mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 01:41:14 -06:00
0a64e9bd70
Web UI tests were marked as tier1 tests.
The tier system is intended to be used together with CI system
to make sure the more complicated tests are being run only
when all of the basic functionality is working.
The system is using pytest's marker system. E.g. an invocation of
all tier1 tests with listing will look like:
$ py.test -v -m tier1 ipatests
or in case of out of tree tests:
$ ipa-run-tests -m tier1
Reviewed-By: Ales 'alich' Marecek <amarecek@redhat.com>
250 lines
11 KiB
Python
250 lines
11 KiB
Python
# Authors:
|
|
# Ana Krivokapic <akrivoka@redhat.com>
|
|
#
|
|
# Copyright (C) 2013 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
"""
|
|
Test the `ipalib/plugins/realmdomains.py` module.
|
|
"""
|
|
|
|
from ipalib import api, errors
|
|
from ipapython.dn import DN
|
|
from ipatests.test_xmlrpc import objectclasses
|
|
from ipatests.test_xmlrpc.xmlrpc_test import Declarative
|
|
import pytest
|
|
|
|
|
|
cn = u'Realm Domains'
|
|
dn = DN(('cn', cn), ('cn', 'ipa'), ('cn', 'etc'), api.env.basedn)
|
|
our_domain = api.env.domain
|
|
new_domain_1 = u'example1.com'
|
|
new_domain_2 = u'example2.com'
|
|
bad_domain = u'doesnotexist.test'
|
|
|
|
|
|
@pytest.mark.tier1
|
|
class test_realmdomains(Declarative):
|
|
|
|
# Make sure your environment has sound DNS configuration where
|
|
# the IPA domain has either NS or SOA record. Check your resolver
|
|
# if getting errors with the realmdomains_mod cleanup command.
|
|
cleanup_commands = [
|
|
('realmdomains_mod', [], {'associateddomain': [our_domain]}),
|
|
]
|
|
|
|
tests = [
|
|
dict(
|
|
desc='Retrieve realm domains',
|
|
command=('realmdomains_show', [], {}),
|
|
expected=dict(
|
|
value=None,
|
|
summary=None,
|
|
result=dict(
|
|
dn=dn,
|
|
associateddomain=[our_domain],
|
|
),
|
|
),
|
|
),
|
|
dict(
|
|
desc='Retrieve realm domains - print all attributes',
|
|
command=('realmdomains_show', [], {'all': True}),
|
|
expected=dict(
|
|
value=None,
|
|
summary=None,
|
|
result=dict(
|
|
dn=dn,
|
|
associateddomain=[our_domain],
|
|
cn=[cn],
|
|
objectclass=objectclasses.realmdomains,
|
|
aci=[
|
|
u'(targetattr = "associateddomain || cn || '
|
|
u'createtimestamp || entryusn || '
|
|
u'modifytimestamp || objectclass")'
|
|
u'(targetfilter = "(objectclass=domainrelatedobject)")'
|
|
u'(version 3.0;acl '
|
|
u'"permission:System: Read Realm Domains";'
|
|
u'allow (compare,read,search) '
|
|
u'userdn = "ldap:///all";)',
|
|
|
|
u'(targetattr = "associateddomain")'
|
|
u'(targetfilter = "(objectclass=domainrelatedobject)")'
|
|
u'(version 3.0;acl '
|
|
u'"permission:System: Modify Realm Domains";'
|
|
u'allow (write) groupdn = "ldap:///%s";)' %
|
|
DN('cn=System: Modify Realm Domains',
|
|
api.env.container_permission,
|
|
api.env.basedn),
|
|
|
|
],
|
|
),
|
|
),
|
|
),
|
|
dict(
|
|
desc='Replace list of realm domains with "%s"' % [our_domain, new_domain_1],
|
|
command=('realmdomains_mod', [], {'associateddomain': [our_domain, new_domain_1], 'force':True}),
|
|
expected=dict(
|
|
value=None,
|
|
summary=None,
|
|
messages=({u'message': u"The _kerberos TXT record from domain "
|
|
"example1.com could not be created (%s.: "
|
|
"DNS zone not found).\nThis can happen if the zone "
|
|
"is not managed by IPA. Please create the record "
|
|
"manually, containing the following value: "
|
|
"'%s'" % (new_domain_1, api.env.realm),
|
|
u'code': 13011,
|
|
u'type': u'warning',
|
|
u'name': u'KerberosTXTRecordCreationFailure'},
|
|
),
|
|
result=dict(
|
|
associateddomain=[our_domain, new_domain_1],
|
|
),
|
|
),
|
|
),
|
|
dict(
|
|
desc='Add domain "%s" to list' % new_domain_2,
|
|
command=('realmdomains_mod', [], {'add_domain': new_domain_2, 'force': True}),
|
|
expected=dict(
|
|
value=None,
|
|
summary=None,
|
|
result=dict(
|
|
associateddomain=[our_domain, new_domain_1, new_domain_2],
|
|
),
|
|
messages=({u'message': u"The _kerberos TXT record from domain "
|
|
"%(domain)s could not be created (%(domain)s.: "
|
|
"DNS zone not found).\nThis can happen if the zone "
|
|
"is not managed by IPA. Please create the record "
|
|
"manually, containing the following value: "
|
|
"'%(realm)s'" % dict(domain=new_domain_2,
|
|
realm=api.env.realm),
|
|
u'code': 13011,
|
|
u'type': u'warning',
|
|
u'name': u'KerberosTXTRecordCreationFailure'},
|
|
),
|
|
),
|
|
),
|
|
dict(
|
|
desc='Delete domain "%s" from list' % new_domain_2,
