| // Licensed to the Apache Software Foundation (ASF) under one |
| // or more contributor license agreements. See the NOTICE file |
| // distributed with this work for additional information |
| // regarding copyright ownership. The ASF licenses this file |
| // to you under the Apache License, Version 2.0 (the |
| // "License"); you may not use this file except in compliance |
| // with the License. You may obtain a copy of the License at |
| // |
| // http://www.apache.org/licenses/LICENSE-2.0 |
| // |
| // Unless required by applicable law or agreed to in writing, |
| // software distributed under the License is distributed on an |
| // "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| // KIND, either express or implied. See the License for the |
| // specific language governing permissions and limitations |
| // under the License. |
| package groovy.org.apache.cloudstack.ldap |
| |
| import org.apache.cloudstack.api.command.LDAPConfigCmd |
| import org.apache.cloudstack.api.command.LDAPRemoveCmd |
| import org.apache.cloudstack.api.command.LdapAddConfigurationCmd |
| import org.apache.cloudstack.api.command.LdapCreateAccountCmd |
| import org.apache.cloudstack.api.command.LdapDeleteConfigurationCmd |
| import org.apache.cloudstack.api.command.LdapImportUsersCmd |
| import org.apache.cloudstack.api.command.LdapListUsersCmd |
| import org.apache.cloudstack.api.command.LdapUserSearchCmd |
| import org.apache.cloudstack.api.command.LinkDomainToLdapCmd |
| import org.apache.cloudstack.api.response.LinkDomainToLdapResponse |
| import org.apache.cloudstack.ldap.dao.LdapTrustMapDao |
| |
| import javax.naming.NamingException |
| import javax.naming.ldap.InitialLdapContext |
| |
| import org.apache.cloudstack.api.command.LdapListConfigurationCmd |
| import org.apache.cloudstack.ldap.* |
| import org.apache.cloudstack.ldap.dao.LdapConfigurationDaoImpl |
| |
| import com.cloud.exception.InvalidParameterValueException |
| import com.cloud.utils.Pair |
| |
| import javax.naming.ldap.LdapContext |
| |
| class LdapManagerImplSpec extends spock.lang.Specification { |
| def "Test failing of getUser due to bind issue"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapContextFactory.createBindContext() >> { throw new NoLdapUserMatchingQueryException() } |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "We search for a user but there is a bind issue" |
| ldapManager.getUser("rmurphy", null) |
| then: "an exception is thrown" |
| thrown NoLdapUserMatchingQueryException |
| } |
| |
| def "Test failing of getUsers due to bind issue"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapContextFactory.createBindContext() >> { throw new NamingException() } |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "We search for a group of users but there is a bind issue" |
| ldapManager.getUsers(null) |
| then: "An exception is thrown" |
| thrown NoLdapUserMatchingQueryException |
| } |
| |
| def "Test failing of searchUsers due to a failure to bind"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapContextFactory.createBindContext() >> { throw new NamingException() } |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "We search for users" |
| ldapManager.searchUsers("rmurphy") |
| then: "An exception is thrown" |
| thrown NoLdapUserMatchingQueryException |
| } |
| |
| def "Test LdapConfigurationResponse generation"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "A ldap configuration response is generated" |
| def result = ldapManager.createLdapConfigurationResponse(new LdapConfigurationVO("localhost", 389)) |
| then: "the result of the response should match the given LdapConfigurationVO" |
| result.hostname == "localhost" |
| result.port == 389 |
| } |
| |
| def "Test LdapUserResponse generation"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "A ldap user response is generated" |
