mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-27 03:20:22 +08:00
706 lines
17 KiB
Bash
Executable File
706 lines
17 KiB
Bash
Executable File
#! /bin/sh
|
|
# $OpenLDAP$
|
|
## This work is part of OpenLDAP Software <http://www.openldap.org/>.
|
|
##
|
|
## Copyright 2004-2006 The OpenLDAP Foundation.
|
|
## All rights reserved.
|
|
##
|
|
## Redistribution and use in source and binary forms, with or without
|
|
## modification, are permitted only as authorized by the OpenLDAP
|
|
## Public License.
|
|
##
|
|
## A copy of this license is available in the file LICENSE in the
|
|
## top-level directory of the distribution or, alternatively, at
|
|
## <http://www.OpenLDAP.org/license.html>.
|
|
|
|
echo "running defines.sh"
|
|
. $SRCDIR/scripts/defines.sh
|
|
|
|
PERSONAL="(objectClass=inetOrgPerson)"
|
|
NOWHERE="/dev/null"
|
|
FAILURE="additional info:"
|
|
|
|
if test $TRANSLUCENT = translucentno ; then
|
|
echo "Translucent Proxy overlay not available, test skipped"
|
|
exit 0
|
|
fi
|
|
|
|
if test $AC_ldap = ldapno ; then
|
|
echo "Translucent Proxy overlay requires back-ldap backend, test skipped"
|
|
exit 0
|
|
fi
|
|
|
|
# configure backside
|
|
mkdir -p $TESTDIR $DBDIR1
|
|
|
|
. $CONFFILTER $BACKEND $MONITORDB < $TRANSLUCENTREMOTECONF > $CONF1
|
|
echo "Running slapadd to build remote slapd database..."
|
|
$SLAPADD -f $CONF1 -l $LDIFTRANSLUCENTCONFIG
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "slapadd failed ($RC)!"
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Starting remote slapd on TCP/IP port $PORT1..."
|
|
$SLAPD -f $CONF1 -h $URI1 -d $LVL $TIMING > $LOG1 2>&1 &
|
|
PID=$!
|
|
if test $WAIT != 0 ; then
|
|
echo PID $PID
|
|
read foo
|
|
fi
|
|
REMOTEPID="$PID"
|
|
KILLPIDS="$PID"
|
|
|
|
sleep 1
|
|
|
|
for i in 0 1 2 3 4 5; do
|
|
$LDAPSEARCH -s base -b "$MONITOR" -H $URI1 \
|
|
'objectclass=*' > /dev/null 2>&1
|
|
RC=$?
|
|
if test $RC = 0 ; then
|
|
break
|
|
fi
|
|
echo "Waiting 5 seconds for remote slapd to start..."
|
|
sleep 5
|
|
done
|
|
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
# configure frontside
|
|
mkdir -p $DBDIR2
|
|
|
|
. $CONFFILTER $BACKEND $MONITORDB < $TRANSLUCENTLOCALCONF > $CONF2
|
|
|
|
echo "Starting local slapd on TCP/IP port $PORT2..."
|
|
$SLAPD -f $CONF2 -h $URI2 -d $LVL $TIMING > $LOG2 2>&1 &
|
|
PID=$!
|
|
if test $WAIT != 0 ; then
|
|
echo PID $PID
|
|
read foo
|
|
fi
|
|
LOCALPID="$PID"
|
|
KILLPIDS="$LOCALPID $REMOTEPID"
|
|
|
|
sleep 1
|
|
|
|
for i in 0 1 2 3 4 5; do
|
|
$LDAPSEARCH -s base -b "$MONITOR" -H $URI2 \
|
|
'objectclass=*' > /dev/null 2>&1
|
|
RC=$?
|
|
if test $RC = 0 ; then
|
|
break
|
|
fi
|
|
echo "Waiting 5 seconds for local slapd to start..."
|
|
sleep 5
|
|
done
|
|
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Testing slapd Translucent Proxy operations..."
|
|
|
|
echo "Testing search: no remote data defined..."
|
|
|
|
$LDAPSEARCH -H $URI2 -b "$TRANSLUCENTUSER" "$PERSONAL" >$SEARCHOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
if test -s $SEARCHOUT; then
|
|
echo "ldapsearch should have returned no records!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Populating remote database..."
|
|
|
|
$LDAPADD -D "$TRANSLUCENTROOT" -H $URI1 \
|
|
-w $PASSWD < $LDIFTRANSLUCENTDATA > $NOWHERE 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapadd failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Testing search: remote database via local slapd..."
