;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2019 Ricardo Wurmus <rekado@elephly.net>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu tests ldap)
  #:use-module (gnu tests)
  #:use-module (gnu system)
  #:use-module (gnu system nss)
  #:use-module (gnu system vm)
  #:use-module (gnu services)
  #:use-module (gnu services authentication)
  #:use-module (gnu services networking)
  #:use-module (gnu packages base)
  #:use-module (gnu packages openldap)
  #:use-module (guix gexp)
  #:use-module (guix store)
 </td></tr></table>
<table class='tabs'><tr><td>
<a href='/tracifyjs/about/?h=templatifyjs'>about</a><a href='/tracifyjs/?h=templatifyjs'>summary</a><a href='/tracifyjs/refs/?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>refs</a><a href='/tracifyjs/log/test/node.js?h=templatifyjs'>log</a><a class='active' href='/tracifyjs/tree/test/node.js?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>tree</a><a href='/tracifyjs/commit/test/node.js?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>commit</a><a href='/tracifyjs/diff/test/node.js?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>diff</a></td><td class='form'><form class='right' method='get' action='/tracifyjs/log/test/node.js'>
<input type='hidden' name='h' value='templatifyjs'/><input type='hidden' name='id' value='77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/tracifyjs/tree/?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>root</a>/<a href='/tracifyjs/tree/test?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>test</a>/<a href='/tracifyjs/tree/test/node.js?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>node.js</a></div><div class='content'>blob: fc3a14dcfc25548f0e3b41838895cf167d38295c (<a href='/tracifyjs/about/test/node.js?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>about</a>) (<a href='/tracifyjs/plain/test/node.js?h=templatifyjs&amp;id=77261e1ee037f3eea2d5ec80abb1387d4ba5c67e'>plain</a>)
<table summary='blob content' class='blob'>
<tr><td class='linenumbers'><pre><a id='n1' href='#n1'>1</a>
<a id='n2' href='#n2'>2</a>
<a id='n3' href='#n3'>3</a>
<a id='n4' href='#n4'>4</a>
<a id='n5' href='#n5'>5</a>
<a id='n6' href='#n6'>6</a>
</pre></td>
<td class='lines'><pre><code>var fs = require("fs");

new Function("exports", require("../tools/node").FILES.map(function(file) {
    if (/exports\.js$/.test(file)) file = require.resolve("./exports");
    return fs.readFileSync(file, "utf8");
}).join("\n\n"))(exports);
</code></pre></td></tr></table>
</div> <!-- class=content -->
                         <div class=footer>generated by
                             <a href="https://git.zx2c4.com/cgit/about/">
                                 cgit
                             </a>
                         </div>
                        </div> <!-- id=cgit -->
</body>
</html>
         '(zero? (system* #$(file-append openldap "/bin/ldapwhoami")
                              "-H" "ldap://localhost" "-D"
                              "cn=Directory Manager" "-w" "SECRET_PASS"))
             marionette))

          ;; Wait for nslcd to be up and running.
          (test-assert "nslcd service running"
            (marionette-eval
             '(begin
                (use-modules (gnu services herd))
                (match (start-service 'nslcd)
                  (#f #f)
                  (('service response-parts ...)
                   (match (assq-ref response-parts 'running)
                     ((pid) (number? pid))))))
             marionette))

          (test-assert "nslcd produces a log file"
            (marionette-eval
             '(file-exists? "/var/log/nslcd")
             marionette))

          (test-assert "Can query LDAP user accounts"
            (marionette-eval
             '(begin
                ;; TODO: This shouldn't be necessary, but unfortunately it
                ;; really is needed to discover LDAP accounts with "id".
                (setenv "LD_LIBRARY_PATH"
                        #$(file-append nss-pam-ldapd "/lib"))
                (zero? (system* #$(file-append coreutils "/bin/id") "eva")))
             marionette))

          (test-assert "Can become LDAP user"
            (marionette-eval
             '(zero? (system* "/run/setuid-programs/su" "eva" "-c"
                              #$(file-append coreutils "/bin/true")))
             marionette))

          (test-end))))

  (gexp->derivation "ldap-test" test))

(define %test-ldap
  (system-test
   (name "ldap")
   (description "Run an LDAP directory server and authenticate against it.")
   (value (run-ldap-test))))