| # Licensed to the Apache Software Foundation (ASF) under one | |
| # or more contributor license agreements. See the NOTICE file | |
| # distributed with this work for additional information | |
| # regarding copyright ownership. The ASF licenses this file | |
| # to you under the Apache License, Version 2.0 (the | |
| # "License"); you may not use this file except in compliance | |
| # with the License. You may obtain a copy of the License at | |
| # | |
| # http://www.apache.org/licenses/LICENSE-2.0 | |
| # | |
| # Unless required by applicable law or agreed to in writing, | |
| # software distributed under the License is distributed on an | |
| # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY | |
| # KIND, either express or implied. See the License for the | |
| # specific language governing permissions and limitations | |
| # under the License. | |
| """ P1 tests for Account | |
| """ | |
| # Import Local Modules | |
| from marvin.cloudstackTestCase import cloudstackTestCase | |
| from marvin.lib.utils import (random_gen, | |
| cleanup_resources, | |
| validateList) | |
| from marvin.cloudstackAPI import * | |
| from marvin.lib.base import (Domain, | |
| Account, | |
| ServiceOffering, | |
| VirtualMachine, | |
| Network, | |
| User, | |
| Template, | |
| Role) | |
| from marvin.lib.common import (get_domain, | |
| get_zone, | |
| get_test_template, | |
| list_accounts, | |
| list_virtual_machines, | |
| list_service_offering, | |
| list_templates, | |
| list_users, | |
| wait_for_cleanup) | |
| from nose.plugins.attrib import attr | |
| from marvin.cloudstackException import CloudstackAPIException | |
| from marvin.codes import PASS | |
| import time | |
| from pyVmomi.VmomiSupport import GetVersionFromVersionUri | |
| class Services: | |
| """Test Account Services | |
| """ | |
| def __init__(self): | |
| self.services = { | |
| "domain": { | |
| "name": "Domain", | |
| }, | |
| "account": { | |
| "email": "test@test.com", | |
| "firstname": "Test", | |
| "lastname": "User", | |
| "username": "test", | |
| # Random characters are appended for unique | |
| # username | |
| "password": "fr3sca", | |
| }, | |
| "role": { | |
| "name": "User Role", | |
| "type": "User", | |
| "description": "User Role created by Marvin test" | |
| }, | |
| "user": { | |
| "email": "user@test.com", | |
| "firstname": "User", | |
| "lastname": "User", | |
| "username": "User", | |
| # Random characters are appended for unique | |
| # username | |
| "password": "fr3sca", | |
| }, | |
| "service_offering": { | |
| "name": "Tiny Instance", | |
| "displaytext": "Tiny Instance", | |
| "cpunumber": 1, | |
| "cpuspeed": 100, | |
| # in MHz | |
| "memory": 128, | |
| # In MBs | |
| }, | |
| "virtual_machine": { | |
| "displayname": "Test VM", | |
| "username": "root", | |
| "password": "password", | |
| "ssh_port": 22, | |
| "hypervisor": 'XenServer', | |
| # Hypervisor type should be same as | |
| # hypervisor type of cluster | |
| "privateport": 22, | |
| "publicport": 22, | |
| "protocol": 'TCP', | |
| }, | |
| "template": { | |
| "displaytext": "Public Template", | |
| "name": "Public template", | |
| "ostype": 'CentOS 5.6 (64-bit)', | |
| "url": "", | |
| "hypervisor": '', | |
| "format": '', | |
| "isfeatured": True, | |
| "ispublic": True, | |
| "isextractable": True, | |
| "templatefilter": "self" | |
| }, | |
| "ostype": 'CentOS 5.6 (64-bit)', | |
| "sleep": 60, | |
| "timeout": 10, | |
| } | |
| class TestUserLogin(cloudstackTestCase): | |
| @classmethod | |
| def setUpClass(cls): | |
| cls.testClient = super(TestUserLogin, cls).getClsTestClient() | |
| cls.api_client = cls.testClient.getApiClient() | |
| cls.services = Services().services | |
| cls.domain = get_domain(cls.api_client) | |
| cls.zone = get_zone(cls.api_client, cls.testClient.getZoneForTests()) | |
| cls.services['mode'] = cls.zone.networktype | |
| cls._cleanup = [] | |
| return | |
| @classmethod | |
| def tearDownClass(cls): | |
| super(TestUserLogin,cls).tearDownClass() | |
| def setUp(self): | |
| self.apiclient = self.testClient.getApiClient() | |
| self.dbclient = self.testClient.getDbConnection() | |
| self.debug("Enabling 2FA in global setting") | |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() | |
| updateConfigurationCmd.name = "enable.user.2fa" | |
| updateConfigurationCmd.value = "true" | |
| updateConfigurationResponse = self.apiclient.updateConfiguration( | |
| updateConfigurationCmd) | |
| self.cleanup = [] | |
| return | |
| def tearDown(self): | |
