osbzr
/
com
项目红包剩余8542，下一贡献奖励5%，即 427个红包
Watch 13
Star 6
Wiki 捐赠
本站源代码
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Branch: gamification
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'gamification'
${ noResults }
com/cmd/admin_auth_ldap_test.go

1351 lines
34KB
Raw Permalink Blame History 

  1. // Copyright 2019 The Gitea Authors. All rights reserved.

  2. // Use of this source code is governed by a MIT-style

  3. // license that can be found in the LICENSE file.

  4. 

  5. package cmd

  6. 

  7. import (

  8. 	"testing"

  9. 

  10. 	"code.gitea.io/gitea/models"

  11. 	"code.gitea.io/gitea/modules/auth/ldap"

  12. 

  13. 	"github.com/stretchr/testify/assert"

  14. 	"github.com/urfave/cli"

  15. )

  16. 

  17. func TestAddLdapBindDn(t *testing.T) {

  18. 	// Mock cli functions to do not exit on error

  19. 	var osExiter = cli.OsExiter

  20. 	defer func() { cli.OsExiter = osExiter }()

  21. 	cli.OsExiter = func(code int) {}

  22. 

  23. 	// Test cases

  24. 	var cases = []struct {

  25. 		args        []string

  26. 		loginSource *models.LoginSource

  27. 		errMsg      string

  28. 	}{

  29. 		// case 0

  30. 		{

  31. 			args: []string{

  32. 				"ldap-test",

  33. 				"--name", "ldap (via Bind DN) source full",

  34. 				"--not-active",

  35. 				"--security-protocol", "ldaps",

  36. 				"--skip-tls-verify",

  37. 				"--host", "ldap-bind-server full",

  38. 				"--port", "9876",

  39. 				"--user-search-base", "ou=Users,dc=full-domain-bind,dc=org",

  40. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=full-domain-bind,dc=org)",

  41. 				"--admin-filter", "(memberOf=cn=admin-group,ou=example,dc=full-domain-bind,dc=org)",

  42. 				"--username-attribute", "uid-bind full",

  43. 				"--firstname-attribute", "givenName-bind full",

  44. 				"--surname-attribute", "sn-bind full",

  45. 				"--email-attribute", "mail-bind full",

  46. 				"--public-ssh-key-attribute", "publickey-bind full",

  47. 				"--bind-dn", "cn=readonly,dc=full-domain-bind,dc=org",

  48. 				"--bind-password", "secret-bind-full",

  49. 				"--attributes-in-bind",

  50. 				"--synchronize-users",

  51. 				"--page-size", "99",

  52. 			},

  53. 			loginSource: &models.LoginSource{

  54. 				Type:          models.LoginLDAP,

  55. 				Name:          "ldap (via Bind DN) source full",

  56. 				IsActived:     false,

  57. 				IsSyncEnabled: true,

  58. 				Cfg: &models.LDAPConfig{

  59. 					Source: &ldap.Source{

  60. 						Name:                  "ldap (via Bind DN) source full",

  61. 						Host:                  "ldap-bind-server full",

  62. 						Port:                  9876,

  63. 						SecurityProtocol:      ldap.SecurityProtocol(1),

  64. 						SkipVerify:            true,

  65. 						BindDN:                "cn=readonly,dc=full-domain-bind,dc=org",

  66. 						BindPassword:          "secret-bind-full",

  67. 						UserBase:              "ou=Users,dc=full-domain-bind,dc=org",

  68. 						AttributeUsername:     "uid-bind full",

  69. 						AttributeName:         "givenName-bind full",

  70. 						AttributeSurname:      "sn-bind full",

  71. 						AttributeMail:         "mail-bind full",

  72. 						AttributesInBind:      true,

  73. 						AttributeSSHPublicKey: "publickey-bind full",

  74. 						SearchPageSize:        99,

  75. 						Filter:                "(memberOf=cn=user-group,ou=example,dc=full-domain-bind,dc=org)",

  76. 						AdminFilter:           "(memberOf=cn=admin-group,ou=example,dc=full-domain-bind,dc=org)",

  77. 						Enabled:               true,

  78. 					},

  79. 				},

  80. 			},

  81. 		},

  82. 		// case 1

  83. 		{

  84. 			args: []string{

  85. 				"ldap-test",

  86. 				"--name", "ldap (via Bind DN) source min",

  87. 				"--security-protocol", "unencrypted",

  88. 				"--host", "ldap-bind-server min",

  89. 				"--port", "1234",

  90. 				"--user-search-base", "ou=Users,dc=min-domain-bind,dc=org",

  91. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=min-domain-bind,dc=org)",

  92. 				"--email-attribute", "mail-bind min",

  93. 			},

  94. 			loginSource: &models.LoginSource{

  95. 				Type:      models.LoginLDAP,

  96. 				Name:      "ldap (via Bind DN) source min",

  97. 				IsActived: true,

  98. 				Cfg: &models.LDAPConfig{

  99. 					Source: &ldap.Source{

  100. 						Name:             "ldap (via Bind DN) source min",

  101. 						Host:             "ldap-bind-server min",

  102. 						Port:             1234,

  103. 						SecurityProtocol: ldap.SecurityProtocol(0),

  104. 						UserBase:         "ou=Users,dc=min-domain-bind,dc=org",

  105. 						AttributeMail:    "mail-bind min",

  106. 						Filter:           "(memberOf=cn=user-group,ou=example,dc=min-domain-bind,dc=org)",

  107. 						Enabled:          true,

  108. 					},

  109. 				},

  110. 			},

  111. 		},

  112. 		// case 2

  113. 		{

  114. 			args: []string{

  115. 				"ldap-test",

  116. 				"--name", "ldap (via Bind DN) source",

  117. 				"--security-protocol", "zzzzz",

  118. 				"--host", "ldap-server",

  119. 				"--port", "1234",

  120. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  121. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=domain,dc=org)",

  122. 				"--email-attribute", "mail",

  123. 			},

  124. 			errMsg: "Unknown security protocol name: zzzzz",

  125. 		},

  126. 		// case 3

  127. 		{

  128. 			args: []string{

  129. 				"ldap-test",

  130. 				"--security-protocol", "unencrypted",

  131. 				"--host", "ldap-server",

  132. 				"--port", "1234",

  133. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  134. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=domain,dc=org)",

  135. 				"--email-attribute", "mail",

  136. 			},

  137. 			errMsg: "name is not set",

  138. 		},

  139. 		// case 4

  140. 		{

  141. 			args: []string{

  142. 				"ldap-test",

  143. 				"--name", "ldap (via Bind DN) source",

  144. 				"--host", "ldap-server",

  145. 				"--port", "1234",

  146. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  147. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=domain,dc=org)",

