mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 00:41:25 -06:00
5b81dbfda1
* move IPAdmin methods to LDAPClient
* add extra arguments (cacert, sasl_nocanon) to LDAPClient.__init__()
* add host, port, _protocol to LDAPClient (parsed from ldap_uri)
* create get_ldap_uri() method to create ldap_uri from former
IPAdmin.__init__() arguments
* replace IPAdmin with LDAPClient + get_ldap_uri()
* remove ununsed function argument hostname from
enable_replication_version_checking()
https://fedorahosted.org/freeipa/ticket/6461
Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
258 lines
9.4 KiB
Python
258 lines
9.4 KiB
Python
# Authors:
|
|
# Rob Crittenden <rcritten@redhat.com>
|
|
#
|
|
# Copyright (C) 2009 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
"""
|
|
Test the `ipaserver/install/ldapupdate.py` module.
|
|
"""
|
|
|
|
import unittest
|
|
import os
|
|
|
|
import nose
|
|
import pytest
|
|
|
|
from ipalib import api
|
|
from ipalib import errors
|
|
from ipaserver.install.ldapupdate import LDAPUpdate, BadSyntax
|
|
from ipaserver.install import installutils
|
|
from ipapython import ipautil, ipaldap
|
|
from ipaplatform.paths import paths
|
|
from ipapython.dn import DN
|
|
|
|
"""
|
|
The updater works through files only so this is just a thin-wrapper controlling
|
|
which file we test at any given point.
|
|
|
|
IMPORTANT NOTE: It is easy for these tests to get out of sync. Any changes
|
|
made to the update files may require changes to the test cases as well.
|
|
Some cases pull records from LDAP and do comparisons to ensure that updates
|
|
have occurred as expected.
|
|
|
|
The DM password needs to be set in ~/.ipa/.dmpw
|
|
"""
|
|
|
|
|
|
@pytest.mark.tier0
|
|
class test_update(unittest.TestCase):
|
|
"""
|
|
Test the LDAP updater.
|
|
"""
|
|
|
|
def setUp(self):
|
|
fqdn = installutils.get_fqdn()
|
|
pwfile = api.env.dot_ipa + os.sep + ".dmpw"
|
|
if ipautil.file_exists(pwfile):
|
|
fp = open(pwfile, "r")
|
|
self.dm_password = fp.read().rstrip()
|
|
fp.close()
|
|
else:
|
|
raise nose.SkipTest("No directory manager password")
|
|
self.updater = LDAPUpdate(dm_password=self.dm_password, sub_dict={})
|
|
ldap_uri = ipaldap.get_ldap_uri(fqdn)
|
|
self.ld = ipaldap.LDAPClient(ldap_uri)
|
|
self.ld.simple_bind(bind_dn=ipaldap.DIRMAN_DN,
|
|
bind_password=self.dm_password)
|
|
self.testdir = os.path.abspath(os.path.dirname(__file__))
|
|
if not ipautil.file_exists(os.path.join(self.testdir,
|
|
"0_reset.update")):
|
|
raise nose.SkipTest("Unable to find test update files")
|
|
|
|
self.container_dn = DN(self.updater._template_str('cn=test, cn=accounts, $SUFFIX'))
|
|
self.user_dn = DN(self.updater._template_str('uid=tuser, cn=test, cn=accounts, $SUFFIX'))
|
|
|
|
def tearDown(self):
|
|
if self.ld:
|
|
self.ld.unbind()
|
|
|
|
def test_0_reset(self):
|
|
"""
|
|
Reset the updater test data to a known initial state (test_0_reset)
|
|
"""
|
|
try:
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"0_reset.update")])
|
|
except errors.NotFound:
|
|
# Just means the entry doesn't exist yet
|
|
modified = True
|
|
|
|
self.assertTrue(modified)
|
|
|
|
with self.assertRaises(errors.NotFound):
|
|
self.ld.get_entries(
|
|
self.container_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
|
|
with self.assertRaises(errors.NotFound):
|
|
self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
|
|
def test_1_add(self):
|
|
"""
|
|
Test the updater with an add directive (test_1_add)
|
|
"""
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"1_add.update")])
|
|
|
|
self.assertTrue(modified)
|
|
|
|
entries = self.ld.get_entries(
|
|
self.container_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
self.assertEqual(len(entries), 1)
|
|
entry = entries[0]
|
|
|
|
objectclasses = entry.get('objectclass')
|
|
for item in ('top', 'nsContainer'):
|
|
self.assertTrue(item in objectclasses)
|
|
|
|
self.assertEqual(entry.single_value['cn'], 'test')
|
|
|
|
entries = self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
self.assertEqual(len(entries), 1)
|
|
entry = entries[0]
|
|
|
|
objectclasses = entry.get('objectclass')
