698 lines
22 KiB
PHP
698 lines
22 KiB
PHP
<?php
|
|
|
|
namespace Auth;
|
|
|
|
require_once __DIR__.'/../Base.php';
|
|
|
|
function ldap_connect($hostname, $port)
|
|
{
|
|
return LdapTest::$functions->ldap_connect($hostname, $port);
|
|
}
|
|
|
|
function ldap_set_option()
|
|
{
|
|
}
|
|
|
|
function ldap_bind($link_identifier, $bind_rdn, $bind_password)
|
|
{
|
|
return LdapTest::$functions->ldap_bind($link_identifier, $bind_rdn, $bind_password);
|
|
}
|
|
|
|
function ldap_search($link_identifier, $base_dn, $filter, array $attributes)
|
|
{
|
|
return LdapTest::$functions->ldap_search($link_identifier, $base_dn, $filter, $attributes);
|
|
}
|
|
|
|
function ldap_get_entries($link_identifier, $result_identifier)
|
|
{
|
|
return LdapTest::$functions->ldap_get_entries($link_identifier, $result_identifier);
|
|
}
|
|
|
|
class LdapTest extends \Base
|
|
{
|
|
public static $functions;
|
|
private $ldap;
|
|
|
|
public function setUp()
|
|
{
|
|
parent::setup();
|
|
|
|
self::$functions = $this
|
|
->getMockBuilder('stdClass')
|
|
->setMethods(array(
|
|
'ldap_connect',
|
|
'ldap_set_option',
|
|
'ldap_bind',
|
|
'ldap_search',
|
|
'ldap_get_entries',
|
|
))
|
|
->getMock();
|
|
}
|
|
|
|
public function tearDown()
|
|
{
|
|
parent::tearDown();
|
|
self::$functions = null;
|
|
}
|
|
|
|
public function testGetAttributes()
|
|
{
|
|
$ldap = new Ldap($this->container);
|
|
$this->assertCount(3, $ldap->getProfileAttributes());
|
|
$this->assertContains(LDAP_ACCOUNT_FULLNAME, $ldap->getProfileAttributes());
|
|
$this->assertContains(LDAP_ACCOUNT_EMAIL, $ldap->getProfileAttributes());
|
|
$this->assertContains(LDAP_ACCOUNT_MEMBEROF, $ldap->getProfileAttributes());
|
|
}
|
|
|
|
public function testConnectSuccess()
|
|
{
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getLdapServer'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapServer')
|
|
->will($this->returnValue('my_ldap_server'));
|
|
|
|
self::$functions
|
|
->expects($this->once())
|
|
->method('ldap_connect')
|
|
->with(
|
|
$this->equalTo('my_ldap_server'),
|
|
$this->equalTo($ldap->getLdapPort())
|
|
)
|
|
->will($this->returnValue('my_ldap_resource'));
|
|
|
|
$this->assertNotFalse($ldap->connect());
|
|
}
|
|
|
|
public function testConnectFailure()
|
|
{
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getLdapServer'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapServer')
|
|
->will($this->returnValue('my_ldap_server'));
|
|
|
|
self::$functions
|
|
->expects($this->once())
|
|
->method('ldap_connect')
|
|
->with(
|
|
$this->equalTo('my_ldap_server'),
|
|
$this->equalTo($ldap->getLdapPort())
|
|
)
|
|
->will($this->returnValue(false));
|
|
|
|
$this->assertFalse($ldap->connect());
|
|
}
|
|
|
|
public function testBindAnonymous()
|
|
{
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getLdapBindType'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->any())
|
|
->method('getLdapBindType')
|
|
->will($this->returnValue('anonymous'));
|
|
|
|
self::$functions
|
|
->expects($this->once())
|
|
->method('ldap_bind')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo(null),
|
|
$this->equalTo(null)
|
|
)
|
|
->will($this->returnValue(true));
|
|
|
|
$this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
|
|
}
|
|
|
|
public function testBindUser()
|
|
{
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getLdapUsername', 'getLdapBindType'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapUsername')
|
|
->will($this->returnValue('uid=my_user'));
|
|
|
|
$ldap
|
|
->expects($this->any())
|
|
->method('getLdapBindType')
|
|
->will($this->returnValue('user'));
|
|
|
|
self::$functions
|
|
->expects($this->once())
|
|
->method('ldap_bind')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('uid=my_user'),
|
|
$this->equalTo('my_password')
|
|
)
|
|
->will($this->returnValue(true));
|
|
|
|
$this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
|
|
}
|
|
|
|
public function testBindProxy()
|
|
{
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getLdapUsername', 'getLdapPassword', 'getLdapBindType'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapUsername')