|
|
command=('realmdomains_mod', [], {'del_domain': new_domain_2}),
|
|
expected=dict(
|
|
value=None,
|
|
summary=None,
|
|
result=dict(
|
|
associateddomain=[our_domain, new_domain_1],
|
|
),
|
|
messages=({u'message': u"The _kerberos TXT record from domain "
|
|
"%(domain)s could not be removed (%(domain)s.: "
|
|
"DNS zone not found).\nThis can happen if the zone "
|
|
"is not managed by IPA. Please remove the record "
|
|
"manually." % dict(domain=new_domain_2),
|
|
u'code': 13012,
|
|
u'type': u'warning',
|
|
u'name': u'KerberosTXTRecordDeletionFailure'},
|
|
),
|
|
),
|
|
),
|
|
dict(
|
|
desc='Add domain "%s" and delete domain "%s"' % (new_domain_2, new_domain_1),
|
|
command=('realmdomains_mod', [], {'add_domain': new_domain_2, 'del_domain': new_domain_1, 'force': True}),
|
|
expected=dict(
|
|
value=None,
|
|
summary=None,
|
|
result=dict(
|
|
associateddomain=[our_domain, new_domain_2],
|
|
),
|
|
messages=({u'message': u"The _kerberos TXT record from domain "
|
|
"%(domain)s could not be created (%(domain)s.: "
|
|
"DNS zone not found).\nThis can happen if the zone "
|
|
"is not managed by IPA. Please create the record "
|
|
"manually, containing the following value: "
|
|
"'%(realm)s'" % dict(domain=new_domain_2,
|
|
realm=api.env.realm),
|
|
u'code': 13011,
|
|
u'type': u'warning',
|
|
u'name': u'KerberosTXTRecordCreationFailure'},
|
|
{u'message': u"The _kerberos TXT record from domain "
|
|
"%(domain)s could not be removed (%(domain)s.: "
|
|
"DNS zone not found).\nThis can happen if the zone "
|
|
"is not managed by IPA. Please remove the record "
|
|
"manually." % dict(domain=new_domain_1),
|
|
u'code': 13012,
|
|
u'type': u'warning',
|
|
u'name': u'KerberosTXTRecordDeletionFailure'},
|
|
),
|
|
),
|
|
),
|
|
dict(
|
|
desc='Try to specify --domain and --add-domain options together',
|
|
command=('realmdomains_mod', [], {
|
|
'associateddomain': [our_domain, new_domain_1],
|
|
'add_domain': new_domain_1,
|
|
}),
|
|
expected=errors.MutuallyExclusiveError(
|
|
reason='The --domain option cannot be used together with --add-domain or --del-domain. Use --domain to specify the whole realm domain list explicitly, to add/remove individual domains, use --add-domain/del-domain.'),
|
|
),
|
|
dict(
|
|
desc='Try to replace list of realm domains with a list without our domain',
|
|
command=('realmdomains_mod', [], {'associateddomain': [new_domain_1]}),
|
|
expected=errors.ValidationError(
|
|
name='realmdomain list', error='IPA server domain cannot be omitted'),
|
|
),
|
|
dict(
|
|
desc='Try to replace list of realm domains with a list with an invalid domain "%s"' % bad_domain,
|
|
command=('realmdomains_mod', [], {'associateddomain': [our_domain, bad_domain]}),
|
|
expected=errors.ValidationError(
|
|
name='domain', error='DNS zone for each realmdomain must contain SOA or NS records. No records found for: %s' % bad_domain),
|
|
),
|
|
dict(
|
|
desc='Try to add an invalid domain "%s"' % bad_domain,
|
|
command=('realmdomains_mod', [], {'add_domain': bad_domain}),
|
|
expected=errors.ValidationError(
|
|
name='domain', error='DNS zone for each realmdomain must contain SOA or NS records. No records found for: %s' % bad_domain),
|
|
),
|
|
dict(
|
|
desc='Try to delete our domain',
|
|
command=('realmdomains_mod', [], {'del_domain': our_domain}),
|
|
expected=errors.ValidationError(
|
|
name='del_domain', error='IPA server domain cannot be deleted'),
|
|
),
|
|
dict(
|
|
desc='Try to delete domain which is not in list',
|
|
command=('realmdomains_mod', [], {'del_domain': new_domain_1}),
|
|
expected=errors.AttrValueNotFound(
|
|
attr='associateddomain', value=new_domain_1),
|
|
),
|
|
dict(
|
|
desc='Add an invalid domain "%s" with --force option' % bad_domain,
|
|
command=('realmdomains_mod', [], {'add_domain': bad_domain, 'force': True}),
|
|
expected=dict(
|
|
value=None,
|
|
summary=None,
|
|
result=dict(
|
|
associateddomain=[our_domain, new_domain_2, bad_domain],
|
|
),
|
|
messages=({u'message': u"The _kerberos TXT record from domain "
|
|
"%(domain)s could not be created (%(domain)s.: "
|
|
"DNS zone not found).\nThis can happen if the zone "
|
|
"is not managed by IPA. Please create the record "
|
|
"manually, containing the following value: "
|
|
"'%(realm)s'" % dict(domain=bad_domain,
|
|
realm=api.env.realm),
|
|
u'code': 13011,
|
|
u'type': u'warning',
|
|
u'name': u'KerberosTXTRecordCreationFailure'},
|
|
),
|
|
),
|
|
),
|
|
]
|