Permalink
Cannot retrieve contributors at this time
Name already in use
A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
midPoint_container/library.bash
Go to fileThis commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
324 lines (277 sloc)
11.9 KB
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # | |
| # Contains common functions usable for midPoint system tests | |
| # | |
| # do not use from outside (ugly signature) | |
| function generic_wait_for_log () { | |
| CONTAINER_NAME=$1 | |
| MESSAGE="$2" | |
| WAITING_FOR="$3" | |
| FAILURE="$4" | |
| ADDITIONAL_CONTAINER_NAME=$5 | |
| ATTEMPT=0 | |
| MAX_ATTEMPTS=20 | |
| DELAY=10 | |
| until [[ $ATTEMPT = $MAX_ATTEMPTS ]]; do | |
| ATTEMPT=$((ATTEMPT+1)) | |
| echo "Waiting $DELAY seconds for $WAITING_FOR (attempt $ATTEMPT) ..." | |
| sleep $DELAY | |
| docker ps | |
| ( docker logs $CONTAINER_NAME 2>&1 | grep "$MESSAGE" ) && return 0 | |
| done | |
| echo "$FAILURE" in $(( $MAX_ATTEMPTS * $DELAY )) seconds in $CONTAINER_NAME | |
| echo "========== Container log ==========" | |
| docker logs $CONTAINER_NAME 2>&1 | |
| echo "========== End of the container log ==========" | |
| if [ -n "ADDITIONAL_CONTAINER_NAME" ]; then | |
| echo "========== Container log ($ADDITIONAL_CONTAINER_NAME) ==========" | |
| docker logs $ADDITIONAL_CONTAINER_NAME 2>&1 | |
| echo "========== End of the container log ($DATABASE_CONTAINER_NAME) ==========" | |
| fi | |
| return 1 | |
| } | |
| function wait_for_log_message () { | |
| generic_wait_for_log $1 "$2" "log message" "log message has not appeared" | |
| } | |
| # Waits until midPoint starts | |
| function wait_for_midpoint_start () { | |
| generic_wait_for_log $1 "INFO (com.evolveum.midpoint.web.boot.MidPointSpringApplication): Started MidPointSpringApplication in" "midPoint to start" "midPoint did not start" $2 | |
| } | |
| # Waits until Shibboleth IDP starts ... TODO refactor using generic waiting function | |
| function wait_for_shibboleth_idp_start () { | |
| CONTAINER_NAME=$1 | |
| ATTEMPT=0 | |
| MAX_ATTEMPTS=20 | |
| DELAY=10 | |
| until [[ $ATTEMPT = $MAX_ATTEMPTS ]]; do | |
| ATTEMPT=$((ATTEMPT+1)) | |
| echo "Waiting $DELAY seconds for Shibboleth IDP to start (attempt $ATTEMPT) ..." | |
| sleep $DELAY | |
| docker ps | |
| ( docker logs $CONTAINER_NAME 2>&1 | grep "INFO:oejs.Server:main: Started" ) && return 0 | |
| done | |
| echo Shibboleth IDP did not start in $(( $MAX_ATTEMPTS * $DELAY )) seconds in $CONTAINER_NAME | |
| echo "========== Container log ==========" | |
| docker logs $CONTAINER_NAME 2>&1 | |
| echo "========== End of the container log ==========" | |
| return 1 | |
| } | |
| # Checks the health of midPoint server | |
| function check_health () { | |
| echo Checking health... | |
| (set -o pipefail ; curl -k -f https://localhost:8443/midpoint/actuator/health | tr -d '[:space:]' | grep -q "\"status\":\"UP\"") | |
| status=$? | |
| if [ $status -ne 0 ]; then | |
| echo Error: $status | |
| docker ps | |
| return 1 | |
| else | |
| echo OK | |
| return 0 | |
| fi | |
| } | |
| # Checks the health of Shibboleth IDP server | |
| function check_health_shibboleth_idp () { | |
| echo Checking health of shibboleth idp... | |