|
|
|
|
$LDAPSEARCH -H $URI2 -b "$TRANSLUCENTUSER" "$PERSONAL" > $SEARCHOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
. $LDIFFILTER < $SEARCHOUT > $SEARCHFLT
|
|
. $LDIFFILTER < $LDIFTRANSLUCENTDATA > $LDIFFLT
|
|
$CMP $SEARCHFLT $LDIFFLT > $CMPOUT
|
|
|
|
if test $? != 0 ; then
|
|
echo "Comparison failed -- corruption from remote to local!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing add: prohibited local record..."
|
|
|
|
$LDAPADD -D "$TRANSLUCENTDN" -H $URI2 \
|
|
-w $TRANSLUCENTPASSWD < $LDIFTRANSLUCENTADD > $TESTOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 50 ; then
|
|
echo "ldapadd failed ($RC), expected INSUFFICIENT ACCESS!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing add: valid local record, no_glue..."
|
|
|
|
$LDAPADD -v -v -v -D "$TRANSLUCENTROOT" -H $URI2 \
|
|
-w $PASSWD < $LDIFTRANSLUCENTADD > $TESTOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 32 ; then
|
|
echo "ldapadd failed ($RC), expected NO SUCH OBJECT!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing modrdn: valid local record, no_glue..."
|
|
|
|
$LDAPMODRDN -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 'uid=fred,ou=users,o=translucent' 'uid=someguy'
|
|
|
|
RC=$?
|
|
if test $RC != 32 ; then
|
|
echo "ldapmodrdn failed ($RC), expected NO SUCH OBJECT!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Dynamically configuring local slapd without translucent_no_glue..."
|
|
|
|
$LDAPMODIFY -D cn=config -H $URI2 -y $CONFIGPWF <<EOF
|
|
dn: olcOverlay={0}translucent,olcDatabase={2}$BACKEND,cn=config
|
|
changetype: modify
|
|
replace: olcTranslucentNoGlue
|
|
olcTranslucentNoGlue: FALSE
|
|
EOF
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodify of dynamic config failed ($RC)"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing add: valid local record..."
|
|
|
|
$LDAPADD -D "$TRANSLUCENTROOT" -H $URI2 \
|
|
-w $PASSWD < $LDIFTRANSLUCENTADD > $TESTOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapadd failed ($RC)!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Testing search: data merging..."
|
|
|
|
$LDAPSEARCH -H $URI2 -b "$TRANSLUCENTUSER" "$PERSONAL" > $SEARCHOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
. $LDIFFILTER < $SEARCHOUT > $SEARCHFLT
|
|
$CMP $SEARCHFLT $LDIFTRANSLUCENTMERGED > $CMPOUT
|
|
|
|
if test $? != 0 ; then
|
|
echo "Comparison failed -- local data failed to merge with remote!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing compare: valid local..."
|
|
|
|
$LDAPCOMPARE -z -H $URI2 -w $TRANSLUCENTPASSWD -D $TRANSLUCENTDN \
|
|
"uid=danger,ou=users,o=translucent" "carLicense:LIVID"
|
|
|
|
RC=$?
|
|
if test $RC != 6 ; then
|
|
echo "ldapcompare failed ($RC), expected TRUE!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing compare: valid remote..."
|
|
|
|
$LDAPCOMPARE -z -x -H $URI2 -w $TRANSLUCENTPASSWD -D $TRANSLUCENTDN \
|
|
"uid=binder,o=translucent" "businessCategory:binder-test-user"
|
|
|
|
RC=$?
|
|
if test $RC != 6 ; then
|
|
echo "ldapcompare failed ($RC), expected TRUE!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing compare: bogus local..."
|
|
|
|
$LDAPCOMPARE -z -x -H $URI2 -w $TRANSLUCENTPASSWD -D $TRANSLUCENTDN \
|
|
"uid=danger,ou=users,o=translucent" "businessCategory:invalid-test-value"
|
|
|
|
RC=$?
|
|
if test $RC != 5 ; then
|
|
echo "ldapcompare failed ($RC), expected FALSE!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing compare: bogus remote..."
|
|
|
|
$LDAPCOMPARE -z -x -H $URI2 -w $TRANSLUCENTPASSWD -D $TRANSLUCENTDN \
|
|
"uid=binder,o=translucent" "businessCategory:invalid-test-value"
|
|
|
|
RC=$?
|
|
if test $RC != 5 ; then
|
|
echo "ldapcompare failed ($RC), expected FALSE!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing modify: nonexistent record..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD
|
|
version: 1
|
|
dn: uid=bogus,ou=users,o=translucent
|
|
changetype: modify
|
|
replace: roomNumber
|
|
roomNumber: 31J-2112
|
|
EOF_MOD
|
|
|
|
RC=$?