  148. 				"--email-attribute", "mail",

  149. 			},

  150. 			errMsg: "security-protocol is not set",

  151. 		},

  152. 		// case 5

  153. 		{

  154. 			args: []string{

  155. 				"ldap-test",

  156. 				"--name", "ldap (via Bind DN) source",

  157. 				"--security-protocol", "unencrypted",

  158. 				"--port", "1234",

  159. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  160. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=domain,dc=org)",

  161. 				"--email-attribute", "mail",

  162. 			},

  163. 			errMsg: "host is not set",

  164. 		},

  165. 		// case 6

  166. 		{

  167. 			args: []string{

  168. 				"ldap-test",

  169. 				"--name", "ldap (via Bind DN) source",

  170. 				"--security-protocol", "unencrypted",

  171. 				"--host", "ldap-server",

  172. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  173. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=domain,dc=org)",

  174. 				"--email-attribute", "mail",

  175. 			},

  176. 			errMsg: "port is not set",

  177. 		},

  178. 		// case 7

  179. 		{

  180. 			args: []string{

  181. 				"ldap-test",

  182. 				"--name", "ldap (via Bind DN) source",

  183. 				"--security-protocol", "unencrypted",

  184. 				"--host", "ldap-server",

  185. 				"--port", "1234",

  186. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  187. 				"--email-attribute", "mail",

  188. 			},

  189. 			errMsg: "user-filter is not set",

  190. 		},

  191. 		// case 8

  192. 		{

  193. 			args: []string{

  194. 				"ldap-test",

  195. 				"--name", "ldap (via Bind DN) source",

  196. 				"--security-protocol", "unencrypted",

  197. 				"--host", "ldap-server",

  198. 				"--port", "1234",

  199. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  200. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=domain,dc=org)",

  201. 			},

  202. 			errMsg: "email-attribute is not set",

  203. 		},

  204. 	}

  205. 

  206. 	for n, c := range cases {

  207. 		// Mock functions.

  208. 		var createdLoginSource *models.LoginSource

  209. 		service := &authService{

  210. 			initDB: func() error {

  211. 				return nil

  212. 			},

  213. 			createLoginSource: func(loginSource *models.LoginSource) error {

  214. 				createdLoginSource = loginSource

  215. 				return nil

  216. 			},

  217. 			updateLoginSource: func(loginSource *models.LoginSource) error {

  218. 				assert.FailNow(t, "case %d: should not call updateLoginSource", n)

  219. 				return nil

  220. 			},

  221. 			getLoginSourceByID: func(id int64) (*models.LoginSource, error) {

  222. 				assert.FailNow(t, "case %d: should not call getLoginSourceByID", n)

  223. 				return nil, nil

  224. 			},

  225. 		}

  226. 

  227. 		// Create a copy of command to test

  228. 		app := cli.NewApp()

  229. 		app.Flags = cmdAuthAddLdapBindDn.Flags

  230. 		app.Action = service.addLdapBindDn

  231. 

  232. 		// Run it

  233. 		err := app.Run(c.args)

  234. 		if c.errMsg != "" {

  235. 			assert.EqualError(t, err, c.errMsg, "case %d: error should match", n)

  236. 		} else {

  237. 			assert.NoError(t, err, "case %d: should have no errors", n)

  238. 			assert.Equal(t, c.loginSource, createdLoginSource, "case %d: wrong loginSource", n)

  239. 		}

  240. 	}

  241. }

  242. 

  243. func TestAddLdapSimpleAuth(t *testing.T) {

  244. 	// Mock cli functions to do not exit on error

  245. 	var osExiter = cli.OsExiter

  246. 	defer func() { cli.OsExiter = osExiter }()

  247. 	cli.OsExiter = func(code int) {}

  248. 

  249. 	// Test cases

  250. 	var cases = []struct {

  251. 		args        []string

  252. 		loginSource *models.LoginSource

  253. 		errMsg      string

  254. 	}{

  255. 		// case 0

  256. 		{

  257. 			args: []string{

  258. 				"ldap-test",

  259. 				"--name", "ldap (simple auth) source full",

  260. 				"--not-active",

  261. 				"--security-protocol", "starttls",

  262. 				"--skip-tls-verify",

  263. 				"--host", "ldap-simple-server full",

  264. 				"--port", "987",

  265. 				"--user-search-base", "ou=Users,dc=full-domain-simple,dc=org",

  266. 				"--user-filter", "(&(objectClass=posixAccount)(full-simple-cn=%s))",

  267. 				"--admin-filter", "(memberOf=cn=admin-group,ou=example,dc=full-domain-simple,dc=org)",