| status="$(curl -k --write-out %{http_code} --silent --output /dev/null https://localhost:4443/idp/)" | |
| if [ $status -ne 200 ]; then | |
| echo Error: Http code of response is $status | |
| docker ps | |
| return 1 | |
| else | |
| echo OK | |
| return 0 | |
| fi | |
| } | |
| function get_object () { | |
| local TYPE=$1 | |
| local OID=$2 | |
| TMPFILE=$(mktemp /tmp/get.XXXXXX) | |
| echo tmp file is $TMPFILE | |
| curl -k --user administrator:5ecr3t -H "Content-Type: application/xml" -X GET "https://localhost:8443/midpoint/ws/rest/$TYPE/$OID" >$TMPFILE || (rm $TMPFILE ; return 1) | |
| return 0 | |
| } | |
| # Retrieves XML object and checks if the name matches | |
| function get_and_check_object () { | |
| TYPE=$1 | |
| OID=$2 | |
| NAME=$3 | |
| TMPFILE=$(mktemp /tmp/get.XXXXXX) | |
| echo tmp file is $TMPFILE | |
| curl -k --user administrator:5ecr3t -H "Content-Type: application/xml" -X GET "https://localhost:8443/midpoint/ws/rest/$TYPE/$OID" >$TMPFILE || (rm $TMPFILE ; return 1) | |
| if (grep -q "<name>$NAME</name>" <$TMPFILE); then | |
| echo "Object $TYPE/$OID '$NAME' is OK" | |
| rm $TMPFILE | |
| return 0 | |
| else | |
| echo "Object $TYPE/$OID '$NAME' was not found or not retrieved correctly:" | |
| cat $TMPFILE | |
| rm $TMPFILE | |
| return 1 | |
| fi | |
| } | |
| # Adds object from a given file | |
| # TODO Returns the OID in OID variable | |
| # it can be found in the following HTTP reader returned: Location: "https://localhost:8443/midpoint/ws/rest/users/85e62669-d36b-41ce-b4f1-1ffdd9f66262" | |
| function add_object () { | |
| local TYPE=$1 | |
| local FILE=$2 | |
| echo "Adding to $TYPE from $FILE..." | |
| local response=$(curl -k -sD - --silent --write-out "%{http_code}" --user administrator:5ecr3t -H "Content-Type: application/xml" -X POST "https://localhost:8443/midpoint/ws/rest/$TYPE" -d @$FILE) | |
| local http_code=$(sed '$!d' <<<"$response") | |
| if [ "$http_code" -eq 201 ] || [ "$http_code" -eq 202 ]; then | |
| # get the real Location | |
| local location=$(grep -oP "Location: \K.*" <<<"$response") | |
| OID=$(sed 's/.*\///' <<<"$location") | |
| echo "Oid created object: $OID" | |
| return 0 | |
| else | |
| echo "Error code: $http_code" | |
| if [ "$http_code" -eq 500 ]; then | |
| echo "Error message: Internal server error. Unexpected error occurred, if necessary please contact system administrator." | |
| else | |
| local error_message=$(grep 'message' <<<"$response" | head -1 | awk -F">" '{print $2}' | awk -F"<" '{print $1}') | |
| echo "Error message: $error_message" | |
| fi | |
| return 1 | |
| fi | |
| #curl -k --user administrator:5ecr3t -H "Content-Type: application/xml" -X POST "https://localhost:8443/midpoint/ws/rest/$TYPE" -d @$FILE || return 1 | |
| #TODO check the returned XML | |
| } | |
| # Tries to find an object with a given name | |
| # Results of the search are in the $SEARCH_RESULT_FILE | |
| # TODO check if the result is valid (i.e. not an error) - return 1 if invalid, otherwise return 0 ("no objects" is considered OK here) | |
| function search_objects_by_name () { | |
| TYPE=$1 | |
| NAME="$2" | |
| TMPFILE=$(mktemp /tmp/search.XXXXXX) | |
