mirror of https://github.com/nitnelave/lldap.git
113 lines
3.8 KiB
Rust
113 lines
3.8 KiB
Rust
use std::collections::{HashMap, HashSet};
|
|
|
|
use crate::common::{
|
|
env,
|
|
fixture::{new_id, LLDAPFixture, User},
|
|
};
|
|
use ldap3::{LdapConn, Scope, SearchEntry, SearchResult};
|
|
use serial_test::file_serial;
|
|
mod common;
|
|
|
|
#[test]
|
|
#[file_serial]
|
|
fn basic_users_search() {
|
|
let mut fixture = LLDAPFixture::new();
|
|
let prefix = "ldap-basic_users_search-";
|
|
let user1_name = new_id(Some(prefix));
|
|
let user2_name = new_id(Some(prefix));
|
|
let user3_name = new_id(Some(prefix));
|
|
let group1_name = new_id(Some(prefix));
|
|
let group2_name = new_id(Some(prefix));
|
|
let initial_state = vec![
|
|
User::new(&user1_name, vec![&group1_name]),
|
|
User::new(&user2_name, vec![&group1_name, &group2_name]),
|
|
User::new(&user3_name, vec![]),
|
|
];
|
|
fixture.load_state(&initial_state);
|
|
|
|
let mut ldap =
|
|
LdapConn::new(env::ldap_url().as_str()).expect("failed to create ldap connection");
|
|
let base_dn = env::base_dn();
|
|
let bind_dn = format!("uid={},ou=people,{}", env::admin_dn(), base_dn);
|
|
ldap.simple_bind(bind_dn.as_str(), env::admin_password().as_str())
|
|
.expect("failed to bind to ldap");
|
|
|
|
let attrs = vec!["uid", "memberof"];
|
|
let found_users = get_users_and_groups(
|
|
ldap.search(
|
|
env::base_dn().as_str(),
|
|
Scope::Subtree,
|
|
"(objectclass=person)",
|
|
attrs,
|
|
)
|
|
.expect("failed to find users"),
|
|
);
|
|
assert!(found_users.contains_key(&user1_name));
|
|
assert!(found_users
|
|
.get(&user1_name)
|
|
.unwrap()
|
|
.contains(format!("cn={},ou=groups,{}", &group1_name, base_dn).as_str()));
|
|
assert!(found_users.contains_key(&user2_name));
|
|
assert!(found_users
|
|
.get(&user2_name)
|
|
.unwrap()
|
|
.contains(format!("cn={},ou=groups,{}", &group1_name, base_dn).as_str()));
|
|
assert!(found_users
|
|
.get(&user2_name)
|
|
.unwrap()
|
|
.contains(format!("cn={},ou=groups,{}", &group2_name, base_dn).as_str()));
|
|
assert!(found_users.contains_key(&user3_name));
|
|
assert!(found_users.get(&user3_name).unwrap().is_empty());
|
|
ldap.unbind().expect("failed to unbind ldap connection");
|
|
}
|
|
|
|
#[test]
|
|
#[file_serial]
|
|
fn admin_search() {
|
|
let mut _fixture = LLDAPFixture::new();
|
|
|
|
let mut ldap =
|
|
LdapConn::new(env::ldap_url().as_str()).expect("failed to create ldap connection");
|
|
let base_dn = env::base_dn();
|
|
let bind_dn = format!("uid={},ou=people,{}", env::admin_dn(), base_dn);
|
|
ldap.simple_bind(bind_dn.as_str(), env::admin_password().as_str())
|
|
.expect("failed to bind to ldap");
|
|
|
|
let attrs = vec!["uid", "memberof"];
|
|
let admin_name = env::admin_dn();
|
|
let admin_group_name = "lldap_admin";
|
|
let found_users = get_users_and_groups(
|
|
ldap.search(
|
|
env::base_dn().as_str(),
|
|
Scope::Subtree,
|
|
format!("(&(objectclass=person)(uid={}))", admin_name).as_str(),
|
|
attrs,
|
|
)
|
|
.expect("failed to find admin"),
|
|
);
|
|
|
|
assert!(found_users.contains_key(&admin_name));
|
|
assert!(found_users
|
|
.get(&admin_name)
|
|
.unwrap()
|
|
.contains(format!("cn={},ou=groups,{}", admin_group_name, base_dn).as_str()));
|
|
ldap.unbind().expect("failed to unbind ldap connection");
|
|
}
|
|
|
|
fn get_users_and_groups(results: SearchResult) -> HashMap<String, HashSet<String>> {
|
|
let results = results
|
|
.success()
|
|
.expect("failed to get successful result")
|
|
.0;
|
|
let mut found_users: HashMap<String, HashSet<String>> = HashMap::new();
|
|
for result in results {
|
|
let attrs = SearchEntry::construct(result).attrs;
|
|
let user = attrs.get("uid").unwrap().first().unwrap();
|
|
let user_groups = attrs.get("memberof").unwrap().clone();
|
|
let mut groups: HashSet<String> = HashSet::new();
|
|
groups.extend(user_groups.clone());
|
|
found_users.insert(user.clone(), groups);
|
|
}
|
|
found_users
|
|
}
|