1 # -*- coding: utf-8 -*-
4 # Copyright (c) 2009-2010, Bolloré telecom
7 # See AUTHORS file for a full list of contributors.
9 # Redistribution and use in source and binary forms, with or without modification,
10 # are permitted provided that the following conditions are met:
12 # 1. Redistributions of source code must retain the above copyright notice,
13 # this list of conditions and the following disclaimer.
15 # 2. Redistributions in binary form must reproduce the above copyright
16 # notice, this list of conditions and the following disclaimer in the
17 # documentation and/or other materials provided with the distribution.
19 # 3. Neither the name of Bolloré telecom nor the names of its contributors
20 # may be used to endorse or promote products derived from this software
21 # without specific prior written permission.
23 # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
24 # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
25 # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26 # DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
27 # ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
28 # (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
29 # LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
30 # ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
31 # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
32 # SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
35 from django.db.models import Q
36 from django.test import TestCase
40 from examples.models import LdapUser, LdapGroup
42 class BaseTestCase(TestCase):
44 cursor = ldapdb.connection._cursor()
45 for dn in [LdapGroup.base_dn, LdapUser.base_dn]:
46 rdn = dn.split(',')[0]
47 key, val = rdn.split('=')
48 attrs = [('objectClass', ['top', 'organizationalUnit']), (key, [val])]
50 cursor.connection.add_s(dn, attrs)
51 except ldap.ALREADY_EXISTS:
55 cursor = ldapdb.connection._cursor()
56 for base in [LdapGroup.base_dn, LdapUser.base_dn]:
58 results = cursor.connection.search_s(base, ldap.SCOPE_SUBTREE)
59 for dn, attrs in reversed(results):
60 cursor.connection.delete_s(dn)
61 except ldap.NO_SUCH_OBJECT:
64 class GroupTestCase(BaseTestCase):
66 super(GroupTestCase, self).setUp()
71 g.usernames = ['foouser', 'baruser']
77 g.usernames = ['zoouser', 'baruser']
83 g.usernames = ['wizuser', 'baruser']
88 qs = LdapGroup.objects.none()
89 self.assertEquals(qs.count(), 0)
91 qs = LdapGroup.objects.none()
92 self.assertEquals(len(qs), 0)
95 qs = LdapGroup.objects.all()
96 self.assertEquals(qs.count(), 3)
98 qs = LdapGroup.objects.all()
99 self.assertEquals(len(qs), 3)
101 def test_ldap_filter(self):
103 qs = LdapGroup.objects.filter(name='foogroup')
104 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(cn=foogroup))')
106 qs = LdapGroup.objects.filter(Q(name='foogroup'))
107 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(cn=foogroup))')
110 qs = LdapGroup.objects.filter(gid=1000, name='foogroup')
111 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(&(gidNumber=1000)(cn=foogroup)))')
113 qs = LdapGroup.objects.filter(Q(gid=1000) & Q(name='foogroup'))
114 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(&(gidNumber=1000)(cn=foogroup)))')
117 qs = LdapGroup.objects.filter(Q(gid=1000) | Q(name='foogroup'))
118 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(|(gidNumber=1000)(cn=foogroup)))')
121 qs = LdapGroup.objects.exclude(name='foogroup')
122 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(!(cn=foogroup)))')
124 qs = LdapGroup.objects.filter(~Q(name='foogroup'))
125 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(!(cn=foogroup)))')