| curl -k --write-out %{http_code} --user administrator:5ecr3t -H "Content-Type: application/xml" -X POST "https://localhost:8443/midpoint/ws/rest/$TYPE/search" -d @- << EOF >$TMPFILE || (rm $TMPFILE ; return 1) | |
| <q:query xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"> | |
| <q:filter> | |
| <q:equal> | |
| <q:path>name</q:path> | |
| <q:value>$NAME</q:value> | |
| </q:equal> | |
| </q:filter> | |
| </q:query> | |
| EOF | |
| SEARCH_RESULT_FILE=$TMPFILE | |
| http_code=$(sed '$!d' <<<"$(cat $SEARCH_RESULT_FILE)") | |
| sed -i '$ d' $SEARCH_RESULT_FILE | |
| cat $SEARCH_RESULT_FILE | |
| if [ "$http_code" -eq 200 ]; then | |
| return 0 | |
| else | |
| rm $SEARCH_RESULT_FILE | |
| return 1 | |
| fi | |
| } | |
| # Searches for object with a given name and verifies it was found | |
| function search_and_check_object () { | |
| local TYPE=$1 | |
| local NAME="$2" | |
| search_objects_by_name $TYPE "$NAME" || return 1 | |
| if (grep -q "<name>$NAME</name>" <$SEARCH_RESULT_FILE); then | |
| echo "Object $TYPE/'$NAME' is OK" | |
| rm $SEARCH_RESULT_FILE | |
| return 0 | |
| else | |
| echo "Object $TYPE/'$NAME' was not found or not retrieved correctly:" | |
| cat $SEARCH_RESULT_FILE | |
| rm $SEARCH_RESULT_FILE | |
| return 1 | |
| fi | |
| } | |
| # Tests a resource | |
| function test_resource () { | |
| local OID=$1 | |
| local TMPFILE=$(mktemp /tmp/test.resource.XXXXXX) | |
| curl -k --user administrator:5ecr3t -H "Content-Type: application/xml" -X POST "https://localhost:8443/midpoint/ws/rest/resources/$OID/test" >$TMPFILE || (rm $TMPFILE ; return 1) | |
| if [[ $(xmllint --xpath "/*/*[local-name()='status']/text()" $TMPFILE) == "success" ]]; then | |
| echo "Resource $OID test succeeded" | |
| rm $TMPFILE | |
| return 0 | |
| else | |
| echo "Resource $OID test failed" | |
| cat $TMPFILE | |
| rm $TMPFILE | |
| return 1 | |
| fi | |
| } | |
| function assert_task_success () { | |
| local OID=$1 | |
| get_object tasks $OID | |
| TASK_STATUS=$(xmllint --xpath "/*/*[local-name()='resultStatus']/text()" $TMPFILE) || (echo "Couldn't extract task status from task $OID" ; cat $TMPFILE ; rm $TMPFILE ; return 1) | |
| if [[ $TASK_STATUS = "success" ]]; then | |
| echo "Task $OID status is OK" | |
| rm $TMPFILE | |
| return 0 | |
| else | |
| echo "Task $OID status is not OK: $TASK_STATUS" | |
| cat $TMPFILE | |
| rm $TMPFILE | |
| return 1 | |
| fi | |
| } | |
| function wait_for_task_completion () { | |
| local OID=$1 | |
| local ATTEMPT=0 | |
| local MAX_ATTEMPTS=$2 | |
| local DELAY=$3 | |
| until [[ $ATTEMPT = $MAX_ATTEMPTS ]]; do | |
| ATTEMPT=$((ATTEMPT+1)) | |
| echo "Waiting $DELAY seconds for task with oid $OID to finish (attempt $ATTEMPT) ..." | |
| sleep $DELAY | |
| get_object tasks $OID | |
| TASK_EXECUTION_STATUS=$(xmllint --xpath "/*/*[local-name()='executionStatus']/text()" $TMPFILE) || (echo "Couldn't extract task status from task $OID" ; cat $TMPFILE ; rm $TMPFILE ; return 1) | |
| if [[ $TASK_EXECUTION_STATUS = "suspended" ]] || [[ $TASK_EXECUTION_STATUS = "closed" ]]; then | |
| echo "Task $OID is finished" | |
| rm $TMPFILE | |
| return 0 | |
| fi | |
| done | |
| rm $TMPFILE | |
| echo Task with $OID did not finish in $(( $MAX_ATTEMPTS * $DELAY )) seconds | |
| return 1 | |
| } | |
| #search LDAP accout by uid | |
