RPMBUILD = $(PWD)/dist/rpmbuild

  	echo "All tests passed"

  testdeps:

  	# Determine if test deps are installed

  	# First, some binaries

  	which httpd

  	which postgres

  	which openssl

  	# And now everything else

  	ls /usr/lib*/security/pam_sss.so

  	ls /usr/lib*/libsss_simpleifp.so.0

  	ls /usr/libexec/mod_auth_mellon

  lint:

          # W0613 - unused argument

  	# Ignore cherrypy class members as they are dynamically added

  	# Ignore IPA API class members as they are dynamically added

  		   --notes= \

  		   --ignored-classes=cherrypy,API \

  		   --disable=star-args \

  		   ./ipsilon

  	# Check style consistency

  security:

  	# Run a static analyzer aimed at security (OpenStack Bandit)

  		   --notes= \

  		   --ignored-classes=cherrypy \

  		   --disable=star-args \

  		   ./tests

  TESTDIR := $(shell mktemp --directory /tmp/ipsilon-testdir.XXXXXXXX)

  quickrun: container-quickrun

  	echo "Starting Quickrun ..."

  # Testing within containers

  container-centos7:

  	@echo "Building CentOS 7 container ..."

  	@echo "CentOS 7 container built"

  containertest-centos7: container-centos7

  	@echo "Starting CentOS 7 tests ..."

  	@echo "CentOS 7 passed"

  	@echo "Starting code lint tests ..."

  	@echo "Code lint tests passed"

  	@echo "Container tests passed"

      # utility function to unwrap dbus.String to String

      # but if it's already not a dbus.String, just pass through

      def _unwrap_dbus_str(self, dbus_string):

      def _get_user_data(self, user):

          reply = dict()

      def commit(self):

          """Function to override to commit the transaction."""

      def rollback(self):

          """Function to override to roll the transaction back."""

      def _setup_connection(self):

          """Function to override to get a transaction and connection."""

      def _teardown_connection(self):

          """Function to override to close transactions and connections."""

      def __enter__(self):

          """Context Manager enter method.

  # Distro-specific and python packages should go in the distro sub-dockerfiles.

  RUN yum install -y make httpd mod_auth_mellon postgresql-server \

          openssl sssd libsss_simpleifp openldap-servers mod_auth_gssapi \

  	sqlite mod_ssl mod_auth_openidc

          python3-openid-cla python3-cherrypy python3-m2crypto python3-lasso \

          python3-sqlalchemy python3-ldap python3-pam python3-fedora \

          python3-ipalib python3-mod_wsgi python3-jinja2 python3-psycopg2 \

  	python3-jwcrypto python3-jwcrypto python3-six

  RUN yum erase -y python2

  RUN yum install -y make

  USER_KTNAME = "user.keytab"

  HTTP_KTNAME = "http.keytab"

  class IpsilonTestBase(object):

      def setup_ca(self):

          # Prepare the cert stuff for this run

          os.mkdir(os.path.join(self.testdir, 'certs'))

                 '-x509', '-nodes', '-subj', '/CN=Ipsilon Test CA',

                 '-keyout', os.path.join(self.testdir, 'certs', 'root.key.pem'),

                 '-out', os.path.join(self.testdir, 'certs', 'root.cert.pem')]

      def generate_cert(self, name, addr, certpath, keypath):

          # Generate certs for this setup

                 '-out', '%s.csr' % certpath,

                 '-keyout', keypath,

                 '-subj', '/CN=Ipsilon Test %s' % name]

          subprocess.check_call(cmd,

                                stdout=self.stdout, stderr=self.stderr)

          cmd = ['openssl', 'ca', '-batch', '-notext', '-days', '2',

                 '-subj', '/CN=Ipsilon Test %s' % name,

                 '-outdir', os.path.join(self.testdir, 'certs'),

                 '-keyfile', os.path.join(self.testdir, 'certs', 'root.key.pem'),

          env['ETCD_ADVERTISE_CLIENT_URLS'] = 'http://%s:%s' % (addr, clientport)

          env['ETCD_INITIAL_ADVERTISE_PEER_URLS'] = 'http://%s:%s' % (addr,

                                                                      srvport)

          p = subprocess.Popen(['/usr/bin/etcd'],

                               env=env, preexec_fn=os.setsid,

                               stdout=self.stdout, stderr=self.stderr)

                                '-l', log, '-w'],

                               env=env, preexec_fn=os.setsid,

                               stdout=self.stdout, stderr=self.stderr)

          p.wait()

          for d in ['adminconfig', 'users', 'transactions', 'sessions',

                    'saml2.sessions.db']:

              cmd = ['/usr/bin/createdb', '-h', addr, '-p', port, d]

      def wait(self):

          for p in self.processes:

      def setup_servers(self, env=None):

          raise NotImplementedError()

          expect = {

              'sub': h.hexdigest(),

              'iss': 'https://127.0.0.10:45080/idp1/openidc/',

              'acr': '0'

          }

          old_token = check_info_results(page.text, expect)

          expect = {

              'sub': h.hexdigest(),

              'iss': 'https://127.0.0.10:45080/idp1/openidc/',

              'acr': '0'

          }

          new_token = check_info_results(page.text, expect)

          expect = {

              'sub': user,

              'iss': 'https://127.0.0.10:45080/idp1/openidc/',

              'acr': '0'

          }

          check_info_results(page.text, expect)

          expect = {

              'sub': h.hexdigest(),

              'iss': 'https://127.0.0.10:45080/idp1/openidc/',

              'acr': '0'

          }

          check_info_results(page.text, expect)

  #

  # Copyright (C) 2014-2017 Ipsilon project Contributors, for license see COPYING

  from helpers.common import IpsilonTestBase  # pylint: disable=relative-import

  from helpers.control import TC  # pylint: disable=relative-import

  from helpers.http import HttpSessions  # pylint: disable=relative-import

          page = sess.fetch_page(idpname, 'https://127.0.0.11:45081/sp/',

                                 follow_redirect=1)

          # Cut off the RelayState

          # Note that at this point, we have not actually submitted the response

      with TC.case('Access first AP protected area'):

           'gssapi': 'no',

           'ipa': 'no',

           'cleanup_interval': 1,

           'server_debugging': 'True'}

              raise ValueError('SAML2 sessions not created')

          conn.close()

      # seconds to make sure the system has had time to clean up.

      with TC.case('Verify logged out state'):

          page = sess.fetch_page(idpname, 'https://127.0.0.10:45080/idp1/')

      # Ignore these attributes if they weren't tested for

      data.pop('MELLON_IDP', None)

      data.pop('MELLON_NAME_ID', None)

      if len(data) > 0:

          raise ValueError('Unexpected values %s' % data)