cloudpulse/cloudpulse/scenario/plugins/security_pulse/testcase/keystone_admin_token_check.py

72 lines
2.8 KiB
Python

# Copyright 2010-2011 OpenStack Foundation
# Copyright (c) 2013 Hewlett-Packard Development Company, L.P.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
import ConfigParser
import os
class keystone_admin_token_check(object):
def __init__(self):
pass
def keystone_admin_token_test(self):
ks_conf_file = "/etc/keystone/keystone.conf"
result = []
config = ConfigParser.ConfigParser()
if os.path.exists(ks_conf_file):
try:
config.read(ks_conf_file)
except Exception:
result.append("admin_token - keystone.conf not found - Fail")
else:
try:
config.get("DEFAULT", "admin_token")
except ConfigParser.NoOptionError:
result.append("admin_token - Not defined - Pass")
else:
result.append("admin_token - Defined - Fail")
else:
result.append("admin_token - keystone.conf not found - Fail")
ks_paste_conf_file = "/etc/keystone/keystone-paste.ini"
if os.path.exists(ks_paste_conf_file):
try:
config.read(ks_paste_conf_file)
except Exception:
result.append("admin_auth_token - keystone-paste.ini not " +
"found - Pass")
else:
try:
config.get("filter:admin_token_auth",
"paste.filter_factory")
except (ConfigParser.NoOptionError,
ConfigParser.NoSectionError):
result.append("admin_auth_token - Not defined - Pass")
else:
option = config.get("filter:admin_token_auth",
"paste.filter_factory")
if "AdminTokenAuthMiddleware" in option:
result.append("admin_auth_token - Defined - Fail")
else:
result.append("admin_auth_token - Not Defined - Pass")
else:
result.append("admin_auth_token - keystone-paste.ini not found " +
"- Pass")
print (result)
if __name__ == '__main__':
keystone_admin_token_check_obj = keystone_admin_token_check()
keystone_admin_token_check_obj.keystone_admin_token_test()