ucert 0.2.57

data/test/t24_testfiles/T24_Grp_Rpt_Test.csv

@@ -0,0 +1,7 @@
+"@ID","DESCRIPTION","APPLICATION","VERSION","FUNCTION"
+"TEST1-1","TEST1-2","TEST1-3","TEST1-4","TEST1-5"
+"TEST2-1","TEST2-2","TEST2-3","TEST2-4","TEST2-5"
+"","","TEST2-3-1","","TEST2-3-1"
+"TEST3-1","TEST3-2","TEST3-3","TEST3-4","TEST3-5"
+"","","TEST3-3-1","","TEST3-3-1"
+"","","TEST3-3-2","","TEST3-3-2"

data/test/t24_testfiles/T24_User_Rpt_Test.csv

@@ -0,0 +1,7 @@
+"@ID","USER.NAME","APPLICATION","FUNCTION","START.DATE.PROFILE","END.DATE.PROFILE","PASSWORD.VALIDITY","ATTRIBUTES","INIT.APPLICATION","ATTEMPTS","COMPANY.CODE","SECURITY.MGMT.L","TIME.OUT.MINUTES","DATE.LAST.SIGN.ON","TIME.LAST.SIGN.ON","PASSW.CHANGE.DATE"
+"TEST1-1","TEST1-2","TEST1-3","TEST1-4","TEST1-5","TEST1-6","TEST1-7","TEST1-8","TEST1-9","TEST1-10","TEST1-11","TEST1-12","TEST1-13","TEST1-14","TEST1-15","TEST1-16"
+"TEST2-1","TEST2-2","@TEST2-3","","TEST2-5","TEST2-6","TEST2-7","TEST2-8","TEST2-9","TEST2-10","TEST2-11","TEST2-12","TEST2-13","TEST2-14","TEST2-15","TEST2-16"
+"","","TEST2-3-1","TEST2-3-1","","","","","","","","","","","",""
+"TEST3-1","TEST3-2","@TEST3-3","","TEST3-5","TEST3-6","TEST3-7","TEST3-8","TEST3-9","TEST3-10","TEST3-11","TEST3-12","TEST3-13","TEST3-14","TEST3-15","TEST3-16"
+"","","TEST3-3-1","TEST3-3-1","","","","","","","","","","","",""
+"","","TEST3-3-2","TEST3-3-2","","","","","","","","","","","",""

