])</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Remove the auth domain and verify that the options</span>
        <span class="hl slc"># revert to the backup_list</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>
        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> backup_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> backup_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListMandatoryOptions</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># First test default options</span>
        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_mandatory_options</span><span class="hl opt">()</span>
        control_list <span class="hl opt">= [</span><span class="hl str">&#39;id_provider&#39;</span><span class="hl opt">]</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Add a provider that has global options and verify that</span>
        <span class="hl slc"># The new options appear.</span>
        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;krb5&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>

        backup_list <span class="hl opt">=</span> control_list<span class="hl opt">[:]</span>
        control_list<span class="hl opt">.</span><span class="hl kwd">extend</span><span class="hl opt">([</span><span class="hl str">&#39;krb5_realm&#39;</span><span class="hl opt">])</span>

        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_mandatory_options</span><span class="hl opt">()</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Remove the auth domain and verify that the options</span>
        <span class="hl slc"># revert to the backup_list</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>
        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_mandatory_options</span><span class="hl opt">()</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> backup_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> backup_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListProviders</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        control_provider_dict <span class="hl opt">= {</span>
            <span class="hl str">&#39;ipa&#39;</span><span class="hl opt">: [</span><span class="hl str">&#39;id&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;access&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;chpass&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;autofs&#39;</span> <span class="hl opt">],</span>
            <span class="hl str">&#39;local&#39;</span><span class="hl opt">: [</span><span class="hl str">&#39;id&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;chpass&#39;</span><span class="hl opt">],</span>
            <span class="hl str">&#39;ldap&#39;</span><span class="hl opt">: [</span><span class="hl str">&#39;id&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;access&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;chpass&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;sudo&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;autofs&#39;</span><span class="hl opt">],</span>
            <span class="hl str">&#39;krb5&#39;</span><span class="hl opt">: [</span><span class="hl str">&#39;auth&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;access&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;chpass&#39;</span><span class="hl opt">],</span>
            <span class="hl str">&#39;proxy&#39;</span><span class="hl opt">: [</span><span class="hl str">&#39;id&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">],</span>
            <span class="hl str">&#39;simple&#39;</span><span class="hl opt">: [</span><span class="hl str">&#39;access&#39;</span><span class="hl opt">],</span>
            <span class="hl str">&#39;permit&#39;</span><span class="hl opt">: [</span><span class="hl str">&#39;access&#39;</span><span class="hl opt">],</span>
            <span class="hl str">&#39;deny&#39;</span><span class="hl opt">: [</span><span class="hl str">&#39;access&#39;</span><span class="hl opt">]}</span>

        providers <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_providers</span><span class="hl opt">()</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> provider <span class="hl kwa">in</span> control_provider_dict<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            <span class="hl kwa">for</span> ptype <span class="hl kwa">in</span> control_provider_dict<span class="hl opt">[</span>provider<span class="hl opt">]:</span>
                self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>providers<span class="hl opt">.</span><span class="hl kwd">has_key</span><span class="hl opt">(</span>provider<span class="hl opt">))</span>
                self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>ptype <span class="hl kwa">in</span> providers<span class="hl opt">[</span>provider<span class="hl opt">])</span>

