2014-04-08 10:57:06 +00:00
|
|
|
|
<?php
|
|
|
|
|
/**
|
2016-07-21 14:49:16 +00:00
|
|
|
|
* @copyright Copyright (c) 2016, ownCloud, Inc.
|
|
|
|
|
*
|
2016-05-26 17:56:05 +00:00
|
|
|
|
* @author Arthur Schiwon <blizzz@arthur-schiwon.de>
|
2015-10-05 18:54:56 +00:00
|
|
|
|
* @author Frédéric Fortier <frederic.fortier@oronospolytechnique.com>
|
2016-07-21 14:49:16 +00:00
|
|
|
|
* @author Joas Schilling <coding@schilljs.com>
|
2016-05-26 17:56:05 +00:00
|
|
|
|
* @author Lukas Reschke <lukas@statuscode.ch>
|
2015-03-26 10:44:34 +00:00
|
|
|
|
* @author Morris Jobke <hey@morrisjobke.de>
|
2016-01-12 14:02:16 +00:00
|
|
|
|
* @author Thomas Müller <thomas.mueller@tmit.eu>
|
2016-07-21 14:49:16 +00:00
|
|
|
|
* @author Vincent Petry <pvince81@owncloud.com>
|
2017-03-18 06:56:24 +00:00
|
|
|
|
* @author Xuanwo <xuanwo@yunify.com>
|
2015-03-26 10:44:34 +00:00
|
|
|
|
*
|
|
|
|
|
* @license AGPL-3.0
|
|
|
|
|
*
|
|
|
|
|
* This code is free software: you can redistribute it and/or modify
|
|
|
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
|
|
|
* as published by the Free Software Foundation.
|
|
|
|
|
*
|
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
* GNU Affero General Public License for more details.
|
|
|
|
|
*
|
|
|
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
|
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
|
|
|
|
*
|
|
|
|
|
*/
|
2015-02-26 10:37:37 +00:00
|
|
|
|
|
2016-05-12 08:43:34 +00:00
|
|
|
|
namespace OCA\User_LDAP\Tests;
|
2014-04-08 10:57:06 +00:00
|
|
|
|
|
2016-05-12 08:43:34 +00:00
|
|
|
|
use OCA\User_LDAP\Group_LDAP as GroupLDAP;
|
2016-09-02 09:02:12 +00:00
|
|
|
|
use OCA\User_LDAP\ILDAPWrapper;
|
2014-04-08 10:57:06 +00:00
|
|
|
|
|
2015-11-25 15:58:54 +00:00
|
|
|
|
/**
|
2016-05-12 08:43:34 +00:00
|
|
|
|
* Class GroupLDAPTest
|
2015-11-25 15:58:54 +00:00
|
|
|
|
*
|
|
|
|
|
* @group DB
|
|
|
|
|
*
|
2016-05-12 15:14:59 +00:00
|
|
|
|
* @package OCA\User_LDAP\Tests
|
2015-11-25 15:58:54 +00:00
|
|
|
|
*/
|
2016-05-12 15:14:59 +00:00
|
|
|
|
class Group_LDAPTest extends \Test\TestCase {
|
2014-04-08 10:57:06 +00:00
|
|
|
|
private function getAccessMock() {
|
|
|
|
|
static $conMethods;
|
|
|
|
|
static $accMethods;
|
|
|
|
|
|
|
|
|
|
if(is_null($conMethods) || is_null($accMethods)) {
|
2016-05-12 14:35:33 +00:00
|
|
|
|
$conMethods = get_class_methods('\OCA\User_LDAP\Connection');
|
2016-05-12 14:42:57 +00:00
|
|
|
|
$accMethods = get_class_methods('\OCA\User_LDAP\Access');
|
2014-04-08 10:57:06 +00:00
|
|
|
|
}
|
2016-09-02 09:02:12 +00:00
|
|
|
|
$lw = $this->createMock(ILDAPWrapper::class);
|
2016-09-27 20:54:37 +00:00
|
|
|
|
$connector = $this->getMockBuilder('\OCA\User_LDAP\Connection')
|
|
|
|
|
->setMethods($conMethods)
|
|
|
|
|
->setConstructorArgs([$lw, null, null])
|
|
|
|
|
->getMock();
|
2016-05-12 09:25:50 +00:00
|
|
|
|
$um = $this->getMockBuilder('\OCA\User_LDAP\User\Manager')
|
2015-10-16 08:35:47 +00:00
|
|
|
|
->disableOriginalConstructor()
|
|
|
|
|
->getMock();
|
2016-10-10 08:18:18 +00:00
|
|
|
|
$helper = new \OCA\User_LDAP\Helper(\OC::$server->getConfig());
|
2016-09-27 20:54:37 +00:00
|
|
|
|
$access = $this->getMockBuilder('\OCA\User_LDAP\Access')
|
|
|
|
|
->setMethods($accMethods)
|
|
|
|
|
->setConstructorArgs([$connector, $lw, $um, $helper])
|
|
|
|
|
->getMock();
|
2014-04-08 10:57:06 +00:00
|
|
|
|
|
2015-08-20 22:55:42 +00:00
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('getConnection')
|
|
|
|
|
->will($this->returnValue($connector));
|
|
|
|
|
|
2014-04-08 10:57:06 +00:00
|
|
|
|
return $access;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private function enableGroups($access) {
|
|
|
|
|
$access->connection->expects($this->any())
|
2016-02-03 21:45:33 +00:00
|
|
|
|
->method('__get')
|
|
|
|
|
->will($this->returnCallback(function($name) {
|
|
|
|
|
if($name === 'ldapDynamicGroupMemberURL') {
|
|
|
|
|
return '';
|
|
|
|
|
}
|
|
|
|
|
return 1;
|
|
|
|
|
}));
|