  268. 				"--username-attribute", "uid-simple full",

  269. 				"--firstname-attribute", "givenName-simple full",

  270. 				"--surname-attribute", "sn-simple full",

  271. 				"--email-attribute", "mail-simple full",

  272. 				"--public-ssh-key-attribute", "publickey-simple full",

  273. 				"--user-dn", "cn=%s,ou=Users,dc=full-domain-simple,dc=org",

  274. 			},

  275. 			loginSource: &models.LoginSource{

  276. 				Type:      models.LoginDLDAP,

  277. 				Name:      "ldap (simple auth) source full",

  278. 				IsActived: false,

  279. 				Cfg: &models.LDAPConfig{

  280. 					Source: &ldap.Source{

  281. 						Name:                  "ldap (simple auth) source full",

  282. 						Host:                  "ldap-simple-server full",

  283. 						Port:                  987,

  284. 						SecurityProtocol:      ldap.SecurityProtocol(2),

  285. 						SkipVerify:            true,

  286. 						UserDN:                "cn=%s,ou=Users,dc=full-domain-simple,dc=org",

  287. 						UserBase:              "ou=Users,dc=full-domain-simple,dc=org",

  288. 						AttributeUsername:     "uid-simple full",

  289. 						AttributeName:         "givenName-simple full",

  290. 						AttributeSurname:      "sn-simple full",

  291. 						AttributeMail:         "mail-simple full",

  292. 						AttributeSSHPublicKey: "publickey-simple full",

  293. 						Filter:                "(&(objectClass=posixAccount)(full-simple-cn=%s))",

  294. 						AdminFilter:           "(memberOf=cn=admin-group,ou=example,dc=full-domain-simple,dc=org)",

  295. 						Enabled:               true,

  296. 					},

  297. 				},

  298. 			},

  299. 		},

  300. 		// case 1

  301. 		{

  302. 			args: []string{

  303. 				"ldap-test",

  304. 				"--name", "ldap (simple auth) source min",

  305. 				"--security-protocol", "unencrypted",

  306. 				"--host", "ldap-simple-server min",

  307. 				"--port", "123",

  308. 				"--user-filter", "(&(objectClass=posixAccount)(min-simple-cn=%s))",

  309. 				"--email-attribute", "mail-simple min",

  310. 				"--user-dn", "cn=%s,ou=Users,dc=min-domain-simple,dc=org",

  311. 			},

  312. 			loginSource: &models.LoginSource{

  313. 				Type:      models.LoginDLDAP,

  314. 				Name:      "ldap (simple auth) source min",

  315. 				IsActived: true,

  316. 				Cfg: &models.LDAPConfig{

  317. 					Source: &ldap.Source{

  318. 						Name:             "ldap (simple auth) source min",

  319. 						Host:             "ldap-simple-server min",

  320. 						Port:             123,

  321. 						SecurityProtocol: ldap.SecurityProtocol(0),

  322. 						UserDN:           "cn=%s,ou=Users,dc=min-domain-simple,dc=org",

  323. 						AttributeMail:    "mail-simple min",

  324. 						Filter:           "(&(objectClass=posixAccount)(min-simple-cn=%s))",

  325. 						Enabled:          true,

  326. 					},

  327. 				},

  328. 			},

  329. 		},

  330. 		// case 2

  331. 		{

  332. 			args: []string{

  333. 				"ldap-test",

  334. 				"--name", "ldap (simple auth) source",

  335. 				"--security-protocol", "zzzzz",

  336. 				"--host", "ldap-server",

  337. 				"--port", "123",

  338. 				"--user-filter", "(&(objectClass=posixAccount)(cn=%s))",

  339. 				"--email-attribute", "mail",

  340. 				"--user-dn", "cn=%s,ou=Users,dc=domain,dc=org",

  341. 			},

  342. 			errMsg: "Unknown security protocol name: zzzzz",

  343. 		},

  344. 		// case 3

  345. 		{

  346. 			args: []string{

  347. 				"ldap-test",

  348. 				"--security-protocol", "unencrypted",

  349. 				"--host", "ldap-server",

  350. 				"--port", "123",

  351. 				"--user-filter", "(&(objectClass=posixAccount)(cn=%s))",

  352. 				"--email-attribute", "mail",

  353. 				"--user-dn", "cn=%s,ou=Users,dc=domain,dc=org",

  354. 			},

  355. 			errMsg: "name is not set",

  356. 		},

  357. 		// case 4

  358. 		{

  359. 			args: []string{

  360. 				"ldap-test",

  361. 				"--name", "ldap (simple auth) source",

  362. 				"--host", "ldap-server",

  363. 				"--port", "123",

  364. 				"--user-filter", "(&(objectClass=posixAccount)(cn=%s))",

  365. 				"--email-attribute", "mail",

  366. 				"--user-dn", "cn=%s,ou=Users,dc=domain,dc=org",

  367. 			},

  368. 			errMsg: "security-protocol is not set",

  369. 		},

  370. 		// case 5

  371. 		{

  372. 			args: []string{

  373. 				"ldap-test",

  374. 				"--name", "ldap (simple auth) source",

  375. 				"--security-protocol", "unencrypted",

  376. 				"--port", "123",

  377. 				"--user-filter", "(&(objectClass=posixAccount)(cn=%s))",

  378. 				"--email-attribute", "mail",

  379. 				"--user-dn", "cn=%s,ou=Users,dc=domain,dc=org",

  380. 			},

  381. 			errMsg: "host is not set",

  382. 		},

  383. 		// case 6

  384. 		{

  385. 			args: []string{

  386. 				"ldap-test",

  387. 				"--name", "ldap (simple auth) source",

  388. 				"--security-protocol", "unencrypted",

  389. 				"--host", "ldap-server",

  390. 				"--user-filter", "(&(objectClass=posixAccount)(cn=%s))",

  391. 				"--email-attribute", "mail",

  392. 				"--user-dn", "cn=%s,ou=Users,dc=domain,dc=org",

  393. 			},

  394. 			errMsg: "port is not set",

  395. 		},

  396. 		// case 7

  397. 		{

  398. 			args: []string{

  399. 				"ldap-test",

  400. 				"--name", "ldap (simple auth) source",

  401. 				"--security-protocol", "unencrypted",

  402. 				"--host", "ldap-server",

  403. 				"--port", "123",

  404. 				"--email-attribute", "mail",

  405. 				"--user-dn", "cn=%s,ou=Users,dc=domain,dc=org",

  406. 			},

  407. 			errMsg: "user-filter is not set",

  408. 		},

  409. 		// case 8

  410. 		{

  411. 			args: []string{

  412. 				"ldap-test",

  413. 				"--name", "ldap (simple auth) source",

  414. 				"--security-protocol", "unencrypted",

  415. 				"--host", "ldap-server",

  416. 				"--port", "123",

  417. 				"--user-filter", "(&(objectClass=posixAccount)(cn=%s))",

  418. 				"--user-dn", "cn=%s,ou=Users,dc=domain,dc=org",

  419. 			},

  420. 			errMsg: "email-attribute is not set",

  421. 		},

  422. 		// case 9

  423. 		{

  424. 			args: []string{

  425. 				"ldap-test",

  426. 				"--name", "ldap (simple auth) source",

  427. 				"--security-protocol", "unencrypted",

  428. 				"--host", "ldap-server",

  429. 				"--port", "123",

  430. 				"--user-filter", "(&(objectClass=posixAccount)(cn=%s))",

  431. 				"--email-attribute", "mail",

  432. 			},

  433. 			errMsg: "user-dn is not set",

  434. 		},

  435. 	}

  436. 

  437. 	for n, c := range cases {

  438. 		// Mock functions.

  439. 		var createdLoginSource *models.LoginSource

  440. 		service := &authService{

  441. 			initDB: func() error {

  442. 				return nil

  443. 			},

  444. 			createLoginSource: func(loginSource *models.LoginSource) error {

  445. 				createdLoginSource = loginSource

  446. 				return nil

  447. 			},

  448. 			updateLoginSource: func(loginSource *models.LoginSource) error {

  449. 				assert.FailNow(t, "case %d: should not call updateLoginSource", n)

  450. 				return nil

  451. 			},

  452. 			getLoginSourceByID: func(id int64) (*models.LoginSource, error) {

  453. 				assert.FailNow(t, "case %d: should not call getLoginSourceByID", n)

  454. 				return nil, nil

  455. 			},

  456. 		}

  457. 

  458. 		// Create a copy of command to test

  459. 		app := cli.NewApp()

  460. 		app.Flags = cmdAuthAddLdapSimpleAuth.Flags

  461. 		app.Action = service.addLdapSimpleAuth

  462. 

