mongo 1.9.2 → 1.10.0.rc0

data/test/shared/authentication/sasl_plain_shared.rb

@@ -0,0 +1,96 @@
+# Copyright (C) 2009-2013 MongoDB, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module SASLPlainTests
+
+  # Tests for the PLAIN (LDAP) Authentication Mechanism.
+  #
+  # Note: These tests will be skipped automatically unless the test environment
+  # has been configured.
+  #
+  # In order to run these tests, set the following environment variables:
+  #
+  #   export MONGODB_SASL_HOST='server.domain.com'
+  #   export MONGODB_SASL_USER='application%2Fuser%40example.com'
+  #   export MONGODB_SASL_PASS='password'
+  #
+  #   # optional (defaults to '$external')
+  #   export MONGODB_SASL_SOURCE='source_database'
+  #
+  if ENV.key?('MONGODB_SASL_HOST') && ENV.key?('MONGODB_SASL_USER') && ENV.key?('MONGODB_SASL_PASS')
+
+    def test_plain_authenticate
+      replica_set = @client.class.name == 'Mongo::MongoReplicaSetClient'
+
+      # TODO: Remove this once we have a replica set configured for SASL in CI
+      return if ENV.key?('CI') && replica_set
+
+      host   = replica_set ? [ENV['MONGODB_SASL_HOST']] : ENV['MONGODB_SASL_HOST']
+      client = @client.class.new(host)
+      source = ENV['MONGODB_SASL_SOURCE'] || '$external'
+      db     = client['test']
+
+      # should successfully authenticate
+      assert db.authenticate(ENV['MONGODB_SASL_USER'], ENV['MONGODB_SASL_PASS'], true, source, 'PLAIN')
+      assert client[source].logout
+
+      # should raise on missing password
+      ex = assert_raise Mongo::MongoArgumentError do
+        db.authenticate(ENV['MONGODB_SASL_USER'], nil, true, source, 'PLAIN')
+      end
+      assert_match /username and password are required/, ex.message
+
+      # should raise on invalid password
+      assert_raise Mongo::AuthenticationError do
+        db.authenticate(ENV['MONGODB_SASL_USER'], 'foo', true, source, 'PLAIN')
+      end
+    end
+
+    def test_plain_authenticate_from_uri
+      source = ENV['MONGODB_SASL_SOURCE'] || '$external'
+
+      uri    = "mongodb://#{ENV['MONGODB_SASL_USER']}:#{ENV['MONGODB_SASL_PASS']}@" +
+               "#{ENV['MONGODB_SASL_HOST']}/some_db?authSource=#{source}" +
+               "&authMechanism=PLAIN"
+
+      client = @client.class.from_uri(uri)
+      db     = client['test']
+
+      # should be able to checkout a socket (authentication gets applied)
+      assert socket = client.checkout_reader(:mode => :primary)
+      client[source].logout(:socket => socket)
+      client.checkin(socket)
+
+      uri = "mongodb://#{ENV['MONGODB_SASL_USER']}@#{ENV['MONGODB_SASL_HOST']}/" +
+            "some_db?authSource=#{source}&authMechanism=PLAIN"
+
+      # should raise for missing password
+      ex = assert_raise Mongo::MongoArgumentError do
+        client = @client.class.from_uri(uri)
+      end
+      assert_match /username and password are required/, ex.message
+
+      uri = "mongodb://#{ENV['MONGODB_SASL_USER']}:foo@#{ENV['MONGODB_SASL_HOST']}/" +
+            "some_db?authSource=#{source}&authMechanism=PLAIN"
+
+      # should raise for invalid password
+      client = @client.class.from_uri(uri)
+      assert_raise Mongo::AuthenticationError do
+        client.checkout_reader(:mode => :primary)
+      end
+    end
+
+  end
+
+end

