def test_user_sync_from_s4_to_udm_with_move(user_class, sync_mode): with connector_setup(sync_mode) as s4: udm_user = user_class() (basic_s4_user, s4_user_dn, udm_user_dn) = create_con_user(s4, udm_user, s4connector.wait_for_sync) print("\nMove S4 user {!r} to {!r}\n".format(s4_user_dn, udm_user.container)) container_dn = s4.container_create(udm_user.container) s4_user_dn = s4.rename_or_move_user_or_group(s4_user_dn, position=container_dn) s4.set_attributes(s4_user_dn, **tcommon.map_udm_user_to_con(udm_user.basic)) s4connector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, None) udm_user_dn = ldap.dn.dn2str( [[("uid", udm_user.basic.get("username"), ldap.AVA_STRING)], [("CN", udm_user.container, ldap.AVA_STRING)]] + ldap.dn.str2dn(tcommon.configRegistry['ldap/base'])) tcommon.verify_udm_object("users/user", udm_user_dn, udm_user.basic) delete_con_user(s4, s4_user_dn, udm_user_dn, s4connector.wait_for_sync)
def test_group_sync_from_ad_to_udm_with_move(group_class, sync_mode): with connector_setup(sync_mode): udm_group = group_class() (ad_group, ad_group_dn, udm_group_dn) = create_con_group(AD, udm_group, adconnector.wait_for_sync) print("\nMove AD group {!r} to {!r}\n".format(ad_group_dn, udm_group.container)) container_dn = AD.container_create(udm_group.container) ad_group_dn = AD.rename_or_move_user_or_group(ad_group_dn, position=container_dn) AD.set_attributes(ad_group_dn, **tcommon.map_udm_group_to_con(udm_group.group)) adconnector.wait_for_sync() tcommon.verify_udm_object("groups/group", udm_group_dn, None) udm_group_dn = ldap.dn.dn2str( [[("CN", udm_group.to_unicode(udm_group.group).get("name"), ldap.AVA_STRING)], [("CN", udm_group.container, ldap.AVA_STRING)]] + ldap.dn.str2dn(tcommon.configRegistry['ldap/base'])) tcommon.verify_udm_object("groups/group", udm_group_dn, udm_group.group) delete_con_group(AD, ad_group_dn, udm_group_dn, adconnector.wait_for_sync)
def test_group_sync_from_s4_to_udm_with_rename(group_class, sync_mode): with connector_setup(sync_mode) as s4: udm_group = group_class() (s4_group, s4_group_dn, udm_group_dn) = create_con_group(s4, udm_group, s4connector.wait_for_sync) print("\nRename S4 group {!r} to {!r}\n".format( s4_group_dn, udm_group.rename.get("name"))) s4_group_dn = s4.rename_or_move_user_or_group( s4_group_dn, name=udm_group.rename.get("name")) s4.set_attributes(s4_group_dn, **tcommon.map_udm_group_to_con(udm_group.rename)) s4connector.wait_for_sync() tcommon.verify_udm_object("groups/group", udm_group_dn, None) udm_group_dn = ldap.dn.dn2str( [[("CN", udm_group.rename.get("name"), ldap.AVA_STRING)], [("CN", "groups", ldap.AVA_STRING)]] + ldap.dn.str2dn(tcommon.configRegistry['ldap/base'])) tcommon.verify_udm_object("groups/group", udm_group_dn, udm_group.rename) delete_con_group(s4, s4_group_dn, udm_group_dn, s4connector.wait_for_sync)
def test_attribute_sync_from_udm_to_s4(attribute, sync_mode): (ucs_attribute, con_attribute, con_other_attribute) = attribute udm_user = NormalUser(selection=("username", "lastname", ucs_attribute)) primary_value = udm_user.basic.get(ucs_attribute) all_values = (primary_value, random_number(), random_number()) secondary_values = all_values[1:] with connector_setup(sync_mode) as s4, UCSTestUDM() as udm: # A single `phone` number must be synced to `telephoneNumber` in AD. (udm_user_dn, s4_user_dn) = create_udm_user(udm, s4, udm_user, s4connector.wait_for_sync) # Additional `phone` values must be synced to `otherTelephone`, # `telephoneNumber` must keep its value. print("\nModifying UDM user: {}={}\n".format(ucs_attribute, all_values)) udm.modify_object('users/user', dn=udm_user_dn, set={ucs_attribute: all_values}) s4connector.wait_for_sync() s4.verify_object(s4_user_dn, {con_attribute: primary_value, con_other_attribute: secondary_values}) tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: all_values}) # If we delete the first `phone` value via UDM, we want to duplicate # the first value of `otherTelephone` into `telephoneNumber`. (new_primary, next_primary) = secondary_values print("\nModifying UDM user: {}={}\n".format(ucs_attribute, secondary_values)) udm.modify_object('users/user', dn=udm_user_dn, set={ucs_attribute: secondary_values}) s4connector.wait_for_sync() s4.verify_object(s4_user_dn, {con_attribute: new_primary, con_other_attribute: secondary_values}) tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: secondary_values}) # If we delete a `phone` value via UDM that is duplicated in AD, we want # it to be deleted from `telephoneNumber` and `otherTelephone`. print("\nModifying UDM user: {}={}\n".format(ucs_attribute, next_primary)) udm.modify_object('users/user', dn=udm_user_dn, set={ucs_attribute: next_primary}) s4connector.wait_for_sync() s4.verify_object(s4_user_dn, {con_attribute: next_primary, con_other_attribute: next_primary}) tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: next_primary}) # Setting a completely new `phone` value via UDM, this must be synced # to `telephoneNumber` and `otherTelephone` must be empty. new_phone_who_dis = random_number() print("\nModifying UDM user: {}={}\n".format(ucs_attribute, new_phone_who_dis)) udm.modify_object('users/user', dn=udm_user_dn, set={ucs_attribute: new_phone_who_dis}) s4connector.wait_for_sync() s4.verify_object(s4_user_dn, {con_attribute: new_phone_who_dis, con_other_attribute: []}) tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: new_phone_who_dis}) # No `phone` value via UDM, must result in an empty `telephoneNumber` # and `otherTelephone`. print("\nModifying UDM user: {}={}\n".format(ucs_attribute, [])) udm.modify_object('users/user', dn=udm_user_dn, set={ucs_attribute: ''}) s4connector.wait_for_sync() s4.verify_object(s4_user_dn, {con_attribute: [], con_other_attribute: []}) tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: []}) delete_udm_user(udm, s4, udm_user_dn, s4_user_dn, s4connector.wait_for_sync)
def test_user_sync_from_ad_to_udm(user_class, sync_mode): with connector_setup(sync_mode): udm_user = user_class() (basic_ad_user, ad_user_dn, udm_user_dn) = create_con_user(AD, udm_user, adconnector.wait_for_sync) print("\nModifying AD user\n") AD.set_attributes(ad_user_dn, **tcommon.map_udm_user_to_con(udm_user.user)) adconnector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, udm_user.user) delete_con_user(AD, ad_user_dn, udm_user_dn, adconnector.wait_for_sync)
def test_user_sync_from_s4_to_udm(user_class, sync_mode): with connector_setup(sync_mode) as s4: udm_user = user_class() (basic_s4_user, s4_user_dn, udm_user_dn) = create_con_user(s4, udm_user, s4connector.wait_for_sync) print("\nModifying S4 user\n") s4.set_attributes(s4_user_dn, **tcommon.map_udm_user_to_con(udm_user.user)) s4connector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, udm_user.user) delete_con_user(s4, s4_user_dn, udm_user_dn, s4connector.wait_for_sync)
def test_group_sync_from_ad_to_udm_with_nested_group(group_class, nested_class, sync_mode): with connector_setup(sync_mode): udm_group = group_class() nested_group = nested_class() (ad_group, ad_group_dn, udm_group_dn) = create_con_group(AD, udm_group, adconnector.wait_for_sync) print("\nModifying AD group\n") (nested_ad_user, nested_ad_user_dn, nested_udm_user_dn) = create_con_group(AD, nested_group, adconnector.wait_for_sync) AD.set_attributes(ad_group_dn, member=[nested_ad_user_dn]) adconnector.wait_for_sync() udm_attributes = {"nestedGroup": [nested_udm_user_dn]} udm_attributes.update(udm_group.group) tcommon.verify_udm_object("groups/group", udm_group_dn, udm_attributes) delete_con_group(AD, nested_ad_user_dn, nested_udm_user_dn, adconnector.wait_for_sync) delete_con_group(AD, ad_group_dn, udm_group_dn, adconnector.wait_for_sync)
def test_user_sync_from_ad_to_udm_with_rename(user_class, sync_mode): with connector_setup(sync_mode): udm_user = user_class() (basic_ad_user, ad_user_dn, udm_user_dn) = create_con_user(AD, udm_user, adconnector.wait_for_sync) print("\nRename AD user {!r} to {!r}\n".format(ad_user_dn, udm_user.rename.get("username"))) ad_user_dn = AD.rename_or_move_user_or_group(ad_user_dn, name=udm_user.rename.get("username")) AD.set_attributes(ad_user_dn, **tcommon.map_udm_user_to_con(udm_user.rename)) adconnector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, None) udm_user_dn = ldap.dn.dn2str([ [("uid", udm_user.rename.get("username"), ldap.AVA_STRING)], [("CN", "users", ldap.AVA_STRING)]] + ldap.dn.str2dn(tcommon.configRegistry['ldap/base'])) tcommon.verify_udm_object("users/user", udm_user_dn, udm_user.rename) delete_con_user(AD, ad_user_dn, udm_user_dn, adconnector.wait_for_sync)
