Rob Crittenden
1e1985b17c
I have to do some pretty low-level LDAP work to achieve this. Since we can't read the key using our modlist generator won't work and lots of tricks would be needed to use the LDAPUpdate object in any case. I pulled usercertificate out of the global params and put into each appropriate function because it makes no sense for service-disable. This also adds a new variable, has_keytab, to service/host_show output. This flag tells us whether there is a krbprincipalkey.
118 lines
3.7 KiB
Python
118 lines
3.7 KiB
Python
# Authors:
|
|
# Rob Crittenden <rcritten@redhat.com>
|
|
# Pavel Zuna <pzuna@redhat.com>
|
|
#
|
|
# Copyright (C) 2008 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation; version 2 only
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
"""
|
|
Test the `ipalib/plugins/service.py` module.
|
|
"""
|
|
|
|
import sys
|
|
from xmlrpc_test import XMLRPC_test, assert_attr_equal
|
|
from ipalib import api
|
|
from ipalib import errors
|
|
|
|
|
|
class test_service(XMLRPC_test):
|
|
"""
|
|
Test the `service` plugin.
|
|
"""
|
|
host = u'ipatest.%s' % api.env.domain
|
|
principal = u'HTTP/ipatest.%s@%s' % (api.env.domain, api.env.realm)
|
|
hostprincipal = u'host/ipatest.%s@%s' % (api.env.domain, api.env.realm)
|
|
kw = {'krbprincipalname': principal}
|
|
|
|
def test_1_service_add(self):
|
|
"""
|
|
Test adding a HTTP principal using the `xmlrpc.service_add` method.
|
|
"""
|
|
self.failsafe_add(api.Object.host, self.host)
|
|
entry = self.failsafe_add(api.Object.service, self.principal)['result']
|
|
assert_attr_equal(entry, 'krbprincipalname', self.principal)
|
|
assert_attr_equal(entry, 'objectclass', 'ipaobject')
|
|
|
|
def test_2_service_add(self):
|
|
"""
|
|
Test adding a host principal using `xmlrpc.service_add`. Host
|
|
services are not allowed.
|
|
"""
|
|
# FIXME: Are host principals not allowed still? Running this test gives
|
|
# this error:
|
|
#
|
|
# NotFound: The host 'ipatest.example.com' does not exist to add a service to.
|
|
|
|
kw = {'krbprincipalname': self.hostprincipal}
|
|
try:
|
|
api.Command['service_add'](**kw)
|
|
except errors.HostService:
|
|
pass
|
|
else:
|
|
assert False
|
|
|
|
def test_3_service_add(self):
|
|
"""
|
|
Test adding a malformed principal ('foo').
|
|
"""
|
|
kw = {'krbprincipalname': u'foo'}
|
|
try:
|
|
api.Command['service_add'](**kw)
|
|
except errors.MalformedServicePrincipal:
|
|
pass
|
|
else:
|
|
assert False
|
|
|
|
def test_4_service_add(self):
|
|
"""
|
|
Test adding a malformed principal ('HTTP/foo@FOO.NET').
|
|
"""
|
|
kw = {'krbprincipalname': u'HTTP/foo@FOO.NET'}
|
|
try:
|
|
api.Command['service_add'](**kw)
|
|
except errors.RealmMismatch:
|
|
pass
|
|
else:
|
|
assert False
|
|
|
|
def test_5_service_show(self):
|
|
"""
|
|
Test the `xmlrpc.service_show` method.
|
|
"""
|
|
entry = api.Command['service_show'](self.principal)['result']
|
|
assert_attr_equal(entry, 'krbprincipalname', self.principal)
|
|
assert(entry['has_keytab'] == False)
|
|
|
|
def test_6_service_find(self):
|
|
"""
|
|
Test the `xmlrpc.service_find` method.
|
|
"""
|
|
entries = api.Command['service_find'](self.principal)['result']
|
|
assert_attr_equal(entries[0], 'krbprincipalname', self.principal)
|
|
|
|
def test_7_service_del(self):
|
|
"""
|
|
Test the `xmlrpc.service_del` method.
|
|
"""
|
|
assert api.Command['service_del'](self.principal)['result'] is True
|
|
|
|
# Verify that it is gone
|
|
try:
|
|
api.Command['service_show'](self.principal)
|
|
except errors.NotFound:
|
|
pass
|
|
else:
|
|
assert False
|