puppet 0.25.5 → 2.6.0

data/spec/unit/network/authconfig.rb

@@ -1,292 +0,0 @@
-#!/usr/bin/env ruby
-
-require File.dirname(__FILE__) + '/../../spec_helper'
-
-require 'puppet/network/authconfig'
-
-describe Puppet::Network::AuthConfig do
-    before do
-        @rights = stubs 'rights'
-        Puppet::Network::Rights.stubs(:new).returns(@rights)
-        @rights.stubs(:each).returns([])
-
-        FileTest.stubs(:exists?).returns(true)
-        File.stubs(:stat).returns(stub('stat', :ctime => :now))
-        Time.stubs(:now).returns :now
-
-        @authconfig = Puppet::Network::AuthConfig.new("dummy", false)
-    end
-
-    describe "when initializing" do
-        before :each do
-            Puppet::Network::AuthConfig.any_instance.stubs(:read)
-        end
-
-        it "should use the authconfig default pathname if none provided" do
-            Puppet.expects(:[]).with(:authconfig).returns("dummy")
-
-            Puppet::Network::AuthConfig.new
-        end
-
-        it "should raise an error if no file is defined finally" do
-            Puppet.stubs(:[]).with(:authconfig).returns(nil)
-
-            lambda { Puppet::Network::AuthConfig.new }.should raise_error(Puppet::DevError)
-        end
-
-        it "should read and parse the file if parsenow is true" do
-            Puppet::Network::AuthConfig.any_instance.expects(:read)
-
-            Puppet::Network::AuthConfig.new("dummy", true)
-        end
-
-    end
-
-    describe "when checking authorization" do
-        before :each do
-            @authconfig.stubs(:read)
-            @call = stub 'call', :intern => "name"
-            @handler = stub 'handler', :intern => "handler"
-            @method = stub_everything 'method'
-            @request = stub 'request', :call => @call, :handler => @handler, :method => @method, :name => "me", :ip => "1.2.3.4"
-        end
-
-        it "should attempt to read the authconfig file" do
-            @rights.stubs(:include?)
-
-            @authconfig.expects(:read)
-
-            @authconfig.allowed?(@request)
-        end
-
-        it "should use a name right if it exists" do
-            right = stub 'right'
-
-            @rights.stubs(:include?).with("name").returns(true)
-            @rights.stubs(:[]).with("name").returns(right)
-
-            right.expects(:allowed?).with("me", "1.2.3.4")
-
-            @authconfig.allowed?(@request)
-        end
-
-        it "should use a namespace right otherwise" do
-            right = stub 'right'
-
-            @rights.stubs(:include?).with("name").returns(false)
-            @rights.stubs(:include?).with("handler").returns(true)
-            @rights.stubs(:[]).with("handler").returns(right)
-
-            right.expects(:allowed?).with("me", "1.2.3.4")
-
-            @authconfig.allowed?(@request)
-        end
-
-        it "should return whatever the found rights returns" do
-            right = stub 'right'
-
-            @rights.stubs(:include?).with("name").returns(true)
-            @rights.stubs(:[]).with("name").returns(right)
-
-            right.stubs(:allowed?).with("me", "1.2.3.4").returns(:returned)
-
-            @authconfig.allowed?(@request).should == :returned
-        end
-
-    end
-
-    describe "when parsing authconfig file" do
-        before :each do
-            @fd = stub 'fd'
-            File.stubs(:open).yields(@fd)
-            @rights.stubs(:include?).returns(false)
-            @rights.stubs(:[])
-        end
-
-        it "should skip comments" do
-            @fd.stubs(:each).yields('  # comment')
-
-            @rights.expects(:newright).never
-
-            @authconfig.read
-        end
-
-        it "should increment line number even on commented lines" do
-            @fd.stubs(:each).multiple_yields('  # comment','[puppetca]')
-
-            @rights.expects(:newright).with('[puppetca]', 2, 'dummy')
-
-            @authconfig.read
-        end
-
-        it "should skip blank lines" do
-            @fd.stubs(:each).yields('  ')
-
-            @rights.expects(:newright).never
-
-            @authconfig.read
-        end
-
-        it "should increment line number even on blank lines" do
-            @fd.stubs(:each).multiple_yields('  ','[puppetca]')