|
|
->will($this->returnValue('someone'));
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapPassword')
|
|
->will($this->returnValue('something'));
|
|
|
|
$ldap
|
|
->expects($this->any())
|
|
->method('getLdapBindType')
|
|
->will($this->returnValue('proxy'));
|
|
|
|
self::$functions
|
|
->expects($this->once())
|
|
->method('ldap_bind')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('someone'),
|
|
$this->equalTo('something')
|
|
)
|
|
->will($this->returnValue(true));
|
|
|
|
$this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
|
|
}
|
|
|
|
public function testSearchSuccess()
|
|
{
|
|
$entries = array(
|
|
'count' => 1,
|
|
0 => array(
|
|
'count' => 2,
|
|
'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
|
|
'displayname' => array(
|
|
'count' => 1,
|
|
0 => 'My user',
|
|
),
|
|
'mail' => array(
|
|
'count' => 2,
|
|
0 => 'user1@localhost',
|
|
1 => 'user2@localhost',
|
|
),
|
|
0 => 'displayname',
|
|
1 => 'mail',
|
|
)
|
|
);
|
|
|
|
$expected = array(
|
|
'username' => 'my_user',
|
|
'name' => 'My user',
|
|
'email' => 'user1@localhost',
|
|
'is_admin' => 0,
|
|
'is_project_admin' => 0,
|
|
'is_ldap_user' => 1,
|
|
);
|
|
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapUserPattern')
|
|
->will($this->returnValue('uid=my_user'));
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapBaseDn')
|
|
->will($this->returnValue('ou=People,dc=kanboard,dc=local'));
|
|
|
|
self::$functions
|
|
->expects($this->at(0))
|
|
->method('ldap_search')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('ou=People,dc=kanboard,dc=local'),
|
|
$this->equalTo('uid=my_user'),
|
|
$this->equalTo($ldap->getProfileAttributes())
|
|
)
|
|
->will($this->returnValue('my_result_identifier'));
|
|
|
|
self::$functions
|
|
->expects($this->at(1))
|
|
->method('ldap_get_entries')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('my_result_identifier')
|
|
)
|
|
->will($this->returnValue($entries));
|
|
|
|
self::$functions
|
|
->expects($this->at(2))
|
|
->method('ldap_bind')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('uid=my_user,ou=People,dc=kanboard,dc=local'),
|
|
$this->equalTo('my_password')
|
|
)
|
|
->will($this->returnValue(true));
|
|
|
|
$this->assertEquals($expected, $ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
|
|
}
|
|
|
|
public function testSearchWithBadPassword()
|
|
{
|
|
$entries = array(
|
|
'count' => 1,
|
|
0 => array(
|
|
'count' => 2,
|
|
'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
|
|
'displayname' => array(
|
|
'count' => 1,
|
|
0 => 'My user',
|
|
),
|
|
'mail' => array(
|
|
'count' => 2,
|
|
0 => 'user1@localhost',
|
|
1 => 'user2@localhost',
|
|
),
|
|
0 => 'displayname',
|
|
1 => 'mail',
|
|
)
|
|
);
|
|
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapUserPattern')
|
|
->will($this->returnValue('uid=my_user'));
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapBaseDn')
|
|
->will($this->returnValue('ou=People,dc=kanboard,dc=local'));
|
|
|
|
self::$functions
|
|
->expects($this->at(0))
|
|
->method('ldap_search')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('ou=People,dc=kanboard,dc=local'),
|
|
$this->equalTo('uid=my_user'),
|
|
$this->equalTo($ldap->getProfileAttributes())
|
|
)
|
|
->will($this->returnValue('my_result_identifier'));
|
|
|
|
self::$functions
|
|
->expects($this->at(1))
|
|
->method('ldap_get_entries')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('my_result_identifier')
|
|
)
|
|
->will($this->returnValue($entries));
|
|
|
|
self::$functions
|
|
->expects($this->at(2))
|
|
->method('ldap_bind')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('uid=my_user,ou=People,dc=kanboard,dc=local'),
|
|
$this->equalTo('my_password')
|
|
)
|
|
->will($this->returnValue(false));
|
|
|
|
$this->assertFalse($ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
|
|
}
|
|
|
|
public function testSearchWithUserNotFound()
|
|
{
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapUserPattern')
|
|