2014-04-08 10:57:06 +00:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testCountEmptySearchString() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('groupname2dn')
|
|
|
|
|
->will($this->returnValue('cn=group,dc=foo,dc=bar'));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->will($this->returnValue(array('u11', 'u22', 'u33', 'u34')));
|
|
|
|
|
|
2015-01-28 14:52:59 +00:00
|
|
|
|
// for primary groups
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('countUsers')
|
|
|
|
|
->will($this->returnValue(2));
|
|
|
|
|
|
2014-04-08 10:57:06 +00:00
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$users = $groupBackend->countUsersInGroup('group');
|
|
|
|
|
|
2015-01-28 14:52:59 +00:00
|
|
|
|
$this->assertSame(6, $users);
|
2014-04-08 10:57:06 +00:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testCountWithSearchString() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('groupname2dn')
|
|
|
|
|
->will($this->returnValue('cn=group,dc=foo,dc=bar'));
|
|
|
|
|
|
2014-07-01 20:02:41 +00:00
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('fetchListOfUsers')
|
|
|
|
|
->will($this->returnValue(array()));
|
|
|
|
|
|
2014-04-08 10:57:06 +00:00
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->will($this->returnCallback(function($name) {
|
|
|
|
|
//the search operation will call readAttribute, thus we need
|
|
|
|
|
//to anaylze the "dn". All other times we just need to return
|
|
|
|
|
//something that is neither null or false, but once an array
|
|
|
|
|
//with the users in the group – so we do so all other times for
|
|
|
|
|
//simplicicity.
|
|
|
|
|
if(strpos($name, 'u') === 0) {
|
|
|
|
|
return strpos($name, '3');
|
|
|
|
|
}
|
|
|
|
|
return array('u11', 'u22', 'u33', 'u34');
|
|
|
|
|
}));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('dn2username')
|
2014-07-01 20:02:41 +00:00
|
|
|
|
->will($this->returnCallback(function() {
|
|
|
|
|
return 'foobar' . \OCP\Util::generateRandomBytes(7);
|
|
|
|
|
}));
|
2014-04-08 10:57:06 +00:00
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$users = $groupBackend->countUsersInGroup('group', '3');
|
|
|
|
|
|
|
|
|
|
$this->assertSame(2, $users);
|
|
|
|
|
}
|
|
|
|
|
|
2017-03-18 06:56:24 +00:00
|
|
|
|
public function testGidNumber2NameSuccess() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$userDN = 'cn=alice,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('searchGroups')
|
|
|
|
|
->will($this->returnValue([['dn' => ['cn=foo,dc=barfoo,dc=bar']]]));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('dn2groupname')
|
|
|
|
|
->with('cn=foo,dc=barfoo,dc=bar')
|
|
|
|
|
->will($this->returnValue('MyGroup'));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$group = $groupBackend->gidNumber2Name('3117', $userDN);
|
|
|
|
|
|
|
|
|
|
$this->assertSame('MyGroup', $group);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testGidNumberID2NameNoGroup() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$userDN = 'cn=alice,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('searchGroups')
|
|
|
|
|
->will($this->returnValue(array()));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->never())
|
|
|
|
|
->method('dn2groupname');
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$group = $groupBackend->gidNumber2Name('3117', $userDN);
|
|
|
|
|
|
|
|
|
|
$this->assertSame(false, $group);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testGidNumberID2NameNoName() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$userDN = 'cn=alice,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('searchGroups')
|
|
|
|
|
->will($this->returnValue([['dn' => ['cn=foo,dc=barfoo,dc=bar']]]));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('dn2groupname')
|
|
|
|
|
->will($this->returnValue(false));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$group = $groupBackend->gidNumber2Name('3117', $userDN);
|
|
|
|
|
|
|
|
|
|