        <span class="hl kwa">for</span> provider <span class="hl kwa">in</span> providers<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            <span class="hl kwa">for</span> ptype <span class="hl kwa">in</span> providers<span class="hl opt">[</span>provider<span class="hl opt">]:</span>
                self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>control_provider_dict<span class="hl opt">.</span><span class="hl kwd">has_key</span><span class="hl opt">(</span>provider<span class="hl opt">))</span>
                self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>ptype <span class="hl kwa">in</span> control_provider_dict<span class="hl opt">[</span>provider<span class="hl opt">])</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListProviderOptions</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Test looking up a specific provider type</span>
        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_provider_options</span><span class="hl opt">(</span><span class="hl str">&#39;krb5&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;krb5_server&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_kdcip&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_realm&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_kpasswd&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_ccachedir&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_ccname_template&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_keytab&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_validate&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_store_password_if_offline&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_auth_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_renewable_lifetime&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_lifetime&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_renew_interval&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_use_fast&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_fast_principal&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;krb5_canonicalize&#39;</span><span class="hl opt">]</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc">#Test looking up all provider values</span>
        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_provider_options</span><span class="hl opt">(</span><span class="hl str">&#39;krb5&#39;</span><span class="hl opt">)</span>
        control_list<span class="hl opt">.</span><span class="hl kwd">extend</span><span class="hl opt">([</span><span class="hl str">&#39;krb5_kpasswd&#39;</span><span class="hl opt">])</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testAddProvider</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Positive Test</span>
        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;local&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - No such backend type</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoSuchProviderError<span class="hl opt">,</span>
                          domain<span class="hl opt">.</span>add_provider<span class="hl opt">,</span> <span class="hl str">&#39;nosuchbackend&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - No such backend subtype</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoSuchProviderSubtypeError<span class="hl opt">,</span>
                          domain<span class="hl opt">.</span>add_provider<span class="hl opt">,</span> <span class="hl str">&#39;ldap&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;nosuchsubtype&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Try to add a second provider of the same type</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>ProviderSubtypeInUse<span class="hl opt">,</span>
                          domain<span class="hl opt">.</span>add_provider<span class="hl opt">,</span> <span class="hl str">&#39;ldap&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testRemoveProvider</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># First test default options</span>
        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;description&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_level&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_timestamps&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;min_id&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;max_id&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;try_inotify&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;command&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;enumerate&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;cache_credentials&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;store_legacy_passwords&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;use_fully_qualified_names&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;filter_users&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;filter_groups&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_user_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_group_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_netgroup_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_service_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;entry_cache_autofs_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;account_cache_expiration&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;lookup_family_order&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;dns_resolver_timeout&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;dns_discovery_domain&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;override_gid&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;case_sensitive&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;override_homedir&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;id_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;auth_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;access_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;chpass_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;sudo_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;autofs_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;session_provider&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;hostid_provider&#39;</span><span class="hl opt">]</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">]) ==</span> <span class="hl kwb">tuple</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Option values should be a tuple&quot;</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">] ==</span> <span class="hl kwb">int</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;config_file_version should require an int. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">][</span><span class="hl num">0</span><span class="hl opt">])</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">] ==</span> <span class="hl kwa">None</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;config_file_version should not require a subtype. &quot;</span> <span class="hl opt">+</span>
                        <span class="hl str">&quot;list_options is requiring a</span> <span class="hl ipl">%s</span><span class="hl str">&quot;</span> <span class="hl opt">%</span>
                        options<span class="hl opt">[</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">][</span><span class="hl num">1</span><span class="hl opt">])</span>

        <span class="hl slc"># Add a provider and verify that the new options appear</span>
        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;local&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>
        control_list<span class="hl opt">.</span><span class="hl kwd">extend</span><span class="hl opt">(</span>
            <span class="hl opt">[</span><span class="hl str">&#39;default_shell&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;base_directory&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;create_homedir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;remove_homedir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;homedir_umask&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;skel_dir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;mail_dir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;userdel_cmd&#39;</span><span class="hl opt">])</span>

        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Add a provider that has global options and verify that</span>
        <span class="hl slc"># The new options appear.</span>
        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;krb5&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>

        backup_list <span class="hl opt">=</span> control_list<span class="hl opt">[:]</span>
        control_list<span class="hl opt">.</span><span class="hl kwd">extend</span><span class="hl opt">(</span>
            <span class="hl opt">[</span><span class="hl str">&#39;krb5_server&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_kdcip&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_realm&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_kpasswd&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_ccachedir&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_ccname_template&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_keytab&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_validate&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_store_password_if_offline&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_auth_timeout&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_renewable_lifetime&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_lifetime&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_renew_interval&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_use_fast&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_fast_principal&#39;</span><span class="hl opt">,</span>
             <span class="hl str">&#39;krb5_canonicalize&#39;</span><span class="hl opt">])</span>

        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Remove the local ID provider and add an LDAP one</span>
        <span class="hl slc"># LDAP ID providers can also use the krb5_realm</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>

        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;ldap&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Set the krb5_realm option and the ldap_uri option</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;krb5_realm&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;EXAMPLE.COM&#39;</span><span class="hl opt">)</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;ldap_uri&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;ldap://ldap.example.com&#39;</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;krb5_realm&#39;</span><span class="hl opt">),</span>
                          <span class="hl str">&#39;EXAMPLE.COM&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;ldap_uri&#39;</span><span class="hl opt">),</span>
                          <span class="hl str">&#39;ldap://ldap.example.com&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Remove the LDAP provider and verify that krb5_realm remains</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;krb5_realm&#39;</span><span class="hl opt">),</span>
                  <span class="hl str">&#39;EXAMPLE.COM&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>options<span class="hl opt">.</span><span class="hl kwd">has_key</span><span class="hl opt">(</span><span class="hl str">&#39;ldap_uri&#39;</span><span class="hl opt">))</span>

