1999-04-21 13:59:01 +08:00
|
|
|
#! /bin/sh
|
1999-09-02 08:52:43 +08:00
|
|
|
# $OpenLDAP$
|
1998-08-09 08:43:13 +08:00
|
|
|
|
2000-10-02 06:46:52 +08:00
|
|
|
SRCDIR="."
|
|
|
|
if test $# -ge 1 ; then
|
1999-01-10 10:25:41 +08:00
|
|
|
SRCDIR=$1; shift
|
|
|
|
fi
|
2002-01-16 01:26:44 +08:00
|
|
|
BACKEND=bdb
|
2000-10-02 06:46:52 +08:00
|
|
|
if test $# -ge 1 ; then
|
1999-04-10 12:42:33 +08:00
|
|
|
BACKEND=$1; shift
|
1999-02-08 19:42:14 +08:00
|
|
|
fi
|
2002-06-19 14:00:48 +08:00
|
|
|
MONITORDB=no
|
|
|
|
if test $# -ge 1 ; then
|
|
|
|
MONITORDB=$1; shift
|
|
|
|
fi
|
2001-09-22 13:34:22 +08:00
|
|
|
WAIT=0
|
|
|
|
if test $# -ge 1 ; then
|
|
|
|
WAIT=1; shift
|
|
|
|
fi
|
1999-01-10 10:25:41 +08:00
|
|
|
|
2000-10-02 06:46:52 +08:00
|
|
|
echo "running defines.sh"
|
1999-04-08 10:18:54 +08:00
|
|
|
. $SRCDIR/scripts/defines.sh
|
1998-08-09 08:43:13 +08:00
|
|
|
|
|
|
|
echo "Cleaning up in $DBDIR..."
|
|
|
|
|
1998-08-31 02:10:20 +08:00
|
|
|
rm -f $DBDIR/[!C]*
|
1998-08-09 08:43:13 +08:00
|
|
|
|
1999-08-23 01:10:23 +08:00
|
|
|
echo "Running slapadd to build slapd database..."
|
2002-06-19 14:00:48 +08:00
|
|
|
. $CONFFILTER $BACKEND $MONITORDB < $ACLCONF > $DBCONF
|
2000-10-02 06:46:52 +08:00
|
|
|
$SLAPADD -f $DBCONF -l $LDIFORDERED
|
1998-08-09 08:43:13 +08:00
|
|
|
RC=$?
|
1999-04-21 13:59:01 +08:00
|
|
|
if test $RC != 0 ; then
|
2000-07-05 06:11:12 +08:00
|
|
|
echo "slapadd failed ($RC)!"
|
1998-08-09 08:43:13 +08:00
|
|
|
exit $RC
|
|
|
|
fi
|
|
|
|
|
|
|
|
echo "Starting slapd on TCP/IP port $PORT..."
|
2000-10-02 06:46:52 +08:00
|
|
|
$SLAPD -f $DBCONF -h $MASTERURI -d $LVL $TIMING > $MASTERLOG 2>&1 &
|
1998-08-09 08:43:13 +08:00
|
|
|
PID=$!
|
2001-09-22 13:34:22 +08:00
|
|
|
if test $WAIT != 0 ; then
|
|
|
|
echo PID $PID
|
|
|
|
read foo
|
|
|
|
fi
|
1998-08-09 08:43:13 +08:00
|
|
|
|
|
|
|
echo "Testing slapd access control..."
|
|
|
|
for i in 0 1 2 3 4 5; do
|
2002-01-21 14:35:04 +08:00
|
|
|
$LDAPSEARCH -s base -b "$MONITOR" -h $LOCALHOST -p $PORT \
|
1999-07-16 10:45:46 +08:00
|
|
|
'objectclass=*' > /dev/null 2>&1
|
1998-08-09 08:43:13 +08:00
|
|
|
RC=$?
|
2002-09-01 19:39:08 +08:00
|
|
|
if test $RC = 0 ; then
|
|
|
|
break
|
1998-08-09 08:43:13 +08:00
|
|
|
fi
|
2002-09-01 19:39:08 +08:00
|
|
|
echo "Waiting 5 seconds for slapd to start..."
|
|
|
|
sleep 5
|
1998-08-09 08:43:13 +08:00
|
|
|
done
|
|
|
|
|
1999-04-21 13:59:01 +08:00
|
|
|
if test $RC != 0 ; then
|
2000-07-05 06:11:12 +08:00
|
|
|
echo "ldapsearch failed ($RC)!"