  463. 		// Run it

  464. 		err := app.Run(c.args)

  465. 		if c.errMsg != "" {

  466. 			assert.EqualError(t, err, c.errMsg, "case %d: error should match", n)

  467. 		} else {

  468. 			assert.NoError(t, err, "case %d: should have no errors", n)

  469. 			assert.Equal(t, c.loginSource, createdLoginSource, "case %d: wrong loginSource", n)

  470. 		}

  471. 	}

  472. }

  473. 

  474. func TestUpdateLdapBindDn(t *testing.T) {

  475. 	// Mock cli functions to do not exit on error

  476. 	var osExiter = cli.OsExiter

  477. 	defer func() { cli.OsExiter = osExiter }()

  478. 	cli.OsExiter = func(code int) {}

  479. 

  480. 	// Test cases

  481. 	var cases = []struct {

  482. 		args                []string

  483. 		id                  int64

  484. 		existingLoginSource *models.LoginSource

  485. 		loginSource         *models.LoginSource

  486. 		errMsg              string

  487. 	}{

  488. 		// case 0

  489. 		{

  490. 			args: []string{

  491. 				"ldap-test",

  492. 				"--id", "23",

  493. 				"--name", "ldap (via Bind DN) source full",

  494. 				"--not-active",

  495. 				"--security-protocol", "LDAPS",

  496. 				"--skip-tls-verify",

  497. 				"--host", "ldap-bind-server full",

  498. 				"--port", "9876",

  499. 				"--user-search-base", "ou=Users,dc=full-domain-bind,dc=org",

  500. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=full-domain-bind,dc=org)",

  501. 				"--admin-filter", "(memberOf=cn=admin-group,ou=example,dc=full-domain-bind,dc=org)",