$this->assertSame(false, $group);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testGetEntryGidNumberValue() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$dn = 'cn=foobar,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
$attr = 'gidNumber';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->with($dn, $attr)
|
|
|
|
|
->will($this->returnValue(array('3117')));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$gid = $groupBackend->getGroupGidNumber($dn);
|
|
|
|
|
|
|
|
|
|
$this->assertSame('3117', $gid);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testGetEntryGidNumberNoValue() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$dn = 'cn=foobar,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
$attr = 'gidNumber';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->with($dn, $attr)
|
|
|
|
|
->will($this->returnValue(false));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$gid = $groupBackend->getGroupGidNumber($dn);
|
|
|
|
|
|
|
|
|
|
$this->assertSame(false, $gid);
|
|
|
|
|
}
|
|
|
|
|
|
2014-07-01 20:02:41 +00:00
|
|
|
|
public function testPrimaryGroupID2NameSuccess() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$userDN = 'cn=alice,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('getSID')
|
|
|
|
|
->with($userDN)
|
|
|
|
|
->will($this->returnValue('S-1-5-21-249921958-728525901-1594176202'));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('searchGroups')
|
2015-10-09 12:30:49 +00:00
|
|
|
|
->will($this->returnValue([['dn' => ['cn=foo,dc=barfoo,dc=bar']]]));
|
2014-07-01 20:02:41 +00:00
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('dn2groupname')
|
|
|
|
|
->with('cn=foo,dc=barfoo,dc=bar')
|
|
|
|
|
->will($this->returnValue('MyGroup'));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$group = $groupBackend->primaryGroupID2Name('3117', $userDN);
|
|
|
|
|
|
|
|
|
|
$this->assertSame('MyGroup', $group);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testPrimaryGroupID2NameNoSID() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$userDN = 'cn=alice,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('getSID')
|
|
|
|
|
->with($userDN)
|
|
|
|
|
->will($this->returnValue(false));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->never())
|
|
|
|
|
->method('searchGroups');
|
|
|
|
|
|
|
|
|
|
$access->expects($this->never())
|
|
|
|
|
->method('dn2groupname');
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$group = $groupBackend->primaryGroupID2Name('3117', $userDN);
|
|
|
|
|
|
|
|
|
|
$this->assertSame(false, $group);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testPrimaryGroupID2NameNoGroup() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$userDN = 'cn=alice,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('getSID')
|
|
|
|
|
->with($userDN)
|
|
|
|
|
->will($this->returnValue('S-1-5-21-249921958-728525901-1594176202'));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('searchGroups')
|
|
|
|
|
->will($this->returnValue(array()));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->never())
|
|
|
|
|
->method('dn2groupname');
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$group = $groupBackend->primaryGroupID2Name('3117', $userDN);
|
|
|
|
|
|
|
|
|
|
$this->assertSame(false, $group);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testPrimaryGroupID2NameNoName() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$userDN = 'cn=alice,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('getSID')
|
|
|
|
|
->with($userDN)
|
|
|
|
|
->will($this->returnValue('S-1-5-21-249921958-728525901-1594176202'));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('searchGroups')
|
2015-10-09 12:30:49 +00:00
|
|
|
|
->will($this->returnValue([['dn' => ['cn=foo,dc=barfoo,dc=bar']]]));
|
2014-07-01 20:02:41 +00:00
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('dn2groupname')
|
|
|
|
|
->will($this->returnValue(false));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$group = $groupBackend->primaryGroupID2Name('3117', $userDN);
|
|
|
|
|
|
|
|
|
|