-
-            @rights.expects(:newright).with('[puppetca]', 2, 'dummy')
-
-            @authconfig.read
-        end
-
-        it "should throw an error if the current namespace right already exist" do
-            @fd.stubs(:each).yields('[puppetca]')
-
-            @rights.stubs(:include?).with("puppetca").returns(true)
-
-            lambda { @authconfig.read }.should raise_error
-        end
-
-        it "should not throw an error if the current path right already exist" do
-            @fd.stubs(:each).yields('path /hello')
-
-            @rights.stubs(:newright).with("/hello",1, 'dummy')
-            @rights.stubs(:include?).with("/hello").returns(true)
-
-            lambda { @authconfig.read }.should_not raise_error
-        end
-
-        it "should create a new right for found namespaces" do
-            @fd.stubs(:each).yields('[puppetca]')
-
-            @rights.expects(:newright).with("[puppetca]", 1, 'dummy')
-
-            @authconfig.read
-        end
-
-        it "should create a new right for each found namespace line" do
-            @fd.stubs(:each).multiple_yields('[puppetca]', '[fileserver]')
-
-            @rights.expects(:newright).with("[puppetca]", 1, 'dummy')
-            @rights.expects(:newright).with("[fileserver]", 2, 'dummy')
-
-            @authconfig.read
-        end
-
-        it "should create a new right for each found path line" do
-            @fd.stubs(:each).multiple_yields('path /certificates')
-
-            @rights.expects(:newright).with("/certificates", 1, 'dummy')
-
-            @authconfig.read
-        end
-
-        it "should create a new right for each found regex line" do
-            @fd.stubs(:each).multiple_yields('path ~ .rb$')
-
-            @rights.expects(:newright).with("~ .rb$", 1, 'dummy')
-
-            @authconfig.read
-        end
-
-        it "should create an allow ACE on each subsequent allow" do
-            acl = stub 'acl', :info
-
-            @fd.stubs(:each).multiple_yields('[puppetca]', 'allow 127.0.0.1')
-            @rights.stubs(:newright).with("[puppetca]", 1, 'dummy').returns(acl)
-
-            acl.expects(:allow).with('127.0.0.1')
-
-            @authconfig.read
-        end
-
-        it "should create a deny ACE on each subsequent deny" do
-            acl = stub 'acl', :info
-
-            @fd.stubs(:each).multiple_yields('[puppetca]', 'deny 127.0.0.1')
-            @rights.stubs(:newright).with("[puppetca]", 1, 'dummy').returns(acl)
-
-            acl.expects(:deny).with('127.0.0.1')
-
-            @authconfig.read
-        end
-
-        it "should inform the current ACL if we get the 'method' directive" do
-            acl = stub 'acl', :info
-            acl.stubs(:acl_type).returns(:regex)
-
-            @fd.stubs(:each).multiple_yields('path /certificates', 'method search,find')
-            @rights.stubs(:newright).with("/certificates", 1, 'dummy').returns(acl)
-
-            acl.expects(:restrict_method).with('search')
-            acl.expects(:restrict_method).with('find')
-
-            @authconfig.read
-        end
-
-        it "should raise an error if the 'method' directive is used in a right different than a path/regex one" do
-            acl = stub 'acl', :info
-            acl.stubs(:acl_type).returns(:regex)
-
-            @fd.stubs(:each).multiple_yields('[puppetca]', 'method search,find')
-            @rights.stubs(:newright).with("puppetca", 1, 'dummy').returns(acl)
-
-            lambda { @authconfig.read }.should raise_error
-        end
-
-        it "should inform the current ACL if we get the 'environment' directive" do
-            acl = stub 'acl', :info
-            acl.stubs(:acl_type).returns(:regex)
-
-            @fd.stubs(:each).multiple_yields('path /certificates', 'environment production,development')
-            @rights.stubs(:newright).with("/certificates", 1, 'dummy').returns(acl)
-
-            acl.expects(:restrict_environment).with('production')
-            acl.expects(:restrict_environment).with('development')
-
-            @authconfig.read
-        end
-
-        it "should raise an error if the 'environment' directive is used in a right different than a path/regex one" do
