mirror of
https://github.com/ClickHouse/ClickHouse.git
synced 2024-11-29 19:12:03 +00:00
Better test
This commit is contained in:
Nikolay Degterinsky
parent
f2c07c0337
commit
a8545a29a4
@ -1,25 +1,4 @@
|
|||||||
<clickhouse>
|
<clickhouse>
|
||||||
<logger>
|
|
||||||
<level>trace</level>
|
|
||||||
<console>true</console>
|
|
||||||
</logger>
|
|
||||||
|
|
||||||
<tcp_port>9000</tcp_port>
|
|
||||||
<path>./</path>
|
|
||||||
<mark_cache_size>0</mark_cache_size>
|
|
||||||
|
|
||||||
<users>
|
|
||||||
<default>
|
|
||||||
<password></password>
|
|
||||||
|
|
||||||
<networks>
|
|
||||||
<ip>::/0</ip>
|
|
||||||
</networks>
|
|
||||||
|
|
||||||
<access_management>1</access_management>
|
|
||||||
</default>
|
|
||||||
</users>
|
|
||||||
|
|
||||||
<password_complexity>
|
<password_complexity>
|
||||||
<rule>
|
<rule>
|
||||||
<pattern>.{12}</pattern>
|
<pattern>.{12}</pattern>
|
||||||
@ -42,13 +21,5 @@
|
|||||||
<message>contain at least 1 special character</message>
|
<message>contain at least 1 special character</message>
|
||||||
</rule>
|
</rule>
|
||||||
</password_complexity>
|
</password_complexity>
|
||||||
|
|
||||||
<profiles>
|
|
||||||
<default/>
|
|
||||||
</profiles>
|
|
||||||
|
|
||||||
<quotas>
|
|
||||||
<default />
|
|
||||||
</quotas>
|
|
||||||
</clickhouse>
|
</clickhouse>
|
||||||
|
|
||||||
46
tests/integration/test_password_constraints/test.py
Normal file
46
tests/integration/test_password_constraints/test.py
Normal file
@ -0,0 +1,46 @@
|
|||||||
|
# pylint: disable=unused-argument
|
||||||
|
# pylint: disable=redefined-outer-name
|
||||||
|
# pylint: disable=line-too-long
|
||||||
|
|
||||||
|
import pytest
|
||||||
|
|
||||||
|
from helpers.cluster import ClickHouseCluster
|
||||||
|
|
||||||
|
cluster = ClickHouseCluster(__file__)
|
||||||
|
|
||||||
|
node = cluster.add_instance("node", main_configs=["configs/complexity_rules.xml"])
|
||||||
|
|
||||||
|
|
||||||
|
@pytest.fixture(scope="module")
|
||||||
|
def start_cluster():
|
||||||
|
try:
|
||||||
|
cluster.start()
|
||||||
|
yield cluster
|
||||||
|
finally:
|
||||||
|
cluster.shutdown()
|
||||||
|
|
||||||
|
|
||||||
|
def test_complexity_rules(start_cluster):
|
||||||
|
|
||||||
|
error_message = "DB::Exception: Invalid password. The password should: be at least 12 characters long, contain at least 1 numeric character, contain at least 1 lowercase character, contain at least 1 uppercase character, contain at least 1 special character"
|
||||||
|
assert error_message in node.query_and_get_error(
|
||||||
|
"CREATE USER u_1 IDENTIFIED WITH plaintext_password BY ''"
|
||||||
|
)
|
||||||
|
|
||||||
|
error_message = "DB::Exception: Invalid password. The password should: contain at least 1 lowercase character, contain at least 1 uppercase character, contain at least 1 special character"
|
||||||
|
assert error_message in node.query_and_get_error(
|
||||||
|
"CREATE USER u_2 IDENTIFIED WITH sha256_password BY '000000000000'"
|
||||||
|
)
|
||||||
|
|
||||||
|
error_message = "DB::Exception: Invalid password. The password should: contain at least 1 uppercase character, contain at least 1 special character"
|
||||||
|
assert error_message in node.query_and_get_error(
|
||||||
|
"CREATE USER u_3 IDENTIFIED WITH double_sha1_password BY 'a00000000000'"
|
||||||
|
)
|
||||||
|
|
||||||
|
error_message = "DB::Exception: Invalid password. The password should: contain at least 1 special character"
|
||||||
|
assert error_message in node.query_and_get_error(
|
||||||
|
"CREATE USER u_4 IDENTIFIED WITH plaintext_password BY 'aA0000000000'"
|
||||||
|
)
|
||||||
|
|
||||||
|
node.query("CREATE USER u_5 IDENTIFIED WITH plaintext_password BY 'aA!000000000'")
|
||||||
|
node.query("DROP USER u_5")
|
||||||
@ -1,4 +0,0 @@
|
|||||||
OK
|
|
||||||
OK
|
|
||||||
OK
|
|
||||||
OK
|
|
||||||
@ -1,86 +0,0 @@
|
|||||||
#!/usr/bin/env bash
|
|
||||||
# Tags: long, no-parallel
|
|
||||||
|
|
||||||
CUR_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
|
|
||||||
# shellcheck source=../shell_config.sh
|
|
||||||
. "$CUR_DIR"/../shell_config.sh
|
|
||||||
|
|
||||||
server_opts=(
|
|
||||||
"--config-file=$CUR_DIR/$(basename "${BASH_SOURCE[0]}" .sh).config.xml"
|
|
||||||
"--"
|
|
||||||
# to avoid multiple listen sockets (complexity for port discovering)
|
|
||||||
"--listen_host=127.1"
|
|
||||||
# we will discover the real port later.
|
|
||||||
"--tcp_port=0"
|
|
||||||
"--shutdown_wait_unfinished=0"
|
|
||||||
)
|
|
||||||
CLICKHOUSE_WATCHDOG_ENABLE=0 $CLICKHOUSE_SERVER_BINARY "${server_opts[@]}" >& clickhouse-server.log &
|
|
||||||
server_pid=$!
