kerberos_tests.js

"use strict";

var format = require('util').format;

// You need to set up the kinit tab first
// https://wiki.mongodb.com/pages/viewpage.action?title=Testing+Kerberos&spaceKey=DH
// kinit -p drivers@LDAPTEST.10GEN.CC
// password: (not shown)

/**
 * @ignore
 */
exports['Should Correctly Authenticate using kerberos with MongoClient'] = {
  metadata: { requires: { topology: 'kerberos', os: "!win32"  } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var urlEncodedPrincipal = encodeURIComponent(principal);

    // Let's write the actual connection code
    MongoClient.connect(format("mongodb://%s@%s/kerberos?authMechanism=GSSAPI&gssapiServiceName=mongodb&maxPoolSize=1", urlEncodedPrincipal, server), function(err, db) {
      console.dir(err)
      test.equal(null, err);
      test.ok(db != null);

      db.collection('test').find().toArray(function(err, docs) {
        test.equal(null, err);
        test.ok(true, docs[0].kerberos);
        test.done();
      });
    });
  }
}

/**
 * @ignore
 */
exports['Should Correctly Authenticate using kerberos with MongoClient and authentication properties'] = {
  metadata: { requires: { topology: 'kerberos', os: "!win32"  } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var urlEncodedPrincipal = encodeURIComponent(principal);

    // Let's write the actual connection code
    MongoClient.connect(format("mongodb://%s@%s/kerberos?authMechanism=GSSAPI&authMechanismProperties=SERVICE_NAME:mongodb,CANONICALIZE_HOST_NAME:true&maxPoolSize=1", urlEncodedPrincipal, server), function(err, db) {
      test.equal(null, err);
      test.ok(db != null);

      db.collection('test').find().toArray(function(err, docs) {
        test.equal(null, err);
        test.ok(true, docs[0].kerberos);
        test.done();
      });
    });
  }
}

/**
 * @ignore
 */
exports['Should Correctly Authenticate using kerberos with MongoClient and then reconnect'] = {
  metadata: { requires: { topology: 'kerberos', os: "!win32"  } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var urlEncodedPrincipal = encodeURIComponent(principal);

    // Let's write the actual connection code
    MongoClient.connect(format("mongodb://%s@%s/kerberos?authMechanism=GSSAPI&gssapiServiceName=mongodb&maxPoolSize=5", urlEncodedPrincipal, server), function(err, db) {
      test.equal(null, err);
      test.ok(db != null);

      db.db('kerberos').collection('test').findOne(function(err, doc) {
        test.equal(null, err);
        test.equal(true, doc.kerberos);

        db.serverConfig.once('reconnect', function() {
          // Await reconnect and re-authentication
          db.db('kerberos').collection('test').findOne(function(err, doc) {
            test.equal(null, err);
            test.equal(true, doc.kerberos);

            // Attempt disconnect again
            db.serverConfig.connections()[0].destroy();

            // Await reconnect and re-authentication
            db.db('kerberos').collection('test').findOne(function(err, doc) {
              test.equal(null, err);
              test.equal(true, doc.kerberos);

              test.done();
            });
          });
        })

        // Force close
        db.serverConfig.connections()[0].destroy();
      });
    });
  }
}

/**
 * @ignore
 */
exports['Should Correctly Authenticate authenticate method manually'] = {
  metadata: { requires: { topology: 'kerberos', os: "!win32"  } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var urlEncodedPrincipal = encodeURIComponent(principal);

    var db = new Db('test', new Server(server, 27017), {w:1});
    db.open(function(err, db) {
      test.equal(null, err);
      test.ok(db != null);

      // Authenticate
      db.authenticate(principal, null, {authMechanism: 'GSSAPI'}, function(err, result) {
        test.equal(null, err);
        test.ok(result);

        db.close();
        test.done();
      });
    });
  }
}

/**
 * @ignore
 */
exports['Should Fail to Authenticate due to illegal service name'] = {
  metadata: { requires: { topology: 'kerberos', os: "!win32"  } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var urlEncodedPrincipal = encodeURIComponent(principal);

    // Let's write the actual connection code
    MongoClient.connect(format("mongodb://%s@%s/test?authMechanism=GSSAPI&gssapiServiceName=mongodb2&maxPoolSize=1", urlEncodedPrincipal, server), function(err, db) {
      test.ok(err != null);
      test.done();
    });
  }
}

