re2o/test_utils/runner.py

# Re2o est un logiciel d'administration développé initiallement au rezometz. Il
# se veut agnostique au réseau considéré, de manière à être installable en
# quelques clics.
#
# Copyright © 2017  Gabriel Détraz
# Copyright © 2017  Lara Kermarec
# Copyright © 2017  Augustin Lemesle
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License along
# with this program; if not, write to the Free Software Foundation, Inc.,
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.

"""Defines the custom runners for Re2o.
"""

import volatildap
import os.path

from django.test.runner import DiscoverRunner
from django.conf import settings

from users.models import LdapUser, LdapUserGroup, LdapServiceUser, LdapServiceUserGroup

# The path of this file
__here = os.path.dirname(os.path.realpath(__file__))
# The absolute path where to find the schemas for the LDAP
schema_path = os.path.abspath(os.path.join(__here, 'ldap', 'schema'))
# The absolute path of the "radius.schema" file
radius_schema_path = os.path.join(schema_path, 'radius.schema')
# The absolute path of the "samba.schema" file
samba_schema_path = os.path.join(schema_path, 'samba.schema')

# The suffix for the LDAP
suffix = 'dc=example,dc=net'
# The admin CN of the LDAP
rootdn = 'cn=admin,'+suffix

# Defines all ldap_entry mandatory for Re2o under a key-value list format
# that can be used directly by volatildap. For more on how to generate this
# data, see https://gitlab.federez.net/re2o/scripts/blob/master/print_ldap_entries.py
ldapentry_Utilisateurs = ('cn=Utilisateurs,'+suffix, {
    'cn': ['Utilisateurs'],
    'sambaSID': ['500'],
    'uid': ['Users'],
    'objectClass': ['posixGroup', 'top', 'sambaSamAccount', 'radiusprofile'],
    'gidNumber': ['500'],
})
ldapentry_groups = ('ou=groups,'+suffix, {
    'ou': ['groups'],
    'objectClass': ['organizationalUnit'],
    'description': ["Groupes d'utilisateurs"],
})
ldapentry_services = ('ou=services,ou=groups,'+suffix, {
    'ou': ['services'],
    'objectClass': ['organizationalUnit'],
    'description': ['Groupes de comptes techniques'],
})
ldapentry_service_users = ('ou=service-users,'+suffix, {
    'ou': ['service-users'],
    'objectClass': ['organizationalUnit'],
    'description': ["Utilisateurs techniques de l'annuaire"],
})
ldapentry_freeradius = ('cn=freeradius,ou=service-users,'+suffix, {
    'cn': ['freeradius'],
    'objectClass': ['applicationProcess', 'simpleSecurityObject'],
    'userPassword': ['FILL_IT'],
})
ldapentry_nssauth = ('cn=nssauth,ou=service-users,'+suffix, {
    'cn': ['nssauth'],
    'objectClass': ['applicationProcess', 'simpleSecurityObject'],
    'userPassword': ['FILL_IT'],
})
ldapentry_auth = ('cn=auth,ou=services,ou=groups,'+suffix, {
    'cn': ['auth'],
    'objectClass': ['groupOfNames'],
    'member': ['cn=nssauth,ou=service-users,'+suffix],
})
ldapentry_posix = ('ou=posix,ou=groups,'+suffix, {
    'ou': ['posix'],
    'objectClass': ['organizationalUnit'],
    'description': ['Groupes de comptes POSIX'],
})
ldapentry_wifi = ('cn=wifi,ou=service-users,'+suffix, {
    'cn': ['wifi'],
    'objectClass': ['applicationProcess', 'simpleSecurityObject'],
    'userPassword': ['FILL_IT'],
})
ldapentry_usermgmt = ('cn=usermgmt,ou=services,ou=groups,'+suffix, {
    'cn': ['usermgmt'],
    'objectClass': ['groupOfNames'],
    'member': ['cn=wifi,ou=service-users,'+suffix],
})
ldapentry_replica = ('cn=replica,ou=service-users,'+suffix, {
    'cn': ['replica'],
    'objectClass': ['applicationProcess', 'simpleSecurityObject'],
    'userPassword': ['FILL_IT'],
})
ldapentry_readonly = ('cn=readonly,ou=services,ou=groups,'+suffix, {
    'cn': ['readonly'],
    'objectClass': ['groupOfNames'],
    'member': ['cn=replica,ou=service-users,'+suffix, 'cn=freeradius,ou=service-users,'+suffix],
})
ldapbasic = dict([ldapentry_Utilisateurs, ldapentry_groups,
                  ldapentry_services, ldapentry_service_users,
                  ldapentry_freeradius, ldapentry_nssauth, ldapentry_auth,
                  ldapentry_posix, ldapentry_wifi, ldapentry_usermgmt,
                  ldapentry_replica, ldapentry_readonly])


class DiscoverLdapRunner(DiscoverRunner):
    """Discovers all the tests in the project

    This is a simple subclass of the default test runner
    `django.test.runner.DiscoverRunner` that creates a test LDAP
    right after the test databases are setup and destroys it right
    before the test databases are setup.
    It also ensure re2o's settings are using this new LDAP.
    """

    # The `volatildap.LdapServer` instance initiated with the minimal
    # structure required by Re2o
    ldap_server = volatildap.LdapServer(
        suffix=suffix,
        rootdn=rootdn,
        initial_data=ldapbasic,
        schemas=['core.schema', 'cosine.schema', 'inetorgperson.schema',
                 'nis.schema', radius_schema_path, samba_schema_path]
    )

    def __init__(self, *args, **kwargs):
        settings.DATABASES['ldap']['USER'] = self.ldap_server.rootdn
        settings.DATABASES['ldap']['PASSWORD'] = self.ldap_server.rootpw
        settings.DATABASES['ldap']['NAME'] = self.ldap_server.uri
        settings.LDAP['base_user_dn'] = ldapentry_Utilisateurs[0]
        settings.LDAP['base_userservice_dn'] = ldapentry_service_users[0]
        settings.LDAP['base_usergroup_dn'] = ldapentry_posix[0]
        settings.LDAP['base_userservicegroup_dn'] = ldapentry_services[0]
        settings.LDAP['user_gid'] = ldapentry_Utilisateurs[1].get('gidNumber', ["500"])[0]
        LdapUser.base_dn = settings.LDAP['base_user_dn']
        LdapUserGroup.base_dn = settings.LDAP['base_usergroup_dn']
        LdapServiceUser.base_dn = settings.LDAP['base_userservice_dn']
        LdapServiceUserGroup.base_dn = settings.LDAP['base_userservicegroup_dn']
        super(DiscoverLdapRunner, self).__init__(*args, **kwargs)


    def setup_databases(self, *args, **kwargs):
        ret = super(DiscoverLdapRunner, self).setup_databases(*args, **kwargs)        
        print("Creating test LDAP with volatildap...")
        self.ldap_server.start()
        return ret

    def teardown_databases(self, *args, **kwargs):
        self.ldap_server.stop()
        print("Destroying test LDAP...")
        super(DiscoverLdapRunner, self).teardown_databases(*args, **kwargs)