import os import pytest import testinfra.utils.ansible_runner testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner( os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('clients') @pytest.mark.parametrize('server', ['parameters-mandatory', 'parameters-optional']) @pytest.mark.parametrize('port', [5222, 5223, 5000, 5269]) @pytest.mark.parametrize('ip_protocol', [4, 6]) def test_connectivity(host, server, port, ip_protocol): """ Tests connectivity to the XMPP server (ports that should be reachable). """ with host.sudo(): scan = host.run('nmap -%s -p %s -oG - %s', str(ip_protocol), str(port), server) assert scan.rc == 0 assert "Ports: %d/open/tcp//" % port in scan.stdout @pytest.mark.parametrize("username, password, domain", [ ["john.doe", "johnpassword", "domain1"], ["jane.doe", "janepassword", "domain2"], ]) def test_tls(host, username, password, domain): """ Tests if TLS works as expected. """ send = host.run(f"echo 'Hello' | go-sendxmpp --debug " f"--username {username}@{domain} --password {password} --jserver {domain}:5222 " f"{username}@{domain}") assert send.rc == 0 assert "Hello" in send.stderr send = host.run(f"echo 'Hello' | go-sendxmpp --debug --tls " f"--username {username}@{domain} --password {password} --jserver {domain}:5223 " f"{username}@{domain}") assert send.rc == 0 assert "Hello" in send.stderr @pytest.mark.parametrize("username, password, domain", [ ["john.doe", "johnpassword", "domain1"], ["jane.doe", "janepassword", "domain2"], ]) def test_authentication_requires_tls(host, username, password, domain): """ Tests if STARTTLS is required. """ send = host.run(f"echo 'Hello' | go-sendxmpp --debug " f"--username {username}@{domain} --password {password} --jserver {domain}:5222 " f"{username}@{domain}") assert send.rc == 0 assert "" in send.stderr @pytest.mark.parametrize("username, password, domain", [ ["john.doe", "johnpassword", "domain1"], ["jane.doe", "janepassword", "domain2"], ["mick.doe", "mickpassword", "domain3"], ]) def test_authentication(host, username, password, domain): """ Tests if authentication works correctly. """ send = host.run(f"echo 'Hello' | go-sendxmpp --debug " f"--username {username}@{domain} --password {password} --jserver {domain}:5222 " f"{username}@{domain}") assert send.rc == 0 send = host.run(f"echo 'Hello' | go-sendxmpp --debug --tls " f"--username {username}@{domain} --password {password} --jserver {domain}:5223 " f"{username}@{domain}") assert send.rc == 0 @pytest.mark.parametrize("target_username, target_domain", [ ["john.doe", "domain1"], ["jane.doe", "domain2"], ]) def test_unauthorized_users_rejected(host, target_username, target_domain): """ Tests if unauthorized users (present in LDAP, but not member of correct group) are rejected from accessing the XMPP server. """ send = host.run(f"echo 'Hello' | go-sendxmpp --debug " f"--username noxmpp@{target_domain} --password noxmpppassword --jserver {target_domain}:5222 " f"{target_username}@{target_domain}") assert send.rc != 0 assert "Unable to authorize you with the authentication credentials you've sent" in send.stderr