data/test/shared/ssl_shared.rb

@@ -0,0 +1,173 @@
+# Copyright (C) 2009-2013 MongoDB, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module SSLTests
+  include Mongo
+
+  CERT_PATH   = "#{Dir.pwd}/test/fixtures/certificates/"
+  CLIENT_CERT = "#{CERT_PATH}client.pem"
+  CA_CERT     = "#{CERT_PATH}ca.pem"
+
+  def create_client(*args)
+    if @client_class == MongoClient
+      @client_class.new(*args[0], args[1])
+    else
+      @client_class.new(args[0], args[1])
+    end
+  end
+
+  # This test doesn't connect, no server config required
+  def test_ssl_configuration
+    # raises when ssl=false and ssl opts specified
+    assert_raise MongoArgumentError do
+      create_client(@connect_info, :connect  => false,
+                                   :ssl      => false,
+                                   :ssl_cert => CLIENT_CERT)
+    end
+
+    # raises when ssl=nil and ssl opts specified
+    assert_raise MongoArgumentError do
+      create_client(@connect_info, :connect => false,
+                                   :ssl_key => CLIENT_CERT)
+    end
+
+    # raises when verify=true and no ca_cert
+    assert_raise MongoArgumentError do
+      create_client(@connect_info, :connect    => false,
+                                   :ssl        => true,
+                                   :ssl_key    => CLIENT_CERT,
+                                   :ssl_cert   => CLIENT_CERT,
+                                   :ssl_verify => true)
+    end
+  end
+
+  # Requires MongoDB built with SSL and the follow options:
+  #
+  # mongod --dbpath /path/to/data/directory --sslOnNormalPorts \
+  # --sslPEMKeyFile /path/to/server.pem \
+  # --sslCAFile /path/to/ca.pem \
+  # --sslCRLFile /path/to/crl.pem \
+  # --sslWeakCertificateValidation
+  #
+  # Make sure you have 'server' as an alias for localhost in /etc/hosts
+  #
+  def test_ssl_basic
+    client = create_client(@connect_info, :connect => false, :ssl => true)
+    assert client.connect
+  end
+
+  # Requires MongoDB built with SSL and the follow options:
+  #
+  # mongod --dbpath /path/to/data/directory --sslOnNormalPorts \
+  # --sslPEMKeyFile /path/to/server.pem \
+  # --sslCAFile /path/to/ca.pem \
+  # --sslCRLFile /path/to/crl.pem
+  #
+  # Make sure you have 'server' as an alias for localhost in /etc/hosts
+  #
+  def test_ssl_with_cert
+    client = create_client(@connect_info, :connect  => false,
+                                          :ssl      => true,
+                                          :ssl_cert => CLIENT_CERT,
+                                          :ssl_key  => CLIENT_CERT)
+    assert client.connect
+  end
+
+  def test_ssl_with_peer_cert_validation
+    client = create_client(@connect_info, :connect     => false,
+                                          :ssl         => true,
+                                          :ssl_key     => CLIENT_CERT,
+                                          :ssl_cert    => CLIENT_CERT,
+                                          :ssl_verify  => true,
+                                          :ssl_ca_cert => CA_CERT)
+    assert client.connect
+  end
+
+  def test_ssl_peer_cert_validation_hostname_fail
+    client = create_client(@bad_connect_info, :connect     => false,
+                                              :ssl         => true,
+                                              :ssl_key     => CLIENT_CERT,
+                                              :ssl_cert    => CLIENT_CERT,
+                                              :ssl_verify  => true,
+                                              :ssl_ca_cert => CA_CERT)
+    assert_raise ConnectionFailure do
+      client.connect
+    end
+  end
+
+  # Requires mongod built with SSL and the follow options:
+  #
+  # mongod --dbpath /path/to/data/directory --sslOnNormalPorts \
+  # --sslPEMKeyFile /path/to/server.pem \
+  # --sslCAFile /path/to/ca.pem \
+  # --sslCRLFile /path/to/crl_client_revoked.pem
+  #
+  # Make sure you have 'server' as an alias for localhost in /etc/hosts
+  #
+  def test_ssl_with_invalid_cert
+    assert_raise ConnectionFailure do
+      create_client(@connect_info, :ssl         => true,
+                                   :ssl_key     => CLIENT_CERT,
+                                   :ssl_cert    => CLIENT_CERT,
+                                   :ssl_verify  => true,
+                                   :ssl_ca_cert => CA_CERT)
+    end
+  end
+
+  # X509 Authentication Tests
+  #
+  # Requires MongoDB built with SSL and the follow options:
+  #
+  # mongod --auth --dbpath /path/to/data/directory --sslOnNormalPorts \
+  # --sslPEMKeyFile /path/to/server.pem \
+  # --sslCAFile /path/to/ca.pem \
+  # --sslCRLFile /path/to/crl.pem
+  #
+  if ENV.key?('MONGODB_X509_USER')
+
+    def test_x509_authentication
+      mechanism = 'MONGODB-X509'
+      client    = create_client(@connect_info, :ssl => true,
+                                               :ssl_cert => CLIENT_CERT)
+
+      return unless client.server_version > '2.5.2'
+
+      user     = ENV['MONGODB_X509_USER']
+      db       = client.db('$external')
+
+      # add user for test (enable auth)
+      roles    = [{:role => 'readWriteAnyDatabase', :db => 'admin'},
+                  {:role => 'userAdminAnyDatabase', :db => 'admin'}]
+      db.add_user(user, nil, false, :roles => roles)
+
+      assert db.authenticate(user, nil, nil, nil, mechanism)
+      assert db.collection_names
+
+      assert db.logout
+      assert_raise Mongo::AuthenticationError do
+        db.collection_names
+      end
+
+      assert MongoReplicaSetClient.from_uri(
+        "mongodb://#{user}@#{@uri_info}/admin?authMechanism=#{mechanism}")
+      assert db.collection_names
+
+      # clean up and remove all users
+      db.command(:dropAllUsersFromDatabase => 1)
+      db.logout
+    end
+
+  end
+
+end

