//
// Copyright (c) 2009 Nokia Corporation and/or its subsidiary(-ies).
// All rights reserved.
// This component and the accompanying materials are made available
// under the terms of the License "Eclipse Public License v1.0"
// which accompanies this distribution, and is available
// at the URL "http://www.eclipse.org/legal/epl-v10.html".
//
// Initial Contributors:
// Nokia Corporation - initial contribution.
//
// Contributors:
//
// Description: 
//


PRINT Client Sid support tests...

// Prepare a clone of TAuthSvr to possess authserver's SID.
// This is required for modifying the authserver's central repository file.
// This clone must be deleted at the end of the test.

RUN_PROGRAM 100 SETCAP tAuthSvr.exe 188b0 -SID 102740FC tAuthSvr_new.exe

// Prepare a clone of TAuthSvr without ReadUserData capability.
// This clone must be deleted at the end of the test.

RUN_PROGRAM 100 SETCAP tAuthSvr.exe 108b0 tAuthSvr1.exe

LOAD_SUITE tAuthSvr
LOAD_SUITE tAuthSvr_new
LOAD_SUITE tAuthSvr1

// This test must be executed in order to set the default plugin, else authserver will never start.

RUN_UTILS DeleteFile C:\pinplugin_inactive.txt
RUN_TEST_STEP_RESULT 0 100	tAuthSvr_new 	INIT_CENREP c:\tauth\tAuthSvr\scripts\tauthsvr2.ini defaultplugin
RUN_UTILS DeleteFile  C:\t_pinplugindlg_in.dat
RUN_UTILS DeleteFile  C:\t_pinplugindlg_out.dat

////
//! @SYMTestCaseID SEC-AUT-CLIENTSIDSUPPORT-0001
//! @SYMTestCaseDesc 		When a client Sid is non-zero, the same must be used to generate the protection key 
//!				of an identity.
//! @SYMREQ 			REQ11236
//! @SYMTestPriority 		Medium
//! @SYMTestActions  		Have a default plugin defined, which is active, and a second one which is active as well
//!				use a client that has ReadUserData capability to connect to the AuthServer.
//! 
//!				Successfully register a 2nd identity while using a specified PIN input
//!				Authenticate using the same PIN input so that the identity to be trained is one
//!				that has been previously trained.Store the Identity obtained as a result of authentication.
//! 
//!				Then call the Train() function, giving a different input. Attempt to authenticate,
//!				giving the new input.Store the identity obtained as a result of authentication.
//!			
//!				Generate a protection key using the key of the identity resulting from the first 
//!				authentication with the client sid and compare with the identity key obtained from 
//!				second authentication.
//!				
//! @SYMTestExpectedResults 	The authentication, registration and retrain are successful. Protection key generated 
//!				by the identity resulting from first authentication must be the same as the protection key 
//!				of the identity resulting from second authentication.
//! @SYMDevelopedForRelease 	Diran
//!
START_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0001
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REMOVE_DBS
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REG_IDENTITY	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0001
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	CLIENT_SID_CHECK	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0002
END_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0001


////
//! @SYMTestCaseID SEC-AUT-CLIENTSIDSUPPORT-0002
//! @SYMTestCaseDesc 		When a client Sid is zero, the calling application's sid must be used to generate the 
//!				protection key of an identity.
//! @SYMREQ 			REQ11236
//! @SYMTestPriority 		Medium
//! @SYMTestActions  		Have a default plugin defined, which is active, and a second one which is active as well
//!				use a client that has ReadUserData capability to connect to the AuthServer.
//! 
//!				Successfully register a 2nd identity while using a specified PIN input
//!				Authenticate using the same PIN input so that the identity to be trained is one
//!				that has been previously trained.Store the Identity obtained as a result of authentication.
//! 
//!				Then call the Train() function, giving a different input. Attempt to authenticate,
//!				giving the new input.Store the identity obtained as a result of authentication.
//!			
//!				Generate a protection key using the key of the identity resulting from the first 
//!				authentication with the client sid of the calling application and compare with the 
//!				identity key obtained from second authentication.
//!				
//! @SYMTestExpectedResults 	The authentication, registration and retrain are successful. Protection key generated 
//!				by the identity resulting from first authentication must be the same as the protection key 
//!				of the identity resulting from second authentication.
//! @SYMDevelopedForRelease 	Diran
//!
START_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0002
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REMOVE_DBS
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REG_IDENTITY	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0001
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	CLIENT_SID_CHECK	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0003
END_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0002