data/test/test_ad_tracker.rb

@@ -0,0 +1,148 @@
+require "minitest/autorun"
+require "ucert"
+
+#overriding initialize method for loading test_files
+class Tracker_Ad < Ucert::AdTracker
+
+  attr_accessor :ad_person_records,:ad_computer_records
+
+  def initialize (params ={})
+    @verbose=params.fetch(:verbose, false)
+    @ldapsearch_cache_person=File.dirname(__FILE__)+"/ad_testfiles/ldap_person_test.txt"
+    @ldapsearch_cache_computer=File.dirname(__FILE__)+"/ad_testfiles/ldap_computer_test.txt"
+    @hosts_cache=File.dirname(__FILE__)+"/ad_testfiles/hosts_test"
+    @ad_delta_map=File.dirname(__FILE__)+"/ad_testfiles/ad_delta_test.txt"
+    @ad_person_records = Hash.new
+    @ad_computer_records = Hash.new
+  end
+end
+
+class TestAdTracker < Minitest::Test
+  def setup
+    @ad_tracker = Ucert::AdTracker.new(:verbose=>false)
+    @tracker_ad = Tracker_Ad.new(:verbose=>false) #for test use
+  end
+
+  def test_ldap_server_is_bind
+    assert @ad_tracker.is_ldap_bind?
+    @ad_tracker = Ucert::AdTracker.new(:ldap_port=>"388")
+    refute @ad_tracker.is_ldap_bind?
+  end
+
+  def test_load_known_hosts
+    File.open(File.dirname(__FILE__)+"/ad_testfiles/hosts_test", "w") do |f|
+      f.write "# local hosts file created"
+      f.write "\ntest1.ny.cmbchina.com\t192.168.0.10"
+      f.write "\ntest2.ny.cmbchina.com\t192.168.0.11"
+    end
+    result_host=@ad_tracker.send(:load_known_hosts,File.dirname(__FILE__)+"/ad_testfiles/hosts_test")
+    test_host={"test1.ny.cmbchina.com"=>"192.168.0.10", "test2.ny.cmbchina.com"=>"192.168.0.11"}
+    assert_equal test_host, result_host
+  end
+
+  def test_parse_openldap_cache
+    @tracker_ad.send(:parse_openldap_cache, "person")
+    @tracker_ad.send(:parse_openldap_cache, "computer")
+    test_person_record={"test1"=>["a:apple", "b:banana", "c:cucumber"], "test2"=>["d:dog", "e:elephant", "f:frog"], "test3"=>["g:greed", "h:hell", "i:innocent"]}
+    test_computer_record={"test1"=>["a:apple", "b:banana", "c:cucumber"], "test2"=>["d:dog", "e:elephant", "f:frog"], "test3"=>["g:greed", "h:hell", "i:innocent"]}
+    assert_equal test_person_record, @tracker_ad.ad_person_records
+    assert_equal test_computer_record, @tracker_ad.ad_computer_records
+  end
+
+  def test_ad_search_by_text
+    @tracker_ad.ad_person_records={"test1"=>["a:apple", "b:banana", "c:cucumber"], "test2"=>["d:a pple", "e:ba nana", "f:cucum ber"]}
+    assert_equal "test2", @tracker_ad.send(:ad_search_by_text,"pple a")
+    assert_equal "test2", @tracker_ad.send(:ad_search_by_text,"ba nana")
+    assert_equal "test1", @tracker_ad.send(:ad_search_by_text,"apple")
+    refute @tracker_ad.send(:ad_search_by_text, "a big apple")
+    @tracker_ad.ad_computer_records={"test1"=>["a:adam", "b:bob", "c:chris"], "test2"=>["d:a dam", "e:b ob", "f:c hris"]}
+    assert_equal "test1", @tracker_ad.send(:ad_search_by_text, "a adam", "computer")
+    refute @tracker_ad.send(:ad_search_by_text, "leo", "computer")
+  end
+
+  def test_ad_searchs_by_text
+    @tracker_ad.ad_person_records={"test1"=>["a:apple", "b:banana", "c:cucumber"], "test2"=>["d:pple a", "e:ba nana", "f:cucum ber"],"test3"=>["g:greed", "h:hell", "i:innocent"]}
+    #the order should be ["best match","close match"]
+    assert_equal ["test2", "test1"], @tracker_ad.send(:ad_searches_by_text,"a pple")
+  end
+
+  def test_get_dn_attribute
