CDRIVER-547 show that concurrent sasl fails

(cherry picked from commit 817fe03)

Author: ajdavis

CMakeLists.txt

@@ -225,6 +225,7 @@ set(test-libmongoc-sources
    ${SOURCE_DIR}/tests/test-mongoc-stream.c
    ${SOURCE_DIR}/tests/test-mongoc-uri.c
    ${SOURCE_DIR}/tests/test-mongoc-write-concern.c
+   ${SOURCE_DIR}/tests/test-sasl.c
    ${SOURCE_DIR}/tests/test-write-commands.c
    ${SOURCE_DIR}/tests/TestSuite.c
 )

CONTRIBUTING.md

@@ -131,5 +131,15 @@ SSL with default options. Configure SSL options with paths
 `MONGOC_TEST_SSL_CRL_FILE`. Set the `MONGOC_TEST_SSL_WEAK_CERT_VALIDATION`
 environment variable `on` to relax server certificate validation.
 
+The SASL / GSSAPI / Kerberos tests are skipped by default. To run them, set up a
+separate `mongod` with Kerberos and set its host and Kerberos principal name
+as environment variables:
+
+* `MONGOC_TEST_GSSAPI_HOST` 
+* `MONGOC_TEST_GSSAPI_USER` 
+
+URI-escape the username, for example write "user@realm" as "user%40realm".
+The user must be authorized to query `test.collection`.
+
 All tests should pass before submitting a patch.
 

tests/Makefile.am

@@ -94,6 +94,7 @@ test_libmongoc_SOURCES = \
 	tests/test-mongoc-uri.c \
 	tests/test-mongoc-write-concern.c \
 	tests/test-libmongoc.h \
+	tests/test-sasl.c \
 	tests/test-write-commands.c \
 	tests/TestSuite.c \
 	tests/TestSuite.h

tests/test-libmongoc.c

@@ -40,6 +40,7 @@ extern void test_matcher_install           (TestSuite *suite);
 extern void test_queue_install             (TestSuite *suite);
 extern void test_read_prefs_install        (TestSuite *suite);
 extern void test_rpc_install               (TestSuite *suite);
+extern void test_sasl_install              (TestSuite *suite);
 extern void test_socket_install            (TestSuite *suite);
 extern void test_stream_install            (TestSuite *suite);
 extern void test_uri_install               (TestSuite *suite);
@@ -127,7 +128,7 @@ gen_collection_name (const char *str)
  *
  *--------------------------------------------------------------------------
  */
-static char *
+char *
 test_framework_getenv (const char *name)
 {
 #ifdef _MSC_VER
@@ -506,6 +507,7 @@ main (int   argc,
    test_queue_install (&suite);
    test_read_prefs_install (&suite);
    test_rpc_install (&suite);
+   test_sasl_install (&suite);
    test_socket_install (&suite);
    test_stream_install (&suite);
    test_uri_install (&suite);

tests/test-libmongoc.h

@@ -26,6 +26,7 @@ void usleep (int64_t usec);
 
 char *gen_collection_name (const char *prefix);
 void suppress_one_message (void);
+char *test_framework_getenv (const char *name);
 char *test_framework_get_host (void);
 bool test_framework_get_ssl (void);
 char *test_framework_get_uri_str (const char *uri_str);

tests/test-sasl.c

@@ -0,0 +1,151 @@
+/*
+ * Copyright 2015 MongoDB, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#include <mongoc.h>
+#include <mongoc-thread-private.h>
+
+#include "TestSuite.h"
+#include "test-libmongoc.h"
+
+
+static const char *GSSAPI_HOST = "MONGOC_TEST_GSSAPI_HOST";
+static const char *GSSAPI_USER = "MONGOC_TEST_GSSAPI_USER";
+
+#define NTHREADS 10
+#define NLOOPS 10
+
+
+int
+should_run_gssapi_kerberos (void)
+{
+   char *host = test_framework_getenv (GSSAPI_HOST);
+   char *user = test_framework_getenv (GSSAPI_USER);
+   int ret = (host && user);
+
+   bson_free (host);
+   bson_free (user);
+
+   return ret;
+}
+
+
+struct closure_t
+{
+   mongoc_client_pool_t *pool;
+   int                   finished;
+   mongoc_mutex_t        mutex;
+};
+
+
+static void *
+gssapi_kerberos_worker (void *data)
+{
+   struct closure_t *closure = (struct closure_t *)data;
+   mongoc_client_pool_t *pool = closure->pool;
+   mongoc_client_t *client;
+   mongoc_collection_t *collection;
+   mongoc_cursor_t *cursor;
+   bson_error_t error;
+   const bson_t *doc;
+   bson_t query = BSON_INITIALIZER;
+   int i;
+
+   for (i = 0; i < NLOOPS; i++) {
+      client = mongoc_client_pool_pop (pool);
+      collection = mongoc_client_get_collection (client, "test", "collection");
+      cursor = mongoc_collection_find (collection,
+                                       MONGOC_QUERY_NONE,
+                                       0,
+                                       0,
+                                       0,
+                                       &query,
+                                       NULL,
+                                       NULL);
+
+      if (!mongoc_cursor_next (cursor, &doc) &&
+          mongoc_cursor_error (cursor, &error)) {
+         fprintf (stderr, "Cursor Failure: %s\n", error.message);
+         abort ();
+      }
+
+      mongoc_cursor_destroy (cursor);
+      mongoc_collection_destroy (collection);
+      mongoc_client_pool_push (pool, client);
+   }
+
+   bson_destroy (&query);
+
+   mongoc_mutex_lock (&closure->mutex);
+   closure->finished++;
+   mongoc_mutex_unlock (&closure->mutex);
+
+   return NULL;
+}
+
+
+static void
+test_gssapi_kerberos ()
+{
+   char *host = test_framework_getenv (GSSAPI_HOST);
+   char *user = test_framework_getenv (GSSAPI_USER);
+   char *uri_str;
+   mongoc_uri_t *uri;
+   struct closure_t closure = { 0 };
+   int i;
+   mongoc_thread_t threads[NTHREADS];
+
+   assert (host && user);
+
+   mongoc_mutex_init (&closure.mutex);
+
+   uri_str = bson_strdup_printf (
+      "mongodb://%s@%s/?authMechanism=GSSAPI&serverselectiontimeoutms=1000",
+      user, host);
+
+   uri = mongoc_uri_new (uri_str);
+   closure.pool = mongoc_client_pool_new (uri);
+
+   for (i = 0; i < NTHREADS; i++) {
+      mongoc_thread_create (&threads[i],
+                            gssapi_kerberos_worker,
+                            (void *)&closure);
+   }
+
+   for (i = 0; i < NTHREADS; i++) {
+      mongoc_thread_join (threads[i]);
+   }
+
+   mongoc_mutex_lock (&closure.mutex);
+   ASSERT_CMPINT (NTHREADS, ==, closure.finished);
+   mongoc_mutex_unlock (&closure.mutex);
+
+   mongoc_client_pool_destroy (closure.pool);
+   mongoc_mutex_destroy (&closure.mutex);
+   mongoc_uri_destroy (uri);
+   bson_free (uri_str);
+   bson_free (host);
+   bson_free (user);
+}
+
+
+void
+test_sasl_install (TestSuite *suite)
+{
+   TestSuite_AddFull (suite,
+                      "/SASL/gssapi_kerberos",
+                      test_gssapi_kerberos,
+                      should_run_gssapi_kerberos);
+}