| # Licensed to the Apache Software Foundation (ASF) under one |
| # or more contributor license agreements. See the NOTICE file |
| # distributed with this work for additional information |
| # regarding copyright ownership. The ASF licenses this file |
| # to you under the Apache License, Version 2.0 (the |
| # "License"); you may not use this file except in compliance |
| # with the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, |
| # software distributed under the License is distributed on an |
| # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| # KIND, either express or implied. See the License for the |
| # specific language governing permissions and limitations |
| # under the License. |
| """ P1 tests for Account |
| """ |
| # Import Local Modules |
| from marvin.cloudstackTestCase import cloudstackTestCase |
| from marvin.lib.utils import (random_gen, |
| cleanup_resources, |
| validateList) |
| from marvin.cloudstackAPI import * |
| from marvin.lib.base import (Domain, |
| Account, |
| ServiceOffering, |
| VirtualMachine, |
| Network, |
| User, |
| Template, |
| Role) |
| from marvin.lib.common import (get_domain, |
| get_zone, |
| get_test_template, |
| list_accounts, |
| list_virtual_machines, |
| list_service_offering, |
| list_templates, |
| list_users, |
| wait_for_cleanup) |
| from nose.plugins.attrib import attr |
| from marvin.cloudstackException import CloudstackAPIException |
| from marvin.codes import PASS |
| import time |
| |
| from pyVmomi.VmomiSupport import GetVersionFromVersionUri |
| |
| class Services: |
| |
| """Test Account Services |
| """ |
| |
| def __init__(self): |
| self.services = { |
| "domain": { |
| "name": "Domain", |
| }, |
| "account": { |
| "email": "test@test.com", |
| "firstname": "Test", |
| "lastname": "User", |
| "username": "test", |
| # Random characters are appended for unique |
| # username |
| "password": "fr3sca", |
| }, |
| "role": { |
| "name": "User Role", |
| "type": "User", |
| "description": "User Role created by Marvin test" |
| }, |
| "user": { |
| "email": "user@test.com", |
| "firstname": "User", |
| "lastname": "User", |
| "username": "User", |
| # Random characters are appended for unique |
| # username |
| "password": "fr3sca", |
| }, |
| "service_offering": { |
| "name": "Tiny Instance", |
| "displaytext": "Tiny Instance", |
| "cpunumber": 1, |
| "cpuspeed": 100, |
| # in MHz |
| "memory": 128, |
| # In MBs |
| }, |
| "virtual_machine": { |
| "displayname": "Test VM", |
| "username": "root", |
| "password": "password", |
| "ssh_port": 22, |
| "hypervisor": 'XenServer', |
| # Hypervisor type should be same as |
| # hypervisor type of cluster |
| "privateport": 22, |
| "publicport": 22, |
| "protocol": 'TCP', |
| }, |
| "template": { |
| "displaytext": "Public Template", |
| "name": "Public template", |
| "ostype": 'CentOS 5.6 (64-bit)', |
| "url": "", |
| "hypervisor": '', |
| "format": '', |
| "isfeatured": True, |
| "ispublic": True, |
| "isextractable": True, |
| "templatefilter": "self" |
| }, |
| "ostype": 'CentOS 5.6 (64-bit)', |
| "sleep": 60, |
| "timeout": 10, |
| } |
| |
| class TestUserLogin(cloudstackTestCase): |
| |
| @classmethod |
| def setUpClass(cls): |
| cls.testClient = super(TestUserLogin, cls).getClsTestClient() |
| cls.api_client = cls.testClient.getApiClient() |
| |
| cls.services = Services().services |
| cls.domain = get_domain(cls.api_client) |
| cls.zone = get_zone(cls.api_client, cls.testClient.getZoneForTests()) |
| cls.services['mode'] = cls.zone.networktype |
| cls._cleanup = [] |
| return |
| |
| @classmethod |
| def tearDownClass(cls): |
| super(TestUserLogin,cls).tearDownClass() |
| |
| def setUp(self): |
| self.apiclient = self.testClient.getApiClient() |
| self.dbclient = self.testClient.getDbConnection() |
| |
| self.debug("Enabling 2FA in global setting") |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() |
| updateConfigurationCmd.name = "enable.user.2fa" |
| updateConfigurationCmd.value = "true" |
| updateConfigurationResponse = self.apiclient.updateConfiguration( |
| updateConfigurationCmd) |
| |
| self.cleanup = [] |
| return |
| |
| def tearDown(self): |
| self.debug("Disable 2FA in global setting") |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() |
| updateConfigurationCmd.name = "enable.user.2fa" |
