mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-27 09:21:59 -06:00
e6dbb2aa68
When loading from file, some strings are loaded as unicode, which would throw off assert_deepequal. Reviewed-By: Tomas Babej <tbabej@redhat.com>
468 lines
16 KiB
Python
468 lines
16 KiB
Python
# Authors:
|
|
# Petr Viktorin <pviktori@redhat.com>
|
|
# Tomas Babej <tbabej@redhat.com>
|
|
#
|
|
# Copyright (C) 2013 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
"""Utilities for configuration of multi-master tests"""
|
|
|
|
import os
|
|
import collections
|
|
import random
|
|
import json
|
|
|
|
from ipapython import ipautil
|
|
from ipapython.dn import DN
|
|
from ipapython.ipa_log_manager import log_mgr
|
|
from ipatests.test_integration.util import check_config_dict_empty
|
|
from ipatests.test_integration.util import TESTHOST_PREFIX
|
|
|
|
|
|
_SettingInfo = collections.namedtuple('Setting', 'name var_name default')
|
|
_setting_infos = (
|
|
# Directory on which test-specific files will be stored,
|
|
_SettingInfo('test_dir', 'IPATEST_DIR', '/root/ipatests'),
|
|
|
|
# File with root's private RSA key for SSH (default: ~/.ssh/id_rsa)
|
|
_SettingInfo('root_ssh_key_filename', 'IPA_ROOT_SSH_KEY', None),
|
|
|
|
# SSH password for root (used if root_ssh_key_filename is not set)
|
|
_SettingInfo('root_password', 'IPA_ROOT_SSH_PASSWORD', None),
|
|
|
|
_SettingInfo('admin_name', 'ADMINID', 'admin'),
|
|
_SettingInfo('admin_password', 'ADMINPW', 'Secret123'),
|
|
_SettingInfo('dirman_dn', 'ROOTDN', 'cn=Directory Manager'),
|
|
_SettingInfo('dirman_password', 'ROOTDNPWD', None),
|
|
|
|
# 8.8.8.8 is probably the best-known public DNS
|
|
_SettingInfo('dns_forwarder', 'DNSFORWARD', '8.8.8.8'),
|
|
_SettingInfo('nis_domain', 'NISDOMAIN', 'ipatest'),
|
|
_SettingInfo('ntp_server', 'NTPSERVER', None),
|
|
_SettingInfo('ad_admin_name', 'ADADMINID', 'Administrator'),
|
|
_SettingInfo('ad_admin_password', 'ADADMINPW', 'Secret123'),
|
|
|
|
_SettingInfo('ipv6', 'IPv6SETUP', False),
|
|
_SettingInfo('debug', 'IPADEBUG', False),
|
|
)
|
|
|
|
|
|
class Config(object):
|
|
def __init__(self, **kwargs):
|
|
self.log = log_mgr.get_logger(self)
|
|
|
|
admin_password = kwargs.get('admin_password') or 'Secret123'
