forked from Github-Mirrors/canaille
128 lines
4.6 KiB
Python
128 lines
4.6 KiB
Python
import ldap
|
|
import pytest
|
|
from canaille import create_app
|
|
from canaille.app.installation import InstallationException
|
|
from canaille.backends.ldap.backend import LDAPBackend
|
|
from canaille.backends.ldap.ldapobject import LDAPObject
|
|
from canaille.commands import cli
|
|
from flask_webtest import TestApp
|
|
from tests.conftest import CustomSlapdObject
|
|
|
|
|
|
@pytest.fixture
|
|
def slapd_server():
|
|
slapd = CustomSlapdObject()
|
|
try:
|
|
slapd.start()
|
|
slapd.init_tree()
|
|
for ldif in (
|
|
"demo/ldif/memberof-config.ldif",
|
|
"demo/ldif/bootstrap-users-tree.ldif",
|
|
"demo/ldif/bootstrap-users.ldif",
|
|
):
|
|
with open(ldif) as fd:
|
|
slapd.ldapadd(fd.read())
|
|
|
|
yield slapd
|
|
finally:
|
|
slapd.stop()
|
|
|
|
|
|
def test_setup_ldap_tree(slapd_server, configuration):
|
|
output = slapd_server.slapcat().stdout.decode("utf-8")
|
|
assert "dn: ou=tokens,ou=oauth,dc=mydomain,dc=tld" not in output
|
|
testclient = TestApp(create_app(configuration, validate=False))
|
|
runner = testclient.app.test_cli_runner()
|
|
res = runner.invoke(cli, ["install"])
|
|
assert res.exit_code == 0, res.stdout
|
|
|
|
output = slapd_server.slapcat().stdout.decode("utf-8")
|
|
assert "dn: ou=tokens,ou=oauth,dc=mydomain,dc=tld" in output
|
|
|
|
|
|
def test_install_schemas(configuration, slapd_server):
|
|
configuration["BACKENDS"]["LDAP"]["ROOT_DN"] = slapd_server.suffix
|
|
configuration["BACKENDS"]["LDAP"]["URI"] = slapd_server.ldap_uri
|
|
configuration["BACKENDS"]["LDAP"]["BIND_DN"] = slapd_server.root_dn
|
|
configuration["BACKENDS"]["LDAP"]["BIND_PW"] = slapd_server.root_pw
|
|
|
|
conn = ldap.ldapobject.SimpleLDAPObject(slapd_server.ldap_uri)
|
|
conn.protocol_version = 3
|
|
conn.simple_bind_s(slapd_server.root_dn, slapd_server.root_pw)
|
|
|
|
assert "oauthClient" not in LDAPObject.ldap_object_classes(conn=conn, force=True)
|
|
|
|
LDAPBackend.setup_schemas(configuration)
|
|
|
|
assert "oauthClient" in LDAPObject.ldap_object_classes(conn=conn, force=True)
|
|
|
|
conn.unbind_s()
|
|
slapd_server.stop()
|
|
|
|
|
|
def test_install_schemas_twice(configuration, slapd_server):
|
|
configuration["BACKENDS"]["LDAP"]["ROOT_DN"] = slapd_server.suffix
|
|
configuration["BACKENDS"]["LDAP"]["URI"] = slapd_server.ldap_uri
|
|
configuration["BACKENDS"]["LDAP"]["BIND_DN"] = slapd_server.root_dn
|
|
configuration["BACKENDS"]["LDAP"]["BIND_PW"] = slapd_server.root_pw
|
|
|
|
conn = ldap.ldapobject.SimpleLDAPObject(slapd_server.ldap_uri)
|
|
conn.protocol_version = 3
|
|
conn.simple_bind_s(slapd_server.root_dn, slapd_server.root_pw)
|
|
|
|
assert "oauthClient" not in LDAPObject.ldap_object_classes(conn=conn, force=True)
|
|
|
|
LDAPBackend.setup_schemas(configuration)
|
|
|
|
assert "oauthClient" in LDAPObject.ldap_object_classes(conn=conn, force=True)
|
|
|
|
LDAPBackend.setup_schemas(configuration)
|
|
|
|
conn.unbind_s()
|
|
slapd_server.stop()
|
|
|
|
|
|
def test_install_no_permissions_to_install_schemas(configuration, slapd_server):
|
|
configuration["BACKENDS"]["LDAP"]["ROOT_DN"] = slapd_server.suffix
|
|
configuration["BACKENDS"]["LDAP"]["URI"] = slapd_server.ldap_uri
|
|
configuration["BACKENDS"]["LDAP"][
|
|
"BIND_DN"
|
|
] = "uid=admin,ou=users,dc=mydomain,dc=tld"
|
|
configuration["BACKENDS"]["LDAP"]["BIND_PW"] = "admin"
|
|
|
|
conn = ldap.ldapobject.SimpleLDAPObject(slapd_server.ldap_uri)
|
|
conn.protocol_version = 3
|
|
conn.simple_bind_s(slapd_server.root_dn, slapd_server.root_pw)
|
|
|
|
assert "oauthClient" not in LDAPObject.ldap_object_classes(conn=conn, force=True)
|
|
|
|
with pytest.raises(InstallationException):
|
|
LDAPBackend.setup_schemas(configuration)
|
|
|
|
assert "oauthClient" not in LDAPObject.ldap_object_classes(conn=conn, force=True)
|
|
|
|
conn.unbind_s()
|
|
slapd_server.stop()
|
|
|
|
|
|
def test_install_schemas_command(configuration, slapd_server):
|
|
configuration["BACKENDS"]["LDAP"]["ROOT_DN"] = slapd_server.suffix
|
|
configuration["BACKENDS"]["LDAP"]["URI"] = slapd_server.ldap_uri
|
|
configuration["BACKENDS"]["LDAP"]["BIND_DN"] = slapd_server.root_dn
|
|
configuration["BACKENDS"]["LDAP"]["BIND_PW"] = slapd_server.root_pw
|
|
|
|
conn = ldap.ldapobject.SimpleLDAPObject(slapd_server.ldap_uri)
|
|
conn.protocol_version = 3
|
|
conn.simple_bind_s(slapd_server.root_dn, slapd_server.root_pw)
|
|
|
|
assert "oauthClient" not in LDAPObject.ldap_object_classes(conn=conn, force=True)
|
|
|
|
testclient = TestApp(create_app(configuration, validate=False))
|
|
runner = testclient.app.test_cli_runner()
|
|
res = runner.invoke(cli, ["install"])
|
|
assert res.exit_code == 0, res.stdout
|
|
|
|
assert "oauthClient" in LDAPObject.ldap_object_classes(conn=conn, force=True)
|
|
|
|
conn.unbind_s()
|
|
slapd_server.stop()
|