        <span class="hl slc"># Put the LOCAL provider back</span>
        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;local&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Remove the auth domain and verify that the options</span>
        <span class="hl slc"># revert to the backup_list</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;auth&#39;</span><span class="hl opt">)</span>
        options <span class="hl opt">=</span> domain<span class="hl opt">.</span><span class="hl kwd">list_options</span><span class="hl opt">()</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>options<span class="hl opt">) ==</span> <span class="hl kwb">dict</span><span class="hl opt">,</span>
                        <span class="hl str">&quot;Options should be a dictionary&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Ensure that all of the expected defaults are there</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> backup_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">(),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that there aren&#39;t any unexpected options listed</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> options<span class="hl opt">.</span><span class="hl kwd">keys</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option <span class="hl kwa">in</span> backup_list<span class="hl opt">,</span>
                            <span class="hl str">&#39;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&#39;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Ensure that the krb5_realm option is now gone</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>options<span class="hl opt">.</span><span class="hl kwd">has_key</span><span class="hl opt">(</span><span class="hl str">&#39;krb5_realm&#39;</span><span class="hl opt">))</span>

        <span class="hl slc"># Test removing nonexistent provider - Real</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Test removing nonexistent provider - Bad backend type</span>
        <span class="hl slc"># Should pass without complaint</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Test removing nonexistent provider - Bad provider type</span>
        <span class="hl slc"># Should pass without complaint</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_provider</span><span class="hl opt">(</span><span class="hl str">&#39;nosuchprovider&#39;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testGetOption</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Try to get valid option that is not set</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoOptionError<span class="hl opt">,</span> domain<span class="hl opt">.</span>get_option<span class="hl opt">,</span> <span class="hl str">&#39;max_id&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive Test - Set the above option and get it</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">,</span> <span class="hl num">10000</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">),</span> <span class="hl num">10000</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Try yo get invalid option</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoOptionError<span class="hl opt">,</span> domain<span class="hl opt">.</span>get_option<span class="hl opt">,</span> <span class="hl str">&#39;nosuchoption&#39;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testSetOption</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Positive Test</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">,</span> <span class="hl num">10000</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">),</span> <span class="hl num">10000</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive Test - Remove option if value is None</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">,</span> <span class="hl kwa">None</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span> <span class="hl kwa">not in</span> domain<span class="hl opt">.</span><span class="hl kwd">get_all_options</span><span class="hl opt">().</span><span class="hl kwd">keys</span><span class="hl opt">())</span>

        <span class="hl slc"># Negative Test - invalid option</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoOptionError<span class="hl opt">,</span> domain<span class="hl opt">.</span>set_option<span class="hl opt">,</span> <span class="hl str">&#39;nosuchoption&#39;</span><span class="hl opt">,</span> <span class="hl num">1</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - incorrect type</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span> domain<span class="hl opt">.</span>set_option<span class="hl opt">,</span> <span class="hl str">&#39;max_id&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;a string&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive Test - Coax options to appropriate type</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;10000&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">),</span> <span class="hl num">10000</span><span class="hl opt">)</span>

        domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">,</span> <span class="hl num">30.2</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">),</span> <span class="hl num">30</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testRemoveOption</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Remove unset but valid option</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span> <span class="hl kwa">in</span> domain<span class="hl opt">.</span><span class="hl kwd">get_all_options</span><span class="hl opt">().</span><span class="hl kwd">keys</span><span class="hl opt">())</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_option</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;max_id&#39;</span> <span class="hl kwa">in</span> domain<span class="hl opt">.</span><span class="hl kwd">get_all_options</span><span class="hl opt">().</span><span class="hl kwd">keys</span><span class="hl opt">())</span>