|
1998-08-09 08:43:13 +08:00
|
|
|
kill -HUP $PID
|
|
|
|
exit $RC
|
|
|
|
fi
|
|
|
|
|
|
|
|
cat /dev/null > $SEARCHOUT
|
|
|
|
|
|
|
|
#
|
|
|
|
# Try to read an entry inside the Alumni Association container. It should
|
|
|
|
# give us nothing if we're not bound, and should return all attributes
|
|
|
|
# if we're bound as anyone under UM.
|
|
|
|
#
|
2002-01-21 14:35:04 +08:00
|
|
|
$LDAPSEARCH -b "$JAJDN" -h $LOCALHOST -p $PORT "objectclass=*" \
|
1998-08-09 08:43:13 +08:00
|
|
|
>> $SEARCHOUT 2>&1
|
|
|
|
|
2002-01-21 14:35:04 +08:00
|
|
|
$LDAPSEARCH -b "$JAJDN" -h $LOCALHOST -p $PORT \
|
1998-08-09 08:43:13 +08:00
|
|
|
-D "$BABSDN" -w bjensen "objectclass=*" >> $SEARCHOUT 2>&1
|
|
|
|
|
2002-09-13 23:04:04 +08:00
|
|
|
#
|
|
|
|
# Check group access. Try to modify Babs' entry. Two attempts:
|
|
|
|
# 1) bound as "James A Jones 1" - should fail
|
|
|
|
# 2) bound as "Bjorn Jensen" - should succeed
|
|
|
|
|
|
|
|
$LDAPMODIFY -D "$JAJDN" -h $LOCALHOST -p $PORT -w jaj >> \
|
|
|
|
$TESTOUT 2>&1 << EOMODS5
|
|
|
|
dn: $BABSDN
|
|
|
|
changetype: modify
|
|
|
|
replace: drink
|
|
|
|
drink: wine
|
|
|
|
|
|
|
|
EOMODS5
|
|
|
|
|
|
|
|
|
|
|
|
$LDAPMODIFY -D "$BJORNSDN" -h $LOCALHOST -p $PORT -w bjorn >> \
|
|
|
|
$TESTOUT 2>&1 << EOMODS6
|
|
|
|
dn: $BABSDN
|
|
|
|
changetype: modify
|
|
|
|
add: homephone
|
|
|
|
homephone: +1 313 555 5444
|
|
|
|
|
|
|
|
EOMODS6
|
1998-08-09 08:43:13 +08:00
|
|
|
|
|
|
|
#
|
|
|
|
# Try to add a "member" attribute to the "All Staff" group. It should
|
|
|
|
# fail when we add some DN other than our own, and should succeed when
|
|
|
|
# we add our own DN.
|
|
|
|
# bjensen
|
2002-01-21 14:35:04 +08:00
|
|
|
$LDAPMODIFY -D "$JAJDN" -h $LOCALHOST -p $PORT -w jaj > \
|
1999-07-30 05:25:39 +08:00
|
|
|
$TESTOUT 2>&1 << EOMODS1
|
1999-07-31 08:35:30 +08:00
|
|
|
version: 1
|
1998-08-09 08:43:13 +08:00
|
|
|
dn: cn=ITD Staff, ou=Groups, o=University of Michigan, c=US
|
|
|
|
changetype: modify
|
|
|
|
add: member
|
|
|
|
member: cn=Barbara Jensen, ou=Information Technology Division, ou=People, o=University of Michigan, c=US
|
|
|
|
|
|
|
|
EOMODS1
|
|
|
|
|
2002-01-21 14:35:04 +08:00
|
|
|
$LDAPMODIFY -D "$JAJDN" -h $LOCALHOST -p $PORT -w jaj >> \
|
1999-07-30 05:25:39 +08:00
|
|
|
$TESTOUT 2>&1 << EOMODS2
|
1999-07-31 08:35:30 +08:00
|
|
|
version: 1
|
1999-07-30 05:25:39 +08:00
|
|
|
|
1998-08-09 08:43:13 +08:00
|
|
|
dn: cn=ITD Staff, ou=Groups, o=University of Michigan, c=US
|
|
|
|
changetype: modify
|
|
|
|
add: member
|
|
|
|
member: cn=James A Jones 1, ou=Alumni Association, ou=People, o=University of Michigan, c=US
