|
# encoding: utf-8
|
|
#
|
|
# Copyright 2014 Red Hat, Inc.
|
|
#
|
|
# This software is licensed to you under the GNU General Public
|
|
# License as published by the Free Software Foundation; either version
|
|
# 2 of the License (GPLv2) or (at your option) any later version.
|
|
# There is NO WARRANTY for this software, express or implied,
|
|
# including the implied warranties of MERCHANTABILITY,
|
|
# NON-INFRINGEMENT, or FITNESS FOR A PARTICULAR PURPOSE. You should
|
|
# have received a copy of GPLv2 along with this software; if not, see
|
|
# http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
|
|
|
|
require 'minitest_helper'
|
|
|
|
class LdapValidatorTest < MiniTest::Rails::ActiveSupport::TestCase
|
|
extend ActiveRecord::TestFixtures
|
|
|
|
fixtures :all
|
|
|
|
def self.before_suite
|
|
@loaded_fixtures = load_fixtures
|
|
configure_runcible
|
|
|
|
services = ['Candlepin', 'Pulp', 'ElasticSearch', 'Foreman']
|
|
models = ['User', 'Organization', 'LdapGroupRole']
|
|
disable_glue_layers(services, models)
|
|
end
|
|
|
|
def setup
|
|
options = { :warden => "ldap", :validate_ldap => true, :katello? => false }
|
|
override_config(options)
|
|
@acme_corporation = get_organization
|
|
|
|
@dev = KTEnvironment.find(environments(:dev).id)
|
|
@user = build(:user, :batman)
|
|
end
|
|
|
|
def test_valid_login
|
|
LdapFluff.any_instance.stubs(:valid_user?).returns(true)
|
|
assert @user.save
|
|
end
|
|
|
|
def test_invalid_login
|
|
LdapFluff.any_instance.stubs(:valid_user?).returns(false)
|
|
assert !@user.save
|
|
assert_includes @user.errors, :username
|
|
end
|
|
|
|
def test_hidden_batman
|
|
LdapFluff.any_instance.stubs(:valid_user?).returns(false)
|
|
@user.username = "hidden-batman"
|
|
assert @user.save
|
|
end
|
|
|
|
def test_ldap_validation_disabled
|
|
options = {:warden => "ldap", :validate_ldap => false, :katello? => false }
|
|
override_config(options)
|
|
LdapFluff.any_instance.stubs(:valid_user?).returns(false)
|
|
assert @user.save
|
|
end
|
|
|
|
def test_ldap_disabled
|
|
options = {:warden => "database", :validate_ldap => false, :katello? => false }
|
|
override_config(options)
|
|
LdapFluff.any_instance.stubs(:valid_user?).returns(false)
|
|
assert @user.save
|
|
end
|
|
|
|
def test_ldap_group
|
|
role = Role.find(roles(:basic_role).id)
|
|
LdapFluff.any_instance.stubs(:valid_group?).returns(true)
|
|
lgr = LdapGroupRole.new
|
|
lgr.role = role
|
|
lgr.ldap_group = "superheros"
|
|
assert lgr.save
|
|
end
|
|
|
|
def test_ldap_group_invalid
|
|
role = Role.find(roles(:basic_role).id)
|
|
LdapFluff.any_instance.stubs(:valid_group?).returns(false)
|
|
lgr = LdapGroupRole.new
|
|
lgr.role = role
|
|
lgr.ldap_group = "superheros"
|
|
assert !lgr.save
|
|
assert_includes lgr.errors, :ldap_group
|
|
end
|
|
end
|
|
|