+    @tracker_ad.ad_person_records={"test1"=>["a:apple", "b:banana", "c:cucumber"], "test2"=>["d:a pple", "e:ba nana", "f:cucum ber"]}
+    assert_equal "banana", @tracker_ad.send(:get_dn_attribute,"test1","b")
+  end
+
+  def test_get_dn_attributes
+    @tracker_ad.ad_person_records={"test1"=>["a:apple", "a:banana", "a:cucumber", "b:pear"]}
+    assert_equal ["apple", "banana", "cucumber"], @tracker_ad.send(:get_dn_attributes, "person", "test1", "a")
+  end
+
+#method may update, test will fail for now.
+  def test_get_dn_attribute_and_cntl_code_2_property_flag
+    acct_cntl_code={"SCRIPT"=>1, "ACCOUNTDISABLE"=>2, "HOMEDIR_REQUIRED"=>8, "LOCKOUT"=>16, "PASSWD_NOTREQD"=>32, \
+      "PASSWD_CANT_CHANGE"=>64, "ENCRYPTED_TEXT_PWD_ALLOWED"=>128, "TEMP_DUPLICATE_ACCOUNT"=>256, "NORMAL_ACCOUNT"=>512, \
+      "INTERDOMAIN_TRUST_ACCOUNT"=>2048, "WORKSTATION_TRUST_ACCOUNT"=>4096, "SERVER_TRUST_ACCOUNT"=>8192, \
+      "DONT_EXPIRE_PASSWORD"=>65536, "MNS_LOGON_ACCOUNT"=>131072, "SMARTCARD_REQUIRED"=>262144, \
+      "TRUSTED_FOR_DELEGATION"=>524288, "NOT_DELEGATED"=>1048576, "USE_DES_KEY_ONLY"=>2097152, "DONT_REQ_PREAUTH"=>4194304, \
+      "PASSWORD_EXPIRED"=>8388608, "TRUSTED_TO_AUTH_FOR_DELEGATION"=>16777216, "PARTIAL_SECRETS_ACCOUNT"=>67108864}
+    test_array=Array.new
+    invert_acct=acct_cntl_code.invert
+    @ad_tracker.ad_person_records.each do |key, value|
+      test_array.push(@ad_tracker.get_dn_attribute("person",key,"userAccountControl"))
+    end
+    test_array.uniq!
+    test_array.each do |num|
+    puts "-----------------------------"
+    test_control=Array.new
+      puts num
+      binary_num=num.to_i.to_s(2)
+      puts binary_num
+      puts binary_num.reverse
+        for pos in 0...binary_num.length
+          if binary_num.reverse[pos]=="1"
+            puts pos
+            puts invert_acct[2**pos]
+            test_control.push(invert_acct[2**pos])
+          end
+        end
+      assert_equal test_control.sort, @ad_tracker.send(:cntl_code_2_property_flag, num).strip.split(" + ").sort
+    end
+  end
+
+  def test_save_hosts
+    @ad_tracker.send(:save_hosts, File.dirname(__FILE__)+"/ad_testfiles/hosts_test")
+    line_count=1
+    File.open(File.dirname(__FILE__)+"/ad_testfiles/hosts_test", 'r').each_line do |line|
+      if line_count==1
+        assert_match  (/\# local hosts file created by the .+ class .+ method at: .+/), line
+      else
+        dn=line.split("\t")[0].strip
+        ip=line.split("\t")[1].strip
+        unless dn.empty?
+          assert_equal ip, @ad_tracker.known_hosts[dn]
+        end
+      end
+      line_count+=1
+    end
+    File.delete(File.dirname(__FILE__)+"/ad_testfiles/hosts_test")
+  end
+
+#test will fail since one ip may have mutiple host_names, method will only return the first match
+  def test_local_ip_2_host
+=begin
+    @ad_tracker.send(:save_hosts, File.dirname(__FILE__)+"/ad_testfiles/hosts_test")
+    line_count=1
+    File.open(File.dirname(__FILE__)+"/ad_testfiles/hosts_test", 'r').each_line do |line|
+      if line_count>1
+        dn=line.split("\t")[0].strip
+        ip=line.split("\t")[1].strip
+        unless dn.empty?
+          assert_equal dn, @ad_tracker.send(:local_ip_2_host, ip)
+        end
+      end
+      line_count+=1
+    end
+    File.delete(File.dirname(__FILE__)+"/ad_testfiles/hosts_test")
+=end
+  end
+
+end