def test_group_sync_from_s4_to_udm_with_nested_user(group_class, nested_class, sync_mode): with connector_setup(sync_mode) as s4: udm_group = group_class() nested_user = nested_class() (s4_group, s4_group_dn, udm_group_dn) = create_con_group(s4, udm_group, s4connector.wait_for_sync) print("\nModifying S4 group\n") (nested_s4_user, nested_s4_user_dn, nested_udm_user_dn) = create_con_user(s4, nested_user, s4connector.wait_for_sync) s4.set_attributes(s4_group_dn, member=[nested_s4_user_dn]) s4connector.wait_for_sync() udm_attributes = {"users": [nested_udm_user_dn]} udm_attributes.update(udm_group.group) tcommon.verify_udm_object("groups/group", udm_group_dn, udm_attributes) delete_con_user(s4, nested_s4_user_dn, nested_udm_user_dn, s4connector.wait_for_sync) delete_con_group(s4, s4_group_dn, udm_group_dn, s4connector.wait_for_sync)
def test_attribute_sync_from_ad_to_udm(attribute, sync_mode): (ucs_attribute, con_attribute, con_other_attribute) = attribute udm_user = NormalUser(selection=("username", "lastname", ucs_attribute)) primary_value = udm_user.basic.get(ucs_attribute) all_values = (primary_value, random_number(), random_number()) secondary_values = all_values[1:] with connector_setup(sync_mode): # A single `telephoneNumber` must be synced to `phone` in UDM. (basic_ad_user, ad_user_dn, udm_user_dn) = create_con_user(AD, udm_user, adconnector.wait_for_sync) # Additional values in `otherTelephone` must be appended to `phone`. print("\nModifying AD user: {}={}, {}={}\n".format( con_attribute, primary_value, con_other_attribute, secondary_values)) AD.set_attributes( ad_user_dn, **{ con_attribute: primary_value, con_other_attribute: secondary_values }) adconnector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: all_values}) AD.verify_object(ad_user_dn, { con_attribute: primary_value, con_other_attribute: secondary_values }) if sync_mode == "sync": # otherwise the connector can't write into AD # If we delete the value of `telephoneNumber` from AD, we expect to get # the first value of `otherTelephone` duplicated into # `telephoneNumber`. (new_primary, _) = secondary_values print("\nModifying AD user: {}={}\n".format(con_attribute, [])) AD.set_attributes(ad_user_dn, **{con_attribute: []}) adconnector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: secondary_values}) AD.verify_object(ad_user_dn, { con_attribute: new_primary, con_other_attribute: secondary_values }) # Deleting the duplicate from `otherTelephone` must retain the value of # `telephoneNumber` and `phone` in UDM. print("\nModifying AD user: {}={}\n".format( con_other_attribute, [])) AD.set_attributes(ad_user_dn, **{con_other_attribute: []}) adconnector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: new_primary}) AD.verify_object(ad_user_dn, { con_attribute: new_primary, con_other_attribute: [] }) # Setting a new `telephoneNumber` and no `otherTelephone` in AD must # result in a single new value in `phone`. new_phone_who_dis = random_number() print("\nModifying AD user: {}={}\n".format(con_attribute, new_phone_who_dis)) AD.set_attributes( ad_user_dn, **{ con_attribute: new_phone_who_dis, con_other_attribute: [] }) adconnector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: new_phone_who_dis}) AD.verify_object(ad_user_dn, { con_attribute: new_phone_who_dis, con_other_attribute: [] }) # Setting no `telephoneNumber` and no `otherTelephone` in AD must # result in no value in `phone`. print("\nModifying AD user: {}={}\n".format(con_attribute, [])) AD.set_attributes(ad_user_dn, **{ con_attribute: [], con_other_attribute: [] }) adconnector.wait_for_sync() tcommon.verify_udm_object("users/user", udm_user_dn, {ucs_attribute: []}) AD.verify_object(ad_user_dn, { con_attribute: [], con_other_attribute: [] }) delete_con_user(AD, ad_user_dn, udm_user_dn, adconnector.wait_for_sync)