Club Drupal

<?php

/**

 * @file

 * ldap_authentication simpletests

 *

 */

module_load_include('php', 'ldap_test', 'LdapTestCase.class');

class LdapAuthorizationBasicTests extends LdapTestCase {

  public static function getInfo() {

    return array(

      'name' => 'LDAP Authorization Basic Tests',

      'description' => 'Test ldap authorization.',

      'group' => 'LDAP Authorization'

    );

  }

  function __construct($test_id = NULL) {

    parent::__construct($test_id);

  }

  public $module_name = 'ldap_authorization';

  protected $ldap_test_data;

  function setUp() {

    parent::setUp(array(

      'ldap_authentication',

      'ldap_authorization',

      'ldap_authorization_drupal_role',

      'ldap_test')); // don't need any real servers, configured, just ldap_servers code base

    variable_set('ldap_simpletest', 2);

  }

  function tearDown() {

    parent::tearDown();

    variable_del('ldap_help_watchdog_detail');

    variable_del('ldap_simpletest');

  }

  /**

   * test install, api functions, and simple authorizations granted on logon

   */

  function testSimpleStuff() {

    // just to give warning if setup doesn't succeed.  may want to take these out at some point.

    $setup_success = (

        module_exists('ldap_authentication') &&

        module_exists('ldap_servers') &&

        module_exists('ldap_authorization') &&

        module_exists('ldap_authorization_drupal_role') &&

        (variable_get('ldap_simpletest', 2) > 0)

      );

    $this->assertTrue($setup_success, ' ldap_authorizations setup successful', 'LDAP Authorization: Test Setup Success');

    $api_functions = array(

      'ldap_authorization_get_consumer_object' => array(1, 1),

      'ldap_authorization_get_consumers'  => array(3, 0),

      'ldap_authorizations_user_authorizations'  => array(4, 1),

    );

    foreach ($api_functions as $api_function_name => $param_count) {

      $reflector = new ReflectionFunction($api_function_name);

      $this->assertTrue(

        function_exists($api_function_name) &&

        $param_count[1] == $reflector->getNumberOfRequiredParameters() &&

        $param_count[0] == $reflector->getNumberOfParameters()

        , ' api function ' . $api_function_name . ' parameters and required parameters count unchanged.', 'LDAP Server: API Functions');

    }

    // make sure ldap authorization doesn't break cron.

    $this->assertTrue(

      drupal_cron_run(),

      t('Cron can run with ldap authorization enabled.'),

      'LDAP Authorization: Cron Test'

    );

    /**

    * this is geared toward testing logon functionality

    */

    $sid = 'activedirectory1';

    $testid = 'ExclusiveModeUserLogon3';

    $sids = array($sid);

    $this->prepTestData(LDAP_TEST_LDAP_NAME, $sids, 'provisionToDrupal', 'default', 'drupal_role_default');

    $hpotter_logon_edit = array(

      'name' => 'hpotter',

      'pass' => 'goodpwd',

    );

    $this->drupalPost('user', $hpotter_logon_edit, t('Log in'));

    $this->assertText(t('Member for'), 'New Ldap user with good password authenticated.', 'LDAP Authorization: Test Logon');

    $this->assertTrue(

      $this->testFunctions->ldapUserIsAuthmapped('hpotter'),

      'Ldap user properly authmapped.',

      'LDAP Authorization: Test Logon'

    );

    $hpotter = $this->testFunctions->userByNameFlushingCache('hpotter');

    $roles = array_values($hpotter->roles);

    $desired_roles = array('students', 'authenticated user', 'cn=gryffindor,ou=groups,dc=hogwarts,dc=edu', 'cn=honors students,ou=groups,dc=hogwarts,dc=edu');

    $diff1 = array_diff($roles, $desired_roles);

    $diff2 = array_diff($desired_roles, $roles);

    $correct_roles = (count($diff1) == 0 && count($diff2) == 0);

    $roles_display = join(', ', $roles);

    if (!$correct_roles) {

      debug('hpotter roles'); debug($roles); debug('desired roles'); debug($desired_roles);

    }

    $this->assertTrue(

      $correct_roles,

      t('hpotter granted correct roles on actual logon: %roles', array('%roles' => $roles_display)),

      'LDAP Authorization: Test Logon for roles'

    );

    $this->drupalGet('user/logout');