| def result = ldapManager.createLdapUserResponse(new LdapUser("rmurphy", "rmurphy@test.com", "Ryan", "Murphy", "cn=rmurphy,ou=engineering,dc=cloudstack,dc=org", |
| "engineering", false, null)) |
| then: "The result of the response should match the given ldap user" |
| result.username == "rmurphy" |
| result.email == "rmurphy@test.com" |
| result.firstname == "Ryan" |
| result.lastname == "Murphy" |
| result.principal == "cn=rmurphy,ou=engineering,dc=cloudstack,dc=org" |
| result.domain == "engineering" |
| } |
| |
| def "Test success getUsers"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapContextFactory.createBindContext() >> null |
| List<LdapUser> users = new ArrayList<>(); |
| users.add(new LdapUser("rmurphy", "rmurphy@test.com", "Ryan", "Murphy", "cn=rmurphy,dc=cloudstack,dc=org", null, false, null)) |
| ldapUserManager.getUsers(_) >> users; |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "We search for a group of users" |
| def result = ldapManager.getUsers(null) |
| then: "A list greater than 0 is returned" |
| result.size() > 0; |
| } |
| |
| def "Test success of getUser"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapContextFactory.createBindContext() >> null |
| ldapUserManager.getUser(_, _, _) >> new LdapUser("rmurphy", "rmurphy@test.com", "Ryan", "Murphy", "cn=rmurphy,dc=cloudstack,dc=org", null, false, null) |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "We search for a user" |
| def result = ldapManager.getUser("rmurphy", null) |
| then: "The user is returned" |
| result.username == "rmurphy" |
| result.email == "rmurphy@test.com" |
| result.firstname == "Ryan" |
| result.lastname == "Murphy" |
| result.principal == "cn=rmurphy,dc=cloudstack,dc=org" |
| } |
| |
| def "Test successful closing of context"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "The context is closed" |
| def context = Mock(InitialLdapContext) |
| ldapManager.closeContext(context) |
| then: "The context is null" |
| context.defaultInitCtx == null |
| } |
| |
| def "Test successful failed result from canAuthenticate due to bad password"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| ldapContextFactory.createUserContext(_, _) >> { throw new NamingException() } |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapConfiguration = Mock(LdapConfiguration) |
| def ldapManager = Spy(LdapManagerImpl, constructorArgs: [ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration]) |
| ldapManager.getUser(_, null) >> { new LdapUser("rmurphy", "rmurphy@test.com", "Ryan", "Murphy", "cn=rmurphy,dc=cloudstack,dc=org", null) } |
| when: "The user attempts to authenticate with a bad password" |
| def result = ldapManager.canAuthenticate("rmurphy", "password", null) |
| then: "The authentication fails" |
| result == false |
| } |
| |
| def "Test successful failed result from deleteConfiguration due to configuration not existing"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapConfigurationDao.findByHostname(_) >> null |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "A ldap configuration that doesn't exist is deleted" |
| ldapManager.deleteConfiguration("localhost", 0, null) |
| then: "A exception is thrown" |
| thrown InvalidParameterValueException |
| } |
| |
| def "Test successful failing to close of context"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "The context is closed" |
| def context = Mock(InitialLdapContext) |
| context.close() >> { throw new NamingException() } |
| ldapManager.closeContext(context) |
| then: "An exception is thrown" |
| context.defaultInitCtx == null |
| } |
| |
| def "Test successful result from canAuthenticate"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| ldapContextFactory.createUserContext(_, _) >> null |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapManager = Spy(LdapManagerImpl, constructorArgs: [ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration]) |
| ldapManager.getUser(_, null) >> { new LdapUser("rmurphy", "rmurphy@test.com", "Ryan", "Murphy", "cn=rmurphy,dc=cloudstack,dc=org", null) } |