128 qs = LdapGroup.objects.exclude(name='foogroup', gid=1000)
129 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(!(&(gidNumber=1000)(cn=foogroup))))')
131 qs = LdapGroup.objects.filter(name='foogroup').exclude(gid=1000)
132 self.assertEquals(qs.query._ldap_filter(), '(&(objectClass=posixGroup)(&(cn=foogroup)(!(gidNumber=1000))))')
134 def test_filter(self):
135 qs = LdapGroup.objects.filter(name='foogroup')
136 self.assertEquals(qs.count(), 1)
138 qs = LdapGroup.objects.filter(name='foogroup')
139 self.assertEquals(len(qs), 1)
142 self.assertEquals(g.dn, 'cn=foogroup,%s' % LdapGroup.base_dn)
143 self.assertEquals(g.name, 'foogroup')
144 self.assertEquals(g.gid, 1000)
145 self.assertEquals(g.usernames, ['foouser', 'baruser'])
147 # try to filter non-existent entries
148 qs = LdapGroup.objects.filter(name='does_not_exist')
149 self.assertEquals(qs.count(), 0)
151 qs = LdapGroup.objects.filter(name='does_not_exist')
152 self.assertEquals(len(qs), 0)
155 g = LdapGroup.objects.get(name='foogroup')
156 self.assertEquals(g.dn, 'cn=foogroup,%s' % LdapGroup.base_dn)
157 self.assertEquals(g.name, 'foogroup')
158 self.assertEquals(g.gid, 1000)
159 self.assertEquals(g.usernames, ['foouser', 'baruser'])
161 # try to get a non-existent entry
162 self.assertRaises(LdapGroup.DoesNotExist, LdapGroup.objects.get, name='does_not_exist')
164 def test_order_by(self):
166 qs = LdapGroup.objects.order_by('name')
167 self.assertEquals(len(qs), 3)
168 self.assertEquals(qs[0].name, 'bargroup')
169 self.assertEquals(qs[1].name, 'foogroup')
170 self.assertEquals(qs[2].name, 'wizgroup')
173 qs = LdapGroup.objects.order_by('-name')
174 self.assertEquals(len(qs), 3)
175 self.assertEquals(qs[0].name, 'wizgroup')
176 self.assertEquals(qs[1].name, 'foogroup')
177 self.assertEquals(qs[2].name, 'bargroup')
180 qs = LdapGroup.objects.order_by('gid')
181 self.assertEquals(len(qs), 3)
182 self.assertEquals(qs[0].gid, 1000)
183 self.assertEquals(qs[1].gid, 1001)
184 self.assertEquals(qs[2].gid, 1002)
187 qs = LdapGroup.objects.order_by('-gid')
188 self.assertEquals(len(qs), 3)
189 self.assertEquals(qs[0].gid, 1002)
190 self.assertEquals(qs[1].gid, 1001)
191 self.assertEquals(qs[2].gid, 1000)
193 def test_bulk_delete(self):
194 LdapGroup.objects.all().delete()
196 qs = LdapGroup.objects.all()
197 self.assertEquals(len(qs), 0)
199 def test_slice(self):
200 qs = LdapGroup.objects.all()
202 self.assertEquals(len(objs), 3)
203 self.assertEquals(objs[0].gid, 1000)
204 self.assertEquals(objs[1].gid, 1001)
205 self.assertEquals(objs[2].gid, 1002)
208 qs = LdapGroup.objects.all()
210 self.assertEquals(objs.count(), 2)
213 self.assertEquals(len(objs), 2)
214 self.assertEquals(objs[0].gid, 1000)
215 self.assertEquals(objs[1].gid, 1001)
218 qs = LdapGroup.objects.all()
220 self.assertEquals(objs.count(), 2)
223 self.assertEquals(len(objs), 2)
224 self.assertEquals(objs[0].gid, 1001)
225 self.assertEquals(objs[1].gid, 1002)
228 qs = LdapGroup.objects.all()
230 self.assertEquals(objs.count(), 1)
233 self.assertEquals(len(objs), 1)
234 self.assertEquals(objs[0].gid, 1001)
236 def test_update(self):
237 g = LdapGroup.objects.get(name='foogroup')
240 g.usernames = ['foouser2', 'baruser2']
243 # make sure DN gets updated if we change the pk
246 self.assertEquals(g.dn, 'cn=foogroup2,%s' % LdapGroup.base_dn)
248 def test_values(self):
249 qs = LdapGroup.objects.values('name')
250 self.assertEquals(len(qs), 3)
251 self.assertEquals(qs[0], {'name': 'foogroup'})
252 self.assertEquals(qs[1], {'name': 'bargroup'})
253 self.assertEquals(qs[2], {'name': 'wizgroup'})