    /**

     * test revoking of no longer deserved roles when revokeLdapProvisioned=1

     */

    $this->consumerAdminConf['drupal_role']->revokeLdapProvisioned = 1;

    $this->consumerAdminConf['drupal_role']->save();

    // setup:  remove hpotter from honors members

    $test_data_pre_test = variable_get('ldap_test_server__' . $sid, NULL);

    $test_data = variable_get('ldap_test_server__' . $sid, NULL);

    $this->removeUserFromGroup($test_data, 'cn=hpotter,ou=people,dc=hogwarts,dc=edu', 'cn=honors students,ou=groups,dc=hogwarts,dc=edu', "dc=hogwarts,dc=edu");

    variable_set('ldap_test_server__' . $sid, $test_data);

    $hpotter_dn = 'cn=hpotter,ou=people,dc=hogwarts,dc=edu';

    $this->drupalPost('user', $hpotter_logon_edit, t('Log in'));

    $hpotter = $this->testFunctions->userByNameFlushingCache('hpotter');

    $roles = array_values($hpotter->roles);

    $this->assertFalse(

      in_array('cn=honors students,ou=groups,dc=hogwarts,dc=edu', $roles),

      'when revokeLdapProvisioned=1, removed role from user',

      'LDAP Authorization: Test Logon'

    );

    $this->assertTrue(

      empty($hpotter->data['ldap_authorizations']['drupal_role']['cn=honors students,ou=groups,dc=hogwarts,dc=edu']),

      'when revokeLdapProvisioned=1, removed user->data[ldap_authorizations][drupal_role][<role>]',

      'LDAP Authorization: Test Logon'

    );

    // return test data to original state

    variable_set('ldap_test_server__' . $sid, $test_data_pre_test);

    $this->drupalGet('user/logout');

    /**

     * test regranting of removed roles (regrantLdapProvisioned = 0)

     */

    $hpotter = $this->testFunctions->userByNameFlushingCache('hpotter');

    $roles = array_values($hpotter->roles);

    $this->consumerAdminConf['drupal_role']->regrantLdapProvisioned = 0;

    $this->consumerAdminConf['drupal_role']->save();

    $this->testFunctions->removeRoleFromUser($hpotter, "cn=gryffindor,ou=groups,dc=hogwarts,dc=edu");

    $this->drupalPost('user', $hpotter_logon_edit, t('Log in'));

    $hpotter = $this->testFunctions->userByNameFlushingCache('hpotter');

    $roles = array_values($hpotter->roles);

    $this->assertFalse(

      in_array("cn=gryffindor,ou=groups,dc=hogwarts,dc=edu", $roles),

      'when regrantLdapProvisioned=0, did not regrant role on logon',

      'LDAP Authorization: Test Logon'

    );

    $this->assertTrue(

      !empty($hpotter->data['ldap_authorizations']['drupal_role']['cn=gryffindor,ou=groups,dc=hogwarts,dc=edu']),

      'when regrantLdapProvisioned=0, role is not regranted, but initial grant still remains in user->data[ldap_authorizations][drupal_role][<role>]',

      'LDAP Authorization: Test Logon'

    );

    $this->drupalGet('user/logout');

    /**

     * test regranting of removed roles (regrantLdapProvisioned = 1)

     */

    $this->consumerAdminConf['drupal_role']->regrantLdapProvisioned = 1;

    $this->consumerAdminConf['drupal_role']->save();

    $this->drupalPost('user', $hpotter_logon_edit, t('Log in'));

    $hpotter = $this->testFunctions->userByNameFlushingCache('hpotter');

    $roles = array_values($hpotter->roles);

    $this->assertTrue(

      in_array("cn=gryffindor,ou=groups,dc=hogwarts,dc=edu", $roles),

      'when regrantLdapProvisioned=0, did not regrant role on logon',

      'LDAP Authorization: Test Logon'

    );

    $this->drupalGet('user/logout');

}

/**

 * authorization configuration flags tests clumped together

 */

function testFlags() {

  $sid = 'activedirectory1';

  $this->prepTestData(

    LDAP_TEST_LDAP_NAME,

    array($sid),

    'provisionToDrupal',

    'default',

    'drupal_role_default'

    );

  /**

   * LDAP_authorz.Flags.status=0: Disable ldap_authorization_drupal_role configuration and make sure no authorizations performed

   */

  $user = $this->drupalCreateUser(array());

  $hpotter = $this->testFunctions->drupalLdapUpdateUser(array('name' => 'hpotter', 'mail' =>  'hpotter@hogwarts.edu'), TRUE, $user);

  list($new_authorizations, $notifications) = ldap_authorizations_user_authorizations($hpotter, 'query');  // just see if the correct ones are derived.