        <span class="hl slc"># Positive test - Remove unset and unknown option</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;nosuchoption&#39;</span> <span class="hl kwa">in</span> domain<span class="hl opt">.</span><span class="hl kwd">get_all_options</span><span class="hl opt">().</span><span class="hl kwd">keys</span><span class="hl opt">())</span>
        domain<span class="hl opt">.</span><span class="hl kwd">remove_option</span><span class="hl opt">(</span><span class="hl str">&#39;nosuchoption&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;nosuchoption&#39;</span> <span class="hl kwa">in</span> domain<span class="hl opt">.</span><span class="hl kwd">get_all_options</span><span class="hl opt">().</span><span class="hl kwd">keys</span><span class="hl opt">())</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testSetName</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        domain <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDDomain</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> self<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Change the name once</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_name</span><span class="hl opt">(</span><span class="hl str">&#39;sssd2&#39;</span><span class="hl opt">);</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_name</span><span class="hl opt">(),</span> <span class="hl str">&#39;sssd2&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>oldname<span class="hl opt">,</span> <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Change the name a second time</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_name</span><span class="hl opt">(</span><span class="hl str">&#39;sssd3&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_name</span><span class="hl opt">(),</span> <span class="hl str">&#39;sssd3&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>oldname<span class="hl opt">,</span> <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative test - try setting the name to a non-string</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span>
                          domain<span class="hl opt">.</span>set_name<span class="hl opt">,</span> <span class="hl num">4</span><span class="hl opt">)</span>

<span class="hl kwa">class</span> <span class="hl kwd">SSSDConfigTestSSSDConfig</span><span class="hl opt">(</span>unittest<span class="hl opt">.</span>TestCase<span class="hl opt">):</span>
    <span class="hl kwa">def</span> <span class="hl kwd">setUp</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">tearDown</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testInit</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl slc"># Positive test</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - No Such File</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">IOError</span><span class="hl opt">,</span>
                          SSSDConfig<span class="hl opt">.</span>SSSDConfig<span class="hl opt">,</span> <span class="hl str">&quot;nosuchfile.api.conf&quot;</span><span class="hl opt">,</span> srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Schema is not parsable</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>ParsingError<span class="hl opt">,</span>
                          SSSDConfig<span class="hl opt">.</span>SSSDConfig<span class="hl opt">,</span> srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/noparse.api.conf&quot;</span><span class="hl opt">,</span> srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testImportConfig</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl slc"># Positive Test</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-valid.conf&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Verify that all sections were imported</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;nss&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;pam&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domain/PROXY&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domain/IPA&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domain/LOCAL&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domain/LDAP&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domain/INVALIDPROVIDER&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domain/INVALIDOPTION&#39;</span><span class="hl opt">,</span>
            <span class="hl opt">]</span>

        <span class="hl kwa">for</span> section <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">has_section</span><span class="hl opt">(</span>section<span class="hl opt">),</span>
                            <span class="hl str">&quot;Section [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            section<span class="hl opt">)</span>
        <span class="hl kwa">for</span> section <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">sections</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>section<span class="hl opt">[</span><span class="hl str">&#39;name&#39;</span><span class="hl opt">]</span> <span class="hl kwa">in</span> control_list<span class="hl opt">)</span>

        <span class="hl slc"># Verify that all options were imported for a section</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;services&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;reconnection_retries&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;domains&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;debug_timestamps&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;config_file_version&#39;</span><span class="hl opt">]</span>

        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">has_option</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> option<span class="hl opt">),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing from [sssd]&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">options</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">):</span>
            <span class="hl kwa">if</span> option<span class="hl opt">[</span><span class="hl str">&#39;type&#39;</span><span class="hl opt">]</span> <span class="hl kwa">in</span> <span class="hl opt">(</span><span class="hl str">&#39;empty&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;comment&#39;</span><span class="hl opt">):</span>
                <span class="hl kwa">continue</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option<span class="hl opt">[</span><span class="hl str">&#39;name&#39;</span><span class="hl opt">]</span> <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc">#TODO: Check the types and values of the settings</span>

        <span class="hl slc"># Negative Test - Missing config file</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">IOError</span><span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>import_config<span class="hl opt">,</span> <span class="hl str">&quot;nosuchfile.conf&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Invalid config file</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>ParsingError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>import_config<span class="hl opt">,</span> srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-invalid.conf&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Invalid config file version</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>ParsingError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>import_config<span class="hl opt">,</span> srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-badversion.conf&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - No config file version</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>ParsingError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>import_config<span class="hl opt">,</span> srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-noversion.conf&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Already initialized</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-valid.conf&quot;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>AlreadyInitializedError<span class="hl opt">,</span>
                          sssdconfig<span class="hl opt">.</span>import_config<span class="hl opt">,</span> srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/testconfigs/sssd-valid.conf&quot;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testNewConfig</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl slc"># Positive Test</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>

