commit aa8cda9fe12e5a82c4c1f3d613588fba78460928
author Sweta Potthuri <spotthur@in.ibm.com> Wed Oct 19 04:45:08 2022 -0500
committer George Keishing <gkeishin@gmail.com> Fri Nov 11 10:22:38 2022 +0000
tree 1b12de054fee031ab2c6e329ed104844c106639b
parent 819be78f7d9e8d04fb98e8dbc2d22b49e709e366

LDAP:Added Test Case
"Switch LDAP Type And Verify Login Fails"

Changes:
    - Added in redfish/account_service/test_ldap_configuration.robot

Tested:
    - Ran the test case on BMC environment.

Change-Id: Id01735693b2fd747a52501c4a1c230ba5d60e797
Signed-off-by: Sweta Potthuri <spotthur@in.ibm.com>

redfish/account_service/test_ldap_configuration.robot

diff --git a/redfish/account_service/test_ldap_configuration.robot b/redfish/account_service/test_ldap_configuration.robot
index bce906a..f10678a 100644
--- a/redfish/account_service/test_ldap_configuration.robot
+++ b/redfish/account_service/test_ldap_configuration.robot
@@ -13,7 +13,6 @@
 Suite Setup      Suite Setup Execution
 Suite Teardown   LDAP Suite Teardown Execution
 Test Teardown    Run Keywords  Redfish.Login  AND  FFDC On Test Case Fail
-
 Force Tags       LDAP_Test
 
 *** Variables ***
@@ -524,6 +523,32 @@
 
     ${LDAP_TYPE}  Operator       ${GROUP_NAME}  ${HTTP_OK}
 
+Switch LDAP Type And Verify Login Fails
+    [Documentation]  Switch LDAP type and verify login fails.
+    [Tags]  Switch_LDAP_Type_And_Verify_Login_Fails
+
+    # Check Login with LDAP Type is working
+    Create LDAP Configuration
+    Redfish Verify LDAP Login
+
+    # Disable the LDAP Type from OpenLDAP to ActiveDirectory or vice-versa
+    Redfish.Patch  ${REDFISH_BASE_URI}AccountService
+    ...  body={'${LDAP_TYPE}': {'ServiceEnabled': ${False}}}
+
+    # Enable the inverse LDAP type
+    Disable Other LDAP  ${True}
+    Create LDAP Configuration  ${LDAP_TYPE_1}  ${LDAP_SERVER_URI_1}  ${LDAP_BIND_DN_1}  ${LDAP_BIND_DN_PASSWORD_1}  ${LDAP_BASE_DN_1}
+    Redfish.Logout
+    Sleep  10s
+
+    # Check if Login works via Inverse LDAP
+    Redfish.Login  ${LDAP_USER_1}  ${LDAP_USER_PASSWORD_1}
+    Redfish.Logout
+    Sleep  10s
+
+    # Login using LDAP type must fail
+    Redfish Verify LDAP Login  ${False}
+    Redfish.Logout
 
 *** Keywords ***
 
@@ -581,11 +606,12 @@
 
 Disable Other LDAP
     [Documentation]  Disable other LDAP configuration.
+    [Arguments]  ${service_state}=${False}
 
     # First disable other LDAP.
     ${inverse_ldap_type}=  Set Variable If  '${LDAP_TYPE}' == 'LDAP'  ActiveDirectory  LDAP
     Redfish.Patch  ${REDFISH_BASE_URI}AccountService
-    ...  body={'${inverse_ldap_type}': {'ServiceEnabled': ${False}}}
+    ...  body={'${inverse_ldap_type}': {'ServiceEnabled': ${service_state}}}
     Sleep  15s