255 def test_values_list(self):
256 qs = LdapGroup.objects.values_list('name')
257 self.assertEquals(len(qs), 3)
258 self.assertEquals(qs[0], ('foogroup',))
259 self.assertEquals(qs[1], ('bargroup',))
260 self.assertEquals(qs[2], ('wizgroup',))
262 def test_delete(self):
263 g = LdapGroup.objects.get(name='foogroup')
266 qs = LdapGroup.objects.all()
267 self.assertEquals(len(qs), 2)
269 class UserTestCase(BaseTestCase):
271 super(UserTestCase, self).setUp()
274 u.first_name = u"Fôo"
275 u.last_name = u"Usér"
276 u.full_name = u"Fôo Usér"
279 u.home_directory = "/home/foouser"
281 u.username = "foouser"
282 u.photo = '\xff\xd8\xff\xe0\x00\x10JFIF\x00\x01\x01\x01\x00H\x00H\x00\x00\xff\xfe\x00\x1cCreated with GIMP on a Mac\xff\xdb\x00C\x00\x05\x03\x04\x04\x04\x03\x05\x04\x04\x04\x05\x05\x05\x06\x07\x0c\x08\x07\x07\x07\x07\x0f\x0b\x0b\t\x0c\x11\x0f\x12\x12\x11\x0f\x11\x11\x13\x16\x1c\x17\x13\x14\x1a\x15\x11\x11\x18!\x18\x1a\x1d\x1d\x1f\x1f\x1f\x13\x17"$"\x1e$\x1c\x1e\x1f\x1e\xff\xdb\x00C\x01\x05\x05\x05\x07\x06\x07\x0e\x08\x08\x0e\x1e\x14\x11\x14\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\xff\xc0\x00\x11\x08\x00\x08\x00\x08\x03\x01"\x00\x02\x11\x01\x03\x11\x01\xff\xc4\x00\x15\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\xff\xc4\x00\x19\x10\x00\x03\x01\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x02\x06\x11A\xff\xc4\x00\x14\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xc4\x00\x14\x11\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\x00\x0c\x03\x01\x00\x02\x11\x03\x11\x00?\x00\x9d\xf29wU5Q\xd6\xfd\x00\x01\xff\xd9'
286 u = LdapUser.objects.get(username='foouser')
287 self.assertEquals(u.first_name, u'Fôo')
288 self.assertEquals(u.last_name, u'Usér')
289 self.assertEquals(u.full_name, u'Fôo Usér')
291 self.assertEquals(u.group, 1000)
292 self.assertEquals(u.home_directory, '/home/foouser')
293 self.assertEquals(u.uid, 2000)
294 self.assertEquals(u.username, 'foouser')
295 self.assertEquals(u.photo, '\xff\xd8\xff\xe0\x00\x10JFIF\x00\x01\x01\x01\x00H\x00H\x00\x00\xff\xfe\x00\x1cCreated with GIMP on a Mac\xff\xdb\x00C\x00\x05\x03\x04\x04\x04\x03\x05\x04\x04\x04\x05\x05\x05\x06\x07\x0c\x08\x07\x07\x07\x07\x0f\x0b\x0b\t\x0c\x11\x0f\x12\x12\x11\x0f\x11\x11\x13\x16\x1c\x17\x13\x14\x1a\x15\x11\x11\x18!\x18\x1a\x1d\x1d\x1f\x1f\x1f\x13\x17"$"\x1e$\x1c\x1e\x1f\x1e\xff\xdb\x00C\x01\x05\x05\x05\x07\x06\x07\x0e\x08\x08\x0e\x1e\x14\x11\x14\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\x1e\xff\xc0\x00\x11\x08\x00\x08\x00\x08\x03\x01"\x00\x02\x11\x01\x03\x11\x01\xff\xc4\x00\x15\x00\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\xff\xc4\x00\x19\x10\x00\x03\x01\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x02\x06\x11A\xff\xc4\x00\x14\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xc4\x00\x14\x11\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\x00\x0c\x03\x01\x00\x02\x11\x03\x11\x00?\x00\x9d\xf29wU5Q\xd6\xfd\x00\x01\xff\xd9')
297 self.assertRaises(LdapUser.DoesNotExist, LdapUser.objects.get, username='does_not_exist')
299 def test_update(self):
300 u = LdapUser.objects.get(username='foouser')
301 u.first_name = u'Fôo2'
304 # make sure DN gets updated if we change the pk
305 u.username = 'foouser2'
307 self.assertEquals(u.dn, 'uid=foouser2,%s' % LdapUser.base_dn)
309 class ScopedTestCase(BaseTestCase):
311 super(ScopedTestCase, self).setUp()
313 cursor = ldapdb.connection._cursor()
314 self.scoped_dn = "ou=contacts,%s" % LdapGroup.base_dn
315 attrs = [('objectClass', ['top', 'organizationalUnit']), ("ou", ["contacts"])]
316 cursor.connection.add_s(self.scoped_dn, attrs)
318 def test_scope(self):