  502. 				"--username-attribute", "uid-bind full",

  503. 				"--firstname-attribute", "givenName-bind full",

  504. 				"--surname-attribute", "sn-bind full",

  505. 				"--email-attribute", "mail-bind full",

  506. 				"--public-ssh-key-attribute", "publickey-bind full",

  507. 				"--bind-dn", "cn=readonly,dc=full-domain-bind,dc=org",

  508. 				"--bind-password", "secret-bind-full",

  509. 				"--synchronize-users",

  510. 				"--page-size", "99",

  511. 			},

  512. 			id: 23,

  513. 			existingLoginSource: &models.LoginSource{

  514. 				Type:      models.LoginLDAP,

  515. 				IsActived: true,

  516. 				Cfg: &models.LDAPConfig{

  517. 					Source: &ldap.Source{

  518. 						Enabled: true,

  519. 					},

  520. 				},

  521. 			},

  522. 			loginSource: &models.LoginSource{

  523. 				Type:          models.LoginLDAP,

  524. 				Name:          "ldap (via Bind DN) source full",

  525. 				IsActived:     false,

  526. 				IsSyncEnabled: true,

  527. 				Cfg: &models.LDAPConfig{

  528. 					Source: &ldap.Source{

  529. 						Name:                  "ldap (via Bind DN) source full",

  530. 						Host:                  "ldap-bind-server full",

  531. 						Port:                  9876,

  532. 						SecurityProtocol:      ldap.SecurityProtocol(1),

  533. 						SkipVerify:            true,

  534. 						BindDN:                "cn=readonly,dc=full-domain-bind,dc=org",

  535. 						BindPassword:          "secret-bind-full",

  536. 						UserBase:              "ou=Users,dc=full-domain-bind,dc=org",

  537. 						AttributeUsername:     "uid-bind full",

  538. 						AttributeName:         "givenName-bind full",

  539. 						AttributeSurname:      "sn-bind full",

  540. 						AttributeMail:         "mail-bind full",

  541. 						AttributesInBind:      false,

  542. 						AttributeSSHPublicKey: "publickey-bind full",

  543. 						SearchPageSize:        99,

  544. 						Filter:                "(memberOf=cn=user-group,ou=example,dc=full-domain-bind,dc=org)",

  545. 						AdminFilter:           "(memberOf=cn=admin-group,ou=example,dc=full-domain-bind,dc=org)",

  546. 						Enabled:               true,

  547. 					},

  548. 				},

  549. 			},

  550. 		},

  551. 		// case 1

  552. 		{

  553. 			args: []string{

  554. 				"ldap-test",

  555. 				"--id", "1",

  556. 			},

  557. 			loginSource: &models.LoginSource{

  558. 				Type: models.LoginLDAP,

  559. 				Cfg: &models.LDAPConfig{

  560. 					Source: &ldap.Source{},

  561. 				},

  562. 			},

  563. 		},

  564. 		// case 2

  565. 		{

  566. 			args: []string{

  567. 				"ldap-test",

  568. 				"--id", "1",

  569. 				"--name", "ldap (via Bind DN) source",

  570. 			},

  571. 			loginSource: &models.LoginSource{

  572. 				Type: models.LoginLDAP,

  573. 				Name: "ldap (via Bind DN) source",

  574. 				Cfg: &models.LDAPConfig{

  575. 					Source: &ldap.Source{

  576. 						Name: "ldap (via Bind DN) source",

  577. 					},

  578. 				},

  579. 			},

  580. 		},

  581. 		// case 3

  582. 		{

  583. 			args: []string{

  584. 				"ldap-test",

  585. 				"--id", "1",

  586. 				"--not-active",

  587. 			},

  588. 			existingLoginSource: &models.LoginSource{

  589. 				Type:      models.LoginLDAP,

  590. 				IsActived: true,

  591. 				Cfg: &models.LDAPConfig{

  592. 					Source: &ldap.Source{},

  593. 				},

  594. 			},

  595. 			loginSource: &models.LoginSource{

  596. 				Type:      models.LoginLDAP,

  597. 				IsActived: false,

  598. 				Cfg: &models.LDAPConfig{

  599. 					Source: &ldap.Source{},

  600. 				},

  601. 			},

  602. 		},

  603. 		// case 4

  604. 		{

  605. 			args: []string{

  606. 				"ldap-test",

  607. 				"--id", "1",

  608. 				"--security-protocol", "LDAPS",

  609. 			},

  610. 			loginSource: &models.LoginSource{

  611. 				Type: models.LoginLDAP,

  612. 				Cfg: &models.LDAPConfig{

  613. 					Source: &ldap.Source{

  614. 						SecurityProtocol: ldap.SecurityProtocol(1),

  615. 					},

  616. 				},

  617. 			},

  618. 		},

  619. 		// case 5

  620. 		{

  621. 			args: []string{

  622. 				"ldap-test",

  623. 				"--id", "1",

  624. 				"--skip-tls-verify",

  625. 			},

  626. 			loginSource: &models.LoginSource{

  627. 				Type: models.LoginLDAP,

  628. 				Cfg: &models.LDAPConfig{

  629. 					Source: &ldap.Source{

  630. 						SkipVerify: true,

  631. 					},

  632. 				},

  633. 			},

  634. 		},

  635. 		// case 6

  636. 		{

  637. 			args: []string{

  638. 				"ldap-test",

  639. 				"--id", "1",

  640. 				"--host", "ldap-server",

  641. 			},

  642. 			loginSource: &models.LoginSource{

  643. 				Type: models.LoginLDAP,

  644. 				Cfg: &models.LDAPConfig{

  645. 					Source: &ldap.Source{

  646. 						Host: "ldap-server",

  647. 					},

  648. 				},

  649. 			},

  650. 		},

  651. 		// case 7

  652. 		{

  653. 			args: []string{

  654. 				"ldap-test",

  655. 				"--id", "1",

  656. 				"--port", "389",

  657. 			},

  658. 			loginSource: &models.LoginSource{

  659. 				Type: models.LoginLDAP,

  660. 				Cfg: &models.LDAPConfig{

  661. 					Source: &ldap.Source{

  662. 						Port: 389,

  663. 					},

  664. 				},

  665. 			},

  666. 		},

  667. 		// case 8

  668. 		{

  669. 			args: []string{

  670. 				"ldap-test",

  671. 				"--id", "1",

  672. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  673. 			},

  674. 			loginSource: &models.LoginSource{

  675. 				Type: models.LoginLDAP,

  676. 				Cfg: &models.LDAPConfig{

  677. 					Source: &ldap.Source{

  678. 						UserBase: "ou=Users,dc=domain,dc=org",

  679. 					},

  680. 				},

  681. 			},

  682. 		},

  683. 		// case 9

  684. 		{

  685. 			args: []string{

  686. 				"ldap-test",

  687. 				"--id", "1",

  688. 				"--user-filter", "(memberOf=cn=user-group,ou=example,dc=domain,dc=org)",

  689. 			},

  690. 			loginSource: &models.LoginSource{

  691. 				Type: models.LoginLDAP,

  692. 				Cfg: &models.LDAPConfig{

  693. 					Source: &ldap.Source{

  694. 						Filter: "(memberOf=cn=user-group,ou=example,dc=domain,dc=org)",

  695. 					},

  696. 				},

  697. 			},

  698. 		},

  699. 		// case 10

  700. 		{

  701. 			args: []string{

  702. 				"ldap-test",

  703. 				"--id", "1",

  704. 				"--admin-filter", "(memberOf=cn=admin-group,ou=example,dc=domain,dc=org)",