-            acl = stub 'acl', :info
-            acl.stubs(:acl_type).returns(:regex)
-
-            @fd.stubs(:each).multiple_yields('[puppetca]', 'environment env')
-            @rights.stubs(:newright).with("puppetca", 1, 'dummy').returns(acl)
-
-            lambda { @authconfig.read }.should raise_error
-        end
-
-        it "should inform the current ACL if we get the 'auth' directive" do
-            acl = stub 'acl', :info
-            acl.stubs(:acl_type).returns(:regex)
-
-            @fd.stubs(:each).multiple_yields('path /certificates', 'auth yes')
-            @rights.stubs(:newright).with("/certificates", 1, 'dummy').returns(acl)
-
-            acl.expects(:restrict_authenticated).with('yes')
-
-            @authconfig.read
-        end
-
-        it "should also allow the longest 'authenticated' directive" do
-            acl = stub 'acl', :info
-            acl.stubs(:acl_type).returns(:regex)
-
-            @fd.stubs(:each).multiple_yields('path /certificates', 'authenticated yes')
-            @rights.stubs(:newright).with("/certificates", 1, 'dummy').returns(acl)
-
-            acl.expects(:restrict_authenticated).with('yes')
-
-            @authconfig.read
-        end
-
-        it "should raise an error if the 'auth' directive is used in a right different than a path/regex one" do
-            acl = stub 'acl', :info
-            acl.stubs(:acl_type).returns(:regex)
-
-            @fd.stubs(:each).multiple_yields('[puppetca]', 'auth yes')
-            @rights.stubs(:newright).with("puppetca", 1, 'dummy').returns(acl)
-
-            lambda { @authconfig.read }.should raise_error
-        end
-
-    end
-
-end

data/spec/unit/network/authstore.rb

@@ -1,370 +0,0 @@
-#!/usr/bin/env ruby
-
-require File.dirname(__FILE__) + '/../../spec_helper'
-
-require 'puppet/network/authconfig'
-
-describe Puppet::Network::AuthStore do
-    describe "when checking if the acl has some entries" do
-        before :each do
-            @authstore = Puppet::Network::AuthStore.new
-        end
-
-        it "should be empty if no ACE have been entered" do
-            @authstore.should be_empty
-        end
-
-        it "should not be empty if it is a global allow" do
-            @authstore.allow('*')
-
-            @authstore.should_not be_empty
-        end
-
-        it "should not be empty if at least one allow has been entered" do
-            @authstore.allow('1.1.1.*')
-
-            @authstore.should_not be_empty
-        end
-
-        it "should not be empty if at least one deny has been entered" do
-            @authstore.deny('1.1.1.*')
-
-            @authstore.should_not be_empty
-        end
-    end
-end
-
-describe Puppet::Network::AuthStore::Declaration do
-
-    ['100.101.99.98','100.100.100.100','1.2.3.4','11.22.33.44'].each { |ip|
-        describe "when the pattern is a simple numeric IP such as #{ip}" do
-            before :each do
-                @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,ip)
-            end
-            it "should match the specified IP" do
-                @declaration.should be_match('www.testsite.org',ip)
-            end
-            it "should not match other IPs" do
-                @declaration.should_not be_match('www.testsite.org','200.101.99.98')
-            end
-        end
-
-        (1..3).each { |n|
-            describe "when the pattern is a IP mask with #{n} numeric segments and a *" do
-                before :each do
-                    @ip_pattern = ip.split('.')[0,n].join('.')+'.*'
-                    @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@ip_pattern)
-                end
-                it "should match an IP in the range" do
-                    @declaration.should be_match('www.testsite.org',ip)
-                end
-                it "should not match other IPs" do
-                    @declaration.should_not be_match('www.testsite.org','200.101.99.98')
-                end
-                it "should not match IPs that differ in the last non-wildcard segment" do
-                    other = ip.split('.')
-                    other[n-1].succ!
-                    @declaration.should_not be_match('www.testsite.org',other.join('.'))
