docker-mailserver/test/tests/parallel/set3/scripts/dovecot_ldap_config.bats

load "${REPOSITORY_ROOT}/test/helper/common"

source "${REPOSITORY_ROOT}/target/scripts/helpers/log.sh"
source "${REPOSITORY_ROOT}/target/scripts/helpers/utils.sh"
source "${REPOSITORY_ROOT}/target/scripts/startup/setup.d/ldap.sh"

BATS_TEST_NAME_PREFIX='[Dovecot LDAP config] '

function setup() {
  TMP_CONFIG_FILE=$(mktemp)
  cp "${REPOSITORY_ROOT}/target/dovecot/auth-ldap.conf.ext" "${TMP_CONFIG_FILE}"
}

function teardown() {
  rm -f "${TMP_CONFIG_FILE}"
}

@test "converts LDAP attribute mappings to Dovecot fields" {
  run _dovecot_ldap_attrs_to_fields \
    'userPrincipalName=user,=uid=5000,=gid=5000,=home=/var/mail/%{user | domain | lower}/%{user | username | lower},=mail=maildir:~/Maildir'
  assert_success
  assert_output --partial 'user = %{ldap:userPrincipalName}'
  assert_output --partial 'uid = 5000'
  assert_output --partial 'gid = 5000'
  assert_output --partial 'home = /var/mail/%{user | domain | lower}/%{user | username | lower}'
  assert_output --partial 'mail_path = ~/Maildir'
}

@test "replaces the passdb fields block" {
  run _dovecot_ldap_replace_fields \
    '    # DOVECOT_PASSDB_FIELDS' \
    'userPrincipalName=user,userPassword=password' \
    "${TMP_CONFIG_FILE}"
  assert_success

  run grep -E '^    user = %\{ldap:userPrincipalName\}$' "${TMP_CONFIG_FILE}"
  assert_success
  run grep -E '^    password = %\{ldap:userPassword\}$' "${TMP_CONFIG_FILE}"
  assert_success
  run grep -E '^    user = %\{ldap:uniqueIdentifier\}$' "${TMP_CONFIG_FILE}"
  assert_failure
}

@test "supports authentication binds without a password field" {
  run _dovecot_ldap_replace_fields \
    '    # DOVECOT_PASSDB_FIELDS' \
    'userPrincipalName=user,userPassword=password' \
    "${TMP_CONFIG_FILE}" \
    yes
  assert_success

  run grep -E '^    password = ' "${TMP_CONFIG_FILE}"
  assert_failure
}

@test "configures authentication binds without custom passdb attributes" {
  export DOVECOT_AUTH_BIND=yes
  unset DOVECOT_PASSDB_LDAP_BIND DOVECOT_PASS_ATTRS
  export DOVECOT_PASSDB_LDAP_BIND="${DOVECOT_PASSDB_LDAP_BIND:=${DOVECOT_AUTH_BIND:=no}}"

  run _replace_by_env_in_file 'DOVECOT_' "${TMP_CONFIG_FILE}"
  assert_success

  run sed -i '/^    password = /d' "${TMP_CONFIG_FILE}"
  assert_success

  run grep -E '^passdb_ldap_bind = yes$' "${TMP_CONFIG_FILE}"
  assert_success
  run grep -E '^    user = %\{ldap:uniqueIdentifier\}$' "${TMP_CONFIG_FILE}"
  assert_success
  run grep -E '^    password = ' "${TMP_CONFIG_FILE}"
  assert_failure
}