->will($this->returnValue('uid=my_user'));
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapBaseDn')
|
|
->will($this->returnValue('ou=People,dc=kanboard,dc=local'));
|
|
|
|
self::$functions
|
|
->expects($this->at(0))
|
|
->method('ldap_search')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('ou=People,dc=kanboard,dc=local'),
|
|
$this->equalTo('uid=my_user'),
|
|
$this->equalTo($ldap->getProfileAttributes())
|
|
)
|
|
->will($this->returnValue('my_result_identifier'));
|
|
|
|
self::$functions
|
|
->expects($this->at(1))
|
|
->method('ldap_get_entries')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('my_result_identifier')
|
|
)
|
|
->will($this->returnValue(array()));
|
|
|
|
$this->assertFalse($ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
|
|
}
|
|
|
|
public function testSuccessfulAuthentication()
|
|
{
|
|
$this->container['userSession'] = $this
|
|
->getMockBuilder('\Model\UserSession')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('refresh'))
|
|
->getMock();
|
|
|
|
$this->container['user'] = $this
|
|
->getMockBuilder('\Model\User')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getByUsername'))
|
|
->getMock();
|
|
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('findUser'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('findUser')
|
|
->with(
|
|
$this->equalTo('user'),
|
|
$this->equalTo('password')
|
|
)
|
|
->will($this->returnValue(array('username' => 'user', 'name' => 'My user', 'email' => 'user@here')));
|
|
|
|
$this->container['user']
|
|
->expects($this->once())
|
|
->method('getByUsername')
|
|
->with(
|
|
$this->equalTo('user')
|
|
)
|
|
->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 1)));
|
|
|
|
$this->container['userSession']
|
|
->expects($this->once())
|
|
->method('refresh');
|
|
|
|
$this->assertTrue($ldap->authenticate('user', 'password'));
|
|
}
|
|
|
|
public function testAuthenticationWithExistingLocalUser()
|
|
{
|
|
$this->container['userSession'] = $this
|
|
->getMockBuilder('\Model\UserSession')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('refresh'))
|
|
->getMock();
|
|
|
|
$this->container['user'] = $this
|
|
->getMockBuilder('\Model\User')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getByUsername'))
|
|
->getMock();
|
|
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('findUser'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('findUser')
|
|
->with(
|
|
$this->equalTo('user'),
|
|
$this->equalTo('password')
|
|
)
|
|
->will($this->returnValue(array('username' => 'user', 'name' => 'My user', 'email' => 'user@here')));
|
|
|
|
$this->container['user']
|
|
->expects($this->once())
|
|
->method('getByUsername')
|
|
->with(
|
|
$this->equalTo('user')
|
|
)
|
|
->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 0)));
|
|
|
|
$this->container['userSession']
|
|
->expects($this->never())
|
|
->method('refresh');
|
|
|
|
$this->assertFalse($ldap->authenticate('user', 'password'));
|
|
}
|
|
|
|
public function testAuthenticationWithAutomaticAccountCreation()
|
|
{
|
|
$ldap_profile = array('username' => 'user', 'name' => 'My user', 'email' => 'user@here');
|
|
|
|
$this->container['userSession'] = $this
|
|
->getMockBuilder('\Model\UserSession')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('refresh'))
|
|
->getMock();
|
|
|
|
$this->container['user'] = $this
|
|
->getMockBuilder('\Model\User')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getByUsername', 'create'))
|
|
->getMock();
|
|
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('findUser'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->at(0))
|
|
->method('findUser')
|
|
->with(
|
|
$this->equalTo('user'),
|
|
$this->equalTo('password')
|
|
)
|
|
->will($this->returnValue($ldap_profile));
|
|
|
|
$this->container['user']
|
|
->expects($this->at(0))
|
|
->method('getByUsername')
|
|
->with(
|
|
$this->equalTo('user')
|
|
)
|
|
->will($this->returnValue(null));
|
|
|
|
$this->container['user']
|
|
->expects($this->at(1))
|
|
->method('create')
|
|
->with(
|
|
$this->equalTo($ldap_profile)
|
|
)
|
|
