Add basic test for backup & restore

https://fedorahosted.org/freeipa/ticket/3893

Reviewed-By: Tomas Babej <tbabej@redhat.com>

ipatests/test_integration/test_backup_and_restore.py

@@ -0,0 +1,110 @@
+# Authors:
+#   Petr Viktorin <pviktori@redhat.com>
+#
+# Copyright (C) 2014  Red Hat
+# see file 'COPYING' for use and warranty information
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+import re
+import contextlib
+
+from ipapython.dn import DN
+from ipatests.test_integration.base import IntegrationTest
+from ipatests.test_integration import tasks
+from ipatests.util import assert_deepequal
+
+
+def assert_entries_equal(a, b):
+    assert_deepequal(a.dn, b.dn)
+    assert_deepequal(dict(a), dict(b))
+
+
+def assert_results_equal(a, b):
+    def to_dict(r):
+        return {
+            'stdout': r.stdout_text,
+            'stderr': r.stderr_text,
+            'returncode': r.returncode,
+        }
+    assert_deepequal(to_dict(a), to_dict(b))
+
+
+def check_admin_in_ldap(host):
+    ldap = host.ldap_connect()
+    basedn = host.domain.basedn
+    user_dn = DN(('uid', 'admin'), ('cn', 'users'), ('cn', 'accounts'), basedn)
+    entry = ldap.get_entry(user_dn)
+    print entry
+    assert entry.dn == user_dn
+    assert entry['uid'] == ['admin']
+
+    del entry['krbLastSuccessfulAuth']
+
+    return entry
+
+
+def check_admin_in_cli(host):
+    result = host.run_command(['ipa', 'user-show', 'admin'])
+    assert 'User login: admin' in result.stdout_text, result.stdout_text
+    return result
+
+
+def check_certs(host):
+    result = host.run_command(['ipa', 'cert-find'])
+    assert re.search('^Number of entries returned [1-9]\d*$',
+                     result.stdout_text, re.MULTILINE), result.stdout_text
+    return result
+
+
+@contextlib.contextmanager
+def restore_checker(host):
+    """Check that the IPA at host works the same at context enter and exit"""
+    tasks.kinit_admin(host)
+
+    admin_entry = check_admin_in_ldap(host)
+    admin_cli_result = check_admin_in_cli(host)
+    certs_output = check_certs(host)
+
+    yield
+
+    assert_entries_equal(admin_entry, check_admin_in_ldap(host))
+    assert_results_equal(admin_cli_result, check_admin_in_cli(host))
+    assert_results_equal(certs_output, check_certs(host))
+
+
+class TestBackupAndRestore(IntegrationTest):
+    topology = 'star'
+
+    def test_full_backup_and_restore(self):
+        """backup, uninstall, restore"""
+        with restore_checker(self.master):
+            result = self.master.run_command(['ipa-backup', '-v'])
+
+            # Get the backup location from the command's output
+            for line in result.stderr_text.splitlines():
+                prefix = ('ipa.ipaserver.install.ipa_backup.Backup: '
+                          'INFO: Backed up to ')
+                if line.startswith(prefix):
+                    backup_path = line[len(prefix):].strip()
+
+            self.log.info('Backup path for %s is %s', self.master, backup_path)
+
+            self.master.run_command(['ipa-server-install',
+                                     '--uninstall',
+                                     '-U'])
+
+            dirman_password = self.master.config.dirman_password
+            self.master.run_command(['ipa-restore', backup_path],
+                                    stdin_text=dirman_password + '\nyes')