  705. 			},

  706. 			loginSource: &models.LoginSource{

  707. 				Type: models.LoginLDAP,

  708. 				Cfg: &models.LDAPConfig{

  709. 					Source: &ldap.Source{

  710. 						AdminFilter: "(memberOf=cn=admin-group,ou=example,dc=domain,dc=org)",

  711. 					},

  712. 				},

  713. 			},

  714. 		},

  715. 		// case 11

  716. 		{

  717. 			args: []string{

  718. 				"ldap-test",

  719. 				"--id", "1",

  720. 				"--username-attribute", "uid",

  721. 			},

  722. 			loginSource: &models.LoginSource{

  723. 				Type: models.LoginLDAP,

  724. 				Cfg: &models.LDAPConfig{

  725. 					Source: &ldap.Source{

  726. 						AttributeUsername: "uid",

  727. 					},

  728. 				},

  729. 			},

  730. 		},

  731. 		// case 12

  732. 		{

  733. 			args: []string{

  734. 				"ldap-test",

  735. 				"--id", "1",

  736. 				"--firstname-attribute", "givenName",

  737. 			},

  738. 			loginSource: &models.LoginSource{

  739. 				Type: models.LoginLDAP,

  740. 				Cfg: &models.LDAPConfig{

  741. 					Source: &ldap.Source{

  742. 						AttributeName: "givenName",

  743. 					},

  744. 				},

  745. 			},

  746. 		},

  747. 		// case 13

  748. 		{

  749. 			args: []string{

  750. 				"ldap-test",

  751. 				"--id", "1",

  752. 				"--surname-attribute", "sn",

  753. 			},

  754. 			loginSource: &models.LoginSource{

  755. 				Type: models.LoginLDAP,

  756. 				Cfg: &models.LDAPConfig{

  757. 					Source: &ldap.Source{

  758. 						AttributeSurname: "sn",

  759. 					},

  760. 				},

  761. 			},

  762. 		},

  763. 		// case 14

  764. 		{

  765. 			args: []string{

  766. 				"ldap-test",

  767. 				"--id", "1",

  768. 				"--email-attribute", "mail",

  769. 			},

  770. 			loginSource: &models.LoginSource{

  771. 				Type: models.LoginLDAP,

  772. 				Cfg: &models.LDAPConfig{

  773. 					Source: &ldap.Source{

  774. 						AttributeMail: "mail",

  775. 					},

  776. 				},

  777. 			},

  778. 		},

  779. 		// case 15

  780. 		{

  781. 			args: []string{

  782. 				"ldap-test",

  783. 				"--id", "1",

  784. 				"--attributes-in-bind",

  785. 			},

  786. 			loginSource: &models.LoginSource{

  787. 				Type: models.LoginLDAP,

  788. 				Cfg: &models.LDAPConfig{

  789. 					Source: &ldap.Source{

  790. 						AttributesInBind: true,

  791. 					},

  792. 				},

  793. 			},

  794. 		},

  795. 		// case 16

  796. 		{

  797. 			args: []string{

  798. 				"ldap-test",

  799. 				"--id", "1",

  800. 				"--public-ssh-key-attribute", "publickey",

  801. 			},

  802. 			loginSource: &models.LoginSource{

  803. 				Type: models.LoginLDAP,

  804. 				Cfg: &models.LDAPConfig{

  805. 					Source: &ldap.Source{

  806. 						AttributeSSHPublicKey: "publickey",

  807. 					},

  808. 				},

  809. 			},

  810. 		},

  811. 		// case 17

  812. 		{

  813. 			args: []string{

  814. 				"ldap-test",

  815. 				"--id", "1",

  816. 				"--bind-dn", "cn=readonly,dc=domain,dc=org",

  817. 			},

  818. 			loginSource: &models.LoginSource{

  819. 				Type: models.LoginLDAP,

  820. 				Cfg: &models.LDAPConfig{

  821. 					Source: &ldap.Source{

  822. 						BindDN: "cn=readonly,dc=domain,dc=org",

  823. 					},

  824. 				},

  825. 			},

  826. 		},

  827. 		// case 18

  828. 		{

  829. 			args: []string{

  830. 				"ldap-test",

  831. 				"--id", "1",

  832. 				"--bind-password", "secret",

  833. 			},

  834. 			loginSource: &models.LoginSource{

  835. 				Type: models.LoginLDAP,

  836. 				Cfg: &models.LDAPConfig{

  837. 					Source: &ldap.Source{

  838. 						BindPassword: "secret",

  839. 					},

  840. 				},

  841. 			},

  842. 		},

  843. 		// case 19

  844. 		{

  845. 			args: []string{

  846. 				"ldap-test",

  847. 				"--id", "1",

  848. 				"--synchronize-users",

  849. 			},

  850. 			loginSource: &models.LoginSource{

  851. 				Type:          models.LoginLDAP,

  852. 				IsSyncEnabled: true,

  853. 				Cfg: &models.LDAPConfig{

  854. 					Source: &ldap.Source{},

  855. 				},

  856. 			},

  857. 		},

  858. 		// case 20

  859. 		{

  860. 			args: []string{

  861. 				"ldap-test",

  862. 				"--id", "1",

  863. 				"--page-size", "12",

  864. 			},

  865. 			loginSource: &models.LoginSource{

  866. 				Type: models.LoginLDAP,

  867. 				Cfg: &models.LDAPConfig{

  868. 					Source: &ldap.Source{

  869. 						SearchPageSize: 12,

  870. 					},

  871. 				},

  872. 			},

  873. 		},

  874. 		// case 21

  875. 		{

  876. 			args: []string{

  877. 				"ldap-test",

  878. 				"--id", "1",

  879. 				"--security-protocol", "xxxxx",

  880. 			},

  881. 			errMsg: "Unknown security protocol name: xxxxx",

  882. 		},

  883. 		// case 22

  884. 		{

  885. 			args: []string{

  886. 				"ldap-test",

  887. 			},

  888. 			errMsg: "id is not set",

  889. 		},

  890. 		// case 23

  891. 		{

  892. 			args: []string{

  893. 				"ldap-test",

  894. 				"--id", "1",

  895. 			},

  896. 			existingLoginSource: &models.LoginSource{

  897. 				Type: models.LoginOAuth2,

  898. 				Cfg: &models.LDAPConfig{

  899. 					Source: &ldap.Source{},

  900. 				},

  901. 			},

  902. 			errMsg: "Invalid authentication type. expected: LDAP (via BindDN), actual: OAuth2",

  903. 		},

  904. 	}

  905. 

  906. 	for n, c := range cases {

  907. 		// Mock functions.

  908. 		var updatedLoginSource *models.LoginSource

  909. 		service := &authService{

  910. 			initDB: func() error {

  911. 				return nil

  912. 			},

  913. 			createLoginSource: func(loginSource *models.LoginSource) error {

  914. 				assert.FailNow(t, "case %d: should not call createLoginSource", n)

  915. 				return nil

  916. 			},

  917. 			updateLoginSource: func(loginSource *models.LoginSource) error {

  918. 				updatedLoginSource = loginSource

  919. 				return nil

  920. 			},

  921. 			getLoginSourceByID: func(id int64) (*models.LoginSource, error) {

  922. 				if c.id != 0 {

  923. 					assert.Equal(t, c.id, id, "case %d: wrong id", n)

  924. 				}

  925. 				if c.existingLoginSource != nil {

  926. 					return c.existingLoginSource, nil

  927. 				}

  928. 				return &models.LoginSource{

  929. 					Type: models.LoginLDAP,

  930. 					Cfg: &models.LDAPConfig{

  931. 						Source: &ldap.Source{},

  932. 					},

  933. 				}, nil

  934. 			},

  935. 		}

  936. 

  937. 		// Create a copy of command to test

  938. 		app := cli.NewApp()

  939. 		app.Flags = cmdAuthUpdateLdapBindDn.Flags

  940. 		app.Action = service.updateLdapBindDn

  941. 

  942. 		// Run it

  943. 		err := app.Run(c.args)

  944. 		if c.errMsg != "" {

  945. 			assert.EqualError(t, err, c.errMsg, "case %d: error should match", n)

  946. 		} else {

  947. 			assert.NoError(t, err, "case %d: should have no errors", n)

  948. 			assert.Equal(t, c.loginSource, updatedLoginSource, "case %d: wrong loginSource", n)

  949. 		}

  950. 	}

  951. }

  952. 

  953. func TestUpdateLdapSimpleAuth(t *testing.T) {

  954. 	// Mock cli functions to do not exit on error

  955. 	var osExiter = cli.OsExiter

  956. 	defer func() { cli.OsExiter = osExiter }()

  957. 	cli.OsExiter = func(code int) {}

  958. 

  959. 	// Test cases

  960. 	var cases = []struct {

  961. 		args                []string

  962. 		id                  int64

  963. 		existingLoginSource *models.LoginSource

  964. 		loginSource         *models.LoginSource

  965. 		errMsg              string

  966. 	}{

  967. 		// case 0

  968. 		{

  969. 			args: []string{

  970. 				"ldap-test",

  971. 				"--id", "7",

  972. 				"--name", "ldap (simple auth) source full",

  973. 				"--not-active",

  974. 				"--security-protocol", "starttls",

  975. 				"--skip-tls-verify",

  976. 				"--host", "ldap-simple-server full",

  977. 				"--port", "987",

  978. 				"--user-search-base", "ou=Users,dc=full-domain-simple,dc=org",

  979. 				"--user-filter", "(&(objectClass=posixAccount)(full-simple-cn=%s))",

  980. 				"--admin-filter", "(memberOf=cn=admin-group,ou=example,dc=full-domain-simple,dc=org)",