-                end
-            end
-        }    
-    }
-
-    describe "when the pattern is a numeric IP with a back reference" do
-        before :each do
-            @ip = '100.101.$1'
-            @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@ip).interpolate('12.34'.match(/(.*)/))
-        end
-        it "should match an IP with the appropriate interpolation" do
-            @declaration.should be_match('www.testsite.org',@ip.sub(/\$1/,'12.34'))
-        end
-        it "should not match other IPs" do
-            @declaration.should_not be_match('www.testsite.org',@ip.sub(/\$1/,'66.34'))
-        end
-    end
-
-    [
-        "02001:0000:1234:0000:0000:C1C0:ABCD:0876",
-        "2001:0000:1234:0000:00001:C1C0:ABCD:0876",
-        " 2001:0000:1234:0000:0000:C1C0:ABCD:0876  0",
-        "2001:0000:1234: 0000:0000:C1C0:ABCD:0876",
-        "3ffe:0b00:0000:0001:0000:0000:000a",
-        "FF02:0000:0000:0000:0000:0000:0000:0000:0001",
-        "3ffe:b00::1::a",
-        "1:2:3::4:5::7:8",
-        "12345::6:7:8",
-        "1::5:400.2.3.4", 
-        "1::5:260.2.3.4", 
-        "1::5:256.2.3.4", 
-        "1::5:1.256.3.4", 
-        "1::5:1.2.256.4", 
-        "1::5:1.2.3.256", 
-        "1::5:300.2.3.4", 
-        "1::5:1.300.3.4", 
-        "1::5:1.2.300.4", 
-        "1::5:1.2.3.300", 
-        "1::5:900.2.3.4", 
-        "1::5:1.900.3.4", 
-        "1::5:1.2.900.4", 
-        "1::5:1.2.3.900", 
-        "1::5:300.300.300.300", 
-        "1::5:3000.30.30.30", 
-        "1::400.2.3.4", 
-        "1::260.2.3.4", 
-        "1::256.2.3.4", 
-        "1::1.256.3.4", 
-        "1::1.2.256.4", 
-        "1::1.2.3.256", 
-        "1::300.2.3.4", 
-        "1::1.300.3.4", 
-        "1::1.2.300.4", 
-        "1::1.2.3.300", 
-        "1::900.2.3.4", 
-        "1::1.900.3.4", 
-        "1::1.2.900.4", 
-        "1::1.2.3.900", 
-        "1::300.300.300.300", 
-        "1::3000.30.30.30", 
-        "::400.2.3.4", 
-        "::260.2.3.4", 
-        "::256.2.3.4", 
-        "::1.256.3.4", 
-        "::1.2.256.4", 
-        "::1.2.3.256", 
-        "::300.2.3.4", 
-        "::1.300.3.4", 
-        "::1.2.300.4", 
-        "::1.2.3.300", 
-        "::900.2.3.4", 
-        "::1.900.3.4", 
-        "::1.2.900.4", 
-        "::1.2.3.900", 
-        "::300.300.300.300", 
-        "::3000.30.30.30", 
-        "2001:DB8:0:0:8:800:200C:417A:221", # unicast, full 
-        "FF01::101::2" # multicast, compressed 
-    ].each { |invalid_ip|
-        describe "when the pattern is an invalid IPv6 address such as #{invalid_ip}" do
-            it "should raise an exception" do
-                lambda { Puppet::Network::AuthStore::Declaration.new(:allow,invalid_ip) }.should raise_error
-            end
-        end
-    }
-
-    [
-        "1.2.3.4", 
-        "2001:0000:1234:0000:0000:C1C0:ABCD:0876", 
-        "3ffe:0b00:0000:0000:0001:0000:0000:000a", 
-        "FF02:0000:0000:0000:0000:0000:0000:0001", 
-        "0000:0000:0000:0000:0000:0000:0000:0001", 
-        "0000:0000:0000:0000:0000:0000:0000:0000", 
-        "::ffff:192.168.1.26", 
-        "2::10", 
-        "ff02::1", 
-        "fe80::", 
-        "2002::", 
-        "2001:db8::", 
-        "2001:0db8:1234::", 
-        "::ffff:0:0", 
-        "::1", 
-        "::ffff:192.168.1.1", 
-        "1:2:3:4:5:6:7:8", 
-        "1:2:3:4:5:6::8", 
-        "1:2:3:4:5::8", 
-        "1:2:3:4::8", 
-        "1:2:3::8", 
-        "1:2::8", 
-        "1::8", 
-        "1::2:3:4:5:6:7", 
-        "1::2:3:4:5:6", 
-        "1::2:3:4:5", 
-        "1::2:3:4", 
-        "1::2:3", 
-        "1::8", 
-        "::2:3:4:5:6:7:8", 
-        "::2:3:4:5:6:7", 
-        "::2:3:4:5:6", 
-        "::2:3:4:5", 
-        "::2:3:4", 
-        "::2:3", 
-        "::8", 
-        "1:2:3:4:5:6::", 
-        "1:2:3:4:5::", 
-        "1:2:3:4::", 
-        "1:2:3::", 
-        "1:2::", 
-        "1::", 
-        "1:2:3:4:5::7:8", 