|
|
for item in ('top', 'person', 'posixaccount', 'krbprincipalaux', 'inetuser'):
|
|
self.assertTrue(item in objectclasses)
|
|
|
|
self.assertEqual(entry.single_value['loginshell'], paths.BASH)
|
|
self.assertEqual(entry.single_value['sn'], 'User')
|
|
self.assertEqual(entry.single_value['uid'], 'tuser')
|
|
self.assertEqual(entry.single_value['cn'], 'Test User')
|
|
|
|
|
|
def test_2_update(self):
|
|
"""
|
|
Test the updater when adding an attribute to an existing entry (test_2_update)
|
|
"""
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"2_update.update")])
|
|
self.assertTrue(modified)
|
|
|
|
entries = self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
self.assertEqual(len(entries), 1)
|
|
entry = entries[0]
|
|
self.assertEqual(entry.single_value['gecos'], 'Test User')
|
|
|
|
def test_3_update(self):
|
|
"""
|
|
Test the updater forcing an attribute to a given value (test_3_update)
|
|
"""
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"3_update.update")])
|
|
self.assertTrue(modified)
|
|
|
|
entries = self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
self.assertEqual(len(entries), 1)
|
|
entry = entries[0]
|
|
self.assertEqual(entry.single_value['gecos'], 'Test User New')
|
|
|
|
def test_4_update(self):
|
|
"""
|
|
Test the updater adding a new value to a single-valued attribute (test_4_update)
|
|
"""
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"4_update.update")])
|
|
self.assertTrue(modified)
|
|
|
|
entries = self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
self.assertEqual(len(entries), 1)
|
|
entry = entries[0]
|
|
self.assertEqual(entry.single_value['gecos'], 'Test User New2')
|
|
|
|
def test_5_update(self):
|
|
"""
|
|
Test the updater adding a new value to a multi-valued attribute (test_5_update)
|
|
"""
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"5_update.update")])
|
|
self.assertTrue(modified)
|
|
|
|
entries = self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
self.assertEqual(len(entries), 1)
|
|
entry = entries[0]
|
|
self.assertEqual(sorted(entry.get('cn')), sorted(['Test User', 'Test User New']))
|
|
|
|
def test_6_update(self):
|
|
"""
|
|
Test the updater removing a value from a multi-valued attribute (test_6_update)
|
|
"""
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"6_update.update")])
|
|
self.assertTrue(modified)
|
|
|
|
entries = self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
self.assertEqual(len(entries), 1)
|
|
entry = entries[0]
|
|
self.assertEqual(sorted(entry.get('cn')), sorted(['Test User']))
|
|
|
|
def test_6_update_1(self):
|
|
"""
|
|
Test the updater removing a non-existent value from a multi-valued attribute (test_6_update_1)
|
|
"""
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"6_update.update")])
|
|
self.assertFalse(modified)
|
|
|
|
entries = self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
self.assertEqual(len(entries), 1)
|
|
entry = entries[0]
|
|
self.assertEqual(sorted(entry.get('cn')), sorted(['Test User']))
|
|
|
|
def test_7_cleanup(self):
|
|
"""
|
|
Reset the test data to a known initial state (test_7_cleanup)
|
|
"""
|
|
try:
|
|
modified = self.updater.update([os.path.join(self.testdir,
|
|
"0_reset.update")])
|
|
except errors.NotFound:
|
|
# Just means the entry doesn't exist yet
|
|
modified = True
|
|
|
|
self.assertTrue(modified)
|
|
|
|
with self.assertRaises(errors.NotFound):
|
|
self.ld.get_entries(
|
|
self.container_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
|
|
with self.assertRaises(errors.NotFound):
|
|
self.ld.get_entries(
|
|
self.user_dn, self.ld.SCOPE_BASE, 'objectclass=*', ['*'])
|
|
|
|
def test_8_badsyntax(self):
|
|
"""
|
|
Test the updater with an unknown keyword (test_8_badsyntax)
|
|
"""
|
|
with self.assertRaises(BadSyntax):
|
|
self.updater.update(
|
|
[os.path.join(self.testdir, "8_badsyntax.update")])
|
|
|
|
def test_9_badsyntax(self):
|
|
"""
|
|
Test the updater with an incomplete line (test_9_badsyntax)
|
|
"""
|
|
with self.assertRaises(BadSyntax):
|
|
self.updater.update(
|
|
[os.path.join(self.testdir, "9_badsyntax.update")])
|