  981. 				"--username-attribute", "uid-simple full",

  982. 				"--firstname-attribute", "givenName-simple full",

  983. 				"--surname-attribute", "sn-simple full",

  984. 				"--email-attribute", "mail-simple full",

  985. 				"--public-ssh-key-attribute", "publickey-simple full",

  986. 				"--user-dn", "cn=%s,ou=Users,dc=full-domain-simple,dc=org",

  987. 			},

  988. 			id: 7,

  989. 			loginSource: &models.LoginSource{

  990. 				Type:      models.LoginDLDAP,

  991. 				Name:      "ldap (simple auth) source full",

  992. 				IsActived: false,

  993. 				Cfg: &models.LDAPConfig{

  994. 					Source: &ldap.Source{

  995. 						Name:                  "ldap (simple auth) source full",

  996. 						Host:                  "ldap-simple-server full",

  997. 						Port:                  987,

  998. 						SecurityProtocol:      ldap.SecurityProtocol(2),

  999. 						SkipVerify:            true,

  1000. 						UserDN:                "cn=%s,ou=Users,dc=full-domain-simple,dc=org",

  1001. 						UserBase:              "ou=Users,dc=full-domain-simple,dc=org",

  1002. 						AttributeUsername:     "uid-simple full",

  1003. 						AttributeName:         "givenName-simple full",

  1004. 						AttributeSurname:      "sn-simple full",

  1005. 						AttributeMail:         "mail-simple full",

  1006. 						AttributeSSHPublicKey: "publickey-simple full",

  1007. 						Filter:                "(&(objectClass=posixAccount)(full-simple-cn=%s))",

  1008. 						AdminFilter:           "(memberOf=cn=admin-group,ou=example,dc=full-domain-simple,dc=org)",

  1009. 					},

  1010. 				},

  1011. 			},

  1012. 		},

  1013. 		// case 1

  1014. 		{

  1015. 			args: []string{

  1016. 				"ldap-test",

  1017. 				"--id", "1",

  1018. 			},

  1019. 			loginSource: &models.LoginSource{

  1020. 				Type: models.LoginDLDAP,

  1021. 				Cfg: &models.LDAPConfig{

  1022. 					Source: &ldap.Source{},

  1023. 				},

  1024. 			},

  1025. 		},

  1026. 		// case 2

  1027. 		{

  1028. 			args: []string{

  1029. 				"ldap-test",

  1030. 				"--id", "1",

  1031. 				"--name", "ldap (simple auth) source",

  1032. 			},

  1033. 			loginSource: &models.LoginSource{

  1034. 				Type: models.LoginDLDAP,

  1035. 				Name: "ldap (simple auth) source",

  1036. 				Cfg: &models.LDAPConfig{

  1037. 					Source: &ldap.Source{

  1038. 						Name: "ldap (simple auth) source",

  1039. 					},

  1040. 				},

  1041. 			},

  1042. 		},

  1043. 		// case 3

  1044. 		{

  1045. 			args: []string{

  1046. 				"ldap-test",

  1047. 				"--id", "1",

  1048. 				"--not-active",

  1049. 			},

  1050. 			existingLoginSource: &models.LoginSource{

  1051. 				Type:      models.LoginDLDAP,

  1052. 				IsActived: true,

  1053. 				Cfg: &models.LDAPConfig{

  1054. 					Source: &ldap.Source{},

  1055. 				},

  1056. 			},

  1057. 			loginSource: &models.LoginSource{

  1058. 				Type:      models.LoginDLDAP,

  1059. 				IsActived: false,

  1060. 				Cfg: &models.LDAPConfig{

  1061. 					Source: &ldap.Source{},

  1062. 				},

  1063. 			},

  1064. 		},

  1065. 		// case 4

  1066. 		{

  1067. 			args: []string{

  1068. 				"ldap-test",

  1069. 				"--id", "1",

  1070. 				"--security-protocol", "starttls",

  1071. 			},

  1072. 			loginSource: &models.LoginSource{

  1073. 				Type: models.LoginDLDAP,

  1074. 				Cfg: &models.LDAPConfig{

  1075. 					Source: &ldap.Source{

  1076. 						SecurityProtocol: ldap.SecurityProtocol(2),

  1077. 					},

  1078. 				},

  1079. 			},

  1080. 		},

  1081. 		// case 5

  1082. 		{

  1083. 			args: []string{

  1084. 				"ldap-test",

  1085. 				"--id", "1",

  1086. 				"--skip-tls-verify",

  1087. 			},

  1088. 			loginSource: &models.LoginSource{

  1089. 				Type: models.LoginDLDAP,

  1090. 				Cfg: &models.LDAPConfig{

  1091. 					Source: &ldap.Source{

  1092. 						SkipVerify: true,

  1093. 					},

  1094. 				},

  1095. 			},

  1096. 		},

  1097. 		// case 6

  1098. 		{

  1099. 			args: []string{

  1100. 				"ldap-test",

  1101. 				"--id", "1",

  1102. 				"--host", "ldap-server",

  1103. 			},

  1104. 			loginSource: &models.LoginSource{

  1105. 				Type: models.LoginDLDAP,

  1106. 				Cfg: &models.LDAPConfig{

  1107. 					Source: &ldap.Source{

  1108. 						Host: "ldap-server",

  1109. 					},

  1110. 				},

  1111. 			},

  1112. 		},

  1113. 		// case 7

  1114. 		{

  1115. 			args: []string{

  1116. 				"ldap-test",

  1117. 				"--id", "1",

  1118. 				"--port", "987",

  1119. 			},

  1120. 			loginSource: &models.LoginSource{

  1121. 				Type: models.LoginDLDAP,

  1122. 				Cfg: &models.LDAPConfig{

  1123. 					Source: &ldap.Source{

  1124. 						Port: 987,

  1125. 					},

  1126. 				},

  1127. 			},

  1128. 		},

  1129. 		// case 8

  1130. 		{

  1131. 			args: []string{

  1132. 				"ldap-test",

  1133. 				"--id", "1",

  1134. 				"--user-search-base", "ou=Users,dc=domain,dc=org",

  1135. 			},

  1136. 			loginSource: &models.LoginSource{

  1137. 				Type: models.LoginDLDAP,

  1138. 				Cfg: &models.LDAPConfig{

  1139. 					Source: &ldap.Source{

  1140. 						UserBase: "ou=Users,dc=domain,dc=org",

  1141. 					},

  1142. 				},

  1143. 			},

  1144. 		},

  1145. 		// case 9

  1146. 		{

  1147. 			args: []string{

  1148. 				"ldap-test",

  1149. 				"--id", "1",

  1150. 				"--user-filter", "(&(objectClass=posixAccount)(cn=%s))",

  1151. 			},

  1152. 			loginSource: &models.LoginSource{

  1153. 				Type: models.LoginDLDAP,

  1154. 				Cfg: &models.LDAPConfig{

  1155. 					Source: &ldap.Source{

  1156. 						Filter: "(&(objectClass=posixAccount)(cn=%s))",

  1157. 					},

  1158. 				},

  1159. 			},

  1160. 		},

  1161. 		// case 10

  1162. 		{

  1163. 			args: []string{

  1164. 				"ldap-test",

  1165. 				"--id", "1",

  1166. 				"--admin-filter", "(memberOf=cn=admin-group,ou=example,dc=domain,dc=org)",

