blob: 0062e60f95a6605a1b7f1c1343fd8a3a394b5ec0 [file] [log] [blame]
*** Settings ***
Documentation OpenBMC LDAP user management test.
Resource ../lib/rest_client.robot
Resource ../lib/openbmc_ffdc.robot
Resource ../lib/user_utils.robot
Library ../lib/bmc_ssh_utils.py
Suite Setup Suite Setup Execution
Test Teardown FFDC On Test Case Fail
*** Variables ****
*** Test Cases ***
Verify LDAP API Available
[Documentation] Verify LDAP client service is running and API available.
[Tags] Verify_LDAP_API_Available
${resp}= Read Properties ${BMC_LDAP_URI}
Should Be Empty ${resp}
Verify User Group And Privilege Created
[Documentation] Verify user group and associated privilege is created.
[Tags] Verify_User_Group_And_Privilege_Created
[Teardown] FFDC On Test Case Fail
Create Group And Privilege ${GROUP_NAME} ${GROUP_PRIVILEGE}
${bmc_user_uris}= Read Properties ${BMC_USER_URI}ldap/enumerate
${bmc_user_uris}= Convert To String ${bmc_user_uris}
Should Contain ${bmc_user_uris} ${GROUP_NAME}
Should Contain ${bmc_user_uris} ${GROUP_PRIVILEGE}
Verify LDAP Config Is Created
[Documentation] Verify LDAP config is created in BMC.
[Tags] Verify_LDAP_Config_Is_Created
Configure LDAP Server On BMC
Check LDAP Config File Generated
Verify LDAP Config Is Deleted
[Documentation] Verify LDAP config is deleted in BMC.
[Tags] Verify_LDAP_Config_Is_Deleted
Delete LDAP Config
Check LDAP Config File Deleted
Verify LDAP User Able To Login Using REST
[Documentation] Verify LDAP user able to login using REST.
[Tags] Verify_LDAP_User_Able_To_Login_Using_REST
Configure LDAP Server On BMC
Check LDAP Config File Generated
Sleep 60s
# REST Login to BMC with LDAP user and password.
Initialize OpenBMC 60 1 ${LDAP_USER} ${LDAP_USER_PASSWORD}
${bmc_user_uris}= Read Properties ${BMC_USER_URI}list
Should Not Be Empty ${bmc_user_uris}
Verify LDAP User Able to Logout Using REST
[Documentation] Verify LDAP user able to logout using REST.
[Tags] Verify_LDAP_User_Able_To_Logout_Using_REST
Configure LDAP Server On BMC
Sleep 60s
Check LDAP Config File Generated
Sleep 60s
# REST Login to BMC with LDAP user and password.
Initialize OpenBMC 60 1 ${LDAP_USER} ${LDAP_USER_PASSWORD}
# REST Logout from BMC.
Log Out OpenBMC
Verify LDAP Server URI Is Set
[Documentation] Verify LDAP Server URI is set using REST.
[Tags] Verify_LDAP_Server_URI_Is_Set
# Example: LDAP URI should be either ldap://<LDAP IP / Hostname> or
# ldaps://<LDAP IP / Hostname>
Should Contain ${LDAP_SERVER_URI} ldap
${ldap_server}= Create Dictionary data=${LDAP_SERVER_URI}
Write Attribute ${BMC_LDAP_URI}/config LDAPServerURI data=${ldap_server}
... verify=${True} expected_value=${LDAP_SERVER_URI}
Verify LDAP Server BIND DN Is Set
[Documentation] Verify LDAP BIND DN is set using REST.
[Tags] Verify_LDAP_Server_BIND_DN_Is_Set
${ldap_server_binddn}= Create Dictionary data=${LDAP_BIND_DN}
Write Attribute ${BMC_LDAP_URI}/config LDAPBindDN data=${ldap_server_binddn}
... verify=${True} expected_value=${LDAP_BIND_DN}
Verify LDAP Server BASE DN Is Set
[Documentation] Verify LDAP BASE DN is set using REST.
[Tags] Verify_LDAP_Server_BASE_DN_Is_Set
${ldap_server_basedn}= Create Dictionary data=${LDAP_BASE_DN}
Write Attribute ${BMC_LDAP_URI}/config LDAPBaseDN data=${ldap_server_basedn}
... verify=${True} expected_value=${LDAP_BASE_DN}
Verify LDAP Server Type Is Set As Active Directory
[Documentation] Verify LDAP server type is set as "Active Directory"
... using REST.
[Tags] Verify_LDAP_Server_Type_Is_Set_As_Active_Directory
[Template] Modify LDAP Server Type
# Server type as ActiveDirectory
xyz.openbmc_project.User.Ldap.Config.Type.ActiveDirectory
Verify LDAP Server Type Is Set As Open LDAP
[Documentation] Verify LDAP server type is set as "OpenLDAP"
... using REST.
[Tags] Verify_LDAP_Server_Type_Is_Set_As_Open_LDAP
[Template] Modify LDAP Server Type
# Server type as OpenLdap
xyz.openbmc_project.User.Ldap.Config.Type.OpenLdap
Verify LDAP Search Scope Is Set As One
[Documentation] Verify LDAP search scope is set as "one" using REST.
[Tags] Verify_LDAP_Search_Scope_Is_Set_As_One
[Template] Modify LDAP Search Scope
# Search Scope as one
xyz.openbmc_project.User.Ldap.Config.SearchScope.one
Verify LDAP Search Scope Is Set As Base
[Documentation] Verify LDAP search scope is set as "base" using REST.
[Tags] Verify_LDAP_Search_Scope_Is_Set_As_Base
[Template] Modify LDAP Search Scope
# Search Scope as base
xyz.openbmc_project.User.Ldap.Config.SearchScope.base
Verify LDAP Search Scope Is Set As Sub
[Documentation] Verify LDAP search scope is set as "sub" using REST.
[Tags] Verify_LDAP_Search_Scope_Is_Set_As_Sub
[Template] Modify LDAP Search Scope
# Search Scope as sub
xyz.openbmc_project.User.Ldap.Config.SearchScope.sub
Verify LDAP Binddn Password Is Set
[Documentation] Verify LDAP Binddn password is set using REST.
[Tags] Verify_LDAP_Binddn_Password_Is_Set
${ldap_binddn_passwd}= Create Dictionary data=${LDAP_BIND_DN_PASSWORD}
Write Attribute ${BMC_LDAP_URI}/config LDAPBINDDNpassword data=${ldap_binddn_passwd}
... verify=${True} expected_value=${LDAP_BIND_DN_PASSWORD}
Delete LDAP Group
[Documentation] Delete LDAP group which is configured.
[Tags] Delete_LDAP_Group
Delete Defined LDAP Group And Privilege ${GROUP_NAME}