Includes mmctl into the mono-repo (#23091)
* Includes mmctl into the mono-repo * Update to use the new public module paths * Adds docs check to the mmctl CI * Fix public utils import path * Tidy up modules * Fix linter * Update CI tasks to use the new file structure * Update CI references
Этот коммит содержится в:
коммит произвёл
GitHub
родитель
412109b02e
Коммит
951456c780
129
server/cmd/mmctl/commands/ldap_e2e_test.go
Обычный файл
129
server/cmd/mmctl/commands/ldap_e2e_test.go
Обычный файл
@@ -0,0 +1,129 @@
|
||||
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
||||
// See LICENSE.txt for license information.
|
||||
|
||||
package commands
|
||||
|
||||
import (
|
||||
"os"
|
||||
"time"
|
||||
|
||||
"github.com/mattermost/mattermost-server/server/public/model"
|
||||
"github.com/mattermost/mattermost-server/server/v8/channels/api4"
|
||||
"github.com/mattermost/mattermost-server/server/v8/channels/utils/testutils"
|
||||
"github.com/spf13/cobra"
|
||||
|
||||
"github.com/mattermost/mattermost-server/server/v8/cmd/mmctl/client"
|
||||
"github.com/mattermost/mattermost-server/server/v8/cmd/mmctl/printer"
|
||||
)
|
||||
|
||||
func configForLdap(th *api4.TestHelper) {
|
||||
ldapHost := os.Getenv("CI_LDAP_HOST")
|
||||
if ldapHost == "" {
|
||||
ldapHost = testutils.GetInterface(*th.App.Config().LdapSettings.LdapPort)
|
||||
}
|
||||
|
||||
th.App.UpdateConfig(func(cfg *model.Config) {
|
||||
*cfg.ServiceSettings.EnableMultifactorAuthentication = true
|
||||
*cfg.LdapSettings.Enable = true
|
||||
*cfg.LdapSettings.EnableSync = true
|
||||
*cfg.LdapSettings.LdapServer = "dockerhost"
|
||||
*cfg.LdapSettings.BaseDN = "dc=mm,dc=test,dc=com"
|
||||
*cfg.LdapSettings.LdapServer = ldapHost
|
||||
*cfg.LdapSettings.BindUsername = "cn=admin,dc=mm,dc=test,dc=com"
|
||||
*cfg.LdapSettings.BindPassword = "mostest"
|
||||
*cfg.LdapSettings.FirstNameAttribute = "cn"
|
||||
*cfg.LdapSettings.LastNameAttribute = "sn"
|
||||
*cfg.LdapSettings.NicknameAttribute = "cn"
|
||||
*cfg.LdapSettings.EmailAttribute = "mail"
|
||||
*cfg.LdapSettings.UsernameAttribute = "uid"
|
||||
*cfg.LdapSettings.IdAttribute = "cn"
|
||||
*cfg.LdapSettings.LoginIdAttribute = "uid"
|
||||
*cfg.LdapSettings.SkipCertificateVerification = true
|
||||
*cfg.LdapSettings.GroupFilter = ""
|
||||
*cfg.LdapSettings.GroupDisplayNameAttribute = "cN"
|
||||
*cfg.LdapSettings.GroupIdAttribute = "entRyUuId"
|
||||
*cfg.LdapSettings.MaxPageSize = 0
|
||||
})
|
||||
|
||||
th.App.Srv().SetLicense(model.NewTestLicense("ldap"))
|
||||
}
|
||||
|
||||
func (s *MmctlE2ETestSuite) TestLdapSyncCmd() {
|
||||
s.SetupEnterpriseTestHelper().InitBasic()
|
||||
configForLdap(s.th)
|
||||
|
||||
s.Run("MM-T3971 Should not allow regular user to sync LDAP groups", func() {
|
||||
printer.Clean()
|
||||
|
||||
err := ldapSyncCmdF(s.th.Client, &cobra.Command{}, nil)
|
||||
