def test_user_ldap_deletion_fails(mocker):
    schema_method_mock = mocker.patch(
        'ansible_collections.ansible.fortios.plugins.module_utils.network.fortios.fortios.FortiOSHandler.schema'
    )

    delete_method_result = {
        'status': 'error',
        'http_method': 'POST',
        'http_status': 500
    }
    delete_method_mock = mocker.patch(
        'ansible_collections.ansible.fortios.plugins.module_utils.network.fortios.fortios.FortiOSHandler.delete',
        return_value=delete_method_result)

    input_data = {
        'username': '******',
        'state': 'absent',
        'user_ldap': {
            'account_key_filter': 'test_value_3',
            'account_key_processing': 'same',
            'ca_cert': 'test_value_5',
            'cnid': 'test_value_6',
            'dn': 'test_value_7',
            'group_filter': 'test_value_8',
            'group_member_check': 'user-attr',
            'group_object_filter': 'test_value_10',
            'group_search_base': 'test_value_11',
            'member_attr': 'test_value_12',
            'name': 'default_name_13',
            'password': '******',
            'password_expiry_warning': 'enable',
            'password_renewal': 'enable',
            'port': '17',
            'secondary_server': 'test_value_18',
            'secure': 'disable',
            'server': '192.168.100.20',
            'server_identity_check': 'enable',
            'source_ip': '84.230.14.22',
            'ssl_min_proto_version': 'default',
            'tertiary_server': 'test_value_24',
            'type': 'simple',
            'username': '******'
        },
        'vdom': 'root'
    }

    is_error, changed, response = fortios_user_ldap.fortios_user(
        input_data, fos_instance)

    delete_method_mock.assert_called_with('user',
                                          'ldap',
                                          mkey=ANY,
                                          vdom='root')
    schema_method_mock.assert_not_called()
    assert is_error
    assert not changed
    assert response['status'] == 'error'
    assert response['http_status'] == 500
def test_user_ldap_filter_foreign_attributes(mocker):
    schema_method_mock = mocker.patch(
        'ansible_collections.ansible.fortios.plugins.module_utils.network.fortios.fortios.FortiOSHandler.schema'
    )

    set_method_result = {
        'status': 'success',
        'http_method': 'POST',
        'http_status': 200
    }
    set_method_mock = mocker.patch(
        'ansible_collections.ansible.fortios.plugins.module_utils.network.fortios.fortios.FortiOSHandler.set',
        return_value=set_method_result)

    input_data = {
        'username': '******',
        'state': 'present',
        'user_ldap': {
            'random_attribute_not_valid': 'tag',
            'account_key_filter': 'test_value_3',
            'account_key_processing': 'same',
            'ca_cert': 'test_value_5',
            'cnid': 'test_value_6',
            'dn': 'test_value_7',
            'group_filter': 'test_value_8',
            'group_member_check': 'user-attr',
            'group_object_filter': 'test_value_10',
            'group_search_base': 'test_value_11',
            'member_attr': 'test_value_12',
            'name': 'default_name_13',
            'password': '******',
            'password_expiry_warning': 'enable',
            'password_renewal': 'enable',
            'port': '17',
            'secondary_server': 'test_value_18',
            'secure': 'disable',
            'server': '192.168.100.20',
            'server_identity_check': 'enable',
            'source_ip': '84.230.14.22',
            'ssl_min_proto_version': 'default',
            'tertiary_server': 'test_value_24',
            'type': 'simple',
            'username': '******'
        },
        'vdom': 'root'
    }

    is_error, changed, response = fortios_user_ldap.fortios_user(
        input_data, fos_instance)

    expected_data = {
        'account-key-filter': 'test_value_3',
        'account-key-processing': 'same',
        'ca-cert': 'test_value_5',
        'cnid': 'test_value_6',
        'dn': 'test_value_7',
        'group-filter': 'test_value_8',
        'group-member-check': 'user-attr',
        'group-object-filter': 'test_value_10',
        'group-search-base': 'test_value_11',
        'member-attr': 'test_value_12',
        'name': 'default_name_13',
        'password': '******',
        'password-expiry-warning': 'enable',
        'password-renewal': 'enable',
        'port': '17',
        'secondary-server': 'test_value_18',
        'secure': 'disable',
        'server': '192.168.100.20',
        'server-identity-check': 'enable',
        'source-ip': '84.230.14.22',
        'ssl-min-proto-version': 'default',
        'tertiary-server': 'test_value_24',
        'type': 'simple',
        'username': '******'
    }

    set_method_mock.assert_called_with('user',
                                       'ldap',
                                       data=expected_data,
                                       vdom='root')
    schema_method_mock.assert_not_called()
    assert not is_error
    assert changed
    assert response['status'] == 'success'
    assert response['http_status'] == 200