319 ScopedGroup = LdapGroup.scoped(self.scoped_dn)
327 qs = LdapGroup.objects.all()
328 self.assertEquals(qs.count(), 1)
330 qs = ScopedGroup.objects.all()
331 self.assertEquals(qs.count(), 0)
333 # create scoped group
335 g2.name = "scopedgroup"
339 qs = LdapGroup.objects.all()
340 self.assertEquals(qs.count(), 2)
342 qs = ScopedGroup.objects.all()
343 self.assertEquals(qs.count(), 1)
345 class AdminTestCase(BaseTestCase):
346 fixtures = ['test_users.json']
349 super(AdminTestCase, self).setUp()
354 g.usernames = ['foouser', 'baruser']
360 g.usernames = ['zoouser', 'baruser']
366 u.full_name = "Foo User"
368 u.home_directory = "/home/foouser"
370 u.username = "foouser"
376 u.full_name = "Bar User"
378 u.home_directory = "/home/baruser"
380 u.username = "baruser"
383 self.client.login(username="test_user", password="password")
385 def test_index(self):
386 response = self.client.get('/admin/examples/')
387 self.assertContains(response, "Ldap groups")
388 self.assertContains(response, "Ldap users")
390 def test_group_list(self):
391 response = self.client.get('/admin/examples/ldapgroup/')
392 self.assertContains(response, "Ldap groups")
393 self.assertContains(response, "foogroup")
394 self.assertContains(response, "1000")
397 response = self.client.get('/admin/examples/ldapgroup/?o=1')
398 self.assertContains(response, "Ldap groups")
399 self.assertContains(response, "foogroup")
400 self.assertContains(response, "1000")
403 response = self.client.get('/admin/examples/ldapgroup/?o=2')
404 self.assertContains(response, "Ldap groups")
405 self.assertContains(response, "foogroup")
406 self.assertContains(response, "1000")
408 def test_group_detail(self):
409 response = self.client.get('/admin/examples/ldapgroup/foogroup/')
410 self.assertContains(response, "foogroup")
411 self.assertContains(response, "1000")
413 def test_group_add(self):
414 response = self.client.post('/admin/examples/ldapgroup/add/', {'gid': '1002', 'name': 'wizgroup'})
415 self.assertRedirects(response, '/admin/examples/ldapgroup/')
416 qs = LdapGroup.objects.all()
417 self.assertEquals(qs.count(), 3)
419 def test_group_delete(self):
420 response = self.client.post('/admin/examples/ldapgroup/foogroup/delete/', {'yes': 'post'})
421 self.assertRedirects(response, '/admin/examples/ldapgroup/')
422 qs = LdapGroup.objects.all()
423 self.assertEquals(qs.count(), 1)
425 def test_group_search(self):
426 response = self.client.get('/admin/examples/ldapgroup/?q=foo')
427 self.assertContains(response, "Ldap groups")
428 self.assertContains(response, "foogroup")
429 self.assertContains(response, "1000")
431 def test_user_list(self):
432 response = self.client.get('/admin/examples/ldapuser/')
433 self.assertContains(response, "Ldap users")
434 self.assertContains(response, "foouser")
435 self.assertContains(response, "2000")
438 response = self.client.get('/admin/examples/ldapuser/?o=1')
439 self.assertContains(response, "Ldap users")
440 self.assertContains(response, "foouser")
441 self.assertContains(response, "2000")
444 response = self.client.get('/admin/examples/ldapuser/?o=2')
445 self.assertContains(response, "Ldap users")
446 self.assertContains(response, "foouser")
447 self.assertContains(response, "2000")
449 def test_user_detail(self):
450 response = self.client.get('/admin/examples/ldapuser/foouser/')
451 self.assertContains(response, "foouser")
452 self.assertContains(response, "2000")
454 def test_user_delete(self):
455 response = self.client.post('/admin/examples/ldapuser/foouser/delete/', {'yes': 'post'})
456 self.assertRedirects(response, '/admin/examples/ldapuser/')