| updateConfigurationCmd.value = "false" |
| updateConfigurationResponse = self.apiclient.updateConfiguration( |
| updateConfigurationCmd) |
| |
| super(TestUserLogin,self).tearDown() |
| |
| @attr(tags=["login", "accounts", "simulator", "advanced", |
| "advancedns", "basic", "eip", "sg"]) |
| def test_2FA_enabled(self): |
| """Test if Login API does not return UUID's |
| """ |
| |
| # Steps for test scenario |
| # 1. create a user account |
| # 2. login to the user account with given credentials (loginCmd) |
| # 3. verify login response |
| |
| # Setup Global settings |
| |
| self.debug("Mandate 2FA in global setting") |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() |
| updateConfigurationCmd.name = "mandate.user.2fa" |
| updateConfigurationCmd.value = "true" |
| updateConfigurationResponse = self.apiclient.updateConfiguration( |
| updateConfigurationCmd) |
| |
| self.debug("Creating an user account..") |
| self.account = Account.create( |
| self.apiclient, |
| self.services["account"], |
| domainid=self.domain.id |
| ) |
| self.cleanup.append(self.account) |
| |
| self.debug("Logging into the cloudstack with login API") |
| response = User.login( |
| self.apiclient, |
| username=self.account.name, |
| password=self.services["account"]["password"] |
| ) |
| |
| self.debug("Login API response: %s" % response) |
| |
| self.assertEqual( |
| response.is2faenabled, |
| "true", |
| "2FA enabled for user" |
| ) |
| |
| self.debug("Remove mandating 2FA in global setting") |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() |
| updateConfigurationCmd.name = "mandate.user.2fa" |
| updateConfigurationCmd.value = "false" |
| updateConfigurationResponse = self.apiclient.updateConfiguration( |
| updateConfigurationCmd) |
| |
| return |
| |
| @attr(tags=["login", "accounts", "simulator", "advanced", |
| "advancedns", "basic", "eip", "sg"]) |
| def test_2FA_setup(self): |
| """Test if Login API does not return UUID's |
| """ |
| |
| # Steps for test scenario |
| # 1. create a user account |
| # 2. login to the user account with given credentials (loginCmd) |
| # 3. verify login response for 2fa |
| # 4. setup 2fa for the user |
| # 5. verify the code in the setup 2fa response |
| # 6. test disable 2FA |
| |
| # Setup Global settings |
| |
| self.debug("Mandate 2FA in global setting") |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() |
| updateConfigurationCmd.name = "mandate.user.2fa" |
| updateConfigurationCmd.value = "true" |
| updateConfigurationResponse = self.apiclient.updateConfiguration( |
| updateConfigurationCmd) |
| |
| self.debug("Creating an user account..") |
| self.account = Account.create( |
| self.apiclient, |
| self.services["account"], |
| domainid=self.domain.id |
| ) |
| self.cleanup.append(self.account) |
| |
| self.debug("Logging into the cloudstack with login API") |
| response = User.login( |
| self.apiclient, |
| username=self.account.name, |
| password=self.services["account"]["password"] |
| ) |
| |
| self.debug("Login API response: %s" % response) |
| |
| self.assertEqual( |
| response.is2faenabled, |
| "true", |
| "2FA enabled for user" |
| ) |
| |
| self.user = self.account.user[0] |
| self.user_apiclient = self.testClient.getUserApiClient( |
| self.user.username, self.domain.id |
| ) |
| |
| setup2faCmd = setupUserTwoFactorAuthentication.setupUserTwoFactorAuthenticationCmd() |
| setup2faCmd.provider = "staticpin" |
| setup2faResponse = self.user_apiclient.setupUserTwoFactorAuthentication( |
| setup2faCmd) |
| |
| self.assertNotEqual( |
| setup2faResponse.secretcode, |
| None, |
| "2FA enabled for user" |
| ) |
| |
| disable2faCmd = setupUserTwoFactorAuthentication.setupUserTwoFactorAuthenticationCmd() |
| disable2faCmd.enable = "false" |
| disable2faResponse = self.user_apiclient.setupUserTwoFactorAuthentication( |
| disable2faCmd) |
| |
| self.assertEqual( |
| disable2faResponse.secretcode, |
| None, |
| "2FA disabled for user" |
| ) |
| |
| self.debug("Remove mandating 2FA in global setting") |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() |
| updateConfigurationCmd.name = "mandate.user.2fa" |
| updateConfigurationCmd.value = "false" |
| updateConfigurationResponse = self.apiclient.updateConfiguration( |
| updateConfigurationCmd) |
| |
| return |