-        "1:2:3:4::7:8", 
-        "1:2:3::7:8", 
-        "1:2::7:8", 
-        "1::7:8", 
-        "1:2:3:4:5:6:1.2.3.4", 
-        "1:2:3:4:5::1.2.3.4", 
-        "1:2:3:4::1.2.3.4", 
-        "1:2:3::1.2.3.4", 
-        "1:2::1.2.3.4", 
-        "1::1.2.3.4", 
-        "1:2:3:4::5:1.2.3.4", 
-        "1:2:3::5:1.2.3.4", 
-        "1:2::5:1.2.3.4", 
-        "1::5:1.2.3.4", 
-        "1::5:11.22.33.44", 
-        "fe80::217:f2ff:254.7.237.98", 
-        "fe80::217:f2ff:fe07:ed62", 
-        "2001:DB8:0:0:8:800:200C:417A", # unicast, full 
-        "FF01:0:0:0:0:0:0:101", # multicast, full 
-        "0:0:0:0:0:0:0:1", # loopback, full 
-        "0:0:0:0:0:0:0:0", # unspecified, full 
-        "2001:DB8::8:800:200C:417A", # unicast, compressed 
-        "FF01::101", # multicast, compressed 
-        "::1", # loopback, compressed, non-routable 
-        "::", # unspecified, compressed, non-routable 
-        "0:0:0:0:0:0:13.1.68.3", # IPv4-compatible IPv6 address, full, deprecated 
-        "0:0:0:0:0:FFFF:129.144.52.38", # IPv4-mapped IPv6 address, full 
-        "::13.1.68.3", # IPv4-compatible IPv6 address, compressed, deprecated 
-        "::FFFF:129.144.52.38", # IPv4-mapped IPv6 address, compressed 
-        "2001:0DB8:0000:CD30:0000:0000:0000:0000/60", # full, with prefix 
-        "2001:0DB8::CD30:0:0:0:0/60", # compressed, with prefix 
-        "2001:0DB8:0:CD30::/60", # compressed, with prefix #2 
-        "::/128", # compressed, unspecified address type, non-routable 
-        "::1/128", # compressed, loopback address type, non-routable 
-        "FF00::/8", # compressed, multicast address type 
-        "FE80::/10", # compressed, link-local unicast, non-routable 
-        "FEC0::/10", # compressed, site-local unicast, deprecated 
-        "127.0.0.1", # standard IPv4, loopback, non-routable 
-        "0.0.0.0", # standard IPv4, unspecified, non-routable 
-        "255.255.255.255", # standard IPv4 
-        "fe80:0000:0000:0000:0204:61ff:fe9d:f156", 
-        "fe80:0:0:0:204:61ff:fe9d:f156", 
-        "fe80::204:61ff:fe9d:f156", 
-        "fe80:0000:0000:0000:0204:61ff:254.157.241.086", 
-        "fe80:0:0:0:204:61ff:254.157.241.86", 
-        "fe80::204:61ff:254.157.241.86", 
-        "::1", 
-        "fe80::", 
-        "fe80::1"
-    ].each { |ip|
-        describe "when the pattern is a valid IP such as #{ip}" do
-            before :each do
-                @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,ip)
-            end
-            it "should match the specified IP" do
-                @declaration.should be_match('www.testsite.org',ip)
-            end
-            it "should not match other IPs" do
-                @declaration.should_not be_match('www.testsite.org','200.101.99.98')
-            end
-        end unless ip =~ /:.*\./ # Hybrid IPs aren't supported by ruby's ipaddr
-    }
-
-    {
-    'spirit.mars.nasa.gov' => 'a PQDN',
-    'ratchet.2ndsiteinc.com' => 'a PQDN with digits',
-    'a.c.ru' => 'a PQDN with short segments',
-    }.each {|pqdn,desc|
-        describe "when the pattern is #{desc}" do
-            before :each do
-                @host = pqdn
-                @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@host)
-            end
-            it "should match the specified PQDN" do
-                @declaration.should be_match(@host,'200.101.99.98')
-            end
-            it "should not match a similar FQDN" do
-                pending "FQDN consensus"
-                @declaration.should_not be_match(@host+'.','200.101.99.98')
-            end
-        end
-    }
-
-    ['abc.12seps.edu.phisher.biz','www.google.com','slashdot.org'].each { |host|
-        (1...(host.split('.').length)).each { |n|
-            describe "when the pattern is #{"*."+host.split('.')[-n,n].join('.')}" do
-                before :each do
-                    @pattern = "*."+host.split('.')[-n,n].join('.')