  $roles1 = $new_authorizations['drupal_role'];

 // $consumer_conf_admin = ldap_authorization_get_consumer_admin_object('drupal_role', FALSE);

  $this->consumerAdminConf['drupal_role']->status = 0;

  $this->consumerAdminConf['drupal_role']->save();

  list($new_authorizations, $notifications) = ldap_authorizations_user_authorizations($hpotter, 'query', 'drupal_role');  // just see if the correct ones are derived.

  $roles2 = isset($new_authorizations['drupal_role']) ? $new_authorizations['drupal_role'] : array();

  $correct_roles = (count($roles1) > 0 && count($roles2) == 0); // not worried about which roles here, just that some are granted

  $this->assertTrue(

    $correct_roles,

    'disable consumer configuration disallows authorizations.',

    'LDAP_authorz.Flags.status.0'

  );

  if (!$correct_roles) {

    debug('LDAP_authorz.Flags.enable.0 roles with enabled'); debug($roles1);

    debug('LDAP_authorz.Flags.enable.0 roles with disabled'); debug($roles2);

  }

  /**

   * LDAP_authorz.onlyLdapAuthenticated=1: create normal user and

   * apply authorization query.  should return no roles

   */

  $this->consumerAdminConf['drupal_role']->onlyApplyToLdapAuthenticated = 1;

  $this->consumerAdminConf['drupal_role']->status = 1;

  $this->consumerAdminConf['drupal_role']->save();

  $user = $this->drupalCreateUser(array());

  $hgrainger = $this->testFunctions->drupalLdapUpdateUser(array('name' => 'hgrainger', 'mail' =>  'hgrainger@hogwarts.edu'), TRUE, $user);

  // remove authmap in case it exists so test will work

  db_delete('authmap')

    ->condition('uid', $user->uid)

    ->condition('module', 'ldap_user')

    ->execute();

  list($new_authorizations, $notifications) = ldap_authorizations_user_authorizations($hgrainger, 'query');  // just see if the correct ones are derived.

  $roles = isset($new_authorizations['drupal_role']) ? $new_authorizations['drupal_role'] : array();

  $success = (count($roles) == 0);

  $this->assertTrue(

    $success,

    ' only apply to ldap authenticated grants no roles for non ldap user.',

    'LDAP_authorz.onlyLdapAuthenticated.1'

  );

  if (!$success) {

    debug('LDAP_authorz.onlyLdapAuthenticated.1');

    debug($roles);

    debug($this->testFunctions->ldapUserIsAuthmapped('hgrainger'));

    debug($new_authorizations);

    debug($notifications);

  }

  /**

   * LDAP_authorz.Flags.synchOnLogon - execute logon and check that no roles are applied if disabled

   */

  $this->consumerAdminConf['drupal_role']->synchOnLogon = 0;

  $this->consumerAdminConf['drupal_role']->save();

  $edit = array(

    'name' => 'hgrainger',

    'pass' => 'goodpwd',

  );

  $this->drupalPost('user', $edit, t('Log in'));

  $this->assertText(

    t('Member for'),

    'New Ldap user with good password authenticated.',

    'LDAP_authorz.Flags.synchOnLogon.0'

  );

  $this->assertTrue(

    $this->testFunctions->ldapUserIsAuthmapped('hgrainger'),

    'Ldap user properly authmapped.',

    'LDAP_authorz.Flags.synchOnLogon.0'

  );

  $hgrainger = user_load_by_name('hgrainger');

  $this->drupalGet('user/logout');

  $this->consumerAdminConf['drupal_role']->synchOnLogon = 1;

  $this->consumerAdminConf['drupal_role']->save();

  $edit = array(

    'name' => 'hgrainger',

    'pass' => 'goodpwd',

  );

  $this->drupalPost('user', $edit, t('Log in'));

  $this->assertText(t('Member for'), 'New Ldap user with good password authenticated.',

    'LDAP_authorz.Flags.synchOnLogon=1');

  $hgrainger = user_load_by_name('hgrainger');