| function search_ldap_object_by_filter () { | |
| local BASE_CONTEXT_FOR_SEARCH=$1 | |
| local FILTER="$2" | |
| TMPFILE=$(mktemp /tmp/ldapsearch.XXXXXX) | |
| ldapsearch -h localhost -p 389 -D "cn=Directory Manager" -w password -b "$BASE_CONTEXT_FOR_SEARCH" "($FILTER)" >$TMPFILE || (rm $TMPFILE ; return 1) | |
| LDAPSEARCH_RESULT_FILE=$TMPFILE | |
| return 0 | |
| } | |
| function check_ldap_account_by_user_name () { | |
| local NAME=$1 | |
| search_ldap_object_by_filter "ou=people,dc=internet2,dc=edu" "uid=$NAME" | |
| search_objects_by_name users $NAME | |
| local MP_FULL_NAME=$(xmllint --xpath "/*/*/*[local-name()='fullName']/text()" $SEARCH_RESULT_FILE) || (echo "Couldn't extract user fullName from file:" ; cat $SEARCH_RESULT_FILE ; rm $SEARCH_RESULT_FILE ; rm $LDAPSEARCH_RESULT_FILE ; return 1) | |
| local MP_GIVEN_NAME=$(xmllint --xpath "/*/*/*[local-name()='givenName']/text()" $SEARCH_RESULT_FILE) || (echo "Couldn't extract user givenName from file:" ; cat $SEARCH_RESULT_FILE ; rm $SEARCH_RESULT_FILE ; rm $LDAPSEARCH_RESULT_FILE ; return 1) | |
| local MP_FAMILY_NAME=$(xmllint --xpath "/*/*/*[local-name()='familyName']/text()" $SEARCH_RESULT_FILE) || (echo "Couldn't extract user familyName from file:" ; cat $SEARCH_RESULT_FILE ; rm $SEARCH_RESULT_FILE ; rm $LDAPSEARCH_RESULT_FILE ; return 1) | |
| local LDAP_CN=$(grep -oP "cn: \K.*" $LDAPSEARCH_RESULT_FILE) || (echo "Couldn't extract user cn from file:" ; cat $LDAPSEARCH_RESULT_FILE ; rm $SEARCH_RESULT_FILE ; rm $LDAPSEARCH_RESULT_FILE ; return 1) | |
| local LDAP_GIVEN_NAME=$(grep -oP "givenName: \K.*" $LDAPSEARCH_RESULT_FILE) || (echo "Couldn't extract user givenName from file:" ; cat $LDAPSEARCH_RESULT_FILE ; rm $SEARCH_RESULT_FILE ; rm $LDAPSEARCH_RESULT_FILE ; return 1) | |
| local LDAP_SN=$(grep -oP "sn: \K.*" $LDAPSEARCH_RESULT_FILE) || (echo "Couldn't extract user sn from file:" ; cat $LDAPSEARCH_RESULT_FILE ; rm $SEARCH_RESULT_FILE ; rm $LDAPSEARCH_RESULT_FILE ; return 1) | |
| rm $SEARCH_RESULT_FILE | |
| rm $LDAPSEARCH_RESULT_FILE | |
| if [[ $MP_FULL_NAME = $LDAP_CN ]] && [[ $MP_GIVEN_NAME = $LDAP_GIVEN_NAME ]] && [[ $MP_FAMILY_NAME = $LDAP_SN ]]; then | |
| return 0 | |
| fi | |
| echo "User in Midpoint and LDAP Account with uid $NAME are not same" | |
| return 1 | |
| } | |
| function check_of_ldap_membership () { | |
| local NAME_OF_USER=$1 | |
| local NAME_OF_GROUP=$2 | |
| search_ldap_object_by_filter "ou=people,dc=internet2,dc=edu" "uid=$NAME_OF_USER" | |
| local LDAP_ACCOUNT_DN=$(grep -oP "dn: \K.*" $LDAPSEARCH_RESULT_FILE) || (echo "Couldn't extract user dn from file:" ; cat $LDAPSEARCH_RESULT_FILE ; rm $LDAPSEARCH_RESULT_FILE ; return 1) | |
| search_ldap_object_by_filter "ou=groups,dc=internet2,dc=edu" "cn=$NAME_OF_GROUP" | |
| local LDAP_MEMBERS_DNS=$(grep -oP "uniqueMember: \K.*" $LDAPSEARCH_RESULT_FILE) || (echo "Couldn't extract user uniqueMember from file:" ; cat $LDAPSEARCH_RESULT_FILE ; rm $LDAPSEARCH_RESULT_FILE ; return 1) | |
| rm $LDAPSEARCH_RESULT_FILE | |
| if [[ $LDAP_MEMBERS_DNS =~ $LDAP_ACCOUNT_DN ]]; then | |
| return 0 | |
| fi | |
| echo "LDAP Account with uid $NAME_OF_USER is not member of LDAP Group $NAME_OF_GROUP" | |
| return 1 | |
| } | |