$this->assertSame(false, $group);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testGetEntryGroupIDValue() {
|
|
|
|
|
//tests getEntryGroupID via getGroupPrimaryGroupID
|
|
|
|
|
//which is basically identical to getUserPrimaryGroupIDs
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$dn = 'cn=foobar,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
$attr = 'primaryGroupToken';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->with($dn, $attr)
|
|
|
|
|
->will($this->returnValue(array('3117')));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$gid = $groupBackend->getGroupPrimaryGroupID($dn);
|
|
|
|
|
|
|
|
|
|
$this->assertSame('3117', $gid);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testGetEntryGroupIDNoValue() {
|
|
|
|
|
//tests getEntryGroupID via getGroupPrimaryGroupID
|
|
|
|
|
//which is basically identical to getUserPrimaryGroupIDs
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$dn = 'cn=foobar,cn=foo,dc=barfoo,dc=bar';
|
|
|
|
|
$attr = 'primaryGroupToken';
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->with($dn, $attr)
|
|
|
|
|
->will($this->returnValue(false));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
|
|
|
|
|
$gid = $groupBackend->getGroupPrimaryGroupID($dn);
|
|
|
|
|
|
|
|
|
|
$this->assertSame(false, $gid);
|
|
|
|
|
}
|
|
|
|
|
|
2014-10-16 14:08:59 +00:00
|
|
|
|
/**
|
|
|
|
|
* tests whether Group Backend behaves correctly when cache with uid and gid
|
|
|
|
|
* is hit
|
|
|
|
|
*/
|
|
|
|
|
public function testInGroupHitsUidGidCache() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$uid = 'someUser';
|
|
|
|
|
$gid = 'someGroup';
|
|
|
|
|
$cacheKey = 'inGroup'.$uid.':'.$gid;
|
|
|
|
|
|
|
|
|
|
$access->connection->expects($this->once())
|
|
|
|
|
->method('getFromCache')
|
|
|
|
|
->with($cacheKey)
|
|
|
|
|
->will($this->returnValue(true));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->never())
|
|
|
|
|
->method('username2dn');
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$groupBackend->inGroup($uid, $gid);
|
|
|
|
|
}
|
|
|
|
|
|
2015-03-23 15:51:40 +00:00
|
|
|
|
public function testGetGroupsWithOffset() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
2017-04-12 04:21:04 +00:00
|
|
|
|
->method('nextcloudGroupNames')
|
2015-03-23 15:51:40 +00:00
|
|
|
|
->will($this->returnValue(array('group1', 'group2')));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$groups = $groupBackend->getGroups('', 2, 2);
|
|
|
|
|
|
|
|
|
|
$this->assertSame(2, count($groups));
|
|
|
|
|
}
|
|
|
|
|
|
2015-04-14 12:40:37 +00:00
|
|
|
|
/**
|
|
|
|
|
* tests that a user listing is complete, if all it's members have the group
|
|
|
|
|
* as their primary.
|
|
|
|
|
*/
|
2016-05-12 08:43:34 +00:00
|
|
|
|
public function testUsersInGroupPrimaryMembersOnly() {
|
2015-04-14 12:40:37 +00:00
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
2017-04-25 13:07:05 +00:00
|
|
|
|
$access->connection->expects($this->any())
|
|
|
|
|
->method('getFromCache')
|
|
|
|
|
->will($this->returnValue(null));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->will($this->returnCallback(function($dn, $attr) {
|
|
|
|
|
if($attr === 'primaryGroupToken') {
|
|
|
|
|
return array(1337);
|
|
|
|
|
} else if($attr === 'gidNumber') {
|
|
|
|
|
return [4211];
|
|
|
|
|
}
|
|
|
|
|
return array();
|
|
|
|
|
}));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('groupname2dn')
|
|
|
|
|
->will($this->returnValue('cn=foobar,dc=foo,dc=bar'));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->exactly(2))
|
|
|
|
|
->method('nextcloudUserNames')
|
|
|
|
|
->willReturnOnConsecutiveCalls(['lisa', 'bart', 'kira', 'brad'], ['walle', 'dino', 'xenia']);
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$users = $groupBackend->usersInGroup('foobar');
|
|
|
|
|
|
|
|
|
|
$this->assertSame(7, count($users));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* tests that a user listing is complete, if all it's members have the group
|
|
|
|
|
* as their primary.
