def test_on_created_same_host(self, connection):
"""Test gmsa.HostGroupWatch._on_created_placement."""
# Access protected module
# pylint: disable=W0212
server1_path = os.path.join(self.placement_dir, 'server1.ad.com')
os.mkdir(server1_path)
with io.open(os.path.join(self.servers_dir, 'server1.ad.com'),
'w') as f:
yaml.dump({
servers.DC_KEY: 'dc.ad.com',
servers.DN_KEY: 'CN=server1,DC=AD,DC=COM',
'partition': 'partition1'
}, f)
mock_connection = mock.MagicMock()
connection.return_value = mock_connection
type(mock_connection).result = mock.PropertyMock(side_effect={
'result': 0
})
type(mock_connection).response = mock.PropertyMock(return_value=[
{'attributes': {
'samAccountName': 'proid1-gmsa-hosts',
'member': []
}}
])
watch = gmsa.HostGroupWatch(self.root, 'partition1',
'OU=test,DC=ad,DC=com', '{}-gmsa-hosts')
watch._sync()
self.assertEqual(watch._proids, {
'proid1': {},
})
placement_path1 = os.path.join(server1_path,
'proid1.app#0000000000001')
utils.touch(placement_path1)
watch._on_created_placement(placement_path1)
self.assertEqual(watch._proids, {
'proid1': {'CN=server1,DC=AD,DC=COM': 1},
})
placement_path2 = os.path.join(server1_path,
'proid1.app#0000000000001')
utils.touch(placement_path2)
watch._on_created_placement(placement_path2)
self.assertEqual(watch._proids, {
'proid1': {'CN=server1,DC=AD,DC=COM': 2},
})
mock_connection.modify.assert_has_calls([
mock.call('CN=proid1-gmsa-hosts,OU=test,DC=ad,DC=com',
{'member': [(ldap3.MODIFY_ADD,
['CN=server1,DC=AD,DC=COM'])]}),
])
self.assertEqual(mock_connection.modify.call_count, 1)
def gmsa_sync(fs_root, partition, group_ou, group_pattern, no_lock):
"""Sync placements GMSA groups."""
# keep sleeping until zksync ready
zksync_utils.wait_for_ready(fs_root)
watch = gmsa.HostGroupWatch(fs_root, partition, group_ou,
group_pattern)
if not no_lock:
lock = zkutils.make_lock(context.GLOBAL.zk.conn,
z.path.election(__name__))
_LOGGER.info('Waiting for leader lock.')
with lock:
watch.run()
else:
_LOGGER.info('Running without lock.')
watch.run()
def test_sync(self, connection):
"""Test gmsa.HostGroupWatch.sync."""
# Access protected module
# pylint: disable=W0212
server1_path = os.path.join(self.placement_dir, 'server1.ad.com')
os.mkdir(server1_path)
utils.touch(os.path.join(server1_path, 'proid1.app#0000000000001'))
server2_path = os.path.join(self.placement_dir, 'server2.ad.com')
os.mkdir(server2_path)
utils.touch(os.path.join(server2_path, 'proid4.app#0000000000004'))
server3_path = os.path.join(self.placement_dir, 'server3.ad.com')
os.mkdir(server3_path)
server4_path = os.path.join(self.placement_dir, 'server4.ad.com')
os.mkdir(server4_path)
utils.touch(os.path.join(server4_path, 'proid3.app#0000000000003'))
server5_path = os.path.join(self.placement_dir, 'server5.ad.com')
os.mkdir(server5_path)
utils.touch(os.path.join(server5_path, 'proid5.app#0000000000005'))
utils.touch(os.path.join(server5_path, 'proid5.app#0000000000006'))
with io.open(os.path.join(self.servers_dir, 'server1.ad.com'),
'w') as f:
yaml.dump({
servers.DC_KEY: 'dc.ad.com',
servers.DN_KEY: 'CN=server1,DC=AD,DC=COM',
'partition': 'partition1'
}, f)
with io.open(os.path.join(self.servers_dir, 'server2.ad.com'),
'w') as f:
yaml.dump({
servers.DC_KEY: 'dc.ad.com',
servers.DN_KEY: 'CN=server2,DC=AD,DC=COM',
'partition': 'partition1'
}, f)
with io.open(os.path.join(self.servers_dir, 'server3.ad.com'),
'w') as f:
yaml.dump({
servers.DC_KEY: 'dc.ad.com',
servers.DN_KEY: 'CN=server3,DC=AD,DC=COM',
'partition': 'partition1'
}, f)
with io.open(os.path.join(self.servers_dir, 'server5.ad.com'),
'w') as f:
yaml.dump({
servers.DC_KEY: 'dc.ad.com',
servers.DN_KEY: 'CN=server5,DC=AD,DC=COM',
'partition': 'partition1'
}, f)
mock_connection = mock.MagicMock()
connection.return_value = mock_connection
type(mock_connection).result = mock.PropertyMock(side_effect={
'result': 0
})
type(mock_connection).response = mock.PropertyMock(return_value=[
{'attributes': {
'samAccountName': 'proid1-gmsa-hosts',
'member': ['CN=server1,DC=AD,DC=COM']
}},
{'attributes': {
'samAccountName': 'proid2-gmsa-hosts',
'member': ['CN=server3,DC=AD,DC=COM']
}},
{'attributes': {
'samAccountName': 'proid3-gmsa-hosts',
'member': []
}},
{'attributes': {
'samAccountName': 'proid4-gmsa-hosts',
'member': []
}},
{'attributes': {
'samAccountName': 'proid5-gmsa-hosts',
'member': []
}}
])
watch = gmsa.HostGroupWatch(self.root, 'partition1',
'OU=test,DC=ad,DC=com', '{}-gmsa-hosts')
watch._sync()
self.assertEqual(watch._proids, {
'proid1': {'CN=server1,DC=AD,DC=COM': 1},
'proid2': {},
'proid3': {},
'proid4': {'CN=server2,DC=AD,DC=COM': 1},
'proid5': {'CN=server5,DC=AD,DC=COM': 2},
})
mock_connection.modify.assert_has_calls(
[
mock.call('CN=proid2-gmsa-hosts,OU=test,DC=ad,DC=com',
{'member': [(ldap3.MODIFY_DELETE,
['CN=server3,DC=AD,DC=COM'])]}),
mock.call('CN=proid4-gmsa-hosts,OU=test,DC=ad,DC=com',
{'member': [(ldap3.MODIFY_ADD,
['CN=server2,DC=AD,DC=COM'])]}),
mock.call('CN=proid5-gmsa-hosts,OU=test,DC=ad,DC=com',
{'member': [(ldap3.MODIFY_ADD,
['CN=server5,DC=AD,DC=COM'])]}),
],
any_order=True
)