data/test/test_helper.rb

@@ -1,4 +1,4 @@
-# Copyright (C) 2013 10gen Inc.
+# Copyright (C) 2009-2013 MongoDB, Inc.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -12,213 +12,45 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-begin
-  require 'pry-rescue'
-  require 'pry-nav'
-rescue LoadError
-  # failed to load, skipping pry
-end
-
-# SimpleCov must load before our code - A coverage report summary line will print after each test suite
-if RUBY_VERSION >= '1.9.0' && RUBY_ENGINE == 'ruby'
-  if ENV.key?('COVERAGE')
-    require 'simplecov'
-    SimpleCov.start do
-      add_group "Mongo", 'lib/mongo'
-      add_group "BSON", 'lib/bson'
-      add_filter "/test/"
-      merge_timeout 3600
-      command_name ENV['SIMPLECOV_COMMAND_NAME'] if ENV.has_key?('SIMPLECOV_COMMAND_NAME')
-    end
-  end
-end
-gem 'test-unit' # Do NOT remove this line - gem version is needed for Test::Unit::TestCase.shutdown
-require 'test/unit'
-require 'tools/mongo_config'
-
-class Test::Unit::TestCase
-
-  TEST_DATA = File.join(File.dirname(__FILE__), 'fixtures/data')
-
-  def ensure_cluster(kind=nil, opts={})
-    @@cluster ||= nil
-
-    unless @@cluster
-      if kind == :rs
-        cluster_opts = Mongo::Config::DEFAULT_REPLICA_SET.dup
-      else
-        cluster_opts = Mongo::Config::DEFAULT_SHARDED_SIMPLE.dup
-      end
-
-      cluster_opts.merge!(opts)
-
-      dbpath = ENV['DBPATH'] || 'data'
-      cluster_opts.merge!(:dbpath => dbpath)
+# NOTE: on ruby <1.9 you need to run individual tests with 'bundle exec'
 
-      #debug 1, opts
-      config = Mongo::Config.cluster(cluster_opts)
-      #debug 1, config
-      @@cluster = Mongo::Config::ClusterManager.new(config)
+unless RUBY_VERSION < '1.9' || ENV.key?('JENKINS_CI')
+  require 'simplecov'
+  require 'coveralls'
 
-      Test::Unit::TestCase.class_eval do
-        @@force_shutdown = false
+  SimpleCov.formatter = SimpleCov::Formatter::MultiFormatter[
+    SimpleCov::Formatter::HTMLFormatter,
+    Coveralls::SimpleCov::Formatter
+  ]
 
-        def self.shutdown
-          if @@force_shutdown || /rake_test_loader/ !~ $0
-            @@cluster.stop
-            @@cluster.clobber
-          end
-        end
-      end
-    end
+  SimpleCov.start do
+    add_group 'Driver', 'lib/mongo'
+    add_group 'BSON', 'lib/bson'
 