        <span class="hl slc"># Check that the defaults were set</span>
        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;nss&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;pam&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;sudo&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;autofs&#39;</span><span class="hl opt">]</span>
        <span class="hl kwa">for</span> section <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">has_section</span><span class="hl opt">(</span>section<span class="hl opt">),</span>
                            <span class="hl str">&quot;Section [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            section<span class="hl opt">)</span>
        <span class="hl kwa">for</span> section <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">sections</span><span class="hl opt">():</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>section<span class="hl opt">[</span><span class="hl str">&#39;name&#39;</span><span class="hl opt">]</span> <span class="hl kwa">in</span> control_list<span class="hl opt">)</span>

        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;config_file_version&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;services&#39;</span><span class="hl opt">]</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">has_option</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> option<span class="hl opt">),</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] missing from [sssd]&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>
        <span class="hl kwa">for</span> option <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">options</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">):</span>
            <span class="hl kwa">if</span> option<span class="hl opt">[</span><span class="hl str">&#39;type&#39;</span><span class="hl opt">]</span> <span class="hl kwa">in</span> <span class="hl opt">(</span><span class="hl str">&#39;empty&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;comment&#39;</span><span class="hl opt">):</span>
                <span class="hl kwa">continue</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>option<span class="hl opt">[</span><span class="hl str">&#39;name&#39;</span><span class="hl opt">]</span> <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&quot;Option [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&quot;</span> <span class="hl opt">%</span>
                            option<span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Already Initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>AlreadyInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>new_config<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testWrite</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        <span class="hl slc">#TODO Write tests to compare output files</span>
        <span class="hl kwa">pass</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListServices</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - sssdconfig not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>list_services<span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>

        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;pam&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;nss&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;sudo&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;autofs&#39;</span> <span class="hl opt">]</span>
        service_list <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_services</span><span class="hl opt">()</span>
        <span class="hl kwa">for</span> service <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>service <span class="hl kwa">in</span> service_list<span class="hl opt">,</span>
                            <span class="hl str">&quot;Service [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            service<span class="hl opt">)</span>
        <span class="hl kwa">for</span> service <span class="hl kwa">in</span> service_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>service <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&quot;Service [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&quot;</span> <span class="hl opt">%</span>
                            service<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testGetService</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>get_service<span class="hl opt">,</span> <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&#39;/testconfigs/sssd-valid.conf&#39;</span><span class="hl opt">)</span>

        service <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_service</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">isinstance</span><span class="hl opt">(</span>service<span class="hl opt">,</span> SSSDConfig<span class="hl opt">.</span>SSSDService<span class="hl opt">))</span>

        <span class="hl slc"># Verify the contents of this service</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span><span class="hl kwb">type</span><span class="hl opt">(</span>service<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_timestamps&#39;</span><span class="hl opt">)),</span> <span class="hl kwb">bool</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>service<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;debug_timestamps&#39;</span><span class="hl opt">))</span>

        <span class="hl slc"># Negative Test - No such service</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoServiceError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>get_service<span class="hl opt">,</span> <span class="hl str">&#39;nosuchservice&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Service with invalid option loads</span>
        <span class="hl slc"># but ignores the invalid option</span>
        service <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_service</span><span class="hl opt">(</span><span class="hl str">&#39;pam&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>service<span class="hl opt">.</span>options<span class="hl opt">.</span><span class="hl kwd">has_key</span><span class="hl opt">(</span><span class="hl str">&#39;nosuchoption&#39;</span><span class="hl opt">))</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testNewService</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>new_service<span class="hl opt">,</span> <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>

        <span class="hl slc"># Positive Test</span>
        <span class="hl slc"># First need to remove the existing service</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">delete_service</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>
        service <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_service</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">failUnless</span><span class="hl opt">(</span>service<span class="hl opt">.</span><span class="hl kwd">get_name</span><span class="hl opt">()</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_services</span><span class="hl opt">())</span>

        <span class="hl slc"># TODO: check that the values of this new service</span>
        <span class="hl slc"># are set to the defaults from the schema</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testDeleteService</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>delete_service<span class="hl opt">,</span> <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>

        <span class="hl slc"># Positive Test</span>
        service <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">delete_service</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testSaveService</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        new_service <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDService</span><span class="hl opt">(</span><span class="hl str">&#39;sssd&#39;</span><span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>schema<span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>save_service<span class="hl opt">,</span> new_service<span class="hl opt">)</span>

        <span class="hl slc"># Positive Test</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">save_service</span><span class="hl opt">(</span>new_service<span class="hl opt">)</span>

