from k5test import *
from princflags import *
import re

realm = K5Realm(create_host=False, get_creds=False)

# Regex pattern to match an empty attribute line from kadmin getprinc
emptyattr = re.compile('^Attributes:$', re.MULTILINE)


# Regex pattern to match a kadmin getprinc output for a flag tuple
def attr_pat(ftuple):
    return re.compile('^Attributes: ' + ftuple.flagname() + '$',
                      re.MULTILINE)


# Test one flag tuple for kadmin ank.
def one_kadmin_flag(ftuple):
    pat = attr_pat(ftuple)
    realm.run([kadminl, 'ank', ftuple.setspec(),
               '-pw', 'password', 'test'])
    out = realm.run([kadminl, 'getprinc', 'test'])
    if not pat.search(out):
        fail('Failed to set flag ' + ftuple.flagname())

    realm.run([kadminl, 'modprinc', ftuple.clearspec(), 'test'])
    out = realm.run([kadminl, 'getprinc', 'test'])
    if not emptyattr.search(out):
        fail('Failed to clear flag ' + ftuple.flagname())
    realm.run([kadminl, 'delprinc', 'test'])


# Generate a custom kdc.conf with default_principal_flags set
# according to ftuple.
def genkdcconf(ftuple):
    d = { 'realms': { '$realm': {
                'default_principal_flags': ftuple.setspec()
                }}}
    return realm.special_env('tmp', True, kdc_conf=d)


# Test one ftuple for kdc.conf default_principal_flags.
def one_kdcconf(ftuple):
    e = genkdcconf(ftuple)
    pat = attr_pat(ftuple)
    realm.run([kadminl, 'ank', '-pw', 'password', 'test'], env=e)
    out = realm.run([kadminl, 'getprinc', 'test'])
    if not pat.search(out):
        fail('Failed to set flag ' + ftuple.flagname() + ' via kdc.conf')

    realm.run([kadminl, 'delprinc', 'test'])


# Principal name for kadm5.acl line
def ftuple2pname(ftuple, doset):
    pname = 'set_' if doset else 'clear_'
    return pname + ftuple.flagname()


# Translate a strconv ftuple to a spec string for kadmin.
def ftuple2kadm_spec(ftuple, doset):
    ktuple = kadmin_itable[ftuple.flag]
    if ktuple.invert != ftuple.invert:
        # Could do:
        # doset = not doset
        # but this shouldn't happen.
        raise ValueError
    return ktuple.spec(doset)


# Generate a line for kadm5.acl.
def acl_line(ftuple, doset):
    pname = ftuple2pname(ftuple, doset)
    spec = ftuple.spec(doset)
    return "%s * %s %s\n" % (realm.admin_princ, pname, spec)


# Test one kadm5.acl line for a ftuple.
def one_aclcheck(ftuple, doset):
    pname = ftuple2pname(ftuple, doset)
    pat = attr_pat(ftuple)
    outname = ftuple.flagname()
    # Create the principal and check that the flag is correctly set or
    # cleared.
    realm.run_kadmin(['ank', '-pw', 'password', pname])
    out = realm.run([kadminl, 'getprinc', pname])
    if doset:
        if not pat.search(out):
            fail('Failed to set flag ' + outname + ' via kadm5.acl')
    else:
        if not emptyattr.search(out):
            fail('Failed to clear flag ' + outname + ' via kadm5.acl')
    # If acl forces flag to be set, try to clear it, and vice versa.
    spec = ftuple2kadm_spec(ftuple, not doset)
    realm.run_kadmin(['modprinc', spec, pname])
    out = realm.run([kadminl, 'getprinc', pname])
    if doset:
        if not pat.search(out):
            fail('Failed to keep flag ' + outname + ' set')
    else:
        if not emptyattr.search(out):
            fail('Failed to keep flag ' + outname + ' clear')


# Set all flags simultaneously, even the ones that aren't defined yet.
def lamptest():
    pat = re.compile('^Attributes: ' +
                     ' '.join(flags2namelist(0xffffffff)) +
                     '$', re.MULTILINE)
    realm.run([kadminl, 'ank', '-pw', 'password', '+0xffffffff', 'test'])
    out = realm.run([kadminl, 'getprinc', 'test'])
    if not pat.search(out):
        fail('Failed to simultaenously set all flags')
    realm.run([kadminl, 'delprinc', 'test'])


for ftuple in kadmin_ftuples:
    one_kadmin_flag(ftuple)

for ftuple in strconv_ftuples:
    one_kdcconf(ftuple)

f = open(os.path.join(realm.testdir, 'acl'), 'w')
for ftuple in strconv_ftuples:
    f.write(acl_line(ftuple, True))
    f.write(acl_line(ftuple, False))
f.close()

realm.start_kadmind()
realm.prep_kadmin()

for ftuple in strconv_ftuples:
    one_aclcheck(ftuple, True)
    one_aclcheck(ftuple, False)

lamptest()

success('KDB principal flags')