  $this->drupalGet('user/logout');

  // create a couple roles for next 2 tests

  $troublemaker = new stdClass();

  $troublemaker->name = 'troublemaker';

  user_role_save($troublemaker);

  $troublemaker = user_role_load_by_name('troublemaker');

  $superadmin = new stdClass();

  $superadmin->name = 'superadmin';

  user_role_save($superadmin);

  $superadmin = user_role_load_by_name('superadmin');

   /**

   * LDAP_authorz.Flags.revokeLdapProvisioned: test flag for

   *   removing manually granted roles

   *

   *   $this->revokeLdapProvisioned == 1 : Revoke !consumer_namePlural previously granted by LDAP Authorization but no longer valid.

   *

   *   grant roles via ldap and some not vai ldap manually,

   *   then alter ldap so they are no longer valid,

   *   then logon again and make sure the ldap provided roles are revoked and the drupal ones are not revoked

   *

   */

  $this->consumerAdminConf['drupal_role']->onlyApplyToLdapAuthenticated = 0;

  $this->consumerAdminConf['drupal_role']->revokeLdapProvisioned = 1;

  $this->consumerAdminConf['drupal_role']->createConsumers = 1;

  $this->consumerAdminConf['drupal_role']->save();

  // set correct roles manually

  $hpotter = user_load_by_name('hpotter');

  user_delete($hpotter->uid);

  $user = $this->drupalCreateUser(array());

  $hpotter = $this->testFunctions->drupalLdapUpdateUser(array('name' => 'hpotter', 'mail' =>  'hpotter@hogwarts.edu'), TRUE, $user);

  $edit = array(

    'name' => 'hpotter',

    'pass' => 'goodpwd',

  );

  $this->drupalPost('user', $edit, t('Log in'));

  $this->assertText(

    t('Member for'),

    'New Ldap user with good password authenticated.',

    'LDAP_authorz.Flags.revokeLdapProvisioned=1'

  );

  $hpotter = user_load_by_name('hpotter');

  // add an underserved, ldap granted drupal role superadmin

  // and an undeserved, non ldap granted role troublemaker

  $hpotter = user_load($hpotter->uid, TRUE);

  $roles = $hpotter->roles;

  $roles[$troublemaker->rid] = $troublemaker->name;

  $roles[$superadmin->rid] = $superadmin->name;

  $data = array(

    'roles' =>  $roles,

    'data' => array('ldap_authorizations' =>

      array(

        'drupal_role' =>

        array(

          $superadmin->name =>

          array('date_granted' => 1304216778),

        ),

      ),

    ),

  );

  $hpotter = user_save($hpotter, $data);

  // apply correct authorizations.  should remove the administrator role but not the manually created 'troublemaker' role

  list($new_authorizations, $notifications) = ldap_authorizations_user_authorizations($hpotter, 'set', 'drupal_role', 'logon');

  $hpotter = user_load($hpotter->uid, TRUE);

  $this->assertTrue(

    (!isset($new_authorizations['drupal_role'][$superadmin->rid])),

    ' revoke superadmin ldap granted roles when no longer deserved.',

    'LDAP_authorz.Flags.revokeLdapProvisioned=1'

  );

   /**

   * LDAP_authorz.Flags.regrantLdapProvisioned

   * $this->regrantLdapProvisioned == 1 :

   *   Re grant !consumer_namePlural previously granted

   *   by LDAP Authorization but removed manually.

   *

   * - manually remove ldap granted role

   * - logon

   * - check if regranted

   */

  $this->drupalGet('user/logout');

  $this->consumerAdminConf['drupal_role']->regrantLdapProvisioned = 1;

  $this->consumerAdminConf['drupal_role']->save();

  $hpotter = user_load($hpotter->uid, TRUE);

  $roles = $hpotter->roles;

  unset($roles[$superadmin->rid]);

  user_save($hpotter, array('roles' => $roles));

  $hpotter = user_load($hpotter->uid, TRUE);

  list($new_authorizations, $notifications) = ldap_authorizations_user_authorizations($hpotter, 'set', 'drupal_role', 'logon');

  $hpotter = user_load($hpotter->uid, TRUE);

  $success = !in_array('administrator', array_values($hpotter->roles));

  $this->assertTrue(

    $success,

    'regrant Ldap Provisioned roles that were manually revoked',

    'LDAP_authorz.Flags.regrantLdapProvisioned=1'