/**
 * @ignore
 */
exports['Should Correctly Authenticate on Win32 using kerberos with MongoClient'] = {
  metadata: { requires: { topology: 'kerberos', os: "win32" } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var pass = process.env['LDAPTEST_PASSWORD'];
    if(pass == null) throw new Error("The env parameter LDAPTEST_PASSWORD must be set");
    var urlEncodedPrincipal = encodeURIComponent(principal);

    // Let's write the actual connection code
    MongoClient.connect(format("mongodb://%s:%s@%s/kerberos?authMechanism=GSSAPI&maxPoolSize=1", urlEncodedPrincipal, pass, server), function(err, db) {
      test.equal(null, err);
      test.ok(db != null);

      db.collection('test').find().toArray(function(err, docs) {
        test.equal(null, err);
        test.ok(true, docs[0].kerberos);
        test.done();
      });
    });
  }
}

/**
 * @ignore
 */
exports['Should Correctly Authenticate using kerberos on Win32 with MongoClient and then reconnect'] = {
  metadata: { requires: { topology: 'kerberos', os: "win32" } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var pass = process.env['LDAPTEST_PASSWORD'];
    if(pass == null) throw new Error("The env parameter LDAPTEST_PASSWORD must be set");
    var urlEncodedPrincipal = encodeURIComponent(principal);

    // Let's write the actual connection code
    MongoClient.connect(format("mongodb://%s:%s@%s/kerberos?authMechanism=GSSAPI&maxPoolSize=5", urlEncodedPrincipal, pass, server), function(err, db) {
      test.equal(null, err);
      test.ok(db != null);

      db.db('kerberos').collection('test').findOne(function(err, doc) {
        test.equal(null, err);
        test.equal(true, doc.kerberos);

        db.serverConfig.once('reconnect', function() {
          // Await reconnect and re-authentication
          db.db('kerberos').collection('test').findOne(function(err, doc) {
            test.equal(null, err);
            test.equal(true, doc.kerberos);

            // Attempt disconnect again
            db.serverConfig.connections()[0].destroy();

            // Await reconnect and re-authentication
            db.db('kerberos').collection('test').findOne(function(err, doc) {
              test.equal(null, err);
              test.equal(true, doc.kerberos);

              test.done();
            });
          });
        })

        // Force close
        db.serverConfig.connections()[0].destroy();
      });
    });
  }
}

/**
 * @ignore
 */
exports['Should Correctly Authenticate on Win32 authenticate method manually'] = {
  metadata: { requires: { topology: 'kerberos', os: "win32" } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var pass = process.env['LDAPTEST_PASSWORD'];
    if(pass == null) throw new Error("The env parameter LDAPTEST_PASSWORD must be set");
    var urlEncodedPrincipal = encodeURIComponent(principal);

    var db = new Db('test', new Server(server, 27017), {w:1});
    db.open(function(err, db) {
      test.equal(null, err);
      test.ok(db != null);

      // Authenticate
      db.authenticate(principal, pass, {authMechanism: 'GSSAPI'}, function(err, result) {
        test.equal(null, err);
        test.ok(result);

        db.close();
        test.done();
      });
    });
  }
}

/**
 * @ignore
 */
exports['Should Fail to Authenticate due to illegal service name on win32'] = {
  metadata: { requires: { topology: 'kerberos', os: "win32" } },

  // The actual test we wish to run
  test: function(configuration, test) {
    var Db = configuration.require.Db
      , MongoClient = configuration.require.MongoClient
      , Server = configuration.require.Server;

    // KDC Server
    var server = "ldaptest.10gen.cc";
    var principal = "drivers@LDAPTEST.10GEN.CC";
    var pass = process.env['LDAPTEST_PASSWORD'];
    if(pass == null) throw new Error("The env parameter LDAPTEST_PASSWORD must be set");
    var urlEncodedPrincipal = encodeURIComponent(principal);

    // Let's write the actual connection code
    MongoClient.connect(format("mongodb://%s:%s@%s/kerberos?authMechanism=GSSAPI&gssapiServiceName=mongodb2&maxPoolSize=1", urlEncodedPrincipal, pass, server), function(err, db) {
      test.ok(err != null);
      test.done();
    });
  }
}