        <span class="hl slc"># TODO: check that all entries were saved correctly (change a few)</span>

        <span class="hl slc"># Negative Test - Type Error</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>save_service<span class="hl opt">,</span> self<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListActiveDomains</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not Initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>list_active_domains<span class="hl opt">)</span>

        <span class="hl slc"># Positive Test</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&#39;/testconfigs/sssd-valid.conf&#39;</span><span class="hl opt">)</span>

        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;IPA&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;LOCAL&#39;</span><span class="hl opt">]</span>
        active_domains <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">()</span>

        <span class="hl kwa">for</span> domain <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain <span class="hl kwa">in</span> active_domains<span class="hl opt">,</span>
                            <span class="hl str">&quot;Domain [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            domain<span class="hl opt">)</span>
        <span class="hl kwa">for</span> domain <span class="hl kwa">in</span> active_domains<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&quot;Domain [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&quot;</span> <span class="hl opt">%</span>
                            domain<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListInactiveDomains</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not Initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>list_inactive_domains<span class="hl opt">)</span>

        <span class="hl slc"># Positive Test</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&#39;/testconfigs/sssd-valid.conf&#39;</span><span class="hl opt">)</span>

        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;PROXY&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;LDAP&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;INVALIDPROVIDER&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;INVALIDOPTION&#39;</span><span class="hl opt">,</span>
            <span class="hl opt">]</span>
        inactive_domains <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">()</span>

        <span class="hl kwa">for</span> domain <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain <span class="hl kwa">in</span> inactive_domains<span class="hl opt">,</span>
                            <span class="hl str">&quot;Domain [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            domain<span class="hl opt">)</span>
        <span class="hl kwa">for</span> domain <span class="hl kwa">in</span> inactive_domains<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&quot;Domain [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&quot;</span> <span class="hl opt">%</span>
                            domain<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testListDomains</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not Initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>list_domains<span class="hl opt">)</span>

        <span class="hl slc"># Positive Test</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&#39;/testconfigs/sssd-valid.conf&#39;</span><span class="hl opt">)</span>

        control_list <span class="hl opt">= [</span>
            <span class="hl str">&#39;IPA&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;LOCAL&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;PROXY&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;LDAP&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;INVALIDPROVIDER&#39;</span><span class="hl opt">,</span>
            <span class="hl str">&#39;INVALIDOPTION&#39;</span><span class="hl opt">,</span>
            <span class="hl opt">]</span>
        domains <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_domains</span><span class="hl opt">()</span>

        <span class="hl kwa">for</span> domain <span class="hl kwa">in</span> control_list<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain <span class="hl kwa">in</span> domains<span class="hl opt">,</span>
                            <span class="hl str">&quot;Domain [</span><span class="hl ipl">%s</span><span class="hl str">] missing&quot;</span> <span class="hl opt">%</span>
                            domain<span class="hl opt">)</span>
        <span class="hl kwa">for</span> domain <span class="hl kwa">in</span> domains<span class="hl opt">:</span>
            self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain <span class="hl kwa">in</span> control_list<span class="hl opt">,</span>
                            <span class="hl str">&quot;Domain [</span><span class="hl ipl">%s</span><span class="hl str">] unexpectedly found&quot;</span> <span class="hl opt">%</span>
                            domain<span class="hl opt">)</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testGetDomain</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>get_domain<span class="hl opt">,</span> <span class="hl str">&#39;sssd&#39;</span><span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&#39;/testconfigs/sssd-valid.conf&#39;</span><span class="hl opt">)</span>

        domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_domain</span><span class="hl opt">(</span><span class="hl str">&#39;IPA&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">isinstance</span><span class="hl opt">(</span>domain<span class="hl opt">,</span> SSSDConfig<span class="hl opt">.</span>SSSDDomain<span class="hl opt">))</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>active<span class="hl opt">)</span>

        domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_domain</span><span class="hl opt">(</span><span class="hl str">&#39;LDAP&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">isinstance</span><span class="hl opt">(</span>domain<span class="hl opt">,</span> SSSDConfig<span class="hl opt">.</span>SSSDDomain<span class="hl opt">))</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>active<span class="hl opt">)</span>

        <span class="hl slc"># TODO verify the contents of this domain</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_option</span><span class="hl opt">(</span><span class="hl str">&#39;ldap_id_use_start_tls&#39;</span><span class="hl opt">))</span>