|
|
||||||
|
|
||||||
trap cleanup EXIT
|
|
||||||
function cleanup()
|
|
||||||
{
|
|
||||||
kill -9 $server_pid
|
|
||||||
kill -9 $client_pid
|
|
||||||
|
|
||||||
echo "Test failed. Server log:"
|
|
||||||
cat clickhouse-server.log
|
|
||||||
rm -f clickhouse-server.log
|
|
||||||
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
server_port=
|
|
||||||
i=0 retries=300
|
|
||||||
# wait until server will start to listen (max 30 seconds)
|
|
||||||
while [[ -z $server_port ]] && [[ $i -lt $retries ]]; do
|
|
||||||
server_port=$(lsof -n -a -P -i tcp -s tcp:LISTEN -p $server_pid 2>/dev/null | awk -F'[ :]' '/LISTEN/ { print $(NF-1) }')
|
|
||||||
((++i))
|
|
||||||
sleep 0.1
|
|
||||||
done
|
|
||||||
if [[ -z $server_port ]]; then
|
|
||||||
echo "Cannot wait for LISTEN socket" >&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
# wait for the server to start accepting tcp connections (max 30 seconds)
|
|
||||||
i=0 retries=300
|
|
||||||
while ! $CLICKHOUSE_CLIENT_BINARY --host 127.1 --port "$server_port" --format Null -q 'select 1' 2>/dev/null && [[ $i -lt $retries ]]; do
|
|
||||||
sleep 0.1
|
|
||||||
done
|
|
||||||
if ! $CLICKHOUSE_CLIENT_BINARY --host 127.1 --port "$server_port" --format Null -q 'select 1'; then
|
|
||||||
echo "Cannot wait until server will start accepting connections on <tcp_port>" >&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
$CLICKHOUSE_CLIENT_BINARY --host 127.1 --port "$server_port" --format Null -q 'select 1' 2>/dev/null &
|
|
||||||
client_pid=$!
|
|
||||||
|
|
||||||
|
|
||||||
$CLICKHOUSE_CLIENT_BINARY --host 127.1 --port "$server_port" -q "CREATE USER u_2474 IDENTIFIED WITH plaintext_password BY ''" 2>&1 | grep -qF \
|
|
||||||
"DB::Exception: Invalid password. The password should: be at least 12 characters long, contain at least 1 numeric character, contain at least 1 lowercase character, contain at least 1 uppercase character, contain at least 1 special character" && echo 'OK' || echo 'FAIL' ||:
|
|
||||||
|
|
||||||
$CLICKHOUSE_CLIENT_BINARY --host 127.1 --port "$server_port" -q "CREATE USER u_2474 IDENTIFIED WITH sha256_password BY '000000000000'" 2>&1 | grep -qF \
|
|
||||||
"DB::Exception: Invalid password. The password should: contain at least 1 lowercase character, contain at least 1 uppercase character, contain at least 1 special character" && echo 'OK' || echo 'FAIL' ||:
|
|
||||||
|
|
||||||
$CLICKHOUSE_CLIENT_BINARY --host 127.1 --port "$server_port" -q "CREATE USER u_2474 IDENTIFIED WITH double_sha1_password BY 'a00000000000'" 2>&1 | grep -qF \
|
|
||||||
"DB::Exception: Invalid password. The password should: contain at least 1 uppercase character, contain at least 1 special character" && echo 'OK' || echo 'FAIL' ||:
|
|
||||||
|
|
||||||
$CLICKHOUSE_CLIENT_BINARY --host 127.1 --port "$server_port" -q "CREATE USER u_2474 IDENTIFIED WITH plaintext_password BY 'aA0000000000'" 2>&1 | grep -qF \
|
|
||||||
"DB::Exception: Invalid password. The password should: contain at least 1 special character" && echo 'OK' || echo 'FAIL' ||:
|
|
||||||
|
|
||||||
|
|
||||||
# send TERM and save the error code to ensure that it is 0 (EXIT_SUCCESS)
|
|
||||||
kill $server_pid
|
|
||||||
wait $server_pid
|
|
||||||
return_code=$?
|
|
||||||
|
|
||||||
wait $client_pid
|
|
||||||
|
|
||||||
trap '' EXIT
|
|
||||||
if [ $return_code != 0 ]; then
|
|
||||||
cat clickhouse-server.log
|
|
||||||
fi
|
|
||||||
rm -f clickhouse-server.log
|
|
||||||
|
|
||||||
exit $return_code
|
|
||||||
Loading…
Reference in New Issue
Block a user