|
|
|
|
EOMODS2
|
|
|
|
|
|
|
|
#
|
|
|
|
# Try to modify the "All Staff" group. Two attempts are made:
|
|
|
|
# 1) bound as "James A Jones 1" - should fail
|
|
|
|
# 2) bound as "Barbara Jensen" - should succeed
|
|
|
|
#
|
2002-01-21 14:35:04 +08:00
|
|
|
$LDAPMODIFY -D "$JAJDN" -h $LOCALHOST -p $PORT -w jaj >> \
|
1999-07-30 05:25:39 +08:00
|
|
|
$TESTOUT 2>&1 << EOMODS3
|
|
|
|
|
1998-08-09 08:43:13 +08:00
|
|
|
dn: cn=ITD Staff, ou=Groups, o=University of Michigan, c=US
|
|
|
|
changetype: modify
|
|
|
|
delete: member
|
|
|
|
|
|
|
|
EOMODS3
|
|
|
|
|
2002-01-21 14:35:04 +08:00
|
|
|
$LDAPMODIFY -D "$BJORNSDN" -h $LOCALHOST -p $PORT -w bjorn >> \
|
1999-07-30 05:25:39 +08:00
|
|
|
$TESTOUT 2>&1 << EOMODS4
|
1999-07-31 08:35:30 +08:00
|
|
|
# COMMENT
|
|
|
|
version: 1
|
|
|
|
# comment
|
1998-08-09 08:43:13 +08:00
|
|
|
dn: cn=ITD Staff, ou=Groups, o=University of Michigan, c=US
|
1999-07-31 08:35:30 +08:00
|
|
|
# comment
|
1998-08-09 08:43:13 +08:00
|
|
|
changetype: modify
|
1999-07-31 08:35:30 +08:00
|
|
|
# comment
|
2000-05-24 03:47:54 +08:00
|
|
|
add: ou
|
1999-07-31 08:35:30 +08:00
|
|
|
# comment
|
2000-05-24 03:47:54 +08:00
|
|
|
ou: Groups
|
1999-07-31 08:35:30 +08:00
|
|
|
# comment
|
1998-08-09 08:43:13 +08:00
|
|
|
EOMODS4
|
|
|
|
|
|
|
|
echo "Using ldapsearch to retrieve all the entries..."
|
2002-01-21 14:35:04 +08:00
|
|
|
$LDAPSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT \
|
2002-05-17 17:11:30 +08:00
|
|
|
'objectClass=*' >> $SEARCHOUT 2>&1
|
1998-08-09 08:43:13 +08:00
|
|
|
RC=$?
|
|
|
|
kill -HUP $PID
|
1999-04-21 13:59:01 +08:00
|
|
|
if test $RC != 0 ; then
|
2000-07-05 06:11:12 +08:00
|
|
|
echo "ldapsearch failed ($RC)!"
|
1998-08-09 08:43:13 +08:00
|
|
|
exit $RC
|
|
|
|
fi
|
|
|
|
|
1999-05-22 00:50:51 +08:00
|
|
|
LDIF=$ACLOUTMASTER
|
|
|
|
|
|
|
|
echo "Filtering ldapsearch results..."
|
2000-10-02 06:46:52 +08:00
|
|
|
. $LDIFFILTER < $SEARCHOUT > $SEARCHFLT
|
1999-05-22 00:50:51 +08:00
|
|
|
echo "Filtering original ldif used to create database..."
|
2000-10-02 06:46:52 +08:00
|
|
|
. $LDIFFILTER < $LDIF > $LDIFFLT
|
1999-05-22 00:50:51 +08:00
|
|
|
echo "Comparing filter output..."
|
2000-07-20 10:23:00 +08:00
|
|
|
$CMP $SEARCHFLT $LDIFFLT > $CMPOUT
|
1999-05-22 00:50:51 +08:00
|
|
|
|
1999-04-21 13:59:01 +08:00
|
|
|
if test $? != 0 ; then
|
1998-08-09 08:43:13 +08:00
|
|
|
echo "comparison failed - modify operations did not complete correctly"
|
|
|
|
exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
echo ">>>>> Test succeeded"
|
|
|
|
|
|
|
|
|
|
|
|
exit 0
|