-    @@cluster.start
-    instance_variable_set("@#{kind}", @@cluster)
+    add_filter 'tasks'
+    add_filter 'test'
+    add_filter 'bin'
   end
-
-  # Generic code for rescuing connection failures and retrying operations.
-  # This could be combined with some timeout functionality.
-  def rescue_connection_failure(max_retries=30)
-    retries = 0
-    begin
-      yield
-    rescue Mongo::ConnectionFailure => ex
-      #puts "Rescue attempt #{retries}: from #{ex}"
-      retries += 1
-      raise ex if retries > max_retries
-      sleep(2)
-      retry
-    end
-  end
-end
-
-def silently
-  warn_level = $VERBOSE
-  $VERBOSE = nil
-  begin
-    result = yield
-  ensure
-    $VERBOSE = warn_level
-  end
-  result
-end
-
-begin
-  silently { require 'shoulda' }
-  silently { require 'mocha/setup' }
-rescue LoadError
-  puts <<MSG
-
-This test suite requires shoulda and mocha.
-You can install them as follows:
-  gem install shoulda
-  gem install mocha
-
-MSG
-  exit
-end
-
-unless defined? MONGO_TEST_DB
-  MONGO_TEST_DB = 'ruby-test-db'
-end
-
-unless defined? TEST_PORT
-  TEST_PORT = ENV['MONGO_RUBY_DRIVER_PORT'] ? ENV['MONGO_RUBY_DRIVER_PORT'].to_i : Mongo::MongoClient::DEFAULT_PORT
-end
-
-unless defined? TEST_HOST
-  TEST_HOST = ENV['MONGO_RUBY_DRIVER_HOST'] || 'localhost'
 end
 
-class Test::Unit::TestCase
-  include Mongo
-  include BSON
-
-  def self.standard_connection(options={}, legacy=false)
-    if legacy
-      Connection.new(TEST_HOST, TEST_PORT, options)
-    else
-      MongoClient.new(TEST_HOST, TEST_PORT, options)
-    end
-  end
-
-  def standard_connection(options={}, legacy=false)
-    self.class.standard_connection(options, legacy)
-  end
-
-  def self.host_port
-    "#{mongo_host}:#{mongo_port}"
-  end
-
-  def self.mongo_host
-    TEST_HOST
-  end
-
-  def self.mongo_port
-    TEST_PORT
-  end
-
-  def host_port
-    self.class.host_port
-  end
-
-  def mongo_host
-    self.class.mongo_host
-  end
-
-  def mongo_port
-    self.class.mongo_port
-  end
+# required for at_exit, at_start hooks
+require 'test-unit'
 
-  def method_name
-    caller[0]=~/`(.*?)'/
-    $1
-  end
-
-  def step_down_command
-    # Adding force=true to avoid 'no secondaries within 10 seconds of my optime' errors
-    step_down_command = BSON::OrderedHash.new
-    step_down_command[:replSetStepDown] = 5
-    step_down_command[:force]           = true
-    step_down_command
-  end
-
-  def new_mock_socket(host='localhost', port=27017)
-    socket = Object.new
-    socket.stubs(:setsockopt).with(Socket::IPPROTO_TCP, Socket::TCP_NODELAY, 1)
-    socket.stubs(:close)
-    socket.stubs(:closed?)
-    socket.stubs(:checkin)
-    socket.stubs(:pool)
-    socket
-  end
-
-  def new_mock_unix_socket(sockfile='/tmp/mongod.sock')
-    socket = Object.new
-    socket.stubs(:setsockopt).with(Socket::IPPROTO_TCP)
-    socket.stubs(:close)
-    socket.stubs(:closed?)
-    socket
-  end
+require 'test/unit'
+require 'shoulda'
+require 'mocha/setup'
 
-  def new_mock_db
-    Object.new
-  end
+# cluster manager
+require 'tools/mongo_config'
 
-  def assert_raise_error(klass, message=nil)
-    begin
-      yield
-    rescue => e
-      if klass.to_s != e.class.to_s
-        flunk "Expected exception class #{klass} but got #{e.class}.\n #{e.backtrace}"
-      end
+# test helpers
+require 'helpers/general'
+require 'helpers/test_unit'
 
-      if message && !e.message.include?(message)
-        p e.backtrace
-        flunk "#{e.message} does not include #{message}.\n#{e.backtrace}"
-      end
-    else
-      flunk "Expected assertion #{klass} but none was raised."
-    end
-  end
+# optional development and debug utilities
+begin
+  require 'pry-rescue'
+  require 'pry-nav'
+rescue LoadError
+  # failed to load, skipping pry
 end