From b10d004f6461a8dd5d5d2766cf95e92c5d94927e Mon Sep 17 00:00:00 2001

From: Mark Reynolds <mreynolds@redhat.com>

Date: Thu, 4 Dec 2014 15:57:40 -0500

Subject: [PATCH 43/53] Ticket 47970 - add lib389 testcase

https://fedorahosted.org/389/ticket/47970

Reviewed by: nhosoi(Thanks!)

(cherry picked from commit f6929c9b7c24a43b019e966b1fc37d33b21274a1)

(cherry picked from commit b6cd13f49713fecf6b2c94a31e25cd726e216c65)

---

 dirsrvtests/tickets/ticket47970_test.py | 206 ++++++++++++++++++++++++++++++++

 1 file changed, 206 insertions(+)

 create mode 100644 dirsrvtests/tickets/ticket47970_test.py

diff --git a/dirsrvtests/tickets/ticket47970_test.py b/dirsrvtests/tickets/ticket47970_test.py

new file mode 100644

index 0000000..49d505a

--- /dev/null

+++ b/dirsrvtests/tickets/ticket47970_test.py

@@ -0,0 +1,206 @@

+import os

+import sys

+import time

+import ldap

+import ldap.sasl

+import logging

+import socket

+import pytest

+from lib389 import DirSrv, Entry, tools, tasks

+from lib389.tools import DirSrvTools

+from lib389._constants import *

+from lib389.properties import *

+from lib389.tasks import *

+from constants import *

+

+log = logging.getLogger(__name__)

+

+installation_prefix = None

+

+USER1_DN = "uid=user1,%s" % DEFAULT_SUFFIX

+USER2_DN = "uid=user2,%s" % DEFAULT_SUFFIX

+

+

+class TopologyStandalone(object):

+    def __init__(self, standalone):

+        standalone.open()

+        self.standalone = standalone

+

+

+@pytest.fixture(scope="module")

+def topology(request):

+    '''

+        This fixture is used to standalone topology for the 'module'.

+        At the beginning, It may exists a standalone instance.

+        It may also exists a backup for the standalone instance.

+

+        Principle:

+            If standalone instance exists:

+                restart it

+            If backup of standalone exists:

+                create/rebind to standalone

+

+                restore standalone instance from backup

+            else:

+                Cleanup everything

+                    remove instance

+                    remove backup

+                Create instance

+                Create backup

+    '''

+    global installation_prefix

+

+    if installation_prefix:

+        args_instance[SER_DEPLOYED_DIR] = installation_prefix

+

+    standalone = DirSrv(verbose=False)

+

+    # Args for the standalone instance

+    args_instance[SER_HOST] = HOST_STANDALONE

+    args_instance[SER_PORT] = PORT_STANDALONE

+    args_instance[SER_SERVERID_PROP] = SERVERID_STANDALONE

+    args_standalone = args_instance.copy()

+    standalone.allocate(args_standalone)

+

+    # Get the status of the backups

+    backup_standalone = standalone.checkBackupFS()

+

+    # Get the status of the instance and restart it if it exists

+    instance_standalone = standalone.exists()

+    if instance_standalone:

+        # assuming the instance is already stopped, just wait 5 sec max

+        standalone.stop(timeout=5)

+        standalone.start(timeout=10)

+

+    if backup_standalone:

+        # The backup exist, assuming it is correct

+        # we just re-init the instance with it

+        if not instance_standalone:

+            standalone.create()

+            # Used to retrieve configuration information (dbdir, confdir...)

+            standalone.open()

+

+        # restore standalone instance from backup

+        standalone.stop(timeout=10)

+        standalone.restoreFS(backup_standalone)

+        standalone.start(timeout=10)

+

+    else:

+        # We should be here only in two conditions

+        #      - This is the first time a test involve standalone instance

+        #      - Something weird happened (instance/backup destroyed)

+        #        so we discard everything and recreate all

+

+        # Remove the backup. So even if we have a specific backup file

+        # (e.g backup_standalone) we clear backup that an instance may have created

+        if backup_standalone:

+            standalone.clearBackupFS()

+

+        # Remove the instance

+        if instance_standalone:

+            standalone.delete()

+

+        # Create the instance

+        standalone.create()

+

+        # Used to retrieve configuration information (dbdir, confdir...)

+        standalone.open()

+

+        # Time to create the backups

+        standalone.stop(timeout=10)

+        standalone.backupfile = standalone.backupFS()

+        standalone.start(timeout=10)

+

+    # clear the tmp directory

+    standalone.clearTmpDir(__file__)

+

+    #

+    # Here we have standalone instance up and running

+    # Either coming from a backup recovery

+    # or from a fresh (re)init

+    # Time to return the topology

+    return TopologyStandalone(standalone)

+

+

+def test_ticket47970(topology):

+    """

+        Testing that a failed SASL bind does not trigger account lockout -

+        which would attempt to update the passwordRetryCount on the root dse entry

+    """

+

+    log.info('Testing Ticket 47970 - Testing that a failed SASL bind does not trigger account lockout')

+

+    #

+    # Enable account lockout

+    #

+    try:

+        topology.standalone.modify_s("cn=config", [(ldap.MOD_REPLACE, 'passwordLockout', 'on')])

+        log.info('account lockout enabled.')

+    except ldap.LDAPError, e:

+        log.error('Failed to enable account lockout: ' + e.message['desc'])

+        assert False

+

+    try:

+        topology.standalone.modify_s("cn=config", [(ldap.MOD_REPLACE, 'passwordMaxFailure', '5')])

+        log.info('passwordMaxFailure set.')

+    except ldap.LDAPError, e:

+        log.error('Failed to to set passwordMaxFailure: ' + e.message['desc'])

+        assert False

+

+    #

+    # Perform SASL bind that should fail

+    #

+    failed_as_expected = False

+    try:

+        user_name = "mark"

+        pw = "secret"

+        auth_tokens = ldap.sasl.digest_md5(user_name, pw)

+        topology.standalone.sasl_interactive_bind_s("", auth_tokens)

+    except ldap.INVALID_CREDENTIALS, e:

+        log.info("SASL Bind failed as expected")

+        failed_as_expected = True

+

+    if not failed_as_expected:

+        log.error("SASL bind unexpectedly succeeded!")

+        assert False

+

+    #

+    # Check that passwordRetryCount was not set on the root dse entry

+    #

+    try:

+        entry = topology.standalone.search_s("", ldap.SCOPE_BASE,

+                                             "passwordRetryCount=*",

+                                             ['passwordRetryCount'])

+    except ldap.LDAPError, e:

+        log.error('Failed to search Root DSE entry: ' + e.message['desc'])

+        assert False

+

+    if entry:

+        log.error('Root DSE was incorrectly updated')

+        assert False

+

+    # We passed

+    log.info('Root DSE was correctly not updated')

+    log.info("Test Passed.")

+

+

+def test_ticket47970_final(topology):

+    topology.standalone.stop(timeout=10)

+

+

+def run_isolated():

+    '''

+        run_isolated is used to run these test cases independently of a test scheduler (xunit, py.test..)

+        To run isolated without py.test, you need to

+            - edit this file and comment '@pytest.fixture' line before 'topology' function.

+            - set the installation prefix

+            - run this program

+    '''

+    global installation_prefix

+    installation_prefix = None

+

+    topo = topology(True)

+    test_ticket47970(topo)

+

+if __name__ == '__main__':

+    run_isolated()

\ No newline at end of file

-- 

1.9.3