|
|
if test $RC != 32 ; then
|
|
echo "ldapmodify failed ($RC), expected NO SUCH OBJECT!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing modify: valid local record, nonexistent attribute..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD1
|
|
version: 1
|
|
dn: uid=danger,ou=users,o=translucent
|
|
changetype: modify
|
|
replace: roomNumber
|
|
roomNumber: 9N-21
|
|
EOF_MOD1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodify failed ($RC)!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
$LDAPSEARCH -H $URI2 -b "uid=danger,ou=users,o=translucent" > $SEARCHOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
ATTR=`grep roomNumber $SEARCHOUT` > $NOWHERE 2>&1
|
|
if test "$ATTR" != "roomNumber: 9N-21" ; then
|
|
echo "modification failed!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing search: specific nonexistent remote attribute..."
|
|
|
|
$LDAPSEARCH -H $URI2 -b "uid=danger,ou=users,o=translucent" roomNumber > $SEARCHOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Testing modify: nonexistent local record, nonexistent attribute..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD2
|
|
version: 1
|
|
dn: uid=fred,ou=users,o=translucent
|
|
changetype: modify
|
|
replace: roomNumber
|
|
roomNumber: 31J-2112
|
|
EOF_MOD2
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodify failed ($RC)!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
$LDAPSEARCH -H $URI2 -b "uid=fred,ou=users,o=translucent" > $SEARCHOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
ATTR=`grep roomNumber $SEARCHOUT` > $NOWHERE 2>&1
|
|
if test "$ATTR" != "roomNumber: 31J-2112" ; then
|
|
echo "modification failed!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing modify: valid remote record, nonexistent attribute..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD9
|
|
version: 1
|
|
dn: uid=fred,ou=users,o=translucent
|
|
changetype: modify
|
|
delete: preferredLanguage
|
|
EOF_MOD9
|
|
|
|
RC=$?
|
|
if test $RC != 16 ; then
|
|
echo "ldapmodify failed ($RC), expected NO SUCH ATTRIBUTE!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing delete: valid local record, nonexistent attribute..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD4
|
|
version: 1
|
|
dn: uid=fred,ou=users,o=translucent
|
|
changetype: modify
|
|
delete: roomNumber
|
|
EOF_MOD4
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodify failed ($RC)!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Testing modrdn: prohibited local record..."
|
|
|
|
$LDAPMODRDN -D "$TRANSLUCENTDN" -H $URI2 -w $TRANSLUCENTPASSWD > \
|
|
$TESTOUT 2>&1 'uid=fred,ou=users,o=translucent' 'uid=someguy'
|
|
|
|
RC=$?
|
|
if test $RC != 50 ; then
|
|
echo "ldapmodrdn failed ($RC), expected INSUFFICIENT ACCESS!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing modrdn: valid local record..."
|
|
|
|
$LDAPMODRDN -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 'uid=fred,ou=users,o=translucent' 'uid=someguy'
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodrdn failed ($RC)!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Testing delete: prohibited local record..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTDN" -H $URI2 -w $TRANSLUCENTPASSWD > \
|
|
$TESTOUT 2>&1 << EOF_DEL2
|
|
version: 1
|
|
dn: uid=someguy,ou=users,o=translucent
|
|
changetype: delete
|
|
EOF_DEL2
|
|
|
|
RC=$?
|
|
if test $RC != 50 ; then
|
|
echo "ldapadd failed ($RC), expected INSUFFICIENT ACCESS!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing delete: valid local record..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_DEL3
|
|
version: 1
|
|
dn: uid=someguy,ou=users,o=translucent
|
|
changetype: delete
|
|
EOF_DEL3
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodify failed ($RC)!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Testing delete: valid remote record..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_DEL8
|
|
version: 1
|
|
dn: uid=fred,ou=users,o=translucent
|
|
changetype: delete
|
|
EOF_DEL8
|
|
|
|
RC=$?
|
|
if test $RC != 32 ; then
|
|
echo "ldapmodify failed ($RC), expected NO SUCH OBJECT!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing delete: nonexistent local record, nonexistent attribute..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_DEL1
|
|
version: 1
|
|
dn: uid=fred,ou=users,o=translucent
|
|
changetype: modify
|
|
delete: roomNumber
|
|
EOF_DEL1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodify failed ($RC)!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
$LDAPSEARCH -H $URI2 -b "uid=fred,ou=users,o=translucent" > $SEARCHOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
echo "Testing delete: valid local record, nonexistent attribute..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD8
|
|
version: 1
|
|
dn: uid=danger,ou=users,o=translucent
|
|
changetype: modify
|
|
delete: preferredLanguage
|
|
EOF_MOD8
|
|
|
|
RC=$?
