From fcf00019de38f02483d39fe282af52737855892b Mon Sep 17 00:00:00 2001
From: Eric Chiang <eric.chiang@coreos.com>
Date: Mon, 9 Oct 2017 14:27:22 -0700
Subject: [PATCH] connector/ldap: add test for InsecureSkipVerify option
---
connector/ldap/ldap_test.go | 47 +++++++++++++++++++++++++++++++++++++
1 file changed, 47 insertions(+)
diff --git a/connector/ldap/ldap_test.go b/connector/ldap/ldap_test.go
index 08f85be3..3b903856 100644
--- a/connector/ldap/ldap_test.go
+++ b/connector/ldap/ldap_test.go
@@ -28,6 +28,7 @@ const (
connectStartTLS connectionMethod = iota
connectLDAPS
connectLDAP
+ connectInsecureSkipVerify
)
// subtest is a login test against a given schema.
@@ -350,6 +351,49 @@ userpassword: foo
runTests(t, schema, connectStartTLS, c, tests)
}
+func TestInsecureSkipVerify(t *testing.T) {
+ schema := `
+dn: dc=example,dc=org
+objectClass: dcObject
+objectClass: organization
+o: Example Company
+dc: example
+
+dn: ou=People,dc=example,dc=org
+objectClass: organizationalUnit
+ou: People
+
+dn: cn=jane,ou=People,dc=example,dc=org
+objectClass: person
+objectClass: inetOrgPerson
+sn: doe
+cn: jane
+mail: janedoe@example.com
+userpassword: foo
+`
+ c := &Config{}
+ c.UserSearch.BaseDN = "ou=People,dc=example,dc=org"
+ c.UserSearch.NameAttr = "cn"
+ c.UserSearch.EmailAttr = "mail"
+ c.UserSearch.IDAttr = "DN"
+ c.UserSearch.Username = "cn"
+
+ tests := []subtest{
+ {
+ name: "validpassword",
+ username: "jane",
+ password: "foo",
+ want: connector.Identity{
+ UserID: "cn=jane,ou=People,dc=example,dc=org",
+ Username: "jane",
+ Email: "janedoe@example.com",
+ EmailVerified: true,
+ },
+ },
+ }
+ runTests(t, schema, connectInsecureSkipVerify, c, tests)
+}
+
func TestLDAPS(t *testing.T) {
schema := `
dn: dc=example,dc=org
@@ -531,6 +575,9 @@ func runTests(t *testing.T, schema string, connMethod connectionMethod, config *
case connectLDAPS:
c.Host = "localhost:10636"
c.RootCA = "testdata/ca.crt"
+ case connectInsecureSkipVerify:
+ c.Host = "localhost:10636"
+ c.InsecureSkipVerify = true
case connectLDAP:
c.Host = "localhost:10389"
c.InsecureNoSSL = true
--
GitLab