|
|
|
|
# This unfortunately duplicates information in _setting_infos,
|
|
# but is left here for the sake of static analysis.
|
|
self.test_dir = kwargs.get('test_dir', '/root/ipatests')
|
|
self.root_ssh_key_filename = kwargs.get('root_ssh_key_filename')
|
|
self.root_password = kwargs.get('root_password')
|
|
self.admin_name = kwargs.get('admin_name') or 'admin'
|
|
self.admin_password = admin_password
|
|
self.dirman_dn = DN(kwargs.get('dirman_dn') or 'cn=Directory Manager')
|
|
self.dirman_password = kwargs.get('dirman_password') or admin_password
|
|
self.dns_forwarder = kwargs.get('dns_forwarder') or '8.8.8.8'
|
|
self.nis_domain = kwargs.get('nis_domain') or 'ipatest'
|
|
self.ntp_server = str(kwargs.get('ntp_server') or (
|
|
'%s.pool.ntp.org' % random.randint(0, 3)))
|
|
self.ad_admin_name = kwargs.get('ad_admin_name') or 'Administrator'
|
|
self.ad_admin_password = kwargs.get('ad_admin_password') or 'Secret123'
|
|
self.ipv6 = bool(kwargs.get('ipv6', False))
|
|
self.debug = bool(kwargs.get('debug', False))
|
|
|
|
if not self.root_password and not self.root_ssh_key_filename:
|
|
self.root_ssh_key_filename = '~/.ssh/id_rsa'
|
|
|
|
self.domains = []
|
|
|
|
@property
|
|
def ad_domains(self):
|
|
return filter(lambda d: d.type == 'AD', self.domains)
|
|
|
|
@classmethod
|
|
def from_dict(cls, dct):
|
|
kwargs = {s.name: dct.pop(s.name, s.default) for s in _setting_infos}
|
|
self = cls(**kwargs)
|
|
|
|
for domain_dict in dct.pop('domains'):
|
|
self.domains.append(Domain.from_dict(domain_dict, self))
|
|
|
|
check_config_dict_empty(dct, 'config')
|
|
|
|
return self
|
|
|
|
def to_dict(self):
|
|
dct = {'domains': [d.to_dict() for d in self.domains]}
|
|
for setting in _setting_infos:
|
|
value = getattr(self, setting.name)
|
|
if isinstance(value, DN):
|
|
value = str(value)
|
|
dct[setting.name] = value
|
|
return dct
|
|
|
|
@classmethod
|
|
def from_env(cls, env):
|
|
"""Create a test config from environment variables
|
|
|
|
If IPATEST_YAML_CONFIG or IPATEST_JSON_CONFIG is set,
|
|
configuration is read from the named file.
|
|
For YAML, the PyYAML (python-yaml) library needs to be installed.
|
|
|
|
Otherwise, configuration is read from various curiously
|
|
named environment variables:
|
|
|
|
See _setting_infos for test-wide settings
|
|
|
|
MASTER_env1: FQDN of the master
|
|
REPLICA_env1: space-separated FQDNs of the replicas
|
|
CLIENT_env1: space-separated FQDNs of the clients
|
|
AD_env1: space-separated FQDNs of the Active Directories
|
|
OTHER_env1: space-separated FQDNs of other hosts
|
|
(same for _env2, _env3, etc)
|
|
BEAKERREPLICA1_IP_env1: IP address of replica 1 in env 1
|
|
(same for MASTER, CLIENT, or any extra defined ROLE)
|
|
|
|
For each machine that should be accessible to tests via extra roles,
|
|
the following environment variable is necessary:
|
|
|
|
TESTHOST_<role>_env1: FQDN of the machine with the extra role <role>
|
|
|
|
You can also optionally specify the IP address of the host:
|
|
BEAKER<role>_IP_env1: IP address of the machine of the extra role
|
|
|
|
The framework will try to resolve the hostname to its IP address
|
|
if not passed via this environment variable.