|
|
if test $RC != 16 ; then
|
|
echo "ldapmodify failed ($RC), expected NO SUCH ATTRIBUTE!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing modify: valid remote record, combination add-modify-delete..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD6
|
|
version: 1
|
|
dn: uid=fred,ou=users,o=translucent
|
|
changetype: modify
|
|
delete: carLicense
|
|
-
|
|
add: preferredLanguage
|
|
preferredLanguage: ISO8859-1
|
|
-
|
|
replace: employeeType
|
|
employeeType: consultant
|
|
EOF_MOD6
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodify failed ($RC)!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
$LDAPSEARCH -H $URI2 -b "uid=fred,ou=users,o=translucent" > $SEARCHOUT 2>&1
|
|
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapsearch failed ($RC)!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit $RC
|
|
fi
|
|
|
|
ATTR=`grep employeeType $SEARCHOUT` > $NOWHERE 2>&1
|
|
if test "$ATTR" != "employeeType: consultant" ; then
|
|
echo "modification failed!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
ATTR=`grep preferredLanguage $SEARCHOUT` > $NOWHERE 2>&1
|
|
if test "$ATTR" != "preferredLanguage: ISO8859-1" ; then
|
|
echo "modification failed!"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Dynamically configuring local slapd with translucent_no_glue and translucent_strict..."
|
|
|
|
$LDAPMODIFY -D cn=config -H $URI2 -y $CONFIGPWF <<EOF
|
|
dn: olcOverlay={0}translucent,olcDatabase={2}$BACKEND,cn=config
|
|
changetype: modify
|
|
replace: olcTranslucentNoGlue
|
|
olcTranslucentNoGlue: TRUE
|
|
-
|
|
replace: olcTranslucentStrict
|
|
olcTranslucentStrict: TRUE
|
|
EOF
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapmodify of dynamic config failed ($RC)"
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing strict mode delete: nonexistent local attribute..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD5
|
|
version: 1
|
|
dn: uid=example,ou=users,o=translucent
|
|
changetype: modify
|
|
delete: preferredLanguage
|
|
EOF_MOD5
|
|
|
|
RC=$?
|
|
if test $RC != 19 ; then
|
|
echo "ldapmodify failed ($RC), expected CONSTRAINT VIOLATION!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing strict mode delete: nonexistent remote attribute..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD3
|
|
version: 1
|
|
dn: uid=danger,ou=users,o=translucent
|
|
changetype: modify
|
|
delete: displayName
|
|
EOF_MOD3
|
|
|
|
RC=$?
|
|
if test $RC != 19 ; then
|
|
echo "ldapmodify failed ($RC), expected CONSTRAINT VIOLATION!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing strict mode modify: combination add-modify-delete..."
|
|
|
|
$LDAPMODIFY -v -D "$TRANSLUCENTROOT" -H $URI2 -w $PASSWD > \
|
|
$TESTOUT 2>&1 << EOF_MOD6
|
|
version: 1
|
|
dn: uid=example,ou=users,o=translucent
|
|
changetype: modify
|
|
delete: carLicense
|
|
-
|
|
add: preferredLanguage
|
|
preferredLanguage: ISO8859-1
|
|
-
|
|
replace: employeeType
|
|
employeeType: consultant
|
|
EOF_MOD6
|
|
|
|
RC=$?
|
|
if test $RC != 19 ; then
|
|
echo "ldapmodify failed ($RC), expected CONSTRAINT VIOLATION!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
echo "Testing invalid Bind request..."
|
|
$LDAPWHOAMI -D "$TRANSLUCENTDN" -H $URI2 -w Wrong"$TRANSLUCENTPASSWD" > \
|
|
$TESTOUT 2>&1
|
|
RC=$?
|
|
if test $RC != 49 ; then
|
|
echo "ldapwhoami failed ($RC), expected INVALID CREDENTIALS!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
$LDAPWHOAMI -D "$TRANSLUCENTDN" -H $URI2 -w "$TRANSLUCENTPASSWD" > \
|
|
$TESTOUT 2>&1
|
|
RC=$?
|
|
if test $RC != 0 ; then
|
|
echo "ldapwhoami failed ($RC), expected SUCCESS!"
|
|
grep "$FAILURE" $TESTOUT
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
exit 1
|
|
fi
|
|
|
|
test $KILLSERVERS != no && kill -HUP $KILLPIDS
|
|
|
|
echo ">>>>> Test succeeded"
|
|
|
|
test $KILLSERVERS != no && wait
|
|
|
|
exit 0
|