| when: "A user authenticates" |
| def result = ldapManager.canAuthenticate("rmurphy", "password", null) |
| then: "The result is true" |
| result == true |
| } |
| |
| def "Test successful result from deleteConfiguration"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapConfigurationDao.findByHostname(_) >> { |
| def configuration = new LdapConfigurationVO("localhost", 389) |
| configuration.setId(0); |
| return configuration; |
| } |
| ldapConfigurationDao.remove(_) >> null |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "A ldap configuration is deleted" |
| def result = ldapManager.deleteConfiguration("localhost", 0, null) |
| then: "The deleted configuration is returned" |
| result.hostname == "localhost" |
| result.port == 389 |
| } |
| |
| def "Test successful result from searchUsers"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapContextFactory.createBindContext() >> null; |
| |
| List<LdapUser> users = new ArrayList<LdapUser>(); |
| users.add(new LdapUser("rmurphy", "rmurphy@test.com", "Ryan", "Murphy", "cn=rmurphy,ou=engineering,dc=cloudstack,dc=org", "engineering", false, null)) |
| ldapUserManager.getUsers(_, _) >> users; |
| |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "We search for users" |
| def result = ldapManager.searchUsers("rmurphy"); |
| then: "A list of atleast 1 is returned" |
| result.size() > 0; |
| } |
| |
| def "Test successfully addConfiguration"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapContextFactory.createBindContext(_) >> null |
| ldapConfigurationDao.persist(_) >> null |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "A ldap configuration is added" |
| def result = ldapManager.addConfiguration("localhost", 389) |
| then: "the resulting object contain the given hostname and port" |
| result.hostname == "localhost" |
| result.port == 389 |
| } |
| |
| def "Test that addConfiguration fails when a binding fails"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapContextFactory.createBindContext(_) >> { throw new NamingException() } |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "A configuration is added that can not be binded" |
| ldapManager.addConfiguration("localhost", 389) |
| then: "An exception is thrown" |
| thrown InvalidParameterValueException |
| } |
| |
| def "Test that addConfiguration fails when a duplicate configuration exists"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapConfigurationDao.findByHostname(_) >> new LdapConfigurationVO("localhost", 389) |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "a configuration that already exists is added" |
| ldapManager.addConfiguration("localhost", 389) |
| then: "An exception is thrown" |
| thrown InvalidParameterValueException |
| } |
| |
| def supportedLdapCommands() { |
| List<Class<?>> cmdList = new ArrayList<Class<?>>(); |
| cmdList.add(LdapUserSearchCmd.class); |
| cmdList.add(LdapListUsersCmd.class); |
| cmdList.add(LdapAddConfigurationCmd.class); |
| cmdList.add(LdapDeleteConfigurationCmd.class); |
| cmdList.add(LdapListConfigurationCmd.class); |
| cmdList.add(LdapCreateAccountCmd.class); |
| cmdList.add(LdapImportUsersCmd.class); |
| cmdList.add(LDAPConfigCmd.class); |
| cmdList.add(LDAPRemoveCmd.class); |
| cmdList.add(LinkDomainToLdapCmd.class) |
| return cmdList |
| } |
| |
| def "Test that getCommands isn't empty"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapConfiguration = Mock(LdapConfiguration) |
| final List<Class<?>> cmdList = supportedLdapCommands() |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "Get commands is called" |
| def result = ldapManager.getCommands() |
| then: "it must return all the commands" |
| result.size() > 0 |
| result == cmdList |
| } |
| |
| def "Testing of listConfigurations"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| List<LdapConfigurationVO> ldapConfigurationList = new ArrayList() |