data/test/test_aix_tracker.rb

@@ -0,0 +1,71 @@
+require "minitest/autorun"
+require "ucert"
+
+class TestAixTracker < Minitest::Test
+
+  def setup
+   @aix_tracker = Ucert::AixTracker.new(:verbose=>false)
+  end
+
+  def test_instance_initialize_success
+     refute_nil @aix_tracker.aix_passwd_file_list
+     #refute_nil @aix_tracker.aix_user_status_report
+     refute_nil @aix_tracker.file_aix_user_map
+     refute_nil @aix_tracker.aix_2_ad_user
+     refute_nil @aix_tracker.aix_user_entitlement
+  end
+
+  def test_parse_aix_passwd_files_method
+    @test_entitlement=@aix_tracker.send(:parse_aix_passwd_files, [File.dirname(__FILE__)+"/aix_testfiles/application1.txt",File.dirname(__FILE__)+"/aix_testfiles/application2.txt"])
+    assert_equal 2, @test_entitlement["test"]["accesses"].size
+    assert_equal "1", @test_entitlement["foobar"]["accesses"]["application2"]["id"]
+  end
+
+  #method index should be username not number, so the test will fail
+  def test_dn_2_index_method
+    #refute_nil @aix_tracker.send(:dn_2_index, "CN=nyadmin,OU=SystemManagement,DC=ny,DC=cmbchina,DC=com")
+  end
+
+  def test_insert_dn
+    @aix_tracker.aix_user_entitlement.each do |index, user|
+      dn_regex=/\ACN=.+\,OU=.+\,DC=ny,DC=cmbchina,DC=com\z/
+      assert_match dn_regex, user["DN"] unless user["DN"].nil?
+    end
+  end
+
+  def test_print_user_entitlement
+    assert_output(/./) {@aix_tracker.print_user}
+  end
+
+  def test_save_aix_user_map!
+    @aix_tracker.send(:save!, File.dirname(__FILE__)+"/aix_testfiles/aix_user_map_test.txt")
+    line_count=1
+    File.open(File.dirname(__FILE__)+"/aix_testfiles/aix_user_map_test.txt", 'r').each_line do |line|
+      if line_count==1
+        assert_match  (/\# local AIX to AD user map file created by the .+ class .+ method at: .+/), line
+      else
+        user_name=line.split("|")[0]
+        line.split("|")[1].nil? ? dn="" : dn=line.split("|")[1].strip
+        if dn.empty?
+          assert_nil @aix_tracker.aix_user_entitlement[user_name]["DN"]
+        else
+          assert_equal @aix_tracker.aix_user_entitlement[user_name]["DN"], dn
+        end
+      end
+      line_count+=1
+    end
+    File.delete(File.dirname(__FILE__)+"/aix_testfiles/aix_user_map_test.txt")
+  end
+
+  def test_db_search_by_dn
+    index=0
+    File.open(@aix_tracker.file_aix_user_map, 'r').each_line do |line|
+      if index>0
+        line.split("|")[1].nil? ? dn="" : dn=line.split("|")[1].strip
+        assert_equal dn, @aix_tracker.send(:search_by_dn, dn)['DN'] unless dn.empty?
+      end
+      index=index+1
+    end
+  end
+
+end