| self.debug("Disable 2FA in global setting") | |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() | |
| updateConfigurationCmd.name = "enable.user.2fa" | |
| updateConfigurationCmd.value = "false" | |
| updateConfigurationResponse = self.apiclient.updateConfiguration( | |
| updateConfigurationCmd) | |
| super(TestUserLogin,self).tearDown() | |
| @attr(tags=["login", "accounts", "simulator", "advanced", | |
| "advancedns", "basic", "eip", "sg"]) | |
| def test_2FA_enabled(self): | |
| """Test if Login API does not return UUID's | |
| """ | |
| # Steps for test scenario | |
| # 1. create a user account | |
| # 2. login to the user account with given credentials (loginCmd) | |
| # 3. verify login response | |
| # Setup Global settings | |
| self.debug("Mandate 2FA in global setting") | |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() | |
| updateConfigurationCmd.name = "mandate.user.2fa" | |
| updateConfigurationCmd.value = "true" | |
| updateConfigurationResponse = self.apiclient.updateConfiguration( | |
| updateConfigurationCmd) | |
| self.debug("Creating an user account..") | |
| self.account = Account.create( | |
| self.apiclient, | |
| self.services["account"], | |
| domainid=self.domain.id | |
| ) | |
| self.cleanup.append(self.account) | |
| self.debug("Logging into the cloudstack with login API") | |
| response = User.login( | |
| self.apiclient, | |
| username=self.account.name, | |
| password=self.services["account"]["password"] | |
| ) | |
| self.debug("Login API response: %s" % response) | |
| self.assertEqual( | |
| response.is2faenabled, | |
| "true", | |
| "2FA enabled for user" | |
| ) | |
| self.debug("Remove mandating 2FA in global setting") | |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() | |
| updateConfigurationCmd.name = "mandate.user.2fa" | |
| updateConfigurationCmd.value = "false" | |
| updateConfigurationResponse = self.apiclient.updateConfiguration( | |
| updateConfigurationCmd) | |
| return | |
| @attr(tags=["login", "accounts", "simulator", "advanced", | |
| "advancedns", "basic", "eip", "sg"]) | |
| def test_2FA_setup(self): | |
| """Test if Login API does not return UUID's | |
| """ | |
| # Steps for test scenario | |
| # 1. create a user account | |
| # 2. login to the user account with given credentials (loginCmd) | |
| # 3. verify login response for 2fa | |
| # 4. setup 2fa for the user | |
| # 5. verify the code in the setup 2fa response | |
| # 6. test disable 2FA | |
| # Setup Global settings | |
| self.debug("Mandate 2FA in global setting") | |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() | |
| updateConfigurationCmd.name = "mandate.user.2fa" | |
| updateConfigurationCmd.value = "true" | |
| updateConfigurationResponse = self.apiclient.updateConfiguration( | |
| updateConfigurationCmd) | |
| self.debug("Creating an user account..") | |
| self.account = Account.create( | |
| self.apiclient, | |
| self.services["account"], | |
| domainid=self.domain.id | |
| ) | |
| self.cleanup.append(self.account) | |
| self.debug("Logging into the cloudstack with login API") | |
| response = User.login( | |
| self.apiclient, | |
| username=self.account.name, | |
| password=self.services["account"]["password"] | |
| ) | |
| self.debug("Login API response: %s" % response) | |
| self.assertEqual( | |
| response.is2faenabled, | |
| "true", | |
| "2FA enabled for user" | |
| ) | |
| self.user = self.account.user[0] | |
| self.user_apiclient = self.testClient.getUserApiClient( | |
| self.user.username, self.domain.id | |
| ) | |
| setup2faCmd = setupUserTwoFactorAuthentication.setupUserTwoFactorAuthenticationCmd() | |
| setup2faCmd.provider = "staticpin" | |
| setup2faResponse = self.user_apiclient.setupUserTwoFactorAuthentication( | |
| setup2faCmd) | |
| self.assertNotEqual( | |
| setup2faResponse.secretcode, | |
| None, | |
| "2FA enabled for user" | |
| ) | |
| disable2faCmd = setupUserTwoFactorAuthentication.setupUserTwoFactorAuthenticationCmd() | |
| disable2faCmd.enable = "false" | |
| disable2faResponse = self.user_apiclient.setupUserTwoFactorAuthentication( | |
| disable2faCmd) | |
| self.assertEqual( | |
| disable2faResponse.secretcode, | |
| None, | |
| "2FA disabled for user" | |
| ) | |
| self.debug("Remove mandating 2FA in global setting") | |
| updateConfigurationCmd = updateConfiguration.updateConfigurationCmd() | |
| updateConfigurationCmd.name = "mandate.user.2fa" | |
| updateConfigurationCmd.value = "false" | |
| updateConfigurationResponse = self.apiclient.updateConfiguration( | |
| updateConfigurationCmd) | |
| return |