| ldapConfigurationList.add(new LdapConfigurationVO("localhost", 389)) |
| Pair<List<LdapConfigurationVO>, Integer> configurations = new Pair<List<LdapConfigurationVO>, Integer>(); |
| configurations.set(ldapConfigurationList, ldapConfigurationList.size()) |
| ldapConfigurationDao.searchConfigurations(_, _) >> configurations |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "A request for configurations is made" |
| def result = ldapManager.listConfigurations(new LdapListConfigurationCmd()) |
| then: "Then atleast 1 ldap configuration is returned" |
| result.second() > 0 |
| } |
| |
| def "Testing of isLdapEnabled"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| List<LdapConfigurationVO> ldapConfigurationList = new ArrayList() |
| ldapConfigurationList.add(new LdapConfigurationVO("localhost", 389)) |
| Pair<List<LdapConfigurationVO>, Integer> configurations = new Pair<List<LdapConfigurationVO>, Integer>(); |
| configurations.set(ldapConfigurationList, ldapConfigurationList.size()) |
| ldapConfigurationDao.searchConfigurations(_, _) >> configurations |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "A request to find out is ldap enabled" |
| def result = ldapManager.isLdapEnabled(); |
| then: "true is returned because a configuration was found" |
| result == true; |
| } |
| |
| def "Test success getUsersInGroup"() { |
| given: "We have an LdapConfigurationDao, LdapContextFactory, LdapUserManager and LdapManager" |
| def ldapConfigurationDao = Mock(LdapConfigurationDaoImpl) |
| def ldapContextFactory = Mock(LdapContextFactory) |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| ldapContextFactory.createBindContext() >> null |
| List<LdapUser> users = new ArrayList<>(); |
| users.add(new LdapUser("rmurphy", "rmurphy@test.com", "Ryan", "Murphy", "cn=rmurphy,dc=cloudstack,dc=org", "engineering", false, null)) |
| ldapUserManager.getUsersInGroup("engineering", _) >> users; |
| def ldapManager = new LdapManagerImpl(ldapConfigurationDao, ldapContextFactory, ldapUserManagerFactory, ldapConfiguration) |
| when: "We search for a group of users" |
| def result = ldapManager.getUsersInGroup("engineering", null) |
| then: "A list greater of size one is returned" |
| result.size() == 1; |
| } |
| |
| def "test linkDomainToLdap invalid ldap group type"() { |
| def ldapManager = new LdapManagerImpl() |
| LdapTrustMapDao ldapTrustMapDao = Mock(LdapTrustMapDao) |
| ldapManager._ldapTrustMapDao = ldapTrustMapDao |
| |
| def domainId = 1 |
| when: |
| println("using type: " + type) |
| LinkDomainToLdapResponse response = ldapManager.linkDomainToLdap(domainId, type, "CN=test,DC=CCP,DC=Citrix,DC=Com", (short)2) |
| then: |
| thrown(IllegalArgumentException) |
| where: |
| type << ["", null, "TEST", "TEST TEST"] |
| } |
| def "test linkDomainToLdap invalid domain"() { |
| def ldapManager = new LdapManagerImpl() |
| LdapTrustMapDao ldapTrustMapDao = Mock(LdapTrustMapDao) |
| ldapManager._ldapTrustMapDao = ldapTrustMapDao |
| |
| when: |
| LinkDomainToLdapResponse response = ldapManager.linkDomainToLdap(null, "GROUP", "CN=test,DC=CCP,DC=Citrix,DC=Com", (short)2) |
| then: |
| thrown(IllegalArgumentException) |
| } |
| def "test linkDomainToLdap invalid ldap name"() { |
| def ldapManager = new LdapManagerImpl() |
| LdapTrustMapDao ldapTrustMapDao = Mock(LdapTrustMapDao) |
| ldapManager._ldapTrustMapDao = ldapTrustMapDao |
| |
| def domainId = 1 |
| when: |
| println("using name: " + name) |
| LinkDomainToLdapResponse response = ldapManager.linkDomainToLdap(domainId, "GROUP", name, (short)2) |
| then: |
| thrown(IllegalArgumentException) |
| where: |
| name << ["", null] |
| } |
| def "test linkDomainToLdap invalid accountType"(){ |
| |
| def ldapManager = new LdapManagerImpl() |
| LdapTrustMapDao ldapTrustMapDao = Mock(LdapTrustMapDao) |
| ldapManager._ldapTrustMapDao = ldapTrustMapDao |
| |
| def domainId = 1 |
| when: |
| println("using accountType: " + accountType) |
