kea/tests/lettuce/features/queries.feature

Feature: Querying feature
    This feature is a collection of non-specific querying tests;
    for instance whether multiple queries in a row return consistent
    answers.

    Scenario: Glue
        # Check the auth server returns the correct glue when asked for it.
        Given I have bind10 running with configuration glue.config
        And wait for bind10 stderr message BIND10_STARTED_CC
        And wait for bind10 stderr message CMDCTL_STARTED
        And wait for bind10 stderr message AUTH_SERVER_STARTED

        # This query should result in a delegation with two NS; one in the
        # delegated zone and one in a so called out-of-bailiwick zone for which
        # the auth server has authority, too.  For the former, the server
        # should return glue in the parent zone.  For the latter, BIND 9 and
        # BIND 10 behave differently; BIND 9 uses "glue" in the parent zone
        # (since this is the root zone everything can be considered a valid
        # glue).  BIND 10 (using sqlite3 data source) searches the other zone
        # and uses the authoritative data in that zone (which is intentionally
        # different from the glue in the root zone).
        A query for foo.bar.example type A should have rcode NOERROR
        The answer section of the last query response should be
        """
        """
        The authority section of the last query response should be
        """
        example.			172800	IN	NS	NS1.example.COM.
        example.			172800	IN	NS	NS.example.
        """
        The additional section of the last query response should be
        """
        NS.example.		172800	IN	A	192.0.2.1
        NS.example.		172800	IN	A	192.0.2.2
        NS1.example.COM.	172800	IN	A	192.0.2.3
        """
        # Test we don't get out-of-zone glue
        A query for example.net type A should have rcode NOERROR
        The answer section of the last query response should be
        """
        """
        The authority section of the last query response should be
        """
        example.net.		300	IN	NS	ns2.example.info.
        example.net.		300	IN	NS	ns1.example.info.
        """
        The additional section of the last query response should be
        """
        """

    Scenario: Repeated queries
        Given I have bind10 running with configuration example.org.inmem.config
        And wait for bind10 stderr message BIND10_STARTED_CC
        And wait for bind10 stderr message CMDCTL_STARTED
        And wait for bind10 stderr message AUTH_SERVER_STARTED

        # DATASRC_LIBRARY_ERROR must be generated due to
        # "broken_libraries_should_be_skipped" in
        # example.org.inmem.config
        And wait for bind10 stderr message DATASRC_LIBRARY_ERROR

        And wait for bind10 stderr message STATS_STARTING

        bind10 module Auth should be running
        And bind10 module Stats should be running
        And bind10 module Resolver should not be running
        And bind10 module Xfrout should not be running
        And bind10 module Zonemgr should not be running
        And bind10 module Xfrin should not be running
        And bind10 module StatsHttpd should not be running

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_

        A query for www.example.org should have rcode NOERROR
        The last query response should have flags qr aa
        The last query response should have ancount 1
        The last query response should have nscount 2
        The last query response should have adcount 2

        The answer section of the last query response should be
        """
        www.example.org.        3600    IN      A       192.0.2.1
        """
        The authority section of the last query response should be
        """
        example.org.            3600    IN      NS      ns1.example.org.
        example.org.            3600    IN      NS      ns2.example.org.
        """
        The additional section of the last query response should be
        """
        ns1.example.org.        3600    IN      A       192.0.2.3
        ns2.example.org.        3600    IN      A       192.0.2.4
        """

        # Make sure handling statistics command handling checked below is
        # after this query
        And wait for bind10 stderr message AUTH_SEND_NORMAL_RESPONSE

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_ except for the following items
          | item_name     | item_value |
          | request.v4    |          1 |
          | request.udp   |          1 |
          | opcode.query  |          1 |
          | responses     |          1 |
          | qrysuccess    |          1 |
          | qryauthans    |          1 |
          | rcode.noerror |          1 |


        # Repeat of the above
        A query for www.example.org should have rcode NOERROR
        The last query response should have flags qr aa
        The last query response should have ancount 1
        The last query response should have nscount 2
        The last query response should have adcount 2

        The answer section of the last query response should be
        """
        www.example.org.        3600    IN      A       192.0.2.1
        """
        The authority section of the last query response should be
        """
        example.org.            3600    IN      NS      ns1.example.org.
        example.org.            3600    IN      NS      ns2.example.org.
        """
        The additional section of the last query response should be
        """
        ns1.example.org.        3600    IN      A       192.0.2.3
        ns2.example.org.        3600    IN      A       192.0.2.4
        """

        # Make sure handling statistics command handling checked below is
        # after this query
        And wait for new bind10 stderr message AUTH_SEND_NORMAL_RESPONSE

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_ except for the following items
          | item_name     | item_value |
          | request.v4    |          2 |
          | request.udp   |          2 |
          | opcode.query  |          2 |
          | responses     |          2 |
          | qrysuccess    |          2 |
          | qryauthans    |          2 |
          | rcode.noerror |          2 |