        <span class="hl slc"># Negative Test - No such domain</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NoDomainError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>get_domain<span class="hl opt">,</span> <span class="hl str">&#39;nosuchdomain&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive Test - Domain with unknown provider</span>
        <span class="hl slc"># Expected result: Domain is imported, but does not contain the</span>
        <span class="hl slc"># unknown provider entry</span>
        domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_domain</span><span class="hl opt">(</span><span class="hl str">&#39;INVALIDPROVIDER&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>options<span class="hl opt">.</span><span class="hl kwd">has_key</span><span class="hl opt">(</span><span class="hl str">&#39;chpass_provider&#39;</span><span class="hl opt">))</span>

        <span class="hl slc"># Positive Test - Domain with unknown option</span>
        <span class="hl slc"># Expected result: Domain is imported, but does not contain the</span>
        <span class="hl slc"># unknown option entry</span>
        domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">get_domain</span><span class="hl opt">(</span><span class="hl str">&#39;INVALIDOPTION&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>options<span class="hl opt">.</span><span class="hl kwd">has_key</span><span class="hl opt">(</span><span class="hl str">&#39;nosuchoption&#39;</span><span class="hl opt">))</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testNewDomain</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>new_domain<span class="hl opt">,</span> <span class="hl str">&#39;example.com&#39;</span><span class="hl opt">)</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>

        <span class="hl slc"># Positive Test</span>
        domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_domain</span><span class="hl opt">(</span><span class="hl str">&#39;example.com&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl kwb">isinstance</span><span class="hl opt">(</span>domain<span class="hl opt">,</span> SSSDConfig<span class="hl opt">.</span>SSSDDomain<span class="hl opt">))</span>
        self<span class="hl opt">.</span><span class="hl kwd">failUnless</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_name</span><span class="hl opt">()</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">failUnless</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_name</span><span class="hl opt">()</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">())</span>

        <span class="hl slc"># TODO: check that the values of this new domain</span>
        <span class="hl slc"># are set to the defaults from the schema</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testDeleteDomain</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>delete_domain<span class="hl opt">,</span> <span class="hl str">&#39;IPA&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive Test</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">import_config</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&#39;/testconfigs/sssd-valid.conf&#39;</span><span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;IPA&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;IPA&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">has_section</span><span class="hl opt">(</span><span class="hl str">&#39;domain/IPA&#39;</span><span class="hl opt">))</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">delete_domain</span><span class="hl opt">(</span><span class="hl str">&#39;IPA&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;IPA&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;IPA&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">has_section</span><span class="hl opt">(</span><span class="hl str">&#39;domain/IPA&#39;</span><span class="hl opt">))</span>

    <span class="hl kwa">def</span> <span class="hl kwd">testSaveDomain</span><span class="hl opt">(</span>self<span class="hl opt">):</span>
        sssdconfig <span class="hl opt">=</span> SSSDConfig<span class="hl opt">.</span><span class="hl kwd">SSSDConfig</span><span class="hl opt">(</span>srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.conf&quot;</span><span class="hl opt">,</span>
                                           srcdir <span class="hl opt">+</span> <span class="hl str">&quot;/etc/sssd.api.d&quot;</span><span class="hl opt">)</span>
        <span class="hl slc"># Negative Test - Not initialized</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span>SSSDConfig<span class="hl opt">.</span>NotInitializedError<span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>save_domain<span class="hl opt">,</span> <span class="hl str">&#39;IPA&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive Test</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_config</span><span class="hl opt">()</span>
        domain <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">new_domain</span><span class="hl opt">(</span><span class="hl str">&#39;example.com&#39;</span><span class="hl opt">)</span>
        domain<span class="hl opt">.</span><span class="hl kwd">add_provider</span><span class="hl opt">(</span><span class="hl str">&#39;ldap&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;id&#39;</span><span class="hl opt">)</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_option</span><span class="hl opt">(</span><span class="hl str">&#39;ldap_uri&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;ldap://ldap.example.com&#39;</span><span class="hl opt">)</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_active</span><span class="hl opt">(</span><span class="hl kwa">True</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">save_domain</span><span class="hl opt">(</span>domain<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;example.com&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;example.com&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">get</span><span class="hl opt">(</span><span class="hl str">&#39;domain/example.com&#39;</span><span class="hl opt">,</span> <span class="hl str">&#39;ldap_uri&#39;</span><span class="hl opt">),</span>
                         <span class="hl str">&#39;ldap://ldap.example.com&#39;</span><span class="hl opt">)</span>

