diff options
| author | Thomas Munro <tmunro@postgresql.org> | 2018-11-13 17:39:36 +1300 |
|---|---|---|
| committer | Thomas Munro <tmunro@postgresql.org> | 2018-11-13 17:47:00 +1300 |
| commit | 6b6c64a96dea5492448aa98cf24eca9325e80371 (patch) | |
| tree | 414ad66be748759b6d864c55d8a1a38739cbc2a0 /src/test/ldap/t/001_auth.pl | |
| parent | 726ca18f94e10c11f8dd3774eb56e76a82729f40 (diff) | |
| download | postgresql-6b6c64a96dea5492448aa98cf24eca9325e80371.tar.gz postgresql-6b6c64a96dea5492448aa98cf24eca9325e80371.zip | |
Fix handling of HBA ldapserver with multiple hostnames.
Commit 35c0754f failed to handle space-separated lists of alternative
hostnames in ldapserver, when building a URI for ldap_initialize()
(OpenLDAP). Such lists need to be expanded to space-separated URIs.
Repair. Back-patch to 11, to fix bug report #15495.
Author: Thomas Munro
Reported-by: Renaud Navarro
Discussion: https://postgr.es/m/15495-2c39fc196c95cd72%40postgresql.org
Diffstat (limited to 'src/test/ldap/t/001_auth.pl')
| -rw-r--r-- | src/test/ldap/t/001_auth.pl | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/src/test/ldap/t/001_auth.pl b/src/test/ldap/t/001_auth.pl index 67b406c981b..431ad6442c3 100644 --- a/src/test/ldap/t/001_auth.pl +++ b/src/test/ldap/t/001_auth.pl @@ -6,7 +6,7 @@ use Test::More; if ($ENV{with_ldap} eq 'yes') { - plan tests => 19; + plan tests => 22; } else { @@ -179,6 +179,22 @@ test_access($node, 'test1', 2, $ENV{"PGPASSWORD"} = 'secret1'; test_access($node, 'test1', 0, 'search+bind authentication succeeds'); +note "multiple servers"; + +unlink($node->data_dir . '/pg_hba.conf'); +$node->append_conf('pg_hba.conf', + qq{local all all ldap ldapserver="$ldap_server $ldap_server" ldapport=$ldap_port ldapbasedn="$ldap_basedn"} +); +$node->restart; + +$ENV{"PGPASSWORD"} = 'wrong'; +test_access($node, 'test0', 2, + 'search+bind authentication fails if user not found in LDAP'); +test_access($node, 'test1', 2, + 'search+bind authentication fails with wrong password'); +$ENV{"PGPASSWORD"} = 'secret1'; +test_access($node, 'test1', 0, 'search+bind authentication succeeds'); + note "LDAP URLs"; unlink($node->data_dir . '/pg_hba.conf'); |