s.Require().Error(err)
|
||||
s.Require().Len(printer.GetLines(), 0)
|
||||
s.Require().Len(printer.GetErrorLines(), 0)
|
||||
})
|
||||
|
||||
s.RunForSystemAdminAndLocal("MM-T2529 Should sync LDAP groups", func(c client.Client) {
|
||||
printer.Clean()
|
||||
|
||||
jobs, appErr := s.th.App.GetJobsByTypePage(model.JobTypeLdapSync, 0, 100)
|
||||
s.Require().Nil(appErr)
|
||||
initialNumJobs := len(jobs)
|
||||
|
||||
err := ldapSyncCmdF(c, &cobra.Command{}, nil)
|
||||
s.Require().NoError(err)
|
||||
|
||||
s.Require().NotEmpty(printer.GetLines())
|
||||
s.Require().Equal(printer.GetLines()[0], map[string]interface{}{"status": "ok"})
|
||||
s.Require().Len(printer.GetErrorLines(), 0)
|
||||
|
||||
// we need to wait a bit for job creation
|
||||
time.Sleep(time.Second)
|
||||
|
||||
jobs, appErr = s.th.App.GetJobsByTypePage(model.JobTypeLdapSync, 0, 100)
|
||||
s.Require().Nil(appErr)
|
||||
s.Require().NotEmpty(jobs)
|
||||
s.Assert().Equal(initialNumJobs+1, len(jobs))
|
||||
})
|
||||
}
|
||||
|
||||
func (s *MmctlE2ETestSuite) TestLdapIDMigrateCmd() {
|
||||
s.SetupEnterpriseTestHelper().InitBasic()
|
||||
configForLdap(s.th)
|
||||
s.th.App.UpdateConfig(func(cfg *model.Config) { *cfg.LdapSettings.IdAttribute = "uid" })
|
||||
|
||||
// use existing ldap user from the test-data.ldif script
|
||||
// dn: uid=dev.one,ou=testusers,dc=mm,dc=test,dc=com
|
||||
// cn: Dev1
|
||||
// userPassword: Password1
|
||||
ldapUser, appErr := s.th.App.AuthenticateUserForLogin(s.th.Context, "", "dev.one", "Password1", "", "", true)
|
||||
s.Require().Nil(appErr)
|
||||
s.Require().NotNil(ldapUser)
|
||||
s.Require().Equal(model.UserAuthServiceLdap, ldapUser.AuthService)
|
||||
s.Require().Equal("dev.one", *ldapUser.AuthData)
|
||||
|
||||
s.Run("MM-T3973 Should not allow regular user to migrate LDAP ID attribute", func() {
|
||||
printer.Clean()
|
||||
|
||||
err := ldapIDMigrateCmdF(s.th.Client, &cobra.Command{}, []string{"objectGUID"})
|
||||
s.Require().Error(err)
|
||||
s.Require().Len(printer.GetLines(), 0)
|
||||
s.Require().Len(printer.GetErrorLines(), 0)
|
||||
})
|
||||
|
||||
s.RunForSystemAdminAndLocal("MM-T3972 Should migrate LDAP ID attribute", func(c client.Client) {
|
||||
printer.Clean()
|
||||
|
||||
err := ldapIDMigrateCmdF(c, &cobra.Command{}, []string{"cn"})
|
||||
s.Require().NoError(err)
|
||||
defer func() {
|
||||
s.Require().Nil(s.th.App.MigrateIdLDAP("uid"))
|
||||
}()
|
||||
|
||||
s.Require().NotEmpty(printer.GetLines())
|
||||
s.Require().Equal(printer.GetLines()[0], "AD/LDAP IdAttribute migration complete. You can now change your IdAttribute to: "+"cn")
|
||||
s.Require().Len(printer.GetErrorLines(), 0)
|
||||
|
||||
updatedUser, appErr := s.th.App.GetUser(ldapUser.Id)
|
||||
s.Require().Nil(appErr)
|
||||
s.Require().Equal("Dev1", *updatedUser.AuthData)
|
||||
})
|
||||
}
|
||||
Ссылка в новой задаче
Block a user