Commit Graph

94 Commits

Author SHA1 Message Date
Arnaud Cogoluègnes aa1bf987c8 Implement check_topic_access callback
References rabbitmq/rabbitmq-server#505
2016-12-29 08:55:58 +01:00
Arnaud Cogoluègnes c087a5419e Merge branch 'master' into rabbitmq-server-505 2016-12-27 17:25:55 +01:00
Arnaud Cogoluègnes b035ef104d Use ^$ instead of '' in permission regex
'' is now failing (after removal of rabbit_control_main).
2016-12-27 17:24:00 +01:00
Arnaud Cogoluègnes a256f447a0 Merge branch 'master' into rabbitmq-server-505 2016-12-27 17:07:36 +01:00
Arnaud Cogoluègnes ea72800353 Support topic authorisation
Add all the resource options in the candidate variables for string substitutions.
This includes the routing key when publishing to an exchange topic. Let pass
when there is no match in the for clause for a topic resource (for backward
compatibility). This a best effort as some queries could fail when publishing
to a topic exchange, but we cannot know whether it's an omission of
the topic case in the query or the query actually blocks the topic.

Part of rabbitmq/rabbitmq-server#505
2016-12-26 11:28:29 +01:00
Daniil Fedotov 9edf1bed08 Support the new cli in tests 2016-12-23 12:17:00 +00:00
Daniil Fedotov 219ad71c81 Idle connection expiry tests 2016-12-01 18:03:46 +00:00
kjnilsson 416035cc74 configure openldap backend
allow ldap port to be overridden by environment
2016-07-28 15:28:35 +01:00
kjnilsson 9331760d9e Treat noSuchObject responses as 'false` during 'or' and 'and' clause evaluations 2016-06-30 11:06:18 +01:00
Michael Klishin 538f4dd740 ldap_seed => rabbit_ldap_seed 2016-06-29 13:54:35 +03:00
kjnilsson 4e6963baf5 setup openldap as part of vagrant provisioning
seed openldap as part of the test run
2016-06-29 10:33:25 +01:00
kjnilsson 2461f04795 move to common test 2016-06-29 10:18:46 +01:00
Daniil Fedotov a0f0f5f6e7 Testing and refactoring 2016-05-12 13:53:54 +01:00
Ayanda Dube cea5a1b89e Adds logging test for 'network_unsafe' log option. 2016-04-28 17:43:42 +01:00
Ayanda Dube fd71d92db2 Introduces logging tests, and tests for scrubbing
bind request credentials in network traffic logs.
2016-04-28 17:43:42 +01:00
Ayanda Dube 0331b9f98a Updates tag check tests to accept test environment
variables as parameters.
2016-04-27 17:27:23 +01:00
Ayanda Dube b43f2d1d54 Adds tag checks/tests for variable tag queries.
Ref: #13
2016-04-21 17:39:06 +01:00
Ayanda Dube 6638a19261 Adds tests for AMQP direct connections.
Adds tests for variable tag_queries, for direct connections only.

Ref: #13.
2016-04-20 12:27:55 +01:00
Daniil Fedotov 8406c0cf77 Merge branch 'stable' into rabbitmq-auth-backend-ldap-15 2016-04-20 11:04:55 +01:00
Joseph Yiasemides f60fc8beea Test tag attribution with more suitable fixtures
These make testing against different backend configurations (for
access control) easier to read.
2016-04-19 13:30:45 +00:00
Joseph Yiasemides deaabf9990 DO NOT MERGE: Make tag query tests more like integration/system tests 2016-04-19 07:05:47 +00:00
Ayanda Dube 7e3e4fb4eb Cosmetics 2016-04-18 14:23:00 +01:00
Ayanda Dube 95b9fe8711 Adds success and failure tests for handling multiple attributes,
using the 'memberOf' attribute.

Adds filter lists per 'login' case.

Cosmetics.

Ref: #16.
2016-04-18 14:23:00 +01:00
Joseph Yiasemides 45a5ff0311 Test tag attribution by configuring from within the test-suite
Put the necessary configuration in the test itself, testing a more
complex assortment of tag queries, rather than in the configuration
file. Introduce another user into the LDAP server for this
test. Revert the `management` tag query, in the configuration file, to
a trivial constant query.
2016-04-14 14:20:48 +00:00
Michael Klishin e7ad5e6485 Merge branch 'stable' into rabbitmq-auth-backend-ldap-24 2016-03-26 05:27:52 -07:00
Joseph Yiasemides 2a1fc7d46f Use common placeholder names instead of former of current team members 2016-03-25 11:07:14 +00:00
Joseph Yiasemides 929f3f30ee Test the tags that should be recognised for a user
We were only testing for the absence of tags configured with the LDAP
plugin.
2016-03-18 14:52:03 +00:00
Joseph Yiasemides 58ca92a4ae Test that non-existent credentials fail to authenticate a client 2016-03-10 08:20:24 +00:00
Joseph Yiasemides 4ee2746430 Test with consistent use of macro substitution for username
Make it clear that credentials are not the subjects under test in
these negative cases by using the same macro that is used elsewhere.
2016-03-10 07:41:45 +00:00
Michael Klishin 83c22ce905 Update (c) info 2016-01-01 12:59:16 +03:00
Robby Raschke c599acdf33 Line things up a wee bit for consistency. 2015-10-05 18:17:50 +02:00
Robby Raschke a240ecca34 Add test cases for mixed authentication&authorisation modules, check tags. 2015-10-05 17:47:25 +02:00
Robby Raschke b862a6dfca Allow test to specify backends dynamically. 2015-10-05 14:57:28 +02:00
Michael Klishin 5fa779cdfa (c) year 2015-05-24 04:48:04 +03:00
Simon MacMullen 6989477b6e Oops 2015-01-09 13:23:21 +00:00
Simon MacMullen 20644f08d1 Fix fill escaping, plus a test. 2015-01-09 13:04:19 +00:00
Simon MacMullen 09d4acdc82 Update copyright for 2014 2014-03-17 17:25:20 +00:00
Simon MacMullen f586ddd335 dn_lookup_bind option, and rather more tests for the login phase. 2014-01-28 17:56:25 +00:00
Simon MacMullen 2cd07a3c07 Boolean logic, and some other small enhancements: an {equals, A, B} query which just compares strings for equality, and a shortcut ability to use a string constant "foo" instead of {string, "foo"}. 2013-08-07 17:02:12 +01:00
Simon MacMullen 8f70cf3ff5 s/VMware/GoPivotal/g 2013-07-01 10:49:10 +01:00
Emile Joubert a918b9ec5a Update copyright 2013 2013-01-23 11:24:23 +00:00
Emile Joubert d6d22dfd03 Update copyright 2012 2012-02-02 12:45:09 +00:00
Simon MacMullen f755a224b4 Let's make the query language more complicated (and featureful!)
This so needs better documentation...
2011-10-27 18:27:56 +01:00
Simon MacMullen 8b6ab83b18 Disgraceful that we didn't have automated tests for so long! These are still pretty simple, but will have to do. 2011-10-27 16:52:58 +01:00