|
|
|
|
|
*/
|
|
|
|
|
public function testUsersInGroupPrimaryAndUnixMembers() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
2015-04-14 12:40:37 +00:00
|
|
|
|
$access->connection->expects($this->any())
|
|
|
|
|
->method('getFromCache')
|
|
|
|
|
->will($this->returnValue(null));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->will($this->returnCallback(function($dn, $attr) {
|
|
|
|
|
if($attr === 'primaryGroupToken') {
|
|
|
|
|
return array(1337);
|
|
|
|
|
}
|
|
|
|
|
return array();
|
|
|
|
|
}));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('groupname2dn')
|
|
|
|
|
->will($this->returnValue('cn=foobar,dc=foo,dc=bar'));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
2017-04-12 04:21:04 +00:00
|
|
|
|
->method('nextcloudUserNames')
|
2015-04-14 12:40:37 +00:00
|
|
|
|
->will($this->returnValue(array('lisa', 'bart', 'kira', 'brad')));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$users = $groupBackend->usersInGroup('foobar');
|
|
|
|
|
|
|
|
|
|
$this->assertSame(4, count($users));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* tests that a user counting is complete, if all it's members have the group
|
|
|
|
|
* as their primary.
|
|
|
|
|
*/
|
2016-05-12 08:43:34 +00:00
|
|
|
|
public function testCountUsersInGroupPrimaryMembersOnly() {
|
2015-04-14 12:40:37 +00:00
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$access->connection->expects($this->any())
|
|
|
|
|
->method('getFromCache')
|
|
|
|
|
->will($this->returnValue(null));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->will($this->returnCallback(function($dn, $attr) {
|
|
|
|
|
if($attr === 'primaryGroupToken') {
|
|
|
|
|
return array(1337);
|
|
|
|
|
}
|
|
|
|
|
return array();
|
|
|
|
|
}));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->any())
|
|
|
|
|
->method('groupname2dn')
|
|
|
|
|
->will($this->returnValue('cn=foobar,dc=foo,dc=bar'));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('countUsers')
|
|
|
|
|
->will($this->returnValue(4));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$users = $groupBackend->countUsersInGroup('foobar');
|
|
|
|
|
|
|
|
|
|
$this->assertSame(4, $users);
|
|
|
|
|
}
|
|
|
|
|
|
2015-06-03 15:37:36 +00:00
|
|
|
|
public function testGetUserGroupsMemberOf() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
$this->enableGroups($access);
|
|
|
|
|
|
|
|
|
|
$dn = 'cn=userX,dc=foobar';
|
|
|
|
|
|
|
|
|
|
$access->connection->hasPrimaryGroups = false;
|
2017-03-18 06:56:24 +00:00
|
|
|
|
$access->connection->hasGidNumber = false;
|
2015-06-03 15:37:36 +00:00
|
|
|
|
|
2015-08-20 22:55:42 +00:00
|
|
|
|
$access->expects($this->any())
|
2015-06-03 15:37:36 +00:00
|
|
|
|
->method('username2dn')
|
|
|
|
|
->will($this->returnValue($dn));
|
|
|
|
|
|
2015-08-04 00:15:22 +00:00
|
|
|
|
$access->expects($this->exactly(3))
|
2015-06-03 15:37:36 +00:00
|
|
|
|
->method('readAttribute')
|
2015-08-04 00:15:22 +00:00
|
|
|
|
->will($this->onConsecutiveCalls(['cn=groupA,dc=foobar', 'cn=groupB,dc=foobar'], [], []));
|
2015-06-03 15:37:36 +00:00
|
|
|
|
|
|
|
|
|
$access->expects($this->exactly(2))
|
|
|
|
|
->method('dn2groupname')
|
|
|
|
|
->will($this->returnArgument(0));
|
|
|
|
|
|
2015-08-04 00:15:22 +00:00
|
|
|
|
$access->expects($this->exactly(3))
|
2015-06-30 11:56:25 +00:00
|
|
|
|
->method('groupsMatchFilter')
|
|
|
|
|
->will($this->returnArgument(0));
|
|
|
|
|
|
2015-06-03 15:37:36 +00:00
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$groups = $groupBackend->getUserGroups('userX');
