1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
|
# coding: utf-8
#
# Copyright (C) 2016 FreeIPA Contributors see COPYING for license
#
from contextlib import contextmanager
import six
from ipalib import api
from ipatests.util import MockLDAP
trust_container_dn = "cn=ad,cn=trusts,{basedn}".format(
basedn=api.env.basedn)
trust_container_add = dict(
objectClass=[b"nsContainer", b"top"]
)
smb_cont_dn = "{cifsdomains},{basedn}".format(
cifsdomains=api.env.container_cifsdomains,
basedn=api.env.basedn)
smb_cont_add = dict(
objectClass=[b"nsContainer", b"top"]
)
def create_mock_trust_containers():
with MockLDAP() as ldap:
ldap.add_entry(trust_container_dn, trust_container_add)
ldap.add_entry(smb_cont_dn, smb_cont_add)
def remove_mock_trust_containers():
with MockLDAP() as ldap:
ldap.del_entry(trust_container_dn)
ldap.del_entry(smb_cont_dn)
@contextmanager
def mocked_trust_containers():
"""Mocked trust containers
Provides containers for the RPC tests:
cn=ad,cn=trusts,BASEDN
cn=ad,cn=etc,BASEDN
Upon exiting, it tries to remove the container entries.
If the user of the context manager failed to remove
all child entries, exiting the context manager will fail.
"""
create_mock_trust_containers()
try:
yield
finally:
remove_mock_trust_containers()
def get_range_dn(name):
format_str = "cn={name},cn=ranges,cn=etc,{basedn}"
data = dict(name=name, basedn=api.env.basedn)
return format_str.format(**data)
def get_trust_dn(name):
format_str = "cn={name},cn=ad,cn=trusts,{basedn}"
data = dict(name=name, basedn=api.env.basedn)
return format_str.format(**data)
def encode_mockldap_value(value):
value = str(value)
if six.PY3:
return value.encode('utf-8')
else:
return value
def get_trusted_dom_range_dict(name, base_id, size, rangetype, base_rid, sid):
return dict(
objectClass=[b"ipaIDrange", b"ipatrustedaddomainrange"],
ipaBaseID=encode_mockldap_value("{base_id}".format(base_id=base_id)),
ipaBaseRID=encode_mockldap_value("{base_rid}".format(base_rid=base_rid)),
ipaIDRangeSize=encode_mockldap_value("{size}".format(size=size)),
ipaNTTrustedDomainSID=encode_mockldap_value("{sid}".format(sid=sid)),
ipaRangeType=encode_mockldap_value("{rangetype}".format(rangetype=rangetype)),
)
def get_trusted_dom_dict(name, sid):
return dict(
objectClass=[b"ipaNTTrustedDomain", b"ipaIDobject", b"top"],
ipaNTFlatName=encode_mockldap_value(name.split('.')[0].upper()),
ipaNTTrustedDomainSID=encode_mockldap_value(sid),
ipaNTSIDBlacklistIncoming=b'S-1-0',
ipaNTTrustPartner=encode_mockldap_value('{name}.mock'.format(name=name)),
ipaNTTrustType=b'2',
ipaNTTrustDirection=b'3',
ipaNTTrustAttributes=b'8',
)
|