|
|
|
|
Also see env_normalize() for alternate variable names
|
|
"""
|
|
if 'IPATEST_YAML_CONFIG' in env:
|
|
import yaml
|
|
with open(env['IPATEST_YAML_CONFIG']) as file:
|
|
data = yaml.safe_load(file)
|
|
return cls.from_dict(data)
|
|
|
|
if 'IPATEST_JSON_CONFIG' in env:
|
|
with open(env['IPATEST_JSON_CONFIG']) as file:
|
|
data = json.load(file)
|
|
return cls.from_dict(data)
|
|
|
|
env_normalize(env)
|
|
|
|
kwargs = {s.name: env.get(s.var_name, s.default)
|
|
for s in _setting_infos}
|
|
|
|
# $IPv6SETUP needs to be 'TRUE' to enable ipv6
|
|
if isinstance(kwargs['ipv6'], basestring):
|
|
kwargs['ipv6'] = (kwargs['ipv6'].upper() == 'TRUE')
|
|
|
|
self = cls(**kwargs)
|
|
|
|
# Either IPA master or AD can define a domain
|
|
|
|
domain_index = 1
|
|
while (env.get('MASTER_env%s' % domain_index) or
|
|
env.get('AD_env%s' % domain_index)):
|
|
|
|
if env.get('MASTER_env%s' % domain_index):
|
|
# IPA domain takes precedence to AD domain in case of conflict
|
|
self.domains.append(Domain.from_env(env, self, domain_index,
|
|
domain_type='IPA'))
|
|
else:
|
|
self.domains.append(Domain.from_env(env, self, domain_index,
|
|
domain_type='AD'))
|
|
domain_index += 1
|
|
|
|
return self
|
|
|
|
def to_env(self, simple=True):
|
|
"""Convert this test config into environment variables"""
|
|
try:
|
|
env = collections.OrderedDict()
|
|
except AttributeError:
|
|
# Older Python versions
|
|
env = {}
|
|
|
|
for setting in _setting_infos:
|
|
value = getattr(self, setting.name)
|
|
if value in (None, False):
|
|
env[setting.var_name] = ''
|
|
elif value is True:
|
|
env[setting.var_name] = 'TRUE'
|
|
else:
|
|
env[setting.var_name] = str(value)
|
|
|
|
for domain in self.domains:
|
|
env_suffix = '_env%s' % (self.domains.index(domain) + 1)
|
|
env['DOMAIN%s' % env_suffix] = domain.name
|
|
env['RELM%s' % env_suffix] = domain.realm
|
|
env['BASEDN%s' % env_suffix] = str(domain.basedn)
|
|
|
|
for role in domain.roles:
|
|
hosts = domain.hosts_by_role(role)
|
|
|
|
prefix = ('' if role in domain.static_roles
|
|
else TESTHOST_PREFIX)
|
|
|
|
hostnames = ' '.join(h.hostname for h in hosts)
|
|
env['%s%s%s' % (prefix, role.upper(), env_suffix)] = hostnames
|
|
|
|
ext_hostnames = ' '.join(h.external_hostname for h in hosts)
|
|
env['BEAKER%s%s' % (role.upper(), env_suffix)] = ext_hostnames
|
|
|
|
ips = ' '.join(h.ip for h in hosts)
|
|
env['BEAKER%s_IP%s' % (role.upper(), env_suffix)] = ips
|
|
|
|
for i, host in enumerate(hosts, start=1):
|
|
suffix = '%s%s' % (role.upper(), i)
|
|
prefix = ('' if role in domain.static_roles
|
|
else TESTHOST_PREFIX)
|
|
|
|
ext_hostname = host.external_hostname
|
|
env['%s%s%s' % (prefix, suffix,
|
|
env_suffix)] = host.hostname
|
|
env['BEAKER%s%s' % (suffix, env_suffix)] = ext_hostname
|
|
env['BEAKER%s_IP%s' % (suffix, env_suffix)] = host.ip
|
|
|
|
if simple:
|
|
# Simple Vars for simplicity and backwards compatibility with older
|
|
# tests. This means no _env<NUM> suffix.
|
|
if self.domains:
|
|
default_domain = self.domains[0]
|
|
if default_domain.master:
|
|
env['MASTER'] = default_domain.master.hostname
|
|
env['BEAKERMASTER'] = default_domain.master.external_hostname
|
|
env['MASTERIP'] = default_domain.master.ip
|
|
if default_domain.replicas:
|
|
env['SLAVE'] = env['REPLICA'] = env['REPLICA_env1']
|
|
env['BEAKERSLAVE'] = env['BEAKERREPLICA_env1']
|
|
env['SLAVEIP'] = env['BEAKERREPLICA_IP_env1']
|
|
if default_domain.clients:
|
|
client = default_domain.clients[0]
|
|
env['CLIENT'] = client.hostname
|
|
env['BEAKERCLIENT'] = client.external_hostname
|
|
if len(default_domain.clients) >= 2:
|
|
client = default_domain.clients[1]
|
|
env['CLIENT2'] = client.hostname
|
|
env['BEAKERCLIENT2'] = client.external_hostname
|
|
|
|
return env
|
|
|
|
def host_by_name(self, name):
|
|
for domain in self.domains:
|
|
try:
|
|
return domain.host_by_name(name)
|
|
except LookupError:
|
|
pass
|
|
raise LookupError(name)
|
|
|
|
|
|
def env_normalize(env):
|
|
"""Fill env variables from alternate variable names
|
|
|
|
MASTER_env1 <- MASTER
|
|
REPLICA_env1 <- REPLICA, SLAVE
|
|
CLIENT_env1 <- CLIENT
|
|
similarly for BEAKER* variants: BEAKERMASTER1_env1 <- BEAKERMASTER, etc.
|
|
|
|
CLIENT_env1 gets extended with CLIENT2 or CLIENT2_env1
|
|
"""
|
|
def coalesce(name, *other_names):
|
|
"""If name is not set, set it to first existing env[other_name]"""
|
|
if name not in env:
|
|
for other_name in other_names:
|
|
try:
|
|
env[name] = env[other_name]
|
|
except KeyError:
|
|
pass
|
|
else:
|
|
return
|
|
else:
|
|
env[name] = ''
|
|
coalesce('MASTER_env1', 'MASTER')
|
|
coalesce('REPLICA_env1', 'REPLICA', 'SLAVE')
|
|
coalesce('CLIENT_env1', 'CLIENT')
|
|
|
|
coalesce('BEAKERMASTER1_env1', 'BEAKERMASTER')
|
|
coalesce('BEAKERREPLICA1_env1', 'BEAKERREPLICA', 'BEAKERSLAVE')
|
|
coalesce('BEAKERCLIENT1_env1', 'BEAKERCLIENT')
|
|
|
|
def extend(name, name2):
|
|
value = env.get(name2)
|
|
if value and value not in env[name].split(' '):
|
|
env[name] += ' ' + value
|
|
extend('CLIENT_env1', 'CLIENT2')
|
|
extend('CLIENT_env1', 'CLIENT2_env1')
|
|
|
|
|
|
class Domain(object):
|
|
"""Configuration for an IPA / AD domain"""
|
|
def __init__(self, config, name, domain_type):
|
|
self.log = log_mgr.get_logger(self)
|
|
self.type = str(domain_type)
|
|
|
|
self.config = config
|
|
self.name = str(name)
|
|
self.hosts = []
|
|
|
|
self.realm = self.name.upper()
|
|
self.basedn = DN(*(('dc', p) for p in name.split('.')))
|
|
|
|
@property
|
|
def roles(self):
|
|
return sorted(set(host.role for host in self.hosts))
|
|
|
|
@property
|
|
def static_roles(self):
|
|
# Specific roles for each domain type are hardcoded
|
|
if self.type == 'IPA':
|
|
return ('master', 'replica', 'client', 'other')
|
|
else:
|
|
return ('ad',)
|
|
|
|
@property
|
|
def extra_roles(self):
|
|
return [role for role in self.roles if role not in self.static_roles]
|
|
|
|
def _roles_from_env(self, env, env_suffix):
|
|
for role in self.static_roles:
|
|
yield role
|
|
|
|
# Extra roles are defined via env variables of form TESTHOST_key_envX
|
|
roles = set()
|
|
for var in sorted(env):
|
|
if var.startswith(TESTHOST_PREFIX) and var.endswith(env_suffix):