  1167. 			},

  1168. 			loginSource: &models.LoginSource{

  1169. 				Type: models.LoginDLDAP,

  1170. 				Cfg: &models.LDAPConfig{

  1171. 					Source: &ldap.Source{

  1172. 						AdminFilter: "(memberOf=cn=admin-group,ou=example,dc=domain,dc=org)",

  1173. 					},

  1174. 				},

  1175. 			},

  1176. 		},

  1177. 		// case 11

  1178. 		{

  1179. 			args: []string{

  1180. 				"ldap-test",

  1181. 				"--id", "1",

  1182. 				"--username-attribute", "uid",

  1183. 			},

  1184. 			loginSource: &models.LoginSource{

  1185. 				Type: models.LoginDLDAP,

  1186. 				Cfg: &models.LDAPConfig{

  1187. 					Source: &ldap.Source{

  1188. 						AttributeUsername: "uid",

  1189. 					},

  1190. 				},

  1191. 			},

  1192. 		},

  1193. 		// case 12

  1194. 		{

  1195. 			args: []string{

  1196. 				"ldap-test",

  1197. 				"--id", "1",

  1198. 				"--firstname-attribute", "givenName",

  1199. 			},

  1200. 			loginSource: &models.LoginSource{

  1201. 				Type: models.LoginDLDAP,

  1202. 				Cfg: &models.LDAPConfig{

  1203. 					Source: &ldap.Source{

  1204. 						AttributeName: "givenName",

  1205. 					},

  1206. 				},

  1207. 			},

  1208. 		},

  1209. 		// case 13

  1210. 		{

  1211. 			args: []string{

  1212. 				"ldap-test",

  1213. 				"--id", "1",

  1214. 				"--surname-attribute", "sn",

  1215. 			},

  1216. 			loginSource: &models.LoginSource{

  1217. 				Type: models.LoginDLDAP,

  1218. 				Cfg: &models.LDAPConfig{

  1219. 					Source: &ldap.Source{

  1220. 						AttributeSurname: "sn",

  1221. 					},

  1222. 				},

  1223. 			},

  1224. 		},

  1225. 		// case 14

  1226. 		{

  1227. 			args: []string{

  1228. 				"ldap-test",

  1229. 				"--id", "1",

  1230. 				"--email-attribute", "mail",

  1231. 			},

  1232. 			loginSource: &models.LoginSource{

  1233. 				Type: models.LoginDLDAP,

  1234. 				Cfg: &models.LDAPConfig{

  1235. 					Source: &ldap.Source{

  1236. 						AttributeMail: "mail",

  1237. 					},

  1238. 				},

  1239. 			},

  1240. 		},

  1241. 		// case 15

  1242. 		{

  1243. 			args: []string{

  1244. 				"ldap-test",

  1245. 				"--id", "1",

  1246. 				"--public-ssh-key-attribute", "publickey",

  1247. 			},

  1248. 			loginSource: &models.LoginSource{

  1249. 				Type: models.LoginDLDAP,

  1250. 				Cfg: &models.LDAPConfig{

  1251. 					Source: &ldap.Source{

  1252. 						AttributeSSHPublicKey: "publickey",

  1253. 					},

  1254. 				},

  1255. 			},

  1256. 		},

  1257. 		// case 16

  1258. 		{

  1259. 			args: []string{

  1260. 				"ldap-test",

  1261. 				"--id", "1",

  1262. 				"--user-dn", "cn=%s,ou=Users,dc=domain,dc=org",

  1263. 			},

  1264. 			loginSource: &models.LoginSource{

  1265. 				Type: models.LoginDLDAP,

  1266. 				Cfg: &models.LDAPConfig{

  1267. 					Source: &ldap.Source{

  1268. 						UserDN: "cn=%s,ou=Users,dc=domain,dc=org",

  1269. 					},

  1270. 				},

  1271. 			},

  1272. 		},

  1273. 		// case 17

  1274. 		{

  1275. 			args: []string{

  1276. 				"ldap-test",

  1277. 				"--id", "1",

  1278. 				"--security-protocol", "xxxxx",

  1279. 			},

  1280. 			errMsg: "Unknown security protocol name: xxxxx",

  1281. 		},

  1282. 		// case 18

  1283. 		{

  1284. 			args: []string{

  1285. 				"ldap-test",

  1286. 			},

  1287. 			errMsg: "id is not set",

  1288. 		},

  1289. 		// case 19

  1290. 		{

  1291. 			args: []string{

  1292. 				"ldap-test",

  1293. 				"--id", "1",

  1294. 			},

  1295. 			existingLoginSource: &models.LoginSource{

  1296. 				Type: models.LoginPAM,

  1297. 				Cfg: &models.LDAPConfig{

  1298. 					Source: &ldap.Source{},

  1299. 				},

  1300. 			},

  1301. 			errMsg: "Invalid authentication type. expected: LDAP (simple auth), actual: PAM",

  1302. 		},

  1303. 	}

  1304. 

  1305. 	for n, c := range cases {

  1306. 		// Mock functions.

  1307. 		var updatedLoginSource *models.LoginSource

  1308. 		service := &authService{

  1309. 			initDB: func() error {

  1310. 				return nil

  1311. 			},

  1312. 			createLoginSource: func(loginSource *models.LoginSource) error {

  1313. 				assert.FailNow(t, "case %d: should not call createLoginSource", n)

  1314. 				return nil

  1315. 			},

  1316. 			updateLoginSource: func(loginSource *models.LoginSource) error {

  1317. 				updatedLoginSource = loginSource

  1318. 				return nil

  1319. 			},

  1320. 			getLoginSourceByID: func(id int64) (*models.LoginSource, error) {

  1321. 				if c.id != 0 {

  1322. 					assert.Equal(t, c.id, id, "case %d: wrong id", n)

  1323. 				}

  1324. 				if c.existingLoginSource != nil {

  1325. 					return c.existingLoginSource, nil

  1326. 				}

  1327. 				return &models.LoginSource{

  1328. 					Type: models.LoginDLDAP,

  1329. 					Cfg: &models.LDAPConfig{

  1330. 						Source: &ldap.Source{},

  1331. 					},

  1332. 				}, nil

  1333. 			},

  1334. 		}

  1335. 

  1336. 		// Create a copy of command to test

  1337. 		app := cli.NewApp()

  1338. 		app.Flags = cmdAuthUpdateLdapSimpleAuth.Flags

  1339. 		app.Action = service.updateLdapSimpleAuth

  1340. 

  1341. 		// Run it

  1342. 		err := app.Run(c.args)

  1343. 		if c.errMsg != "" {

  1344. 			assert.EqualError(t, err, c.errMsg, "case %d: error should match", n)

  1345. 		} else {

  1346. 			assert.NoError(t, err, "case %d: should have no errors", n)

  1347. 			assert.Equal(t, c.loginSource, updatedLoginSource, "case %d: wrong loginSource", n)

  1348. 		}

  1349. 	}

  1350. }
上海开阖软件有限公司 沪ICP备12045867号-1