  );

  if (!$success) {

    debug('LDAP_authorz.Flags.regrantLdapProvisioned=1');

    debug('hpotter roles'); debug($hpotter->roles);

    debug('new_authorizations'); debug($new_authorizations);

  }

  /**

  * LDAP_authorz.Flags.createConsumers=1

  */

  //add new mapping to and enable create consumers

  $this->prepTestData(LDAP_TEST_LDAP_NAME, array($sid), 'provisionToDrupal', 'default', 'drupal_role_default');

  $this->drupalGet('user/logout');

  $new_role = 'oompa-loompas';

  $this->consumerAdminConf['drupal_role']->createConsumers = 1;

  $this->consumerAdminConf['drupal_role']->mappings[] = array(

      'from' => 'cn=students,ou=groups,dc=hogwarts,dc=edu',

      'user_entered' => $new_role,

      'normalized' => $new_role,

      'simplified' => $new_role,

      'valid' => TRUE,

      'error_message' => '',

      );

  $this->consumerAdminConf['drupal_role']->save();

//  debug('mappings'); debug($this->consumerAdminConf['drupal_role']->mappings);

  $edit = array(

    'name' => 'hpotter',

    'pass' => 'goodpwd',

  );

  $this->drupalPost('user', $edit, t('Log in'));

  $new_role_created = in_array($new_role, array_values(user_roles()));

 // debug("roles"); debug(user_roles());

  $roles_by_name = array_flip(user_roles());

  $hpotter = user_load_by_name('hpotter');

  $hpotter = user_load($hpotter->uid, TRUE);

  $role_granted = isset($hpotter->roles[$roles_by_name[$new_role]]);

  $this->assertTrue(

    ($new_role_created && $role_granted),

    'create consumers (e.g. roles)',

    'LDAP_authorz.Flags.createConsumers=1'

  );

  if (!($new_role_created && $role_granted)) {

    debug('roles'); debug(user_roles());

    debug('roles by name'); debug($roles_by_name);

    debug('hpotter->roles'); debug($hpotter->roles);

    debug("new role desired: $new_role");

    debug("$new_role_created AND $role_granted");

  }

}

  public function testUIForms() {

    $ldap_simpletest_initial = variable_get('ldap_simpletest', 2);

    variable_del('ldap_simpletest'); // need to be out of fake server mode to test ui.

    $sid = 'activedirectory1';

    $this->prepTestData(LDAP_TEST_LDAP_NAME, array($sid), 'provisionToDrupal', 'default');

    ldap_servers_module_load_include('php', 'ldap_servers', 'LdapServerAdmin.class');

    $ldap_server = new LdapServerAdmin($sid);

    $server_properties = $this->testFunctions->data['ldap_servers'][$sid]['properties'];

    foreach ($server_properties as $property => $value) {

      $ldap_server->{$property} = $value;

    }

    $ldap_server->save('add');

    $consumer_form_data = array(

      'sid'        => array('activedirectory1', 'activedirectory1'),

      'status'     => array(TRUE, TRUE),

      'only_ldap_authenticated'    => array(FALSE, TRUE),

      'use_first_attr_as_groupid'       => array(FALSE, TRUE),

      'mappings' => array("a|b", "a|b"),

      'use_filter' =>  array(FALSE, TRUE),

      'synchronization_modes[user_logon]' => array(TRUE, FALSE),

      'synchronization_actions[revoke_ldap_provisioned]' => array(TRUE, FALSE),

      'synchronization_actions[regrant_ldap_provisioned]' => array(FALSE, TRUE),

      'synchronization_actions[create_consumers]' => array(TRUE, FALSE),

    );

    $this->privileged_user = $this->drupalCreateUser(array('administer site configuration'));

    $this->drupalLogin($this->privileged_user);

    $ldap_server = ldap_servers_get_servers('activedirectory1', NULL, TRUE, TRUE);

    $this->drupalGet('admin/config/people/ldap/servers/edit/activedirectory1');  // this is just for debugging to show the server.

