mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
ce264ff4d3
Sometimes, LDAP organization is such that groups membership cannot be computed with username only. User DN is required to retrieve groups. e.g. user Joe has a username joe and a cn of Joe Blogs, resulting in a dn of cn=Joe Blogs,ou=users,dc=example,dc=com which is needed to retrieve groups but cannot be computed from joe only. Issue was reported in issue #146
100 lines
2.8 KiB
TypeScript
100 lines
2.8 KiB
TypeScript
import * as Assert from "assert";
|
|
import { UserConfiguration, LdapConfiguration } from "../../src/lib/configuration/Configuration";
|
|
import { ConfigurationParser } from "../../src/lib/configuration/ConfigurationParser";
|
|
|
|
describe("test ldap configuration adaptation", function () {
|
|
function build_yaml_config(): UserConfiguration {
|
|
const yaml_config: UserConfiguration = {
|
|
port: 8080,
|
|
ldap: {
|
|
url: "http://ldap",
|
|
base_dn: "dc=example,dc=com",
|
|
additional_users_dn: "ou=users",
|
|
additional_groups_dn: "ou=groups",
|
|
user: "user",
|
|
password: "pass"
|
|
},
|
|
session: {
|
|
domain: "example.com",
|
|
secret: "secret",
|
|
expiration: 40000
|
|
},
|
|
storage: {
|
|
local: {
|
|
path: "/mydirectory"
|
|
}
|
|
},
|
|
regulation: {
|
|
max_retries: 3,
|
|
ban_time: 5 * 60,
|
|
find_time: 5 * 60,
|
|
},
|
|
logs_level: "debug",
|
|
notifier: {
|
|
gmail: {
|
|
username: "user",
|
|
password: "password",
|
|
sender: "admin@example.com"
|
|
}
|
|
}
|
|
};
|
|
return yaml_config;
|
|
}
|
|
|
|
it("should adapt correctly while user only specify mandatory fields", function () {
|
|
const userConfig = build_yaml_config();
|
|
userConfig.ldap = {
|
|
url: "http://ldap",
|
|
base_dn: "dc=example,dc=com",
|
|
user: "admin",
|
|
password: "password"
|
|
};
|
|
|
|
const config = ConfigurationParser.parse(userConfig);
|
|
const expectedConfig: LdapConfiguration = {
|
|
url: "http://ldap",
|
|
users_dn: "dc=example,dc=com",
|
|
users_filter: "cn={0}",
|
|
groups_dn: "dc=example,dc=com",
|
|
groups_filter: "member={dn}",
|
|
group_name_attribute: "cn",
|
|
mail_attribute: "mail",
|
|
user: "admin",
|
|
password: "password"
|
|
};
|
|
|
|
Assert.deepEqual(config.ldap, expectedConfig);
|
|
});
|
|
|
|
it("should adapt correctly while user specify every fields", function () {
|
|
const userConfig = build_yaml_config();
|
|
userConfig.ldap = {
|
|
url: "http://ldap-server",
|
|
base_dn: "dc=example,dc=com",
|
|
additional_users_dn: "ou=users",
|
|
users_filter: "uid={0}",
|
|
additional_groups_dn: "ou=groups",
|
|
groups_filter: "uniqueMember={0}",
|
|
mail_attribute: "email",
|
|
group_name_attribute: "groupName",
|
|
user: "admin2",
|
|
password: "password2"
|
|
};
|
|
|
|
const config = ConfigurationParser.parse(userConfig);
|
|
const expectedConfig: LdapConfiguration = {
|
|
url: "http://ldap-server",
|
|
users_dn: "ou=users,dc=example,dc=com",
|
|
users_filter: "uid={0}",
|
|
groups_dn: "ou=groups,dc=example,dc=com",
|
|
groups_filter: "uniqueMember={0}",
|
|
mail_attribute: "email",
|
|
group_name_attribute: "groupName",
|
|
user: "admin2",
|
|
password: "password2"
|
|
};
|
|
|
|
Assert.deepEqual(config.ldap, expectedConfig);
|
|
});
|
|
});
|