////
//! @SYMTestCaseID SEC-AUT-CLIENTSIDSUPPORT-0003
//! @SYMTestCaseDesc 		When a client sid is non-zero and is not the same as the calling application's SID, 
//!				a call to authenticate method fails if the calling application doesn't 
//!				possess ReadUserData capability. 
//! @SYMREQ 			REQ11236
//! @SYMTestPriority 		Medium
//! @SYMTestActions  		Have a default plugin defined, which is active, and a second one which is active as well
//!				use a client that does not have ReadUserData capability to connect to the AuthServer.
//! 
//!				Successfully register a 2nd identity while using a specified PIN input
//!				Authenticate using the same PIN input so that the identity to be trained is one
//!				that has been previously trained.Authentication fails with KErrPermissionDenied,
//!				since the calling appliction doesn't possess ReadUserData capability.
//!				Authentication must fail with KErrPermissionDenied.
//! @SYMDevelopedForRelease 	Diran
//!
START_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0003
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REMOVE_DBS
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REG_IDENTITY	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0001
RUN_TEST_STEP !Error=-46 100	tAuthSvr1 	CLIENT_SID_CHECK	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0002
END_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0003

////
//! @SYMTestCaseID SEC-AUT-CLIENTSIDSUPPORT-0004
//! @SYMTestCaseDesc 		When a client sid is zero, a call to authenticate method succeeds even if the calling 
//!				application doesn't have ReadUserData capability.
//! @SYMREQ 			REQ11236
//! @SYMTestPriority 		Medium
//! @SYMTestActions  		Have a default plugin defined, which is active, and a second one which is active as well
//!				use a client that doesn't possess ReadUserData capability to connect to the AuthServer.
//! 
//!				Successfully register a 2nd identity while using a specified PIN input
//!				Authenticate using the same PIN input so that the identity to be trained is one
//!				that has been previously trained.Store the Identity obtained as a result of authentication.
//! 
//!				Then call the Train() function, giving a different input. Attempt to authenticate,
//!				giving the new input.Store the identity obtained as a result of authentication.
//!			
//!				Generate a protection key using the key of the identity resulting from the first 
//!				authentication with the client sid of the calling application and compare with the 
//!				identity key obtained from second authentication.
//!				
//! @SYMTestExpectedResults 	The authentication, registration and retrain are successful. Protection key generated 
//!				by the identity resulting from first authentication must be the same as the protection key 
//!				of the identity resulting from second authentication.
//! @SYMDevelopedForRelease 	Diran
//!

START_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0004
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REMOVE_DBS
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REG_IDENTITY	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0001
RUN_TEST_STEP_RESULT 0 100	tAuthSvr1 	CLIENT_SID_CHECK	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0003
END_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0004

////
//! @SYMTestCaseID SEC-AUT-CLIENTSIDSUPPORT-0005
//! @SYMTestCaseDesc 		When a client sid is non-zero and is the same as the calling application's sid,
//!				, a call to authenticate method succeeds even if the calling application doesn't 
//!				have ReadUserData capability.
//! @SYMREQ 			REQ11236
//! @SYMTestPriority 		Medium
//! @SYMTestActions  		Have a default plugin defined, which is active, and a second one which is active as well
//!				use a client that doesn't possess ReadUserData capability to connect to the AuthServer.
//! 
//!				Successfully register a 2nd identity while using a specified PIN input
//!				Authenticate using the same PIN input so that the identity to be trained is one
//!				that has been previously trained.Store the Identity obtained as a result of authentication.
//! 
//!				Then call the Train() function, giving a different input. Attempt to authenticate,
//!				giving the new input.Store the identity obtained as a result of authentication.
//!			
//!				Generate a protection key using the key of the identity resulting from the first 
//!				authentication with the client sid of the calling application and compare with the 
//!				identity key obtained from second authentication.
//!				
//! @SYMTestExpectedResults 	The authentication, registration and retrain are successful. Protection key generated 
//!				by the identity resulting from first authentication must be the same as the protection key 
//!				of the identity resulting from second authentication.
//! @SYMDevelopedForRelease 	Diran
//!

START_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0005
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REMOVE_DBS
RUN_TEST_STEP_RESULT 0 100	tAuthSvr 	REG_IDENTITY	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0001
RUN_TEST_STEP_RESULT 0 100	tAuthSvr1 	CLIENT_SID_CHECK	c:\tauth\tAuthSvr\scripts\tclientsidsupport.ini Test0004
END_TESTCASE SEC-AUT-CLIENTSIDSUPPORT-0005

// This is to shut down the auth server
DELAY 5000