        <span class="hl slc"># Negative Test - Type Error</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertRaises</span><span class="hl opt">(</span><span class="hl kwc">TypeError</span><span class="hl opt">,</span> sssdconfig<span class="hl opt">.</span>save_domain<span class="hl opt">,</span> self<span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Change the domain name and save it</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_name</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>name<span class="hl opt">,</span><span class="hl str">&#39;example.com2&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>oldname<span class="hl opt">,</span><span class="hl str">&#39;example.com&#39;</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">save_domain</span><span class="hl opt">(</span>domain<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">has_section</span><span class="hl opt">(</span><span class="hl str">&#39;domain/example.com2&#39;</span><span class="hl opt">))</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEqual</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">get</span><span class="hl opt">(</span><span class="hl str">&#39;domain/example.com2&#39;</span><span class="hl opt">,</span>
                                        <span class="hl str">&#39;ldap_uri&#39;</span><span class="hl opt">),</span>
                         <span class="hl str">&#39;ldap://ldap.example.com&#39;</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;example.com&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;example.com&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;example.com&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">has_section</span><span class="hl opt">(</span><span class="hl str">&#39;domain/example.com&#39;</span><span class="hl opt">))</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span>domain<span class="hl opt">.</span>oldname<span class="hl opt">,</span> <span class="hl kwa">None</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Set the domain inactive and save it</span>
        activelist <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">()</span>
        inactivelist <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">()</span>

        domain<span class="hl opt">.</span><span class="hl kwd">set_active</span><span class="hl opt">(</span><span class="hl kwa">False</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">save_domain</span><span class="hl opt">(</span>domain<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">())</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span><span class="hl kwb">len</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">()),</span>
                          <span class="hl kwb">len</span><span class="hl opt">(</span>activelist<span class="hl opt">)-</span><span class="hl num">1</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span><span class="hl kwb">len</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">()),</span>
                          <span class="hl kwb">len</span><span class="hl opt">(</span>inactivelist<span class="hl opt">)+</span><span class="hl num">1</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Set the domain active and save it</span>
        activelist <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">()</span>
        inactivelist <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">()</span>
        domain<span class="hl opt">.</span><span class="hl kwd">set_active</span><span class="hl opt">(</span><span class="hl kwa">True</span><span class="hl opt">)</span>
        sssdconfig<span class="hl opt">.</span><span class="hl kwd">save_domain</span><span class="hl opt">(</span>domain<span class="hl opt">)</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">())</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span><span class="hl kwb">len</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">()),</span>
                          <span class="hl kwb">len</span><span class="hl opt">(</span>activelist<span class="hl opt">)+</span><span class="hl num">1</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span><span class="hl kwb">len</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">()),</span>
                          <span class="hl kwb">len</span><span class="hl opt">(</span>inactivelist<span class="hl opt">)-</span><span class="hl num">1</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Set the domain inactive and save it</span>
        activelist <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">()</span>
        inactivelist <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">()</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">deactivate_domain</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_name</span><span class="hl opt">())</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertFalse</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">())</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertTrue</span><span class="hl opt">(</span><span class="hl str">&#39;example.com2&#39;</span> <span class="hl kwa">in</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">())</span>

        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span><span class="hl kwb">len</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">()),</span>
                          <span class="hl kwb">len</span><span class="hl opt">(</span>activelist<span class="hl opt">)-</span><span class="hl num">1</span><span class="hl opt">)</span>
        self<span class="hl opt">.</span><span class="hl kwd">assertEquals</span><span class="hl opt">(</span><span class="hl kwb">len</span><span class="hl opt">(</span>sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">()),</span>
                          <span class="hl kwb">len</span><span class="hl opt">(</span>inactivelist<span class="hl opt">)+</span><span class="hl num">1</span><span class="hl opt">)</span>

        <span class="hl slc"># Positive test - Set the domain active and save it</span>
        activelist <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_active_domains</span><span class="hl opt">()</span>
        inactivelist <span class="hl opt">=</span> sssdconfig<span class="hl opt">.</span><span class="hl kwd">list_inactive_domains</span><span class="hl opt">()</span>

        sssdconfig<span class="hl opt">.</span><span class="hl kwd">activate_domain</span><span class="hl opt">(</span>domain<span class="hl opt">.</span><span class="hl kwd">get_name</span><span class="hl opt">())</span>