data/test/test_alliance_swift_tracker.rb

@@ -0,0 +1,131 @@
+require "minitest/autorun"
+require "ucert"
+
+class SwiftTestTracker < Ucert::AllianceSwiftTracker
+  attr_accessor  :verbose, :swift_operator_details_report, :swift_operator_profile_details_report, :file_operator_map
+  attr_reader    :swift_operator_entitlement, :swift_operator_profiles, :swift_2_ad_operator
+  # Instance default variables
+  def initialize (params ={})
+    @verbose=params.fetch(:verbose, false)
+    @swift_operator_details_report = File.dirname(__FILE__)+"/alliance_swift_testfiles/Swift_Operator_Details_Test.xlsx"
+    @swift_operator_profile_details_report =  File.dirname(__FILE__)+"/alliance_swift_testfiles/Swift_Operator_Profiles_Details_Test.xlsx"
+    @file_operator_map =  File.dirname(__FILE__)+"/alliance_swift_testfiles/swift_operator_map_test.txt"
+    @swift_2_ad_operator=load_known_user_map_from_file(@file_operator_map)
+    @swift_operator_entitlement=Hash.new
+    parse_swift_operator_details_report(@swift_operator_details_report)
+    @swift_operator_profiles=Hash.new
+    parse_swift_operator_profile_details_report(@swift_operator_profile_details_report)
+    insert_dn
+    save!
+  end
+end
+
+class TestAllianceSwiftTracker < Minitest::Test
+
+  FileUtils.cp_r(File.dirname(__FILE__)+"/../data/alliance_swift/swift_operator_map.txt", File.dirname(__FILE__)+"/alliance_swift_testfiles/swift_operator_map_test.txt")
+
+  def setup
+   @test_swift_tracker = SwiftTestTracker.new(:verbose=>false)
+   @swift_tracker = Ucert::AllianceSwiftTracker.new(:verbose=>false)
+  end
+
+  def test_instance_initialize_success
+     refute_nil @swift_tracker.swift_operator_details_report
+     refute_nil @swift_tracker.swift_operator_profile_details_report
+     refute_nil @swift_tracker.file_operator_map
+     refute_nil @swift_tracker.swift_2_ad_operator
+     refute_nil @swift_tracker.swift_operator_entitlement
+     refute_nil @swift_tracker.swift_operator_profiles
+  end
+
+  #the method will use private variable swift_operator_entitlement for self sanity quick checking so cannot use testfiles
+  def test_parse_swift_operator_details_report
+    user1=["BAISHUO780","Shuo Bai; F&A","Approved/Disabled","2014/12/15 10:41:25","Human","Password","","R7.0_SysOper","None"]
+    user1.all? do |e|
+      assert_includes  @test_swift_tracker.swift_operator_entitlement[1].values, e
+    end
+    user50=["egifts","eGiftes System User","Approved/Enabled","2016/11/24 02:17:09","Human","Password","","R62_SuperKeyPLUS","None"]
+    user50.all? do |e|
+        assert_includes  @test_swift_tracker.swift_operator_entitlement[54].values, e
+    end
+    assert_equal 54,  @test_swift_tracker.swift_operator_entitlement.size
+  end
+
+  def test_parse_swift_operator_profile_details_report
+    operator1=Hash.new
+    operator1['Name']="R6.2_CFO"
+    operator1["Access Control"]=Hash.new
+    operator1["Access Control"]={"Files On User Space"=>[], "Signon"=>["Permissions =", "Start time: 0000", "End time: 2357", "Start time: 2358", "End time: 2359", "WS Session Timeout: 0", ""]}
+    assert_equal operator1['Name'],  @test_swift_tracker.swift_operator_profiles[1]['Name']
+    assert_equal operator1["Access Control"],  @test_swift_tracker.swift_operator_profiles[1]["Entities"]["Access Control"]
+    assert_equal 43,  @test_swift_tracker.swift_operator_profiles.size
+  end
+
+  def test_insert_dn
+    @test_swift_tracker.swift_operator_entitlement.each do |index, user|
+      dn_regex=/\ACN=.+\,OU=.+\,DC=ny,DC=cmbchina,DC=com\z/
+      assert_match dn_regex, user["DN"] unless user["DN"].nil?
+    end
+  end
+
+  def test_operator_name_2_index
+    line_cnt=1
+    File.open(File.dirname(__FILE__)+"/alliance_swift_testfiles/swift_operator_map_test.txt", 'r').each_line do |line|
+      if line_cnt>1
+        name=line.split(":")[0]
+        #  @test_swift_tracker.swift_operator_entitlement
+        assert_equal line_cnt-1,  @swift_tracker.send(:operator_name_2_index, name)
+      end
+      line_cnt+=1
+    end
+  end
+
+  def test_print_operator_entitlement
+    assert_output(/./) { @test_swift_tracker.print_operators}
+  end
+
+  def test_print_operator_profiles
+    assert_output(/./) { @test_swift_tracker.print_profiles}
+  end
+
+#test will fail for the map's format is not adjusted
+  def test_save_swift_operator_map!
+    @swift_tracker.send(:save!, File.dirname(__FILE__)+"/alliance_swift_testfiles/swift_operator_map_test_2.txt")
+    #test_files=["swift_operator_map_test_format_fixed.txt","swift_operator_map_test.txt"]
+    test_files=["swift_operator_map_test_2.txt"]
+    test_files.each do |testfile|
+      line_count=0
+      puts "This is the test for "+testfile
+      File.open(File.dirname(__FILE__)+"/alliance_swift_testfiles/"+testfile, 'r').each_line do |line|
+        if line_count==0
+          assert_match (/\# local Swift to AD operator map file created by the .+ class .+ method at: .+/), line
+        else
+          user_name=line.split(":")[0]
+          description=line.split(":")[1].split("|")[0]
+          dn=line.split(":")[1].split("|")[1].nil? ? dn="" : dn=line.split(":")[1].split("|")[1].strip
+          assert_equal @swift_tracker.swift_operator_entitlement[line_count]["Name"].upcase, user_name
+          assert_equal @swift_tracker.swift_operator_entitlement[line_count]["Description"].upcase.gsub(/\s+/, ' ').strip, description
+          if dn.empty?
+            assert_nil @swift_tracker.swift_operator_entitlement[line_count]["DN"]
+          else
+            #puts @test_swift_tracker.swift_operator_entitlement[line_count]
+            assert_equal @swift_tracker.swift_operator_entitlement[line_count]["DN"], dn
+          end
+        end
+        line_count+=1
+      end
+      puts "Passed"
+    end
+  end
+
+  def test_swift_search_by_dn
+    index=0
+    File.open(File.dirname(__FILE__)+"/alliance_swift_testfiles/swift_operator_map_test.txt", 'r').each_line do |line|
+      if index>0
+        line.split("|")[1].nil? ? dn="" : dn=line.split("|")[1].strip
+        assert_equal dn, @swift_tracker.send(:search_by_dn, dn)['DN'] unless dn.empty?
+      end
+      index=index+1
+    end
+  end
+end