|
|
variable_split = var.split('_')
|
|
role_name = '_'.join(variable_split[1:-1])
|
|
if (role_name and not role_name[-1].isdigit()):
|
|
roles.add(role_name.lower())
|
|
for role in sorted(roles):
|
|
yield role
|
|
|
|
@classmethod
|
|
def from_dict(cls, dct, config):
|
|
from ipatests.test_integration.host import BaseHost
|
|
|
|
domain_type = dct.pop('type')
|
|
assert domain_type in ('IPA', 'AD')
|
|
domain_name = dct.pop('name')
|
|
self = cls(config, domain_name, domain_type)
|
|
|
|
for host_dict in dct.pop('hosts'):
|
|
host = BaseHost.from_dict(host_dict, self)
|
|
self.hosts.append(host)
|
|
|
|
check_config_dict_empty(dct, 'domain %s' % domain_name)
|
|
|
|
return self
|
|
|
|
def to_dict(self):
|
|
return {
|
|
'type': self.type,
|
|
'name': self.name,
|
|
'hosts': [h.to_dict() for h in self.hosts],
|
|
}
|
|
|
|
@classmethod
|
|
def from_env(cls, env, config, index, domain_type):
|
|
from ipatests.test_integration.host import BaseHost
|
|
|
|
# Roles available in the domain depend on the type of the domain
|
|
# Unix machines are added only to the IPA domains, Windows machines
|
|
# only to the AD domains
|
|
if domain_type == 'IPA':
|
|
master_role = 'MASTER'
|
|
else:
|
|
master_role = 'AD'
|
|
|
|
env_suffix = '_env%s' % index
|
|
|
|
master_env = '%s%s' % (master_role, env_suffix)
|
|
hostname, dot, domain_name = env[master_env].partition('.')
|
|
self = cls(config, domain_name, domain_type)
|
|
|
|
for role in self._roles_from_env(env, env_suffix):
|
|
prefix = '' if role in self.static_roles else TESTHOST_PREFIX
|
|
value = env.get('%s%s%s' % (prefix, role.upper(), env_suffix), '')
|
|
|
|
for host_index, hostname in enumerate(value.split(), start=1):
|
|
host = BaseHost.from_env(env, self, hostname, role,
|
|
host_index, index)
|
|
self.hosts.append(host)
|
|
|
|
if not self.hosts:
|
|
raise ValueError('No hosts defined for %s' % env_suffix)
|
|
|
|
return self
|
|
|
|
def to_env(self, **kwargs):
|
|
"""Return environment variables specific to this domain"""
|
|
env = self.config.to_env(**kwargs)
|
|
|
|
env['DOMAIN'] = self.name
|
|
env['RELM'] = self.realm
|
|
env['BASEDN'] = str(self.basedn)
|
|
|
|
return env
|
|
|
|
def host_by_role(self, role):
|
|
if self.hosts_by_role(role):
|
|
return self.hosts_by_role(role)[0]
|
|
else:
|
|
raise LookupError(role)
|
|
|
|
def hosts_by_role(self, role):
|
|
return [h for h in self.hosts if h.role == role]
|
|
|
|
@property
|
|
def master(self):
|
|
return self.host_by_role('master')
|
|
|
|
@property
|
|
def masters(self):
|
|
return self.hosts_by_role('master')
|
|
|
|
@property
|
|
def replicas(self):
|
|
return self.hosts_by_role('replica')
|
|
|
|
@property
|
|
def clients(self):
|
|
return self.hosts_by_role('client')
|
|
|
|
@property
|
|
def ads(self):
|
|
return self.hosts_by_role('ad')
|
|
|
|
@property
|
|
def other_hosts(self):
|
|
return self.hosts_by_role('other')
|
|
|
|
def host_by_name(self, name):
|
|
for host in self.hosts:
|
|
if name in (host.hostname, host.external_hostname, host.shortname):
|
|
return host
|
|
raise LookupError(name)
|
|
|
|
|
|
def env_to_script(env):
|
|
return ''.join(['export %s=%s\n' % (key, ipautil.shell_quote(value))
|
|
for key, value in env.items()])
|
|
|
|
|
|
def get_global_config():
|
|
return Config.from_env(os.environ)
|