| LinkDomainToLdapResponse response = ldapManager.linkDomainToLdap(domainId, "GROUP", "TEST", (short)accountType) |
| then: |
| thrown(IllegalArgumentException) |
| where: |
| accountType << [-1, 1, 3, 4, 5, 6, 20000, -500000] |
| } |
| def "test linkDomainToLdap when all is well"(){ |
| def ldapManager = new LdapManagerImpl() |
| LdapTrustMapDao ldapTrustMapDao = Mock(LdapTrustMapDao) |
| ldapManager._ldapTrustMapDao = ldapTrustMapDao |
| |
| def domainId=1 |
| def type=LdapManager.LinkType.GROUP |
| def name="CN=test,DC=CCP, DC=citrix,DC=com" |
| short accountType=2 |
| |
| 1 * ldapTrustMapDao.persist(new LdapTrustMapVO(domainId, type, name, accountType)) >> new LdapTrustMapVO(domainId, type, name, accountType) |
| |
| when: |
| LinkDomainToLdapResponse response = ldapManager.linkDomainToLdap(domainId, type.toString(), name, accountType) |
| then: |
| response.getDomainId() == domainId |
| response.getType() == type.toString() |
| response.getName() == name |
| response.getAccountType() == accountType |
| } |
| |
| def "test getUser(username,type,group) when username disabled in ldap"(){ |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapContextFactory = Mock(LdapContextFactory) |
| ldapContextFactory.createBindContext() >> Mock(LdapContext) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| |
| def ldapManager = new LdapManagerImpl() |
| ldapManager._ldapUserManagerFactory = ldapUserManagerFactory |
| ldapManager._ldapContextFactory = ldapContextFactory |
| ldapManager._ldapConfiguration = ldapConfiguration |
| |
| def username = "admin" |
| def type = "GROUP" |
| def name = "CN=test,DC=citrix,DC=com" |
| |
| ldapUserManager.getUser(username, type, name, _) >> new LdapUser(username, "email", "firstname", "lastname", "principal", "domain", true, null) |
| |
| when: |
| LdapUser user = ldapManager.getUser(username, type, name) |
| then: |
| user.getUsername() == username |
| user.isDisabled() == true |
| } |
| |
| def "test getUser(username,type,group) when username doesnt exist in ldap"(){ |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapContextFactory = Mock(LdapContextFactory) |
| ldapContextFactory.createBindContext() >> Mock(LdapContext) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| |
| def ldapManager = new LdapManagerImpl() |
| ldapManager._ldapUserManagerFactory = ldapUserManagerFactory |
| ldapManager._ldapContextFactory = ldapContextFactory |
| ldapManager._ldapConfiguration = ldapConfiguration |
| |
| def username = "admin" |
| def type = "GROUP" |
| def name = "CN=test,DC=citrix,DC=com" |
| |
| ldapUserManager.getUser(username, type, name, _) >> { throw new NamingException("Test naming exception") } |
| |
| when: |
| LdapUser user = ldapManager.getUser(username, type, name) |
| then: |
| thrown(NoLdapUserMatchingQueryException) |
| } |
| def "test getUser(username,type,group) when username is an active member of the group in ldap"(){ |
| def ldapUserManager = Mock(LdapUserManager) |
| def ldapUserManagerFactory = Mock(LdapUserManagerFactory) |
| ldapUserManagerFactory.getInstance(_) >> ldapUserManager |
| def ldapContextFactory = Mock(LdapContextFactory) |
| ldapContextFactory.createBindContext() >> Mock(LdapContext) |
| def ldapConfiguration = Mock(LdapConfiguration) |
| |
| def ldapManager = new LdapManagerImpl() |
| ldapManager._ldapUserManagerFactory = ldapUserManagerFactory |
| ldapManager._ldapContextFactory = ldapContextFactory |
| ldapManager._ldapConfiguration = ldapConfiguration |
| |
| def username = "admin" |
| def type = "GROUP" |
| def name = "CN=test,DC=citrix,DC=com" |
| |
| ldapUserManager.getUser(username, type, name, _) >> new LdapUser(username, "email", "firstname", "lastname", "principal", "domain", false, null) |
| |
| when: |
| LdapUser user = ldapManager.getUser(username, type, name) |
| then: |
| user.getUsername() == username |
| user.isDisabled() == false |
| } |
| } |