data/test/test_audiolog_tracker.rb

@@ -0,0 +1,23 @@
+require "minitest/autorun"
+require "ucert"
+
+class TestAudiologTracker < Minitest::Test
+
+  def setup
+   @audiolog_tracker = Ucert::AudiologTracker.new(:verbose=>false)
+  end
+
+  def test_instance_initialize_success
+     refute_nil @audiolog_tracker.audiolog_user
+  end
+
+  def test_print_user
+    $stdout = StringIO.new
+    @audiolog_tracker.print_user
+    items=$stdout.string.split("\n")
+    items.each do |line|
+      assert_match (/\A.+\|.+\|.+\|.*\|\z/), line
+    end
+  end
+
+end

data/test/test_check21_tracker.rb

@@ -0,0 +1,30 @@
+require "minitest/autorun"
+require "ucert"
+
+class TestCheck21Tracker < Minitest::Test
+
+  def setup
+   @check21_tracker = Ucert::Check21Tracker.new(:verbose=>false)
+  end
+
+  def test_instance_initialize_success
+     refute_nil @check21_tracker.check21_user_entitlement
+  end
+
+  def test_parse_check21_user_info
+    titles=["CN","department","sAMAccountName","DN"]
+    @check21_tracker.check21_user_entitlement.each do|index, content|
+      assert_equal titles, content.keys
+    end
+  end
+
+  def test_print_user
+    $stdout = StringIO.new
+    @check21_tracker.print_user
+    items=$stdout.string.split("\n")
+    items.each do |line|
+      assert_match (/\A.+\|.*\|.+\|.*\|\z/), line
+    end
+  end
+
+end