-                    @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@pattern)
-                end
-                it "should match #{host}" do
-                    @declaration.should be_match(host,'1.2.3.4')
-                end
-                it "should not match www.testsite.gov" do
-                    @declaration.should_not be_match('www.testsite.gov','200.101.99.98')
-                end
-                it "should not match hosts that differ in the first non-wildcard segment" do
-                    other = host.split('.')
-                    other[-n].succ!
-                    @declaration.should_not be_match(other.join('.'),'1.2.3.4')
-                end
-            end
-        }
-    }
-
-    describe "when the pattern is a FQDN" do
-        before :each do
-            @host = 'spirit.mars.nasa.gov.'
-            @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@host)
-        end
-        it "should match the specified FQDN" do
-            pending "FQDN consensus"
-            @declaration.should be_match(@host,'200.101.99.98')
-        end
-        it "should not match a similar PQDN" do
-            @declaration.should_not be_match(@host[0..-2],'200.101.99.98')
-        end
-    end
-
-
-    describe "when the pattern is an opaque string with a back reference" do
-        before :each do
-            @host = 'c216f41a-f902-4bfb-a222-850dd957bebb'
-            @item = "/catalog/#{@host}"
-            @pattern = %{^/catalog/([^/]+)$}
-            @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
-        end
-        it "should match an IP with the appropriate interpolation" do
-            @declaration.interpolate(@item.match(@pattern)).should be_match(@host,'10.0.0.5')
-        end
-    end
-
-    describe "when the pattern is an opaque string with a back reference and the matched data contains dots" do
-        before :each do
-            @host = 'admin.mgmt.nym1'
-            @item = "/catalog/#{@host}"
-            @pattern = %{^/catalog/([^/]+)$}
-            @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
-        end
-        it "should match a name with the appropriate interpolation" do
-            @declaration.interpolate(@item.match(@pattern)).should be_match(@host,'10.0.0.5')
-        end
-    end
-
-    describe "when the pattern is an opaque string with a back reference and the matched data contains dots with an initial prefix that looks like an IP address" do
-        before :each do
-            @host = '01.admin.mgmt.nym1'
-            @item = "/catalog/#{@host}"
-            @pattern = %{^/catalog/([^/]+)$}
-            @declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
-        end
-        it "should match a name with the appropriate interpolation" do
-            @declaration.interpolate(@item.match(@pattern)).should be_match(@host,'10.0.0.5')
-        end
-    end
-
-    describe "when comparing patterns" do
-        before :each do
-            @ip        = Puppet::Network::AuthStore::Declaration.new(:allow,'127.0.0.1')
-            @host_name = Puppet::Network::AuthStore::Declaration.new(:allow,'www.hard_knocks.edu')
-            @opaque    = Puppet::Network::AuthStore::Declaration.new(:allow,'hey_dude')
-        end
-        it "should consider ip addresses before host names" do
-            (@ip < @host_name).should be_true
-        end
-        it "should consider ip addresses before opaque strings" do
-            (@ip < @opaque).should be_true
-        end
-        it "should consider host_names before opaque strings" do
-            (@host_name < @opaque).should be_true
-        end
-    end
-end