/** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.apache.activemq.security; import java.io.IOException; import java.io.InputStream; import org.apache.directory.ldap.client.api.LdapConnection; import org.apache.directory.ldap.client.api.LdapNetworkConnection; import org.apache.directory.shared.ldap.model.exception.LdapException; import org.apache.directory.shared.ldap.model.name.Dn; import org.junit.Before; import org.junit.Ignore; import org.junit.Test; /** * Test of the {@link SimpleCachedLDAPAuthorizationMap} that tests against a basic OpenLDAP instance. * Disabled by default because it requires external setup to provide the OpenLDAP instance. * * To enable, you need an OpenLDAP with a minimum of the following in the slapd.conf file: * * suffix "dc=apache,dc=org" * rootdn "cn=Manager,dc=apache,dc=org" * rootpw {SSHA}+Rx8kj98q3FlK5rUkT2hAtMP5v2ImQ82 * * If you wish to use different settings or don't use the default port, change the constants * below for your environment. */ @Ignore public class CachedLDAPAuthorizationModuleOpenLDAPTest extends AbstractCachedLDAPAuthorizationModuleTest { protected static final String LDAP_USER = "cn=Manager,dc=apache,dc=org"; protected static final String LDAP_PASS = "password"; protected static final String LDAP_HOST = "localhost"; protected static final int LDAP_PORT = 389; @Before @Override public void setup() throws Exception { super.setup(); cleanAndLoad("dc=apache,dc=org", "org/apache/activemq/security/activemq-openldap.ldif", LDAP_HOST, LDAP_PORT, LDAP_USER, LDAP_PASS, map.open()); } @Override @Test public void testRenameDestination() throws Exception { // Subtree rename not implemented by OpenLDAP. } @Override protected SimpleCachedLDAPAuthorizationMap createMap() { SimpleCachedLDAPAuthorizationMap newMap = super.createMap(); newMap.setConnectionURL("ldap://" + LDAP_HOST + ":" + String.valueOf(LDAP_PORT)); newMap.setConnectionUsername(LDAP_USER); newMap.setConnectionPassword(LDAP_PASS); // Persistent search is not supported in OpenLDAP newMap.setRefreshInterval(10); newMap.setQueueSearchBase("ou=Queue,ou=Destination,ou=ActiveMQ,dc=activemq,dc=apache,dc=org"); newMap.setTopicSearchBase("ou=Topic,ou=Destination,ou=ActiveMQ,dc=activemq,dc=apache,dc=org"); newMap.setTempSearchBase("ou=Temp,ou=Destination,ou=ActiveMQ,dc=activemq,dc=apache,dc=org"); return newMap; } @Override protected InputStream getAddLdif() { return getClass().getClassLoader().getResourceAsStream("org/apache/activemq/security/activemq-openldap-add.ldif"); } @Override protected InputStream getRemoveLdif() { return getClass().getClassLoader().getResourceAsStream("org/apache/activemq/security/activemq-openldap-delete.ldif"); } @Override protected String getMemberAttributeValueForModifyRequest() { return "cn=users,ou=Group,ou=ActiveMQ,dc=activemq,dc=apache,dc=org"; } @Override protected String getQueueBaseDn() { return "ou=Queue,ou=Destination,ou=ActiveMQ,dc=activemq,dc=apache,dc=org"; } @Override protected LdapConnection getLdapConnection() throws LdapException, IOException { LdapConnection connection = new LdapNetworkConnection(LDAP_HOST, LDAP_PORT); connection.bind(new Dn(LDAP_USER), LDAP_PASS); return connection; } }