# coding: utf-8 # # Copyright (C) 2016 FreeIPA Contributors see COPYING for license # from contextlib import contextmanager import six from ipalib import api from ipatests.util import MockLDAP trust_container_dn = "cn=ad,cn=trusts,{basedn}".format( basedn=api.env.basedn) trust_container_add = dict( objectClass=[b"nsContainer", b"top"] ) smb_cont_dn = "{cifsdomains},{basedn}".format( cifsdomains=api.env.container_cifsdomains, basedn=api.env.basedn) smb_cont_add = dict( objectClass=[b"nsContainer", b"top"] ) def create_mock_trust_containers(): with MockLDAP() as ldap: ldap.add_entry(trust_container_dn, trust_container_add) ldap.add_entry(smb_cont_dn, smb_cont_add) def remove_mock_trust_containers(): with MockLDAP() as ldap: ldap.del_entry(trust_container_dn) ldap.del_entry(smb_cont_dn) @contextmanager def mocked_trust_containers(): """Mocked trust containers Provides containers for the RPC tests: cn=ad,cn=trusts,BASEDN cn=ad,cn=etc,BASEDN Upon exiting, it tries to remove the container entries. If the user of the context manager failed to remove all child entries, exiting the context manager will fail. """ create_mock_trust_containers() try: yield finally: remove_mock_trust_containers() def get_range_dn(name): format_str = "cn={name},cn=ranges,cn=etc,{basedn}" data = dict(name=name, basedn=api.env.basedn) return format_str.format(**data) def get_trust_dn(name): format_str = "cn={name},cn=ad,cn=trusts,{basedn}" data = dict(name=name, basedn=api.env.basedn) return format_str.format(**data) def encode_mockldap_value(value): value = str(value) if six.PY3: return value.encode('utf-8') else: return value def get_trusted_dom_range_dict(name, base_id, size, rangetype, base_rid, sid): return dict( objectClass=[b"ipaIDrange", b"ipatrustedaddomainrange"], ipaBaseID=encode_mockldap_value("{base_id}".format(base_id=base_id)), ipaBaseRID=encode_mockldap_value("{base_rid}".format(base_rid=base_rid)), ipaIDRangeSize=encode_mockldap_value("{size}".format(size=size)), ipaNTTrustedDomainSID=encode_mockldap_value("{sid}".format(sid=sid)), ipaRangeType=encode_mockldap_value("{rangetype}".format(rangetype=rangetype)), ) def get_trusted_dom_dict(name, sid): return dict( objectClass=[b"ipaNTTrustedDomain", b"ipaIDobject", b"top"], ipaNTFlatName=encode_mockldap_value(name.split('.')[0].upper()), ipaNTTrustedDomainSID=encode_mockldap_value(sid), ipaNTSIDBlacklistIncoming=b'S-1-0', ipaNTTrustPartner=encode_mockldap_value('{name}.mock'.format(name=name)), ipaNTTrustType=b'2', ipaNTTrustDirection=b'3', ipaNTTrustAttributes=b'8', )