path: root/src/lib/kadm5/unit-test/api.0/crte-policy.exp

load_lib lib.t
api_exit
api_start

# Description: (1) Fails for mask with undefined bit set.
# 01/24/94: pshuang: untried.
test "create-policy 1"
proc test1 {} {
    global test
    if {! (( ! [policy_exists "$test/a"]) ||
           [delete_policy "$test/a"])} {
            error_and_restart "$test: couldn't delete policy \"$test/a\""
            return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		0xF01000
    } $test] "BAD_MASK"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
        perror "$test: unexpected failure in destroy"
        return
    }
}
test1

# Description: (2) Fails if caller connected with CHANGEPW_SERVICE.
test "create-policy 2"
proc test2 {} {
    global test
    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_CHANGEPW_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY}
    } $test] "AUTH_ADD"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy";
	return
    }
}
if {$RPC} { test2 }

# Description: (3) Fails for mask without POLICY bit set.
# 01/24/94: pshuang: untried.
test "create-policy 3"
proc test3 {} {
    global test
    if {! (( ! [policy_exists "$test/a"]) ||
           [delete_policy "$test/a"])} {
            error_and_restart "$test: couldn't delete policy \"$test/a\""
            return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		0x000000
    } $test] "BAD_MASK"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
        perror "$test: unexpected failure in destroy"
        return
    }
}
test3

# Description: (4) Fails for mask with REF_COUNT bit set.
test "create-policy 4"
proc test4 {} {
    global test
    
    if {! (( ! [policy_exists "$test/a"]) ||
           [delete_policy "$test/a"])} {
            error_and_restart "$test: couldn't delete policy \"$test/a\""
            return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY OVSEC_KADM_REF_COUNT}
    } $test] "BAD_MASK"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
        perror "$test: unexpected failure in destroy"
        return
    }
}
test4

# Description: (5) Fails for invalid policy name.
# 01/24/94: pshuang: untried.
test "create-policy 5"
proc test5 {} {
    global test
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/"] \
		{OVSEC_KADM_POLICY}
    } $test] "BAD_POLICY"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
        perror "$test: unexpected failure in destroy"
        return
    }
}
test5

# Description: (6) Fails for existing policy name.
test "create-policy 6"
proc test6 {} {
    global test
#    set prms_id 777
#    setup_xfail {*-*-*} $prms_id

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test {
	ovsec_kadm_create_policy $server_handle [simple_policy test-pol] \
		{OVSEC_KADM_POLICY}
    } "DUP"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test6

# Description: (7) Fails for null policy name.
# 01/24/94: pshuang: untried.
test "create-policy 7"
proc test7 {} {
    global test
#    set prms_id 1977
#    setup_xfail {*-*-*} $prms_id
    
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test {
	ovsec_kadm_create_policy $server_handle [simple_policy null] \
		{OVSEC_KADM_POLICY}
    } "EINVAL"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
        perror "$test: unexpected failure in destroy"
        return
    }
}
test7

# Description: (8) Fails for empty-string policy name.
test "create-policy 8"
proc test8 {} {
    global test

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test {
	ovsec_kadm_create_policy $server_handle [simple_policy ""] \
		{OVSEC_KADM_POLICY}
    } "BAD_POLICY"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test8

# Description: (9) Accepts 0 for pw_min_life.
test "create-policy 9"
proc test9 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if { ! [cmd [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MIN_LIFE}
    } $test]]} {
	fail "$test: create failed"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retrieve policy"
	return
    }
    send "lindex \$policy 1\n"
    expect {
	-re "0\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test9

# Description: (10) Accepts non-zero for pw_min_life.
test "create-policy 10"
proc test10 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if { ! [cmd [format {
	ovsec_kadm_create_policy $server_handle {"%s/a" 32 0 0 0 0 0 } \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MIN_LIFE}
    } $test]]} {
	fail "$test"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retreuve policy"
	return
    }
    send "lindex \$policy 1\n"
    expect {
	-re "32\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test10

# Description: (11) Accepts 0 for pw_max_life.
test "create-policy 11"
proc test11 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MAX_LIFE}
    } $test]]} {
	fail "$test"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retreuve policy"
	return
    }
    send "lindex \$policy 2\n"
    expect {
	-re "0\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test11

# Description: (12) Accepts non-zero for pw_max_life.
test "create-policy 12"
proc test12 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_create_policy $server_handle {"%s/a" 0 32 0 0 0 0 } \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MAX_LIFE}
    } $test]]} {
	fail "$test"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retreuve policy"
	return
    }
    send "lindex \$policy 2\n"
    expect {
	-re "32\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test12

# Description: (13) Rejects 0 for pw_min_length.
test "create-policy 13"
proc test13 {} {
    global test
    global prompt


    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MIN_LENGTH}
    } $test] "BAD_LENGTH"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test13

# Description: (14) Accepts non-zero for pw_min_length.
test "create-policy 14"
proc test14 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_create_policy $server_handle {"%s/a" 0 0 8 0 0 0 } \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MIN_LENGTH}
    } $test]]} {
	fail $test
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retreuve policy"
	return
    }
    send "lindex \$policy 3\n"
    expect {
	-re "8\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test14

# Description: (15) Rejects 0 for pw_min_classes.
test "create-policy 15"
proc test15 {} {
    global test

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MIN_CLASSES}
    } $test] "BAD_CLASS"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test15