        # And now query something completely different
        A recursive query for nosuchname.example.org should have rcode NXDOMAIN
        The last query response should have flags qr aa rd
        The last query response should have ancount 0
        The last query response should have nscount 1
        The last query response should have adcount 0
        The authority section of the last query response should be
        """
        example.org.            3600    IN      SOA     ns1.example.org. admin.example.org. 1234 3600 1800 2419200 7200
        """

        # Make sure handling statistics command handling checked below is
        # after this query
        And wait for new bind10 stderr message AUTH_SEND_NORMAL_RESPONSE

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_ except for the following items
          | item_name      | item_value |
          | request.v4     |          3 |
          | request.udp    |          3 |
          | opcode.query   |          3 |
          | responses      |          3 |
          | qrysuccess     |          2 |
          | qryauthans     |          3 |
          | qryrecursion   |          1 |
          | rcode.noerror  |          2 |
          | rcode.nxdomain |          1 |

    Scenario: ANY query
        Given I have bind10 running with configuration example.org.inmem.config
        And wait for bind10 stderr message BIND10_STARTED_CC
        And wait for bind10 stderr message CMDCTL_STARTED
        And wait for bind10 stderr message AUTH_SERVER_STARTED

        bind10 module Auth should be running
        And bind10 module Stats should be running
        And bind10 module Resolver should not be running
        And bind10 module Xfrout should not be running
        And bind10 module Zonemgr should not be running
        And bind10 module Xfrin should not be running
        And bind10 module StatsHttpd should not be running

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_

        A query for example.org type ANY should have rcode NOERROR
        The last query response should have flags qr aa
        The last query response should have ancount 4
        The last query response should have nscount 0
        The last query response should have adcount 3
        The answer section of the last query response should be
        """
        example.org.            3600    IN      NS      ns1.example.org.
        example.org.            3600    IN      NS      ns2.example.org.
        example.org.            3600    IN      SOA     ns1.example.org. admin.example.org. 1234 3600 1800 2419200 7200
        example.org.            3600    IN      MX      10 mail.example.org.
        """
        The additional section of the last query response should be
        """
        ns1.example.org.        3600    IN      A       192.0.2.3
        ns2.example.org.        3600    IN      A       192.0.2.4
        mail.example.org.       3600    IN      A       192.0.2.10
        """

        # Make sure handling statistics command handling checked below is
        # after this query
        And wait for bind10 stderr message AUTH_SEND_NORMAL_RESPONSE

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_ except for the following items
          | item_name     | item_value |
          | request.v4    |          1 |
          | request.udp   |          1 |
          | opcode.query  |          1 |
          | responses     |          1 |
          | qrysuccess    |          1 |
          | qryauthans    |          1 |
          | rcode.noerror |          1 |

    Scenario: Delegation query for unsigned child zone
        Given I have bind10 running with configuration example.org.inmem.config
        And wait for bind10 stderr message BIND10_STARTED_CC
        And wait for bind10 stderr message CMDCTL_STARTED
        And wait for bind10 stderr message AUTH_SERVER_STARTED

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_

        A dnssec query for www.sub.example.org type AAAA should have rcode NOERROR
        The last query response should have flags qr
        The last query response should have edns_flags do
        The last query response should have ancount 0
        The last query response should have nscount 1
        The last query response should have adcount 2
        The authority section of the last query response should be
        """
        sub.example.org.	3600	IN	NS	ns.sub.example.org.
        """
        The additional section of the last query response should be
        """
        ns.sub.example.org.	3600	IN	A	192.0.2.101
        """

        # Make sure handling statistics command handling checked below is
        # after this query
        And wait for bind10 stderr message AUTH_SEND_NORMAL_RESPONSE

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_ except for the following items
          | item_name         | item_value |
          | request.v4        |          1 |
          | request.udp       |          1 |
          | request.edns0     |          1 |
          | request.dnssec_ok |          1 |
          | opcode.query      |          1 |
          | responses         |          1 |
          | response.edns0    |          1 |
          | qrynoauthans      |          1 |
          | qryreferral       |          1 |
          | rcode.noerror     |          1 |

    Scenario: RRSIG query
        # Directly querying for RRSIGs should result in rcode=REFUSED.
        Given I have bind10 running with configuration nsec3/nsec3_auth.config
        And wait for bind10 stderr message BIND10_STARTED_CC
        And wait for bind10 stderr message CMDCTL_STARTED
        And wait for bind10 stderr message AUTH_SERVER_STARTED

        bind10 module Auth should be running
        And bind10 module Resolver should not be running
        And bind10 module Xfrout should not be running
        And bind10 module Zonemgr should not be running
        And bind10 module Xfrin should not be running
        And bind10 module Stats should not be running
        And bind10 module StatsHttpd should not be running