data/test/test_citidirect_be_tracker.rb

@@ -0,0 +1,110 @@
+require "minitest/autorun"
+require "ucert"
+
+class TestCitidirectBETracker < Minitest::Test
+
+  def setup
+    @citi_be_tracker = Ucert::CitidirectBETracker.new(:verbose=>false)
+  end
+
+  def test_instance_initialize_success
+     refute_nil @citi_be_tracker.file_be_user_map
+     refute_nil @citi_be_tracker.be_2_ad_user
+     refute_nil @citi_be_tracker.be_user_entitlement
+     #puts @citi_be_tracker.be_user_entitlement
+  end
+
+#Two reasons for test failure:
+#1:The "Assigned_Access_Profiles" field is not loaded correctly, the code for assign cur_profiles line:138 is not executed due to the 'next' code in
+# include?("Assigned Access Profiles") line:95 breaks the loop, which also caused "Billing Account Number" inforamtion not assigned correctly.
+#2:The format for "Credential Type" and "Credential ID" is different from previous column, the key and value are vertical but not horizonal.
+  def test_parse_be_user_entitlement_report
+    @test_citi_be_entitlement=@citi_be_tracker.send(:parse_be_user_entitlement_report, File.dirname(__FILE__)+"/citidirect_be_testfiles/UserProfileEntitlementsReport_Test.xlsx")
+    assert_equal 3, @test_citi_be_entitlement.size
+    @test_citi_be_entitlement.each do |index, user|
+      user.each do |key, value|
+        if key=="Assigned_Access_Profiles"
+          #refute value.empty?
+          value.each do |title, content|
+            assert_equal "test#{index}-"+title, content
+          end
+        elsif value.include?(" ")
+          key_trans=key.gsub('_',' ')
+          assert_equal "test#{index}-"+key_trans, value
+        elsif value.include?("/")
+          key_trans=key.gsub('_','/')
+          assert_equal "test#{index}-"+key_trans, value
+        else
+          assert_equal "test#{index}-"+key, value
+        end
+      end
+    end
+  end
+
+  def test_dn_2_index
+    line_cnt=1
+    File.open(@citi_be_tracker.file_be_user_map, 'r').each_line do |line|
+      if line_cnt>1
+        dn=line.split("|")[1].strip
+        assert_equal line_cnt-1, @citi_be_tracker.send(:dn_2_index, dn)
+      end
+      line_cnt+=1
+    end
+  end
+
+  def test_insert_dn
+    @citi_be_tracker.be_user_entitlement.each do |index, user|
+      dn_regex=/\ACN=.+\,OU=.+\,DC=ny,DC=cmbchina,DC=com\z/
+      assert_match dn_regex, user["DN"] unless user["DN"].nil?
+    end
+  end
+
+#The test will fail because some user's Building Floor inforamtion is blank, so in the entitlement the building floor filed is nil,
+#then some user will have 19 fields but some only have 18.
+  def test_print_user_entitlement
+    column_num=Array.new
+    @citi_be_tracker.be_user_entitlement.values.map do |rec|
+      column_num.push(rec.each.size)
+    end
+    assert_equal 1, column_num.uniq!.size
+    $stdout = StringIO.new
+    @citi_be_tracker.print_user.each
+    items=$stdout.string.split("\n")
+    items.each do |line|
+     assert_equal column_num[0], line.count("|")
+    end
+  end
+
+  def test_save_be_user_map
+    @citi_be_tracker.send(:save!, File.dirname(__FILE__)+"/citidirect_be_testfiles/be_user_map_test.txt")
+    line_count=0
+    File.open(File.dirname(__FILE__)+"/citidirect_be_testfiles/be_user_map_test.txt", 'r').each_line do |line|
+      if line_count==0
+        assert_match (/\# local Citidirect BE to AD user map file created by the .+ class .+ method at: .+/), line
+      else
+        email=line.split("|")[0]
+        dn=line.split("|")[1].nil? ? dn="" : dn=line.split("|")[1].strip
+        assert_equal @citi_be_tracker.be_user_entitlement[line_count]["E-Mail_Address"].upcase, email
+        if dn.empty?
+          assert_nil @citi_be_tracker.be_user_entitlement[line_count]["DN"]
+        else
+          assert_equal @citi_be_tracker.be_user_entitlement[line_count]["DN"], dn
+        end
+      end
+      line_count+=1
+    end
+    File.delete(File.dirname(__FILE__)+"/citidirect_be_testfiles/be_user_map_test.txt")
+  end
+
+  def test_be_search_by_dn
+    index=0
+    File.open(@citi_be_tracker.file_be_user_map, 'r').each_line do |line|
+      if index>0
+        dn=line.split("|")[1].nil? ? dn="" : dn=line.split("|")[1].strip
+        assert_equal dn, @citi_be_tracker.send(:search_by_dn, dn)['DN'] unless dn.empty?
+      end
+      index=index+1
+    end
+  end
+
+end