->will($this->returnValue(true));
|
|
|
|
$this->container['user']
|
|
->expects($this->at(2))
|
|
->method('getByUsername')
|
|
->with(
|
|
$this->equalTo('user')
|
|
)
|
|
->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 1)));
|
|
|
|
$this->container['userSession']
|
|
->expects($this->once())
|
|
->method('refresh');
|
|
|
|
$this->assertTrue($ldap->authenticate('user', 'password'));
|
|
}
|
|
|
|
public function testAuthenticationWithAutomaticAccountCreationFailed()
|
|
{
|
|
$ldap_profile = array('username' => 'user', 'name' => 'My user', 'email' => 'user@here');
|
|
|
|
$this->container['userSession'] = $this
|
|
->getMockBuilder('\Model\UserSession')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('refresh'))
|
|
->getMock();
|
|
|
|
$this->container['user'] = $this
|
|
->getMockBuilder('\Model\User')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('getByUsername', 'create'))
|
|
->getMock();
|
|
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('findUser'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->at(0))
|
|
->method('findUser')
|
|
->with(
|
|
$this->equalTo('user'),
|
|
$this->equalTo('password')
|
|
)
|
|
->will($this->returnValue($ldap_profile));
|
|
|
|
$this->container['user']
|
|
->expects($this->at(0))
|
|
->method('getByUsername')
|
|
->with(
|
|
$this->equalTo('user')
|
|
)
|
|
->will($this->returnValue(null));
|
|
|
|
$this->container['user']
|
|
->expects($this->at(1))
|
|
->method('create')
|
|
->with(
|
|
$this->equalTo($ldap_profile)
|
|
)
|
|
->will($this->returnValue(false));
|
|
|
|
$this->container['userSession']
|
|
->expects($this->never())
|
|
->method('refresh');
|
|
|
|
$this->assertFalse($ldap->authenticate('user', 'password'));
|
|
}
|
|
|
|
public function testLookup()
|
|
{
|
|
$entries = array(
|
|
'count' => 1,
|
|
0 => array(
|
|
'count' => 2,
|
|
'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
|
|
'displayname' => array(
|
|
'count' => 1,
|
|
0 => 'My LDAP user',
|
|
),
|
|
'mail' => array(
|
|
'count' => 2,
|
|
0 => 'user1@localhost',
|
|
1 => 'user2@localhost',
|
|
),
|
|
'samaccountname' => array(
|
|
'count' => 1,
|
|
0 => 'my_ldap_user',
|
|
),
|
|
0 => 'displayname',
|
|
1 => 'mail',
|
|
2 => 'samaccountname',
|
|
)
|
|
);
|
|
|
|
$expected = array(
|
|
'username' => 'my_ldap_user',
|
|
'name' => 'My LDAP user',
|
|
'email' => 'user1@localhost',
|
|
'is_admin' => 0,
|
|
'is_project_admin' => 0,
|
|
'is_ldap_user' => 1,
|
|
);
|
|
|
|
$ldap = $this
|
|
->getMockBuilder('\Auth\Ldap')
|
|
->setConstructorArgs(array($this->container))
|
|
->setMethods(array('connect', 'getLdapUserPattern', 'getLdapBaseDn', 'getLdapAccountId'))
|
|
->getMock();
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('connect')
|
|
->will($this->returnValue('my_ldap_connection'));
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapUserPattern')
|
|
->will($this->returnValue('sAMAccountName=my_user'));
|
|
|
|
$ldap
|
|
->expects($this->any())
|
|
->method('getLdapAccountId')
|
|
->will($this->returnValue('samaccountname'));
|
|
|
|
$ldap
|
|
->expects($this->once())
|
|
->method('getLdapBaseDn')
|
|
->will($this->returnValue('ou=People,dc=kanboard,dc=local'));
|
|
|
|
self::$functions
|
|
->expects($this->at(0))
|
|
->method('ldap_bind')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo(null),
|
|
$this->equalTo(null)
|
|
)
|
|
->will($this->returnValue(true));
|
|
|
|
self::$functions
|
|
->expects($this->at(1))
|
|
->method('ldap_search')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('ou=People,dc=kanboard,dc=local'),
|
|
$this->equalTo('(&(sAMAccountName=my_user)(mail=user@localhost))'),
|
|
$this->equalTo($ldap->getProfileAttributes())
|
|
)
|
|
->will($this->returnValue('my_result_identifier'));
|
|
|
|
self::$functions
|
|
->expects($this->at(2))
|
|
->method('ldap_get_entries')
|
|
->with(
|
|
$this->equalTo('my_ldap_connection'),
|
|
$this->equalTo('my_result_identifier')
|
|
)
|
|
->will($this->returnValue($entries));
|
|
|
|
$this->assertEquals($expected, $ldap->lookup('my_user', 'user@localhost'));
|
|
}
|
|
}
|