# Description: (16) Accepts 1 for pw_min_classes.
test "create-policy 16"
proc test16 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_create_policy $server_handle {"%s/a" 0 0 0 1 0 0 } \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MIN_CLASSES}
    } $test]]} {
	fail $test
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retreuve policy"
	return
    }
    send "lindex \$policy 4\n"
    expect {
	-re "1\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test16

# Description: (17) Accepts 4 for pw_min_classes.
test "create-policy 17"
proc test17 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_create_policy $server_handle {"%s/a" 0 0 0 5 0 0} \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MIN_CLASSES}
    } $test]]} {
	fail $test
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retreuve policy"
	return
    }
    send "lindex \$policy 4\n"
    expect {
	-re "5\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test17

# Description: (18) Rejects 5 for pw_min_classes.
test "create-policy 18"
proc test18 {} {
    global test

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle {"%s/a" 0 0 0 6 0 0} \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_MIN_CLASSES}
    } $test] "BAD_CLASS"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test18

# Description: (19) Rejects 0 for pw_history_num.
test "create-policy 19"
proc test19 {} {
    global test

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_HISTORY_NUM}
    } $test] "BAD_HISTORY"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test19

# Description: (20) Accepts 1 for pw_history_num.
test "create-policy 20"
proc test20 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if {! [cmd  [format {
	ovsec_kadm_create_policy $server_handle {"%s/a" 0 0 0 0 1 0} \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_HISTORY_NUM}
    } $test]]} {
	fail $test
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retreuve policy"
	return
    }
    send "lindex \$policy 5\n"
    expect {
	-re "1\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test20

# Description: (21) Accepts 10 for pw_history_num.
test "create-policy 21"
proc test21 {} {
    global test
    global prompt

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    if {! [cmd [format {
	ovsec_kadm_create_policy $server_handle {"%s/a" 0 0 0 0 10 0} \
		{OVSEC_KADM_POLICY OVSEC_KADM_PW_HISTORY_NUM}
    } $test]]} {
	fail $test
	return
    }
    if {! [cmd [format {
	ovsec_kadm_get_policy $server_handle "%s/a" policy
    } $test]]} {
	fail "$test: can not retrieve policy"
	return
    }
    send "lindex \$policy 5\n"
    expect {
	-re "10\n$prompt$"		{ pass "$test" }
	timeout				{ fail "$test" }
    }
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test21
    
# Description: (22) Fails for user with no access bits.
test "create-policy 22"
proc test22 {} {
    global test
    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin/none admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY}
    } $test] "AUTH_ADD"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
if {$RPC} test22

# Description: (23) Fails for user with "get" but not "add".
test "create-policy 23"
proc test23 {} {
    global test
    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin/get admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY}
    } $test] "AUTH_ADD"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
if {$RPC} test23

# Description: (24) Fails for user with "modify" but not "add".
# 01/24/94: pshuang: untried.
test "create-policy 24"
proc test24 {} {
    global test
    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin/modify admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY}
    } $test] "AUTH_ADD"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
if {$RPC} test24

# Description: (25) Fails for user with "delete" but not "add".
# 01/24/94: pshuang: untried.
test "create-policy 25"
proc test25 {} {
    global test
    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }

    if {! [cmd {
	ovsec_kadm_init admin/delete admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY}
    } $test] "AUTH_ADD"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
if {$RPC} test25

# Description: Succeeds for user with "add".
test "create-policy 26"
proc test26 {} {
    global test

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }
    if {! [cmd {
	ovsec_kadm_init admin/add admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_succeed_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY}
    } $test]
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test26

# Description: Succeeds for user with "get" and "add".
# 01/24/94: pshuang: untried.
test "create-policy 27"
proc test27 {} {
    global test

    if {! (( ! [policy_exists "$test/a"]) ||
	   [delete_policy "$test/a"])} {
	    error_and_restart "$test: couldn't delete principal \"$test/a\""
	    return
    }
    if {! [cmd {
	ovsec_kadm_init admin/get-add admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_succeed_test [format {
	ovsec_kadm_create_policy $server_handle [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY}
    } $test]
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
	perror "$test: unexpected failure in destroy"
	return
    }
}
test27

# Description: (28) Rejects null policy argument.
# 01/24/94: pshuang: untried.
test "create-policy 28"
proc test28 {} {
    global test
    if {! [cmd {
	ovsec_kadm_init admin admin $OVSEC_KADM_ADMIN_SERVICE null \
		$OVSEC_KADM_STRUCT_VERSION $OVSEC_KADM_API_VERSION_1 \
		server_handle
    }]} {
	perror "$test: unexpected failure in init"
	return
    }
    one_line_fail_test {
	ovsec_kadm_create_policy $server_handle null {OVSEC_KADM_POLICY}
    } "EINVAL"
    if { ! [cmd {ovsec_kadm_destroy $server_handle}]} {
        perror "$test: unexpected failure in destroy"
        return
    }
}
test28

test "create-policy 30"
proc test30 {} {
    global test
    one_line_fail_test [format {
	ovsec_kadm_create_policy null [simple_policy "%s/a"] \
		{OVSEC_KADM_POLICY}
    } $test] "BAD_SERVER_HANDLE"
}
test30

return ""