|
|
|
|
|
|
|
|
|
|
$this->assertSame(2, count($groups));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public function testGetUserGroupsMemberOfDisabled() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
|
|
|
|
|
$access->connection->expects($this->any())
|
|
|
|
|
->method('__get')
|
|
|
|
|
->will($this->returnCallback(function($name) {
|
|
|
|
|
if($name === 'useMemberOfToDetectMembership') {
|
|
|
|
|
return 0;
|
2016-02-03 21:45:33 +00:00
|
|
|
|
} else if($name === 'ldapDynamicGroupMemberURL') {
|
|
|
|
|
return '';
|
2015-06-03 15:37:36 +00:00
|
|
|
|
}
|
|
|
|
|
return 1;
|
|
|
|
|
}));
|
|
|
|
|
|
|
|
|
|
$dn = 'cn=userX,dc=foobar';
|
|
|
|
|
|
|
|
|
|
$access->connection->hasPrimaryGroups = false;
|
2017-03-18 06:56:24 +00:00
|
|
|
|
$access->connection->hasGidNumber = false;
|
2015-06-03 15:37:36 +00:00
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('username2dn')
|
|
|
|
|
->will($this->returnValue($dn));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->never())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->with($dn, 'memberOf');
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
2017-04-12 04:21:04 +00:00
|
|
|
|
->method('nextcloudGroupNames')
|
2015-06-03 15:37:36 +00:00
|
|
|
|
->will($this->returnValue([]));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$groupBackend->getUserGroups('userX');
|
|
|
|
|
}
|
|
|
|
|
|
2016-06-09 15:57:07 +00:00
|
|
|
|
public function testGetGroupsByMember() {
|
|
|
|
|
$access = $this->getAccessMock();
|
|
|
|
|
|
|
|
|
|
$access->connection->expects($this->any())
|
|
|
|
|
->method('__get')
|
|
|
|
|
->will($this->returnCallback(function($name) {
|
|
|
|
|
if($name === 'useMemberOfToDetectMembership') {
|
|
|
|
|
return 0;
|
|
|
|
|
} else if($name === 'ldapDynamicGroupMemberURL') {
|
|
|
|
|
return '';
|
|
|
|
|
} else if($name === 'ldapNestedGroups') {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
return 1;
|
|
|
|
|
}));
|
|
|
|
|
|
|
|
|
|
$dn = 'cn=userX,dc=foobar';
|
|
|
|
|
|
|
|
|
|
$access->connection->hasPrimaryGroups = false;
|
2017-03-18 06:56:24 +00:00
|
|
|
|
$access->connection->hasGidNumber = false;
|
2016-06-09 15:57:07 +00:00
|
|
|
|
|
|
|
|
|
$access->expects($this->exactly(2))
|
|
|
|
|
->method('username2dn')
|
|
|
|
|
->will($this->returnValue($dn));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->never())
|
|
|
|
|
->method('readAttribute')
|
|
|
|
|
->with($dn, 'memberOf');
|
|
|
|
|
|
|
|
|
|
$group1 = [
|
|
|
|
|
'cn' => 'group1',
|
|
|
|
|
'dn' => ['cn=group1,ou=groups,dc=domain,dc=com'],
|
|
|
|
|
];
|
|
|
|
|
$group2 = [
|
|
|
|
|
'cn' => 'group2',
|
|
|
|
|
'dn' => ['cn=group2,ou=groups,dc=domain,dc=com'],
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
2017-04-12 04:21:04 +00:00
|
|
|
|
->method('nextcloudGroupNames')
|
2016-06-09 15:57:07 +00:00
|
|
|
|
->with([$group1, $group2])
|
|
|
|
|
->will($this->returnValue(['group1', 'group2']));
|
|
|
|
|
|
|
|
|
|
$access->expects($this->once())
|
|
|
|
|
->method('fetchListOfGroups')
|
|
|
|
|
->will($this->returnValue([$group1, $group2]));
|
|
|
|
|
|
|
|
|
|
$groupBackend = new GroupLDAP($access);
|
|
|
|
|
$groups = $groupBackend->getUserGroups('userX');
|
|
|
|
|
$this->assertEquals(['group1', 'group2'], $groups);
|
|
|
|
|
|
|
|
|
|
$groupsAgain = $groupBackend->getUserGroups('userX');
|
|
|
|
|
$this->assertEquals(['group1', 'group2'], $groupsAgain);
|
|
|
|
|
}
|
2014-04-25 16:52:13 +00:00
|
|
|
|
}
|