    $ldap_server_admin = new LdapServerAdmin($sid);

    if (!is_array($ldap_server_admin->basedn)) {

      $ldap_server_admin->basedn = @unserialize($ldap_server_admin->basedn);

      $ldap_server_admin->save('update');

      $ldap_server_admin = new LdapServerAdmin($sid);

    }

    $this->drupalGet('admin/config/people/ldap/servers/edit/activedirectory1');

    foreach (array(0) as $i) {

      foreach (array('drupal_role') as $consumer_type) {

        foreach (array(1) as $ctools_enabled) {  // may want to put this back in after ctools requirement is fixed

          $this->ldapTestId = "testUIForms.$i.$consumer_type.ctools.$ctools_enabled";

          if ($ctools_enabled) {

            module_enable(array('ctools'));

          }

          else {

            module_disable(array('ctools'));

          }

          $lcase_transformed = array();

          /** add server conf test **/

          $this->drupalGet('admin/config/people/ldap/authorization/add/' . $consumer_type);

          $edit = array();

          foreach ($consumer_form_data as $input_name => $input_values) {

            $edit[$input_name] = $input_values[$i];

          }

          $this->drupalPost('admin/config/people/ldap/authorization/add/' . $consumer_type, $edit, t('Add'));

          $field_to_prop_map = LdapAuthorizationConsumerConf::field_to_properties_map();

          $ldap_consumer = ldap_authorization_get_consumer_object($consumer_type);

          $this->assertTrue(is_object($ldap_consumer), 'ldap consumer conf loaded after add-save',  $this->ldapTestId . ' Add consumer configuration');

          // assert one ldap server exists in db table

          // assert load of server has correct properties for each input

          $mismatches = $this->compareFormToProperties($ldap_consumer, $consumer_form_data, $i, $field_to_prop_map, $lcase_transformed);

          if (count($mismatches)) {

            debug('mismatches between ldap server properties and form submitted values');

            debug($mismatches);

           // debug($ldap_consumer);  // throw recursion

            debug($consumer_form_data);

          }

          $this->assertTrue(count($mismatches) == 0, 'Add form for ldap consumer properties match values submitted.',  $this->ldapTestId . ' Add consumer conf');

          /** update server conf test **/

          $this->drupalGet('admin/config/people/ldap/authorization/edit/' . $consumer_type);

          $edit = array();

          foreach ($consumer_form_data as $input_name => $input_values) {

            if ($input_values[$i] !== NULL) {

              $edit[$input_name] = $input_values[$i];

            }

          }

          unset($edit['sid']);

          $this->drupalPost('admin/config/people/ldap/authorization/edit/' . $consumer_type, $edit, t('Save'));

          $ldap_consumer = ldap_authorization_get_consumer_object($consumer_type);

          $this->assertTrue(is_object($ldap_consumer), 'ldap consumer conf loaded after edit-save',  $this->ldapTestId . ' update consumer configuration');

          $mismatches = $this->compareFormToProperties($ldap_consumer, $consumer_form_data, $i, $field_to_prop_map, $lcase_transformed);

          if (count($mismatches)) {

            debug('mismatches between ldap server properties and form submitted values');

            debug($mismatches);

           // debug($ldap_consumer); // throw recursion

            debug($consumer_form_data);

          }

          $this->assertTrue(count($mismatches) == 0, 'Update form for ldap server properties match values submitted.',  $this->ldapTestId . '.Update consumer conf');

          /** delete server conf test **/

          $this->drupalGet('admin/config/people/ldap/authorization/delete/' . $consumer_type);

          $this->drupalPost('admin/config/people/ldap/authorization/delete/' . $consumer_type, array(), t('Delete'));

          ctools_include('export');

          ctools_export_load_object_reset('ldap_authorization');

          $consumer_conf = ldap_authorization_get_consumer_conf($consumer_type);//

          $pass = (is_object($consumer_conf) && $consumer_conf->inDatabase === FALSE);

          $this->assertTrue($pass, 'Delete form for consumer conf deleted conf.',  $this->ldapTestId . '.Delete  consumer conf');

          if (!$pass) {

            debug('ldap consumer after delete. is_object=' . is_object($consumer_conf));

            debug('inDatabase?' . is_object($ldap_consumer) ? $consumer_conf->inDatabase : '?');

            debug("numericConsumerConfId" . $consumer_conf->numericConsumerConfId);

            debug("status" . $consumer_conf->status);

            debug("sid" . $consumer_conf->sid);

          }

        }

      }

    }

    variable_set('ldap_simpletest', $ldap_simpletest_initial); // return to fake server mode

  }

}