        A dnssec query for example. type RRSIG should have rcode REFUSED
        The last query response should have flags qr aa
        The last query response should have edns_flags do
        The last query response should have ancount 0
        The last query response should have nscount 0
        The last query response should have adcount 1

    Scenario: SSHFP query
        # We are testing one more RR type for a normal successful case
        Given I have bind10 running with configuration example.org.inmem.config
        And wait for bind10 stderr message BIND10_STARTED_CC
        And wait for bind10 stderr message CMDCTL_STARTED
        And wait for bind10 stderr message AUTH_SERVER_STARTED

        bind10 module Auth should be running
        And bind10 module Stats should be running
        And bind10 module Resolver should not be running
        And bind10 module Xfrout should not be running
        And bind10 module Zonemgr should not be running
        And bind10 module Xfrin should not be running
        And bind10 module StatsHttpd should not be running

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_

        A query for example.org type SSHFP should have rcode NOERROR
        The last query response should have ancount 0

        # Make sure handling statistics command handling checked below is
        # after this query
        And wait for bind10 stderr message AUTH_SEND_NORMAL_RESPONSE

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_ except for the following items
          | item_name     | item_value |
          | request.v4    |          1 |
          | request.udp   |          1 |
          | opcode.query  |          1 |
          | responses     |          1 |
          | qryauthans    |          1 |
          | qrynxrrset    |          1 |
          | rcode.noerror |          1 |

        A query for shell.example.org type SSHFP should have rcode NOERROR
        The last query response should have ancount 1
        The answer section of the last query response should be
        """
        shell.example.org.      3600    IN      SSHFP   2 1 123456789abcdef67890123456789abcdef67890
        """
        # Make sure handling statistics command handling checked below is
        # after this query
        And wait for bind10 stderr message AUTH_SEND_NORMAL_RESPONSE

        When I wait for new bind10 stderr message STATS_SEND_STATISTICS_REQUEST
        # make sure Auth module receives a command
        And wait for new bind10 stderr message AUTH_RECEIVED_COMMAND
        # make sure Auth module replied to the command
        And wait for new bind10 stderr message CC_REPLY
        # make sure the response is for 'getstats'
        And wait for new bind10 stderr message v4
        Then I query statistics zones of bind10 module Auth
        And last bindctl output should not contain "error"
        The statistics counters are 0 in category .Auth.zones._SERVER_ except for the following items
          | item_name     | item_value |
          | request.v4    |          2 |
          | request.udp   |          2 |
          | opcode.query  |          2 |
          | responses     |          2 |
          | qrysuccess    |          1 |
          | qryauthans    |          2 |
          | qrynxrrset    |          1 |
          | rcode.noerror |          2 |

    Scenario: Querying non-existing name in root zone from sqlite3 should work
        Given I have bind10 running with configuration root.config
        And wait for bind10 stderr message BIND10_STARTED_CC
        And wait for bind10 stderr message CMDCTL_STARTED
        And wait for bind10 stderr message AUTH_SERVER_STARTED

        bind10 module Auth should be running
        And bind10 module Stats should be running
        And bind10 module Resolver should not be running
        And bind10 module Xfrout should not be running
        And bind10 module Zonemgr should not be running
        And bind10 module Xfrin should not be running
        And bind10 module StatsHttpd should not be running

        A query for . type SOA should have rcode NOERROR
        A query for nonexistent. type A should have rcode NXDOMAIN
        Then wait for bind10 stderr message AUTH_SEND_NORMAL_RESPONSE not AUTH_PROCESS_FAIL

    Scenario: CH class static zone query
        # We are testing one more RR type for a normal successful case
        Given I have bind10 running with configuration static.config
        And wait for bind10 stderr message BIND10_STARTED_CC
        And wait for bind10 stderr message CMDCTL_STARTED
        And wait for bind10 stderr message AUTH_SERVER_STARTED

        bind10 module Auth should be running
        And bind10 module Stats should be running
        And bind10 module Resolver should not be running
        And bind10 module Xfrout should not be running
        And bind10 module Zonemgr should not be running
        And bind10 module Xfrin should not be running
        And bind10 module StatsHttpd should not be running

        A query for version.bind. type TXT class CH should have rcode REFUSED

        When I send bind10 the following commands
        """
        config add data_sources/classes/CH
        config set data_sources/classes/CH[0]/type MasterFiles
        config set data_sources/classes/CH[0]/cache-enable true
        config set data_sources/classes/CH[0]/params {"BIND": "data/static.zone"}
        config commit
        """

        And wait for new bind10 stderr message AUTH_DATASRC_CLIENTS_BUILDER_RECONFIGURE_SUCCESS

        A query for version.bind. type TXT class CH should have rcode NOERROR
        The last query response should have ancount 1

        # NOTE: The double double-quote characters trailing 10 in the
        # response below are required due to a lettuce bug in reading
        # multi-line strings with embedded double-quotes.

        The answer section of the last query response should be
        """
        version.bind.      3600    CH      TXT   "10""
        """