5541N/A ! trunk/opends/resource/legal-notices/CDDLv1_0.txt. If applicable,
5562N/A #@TestPurpose Verify user with a LDAP PTA mapped-search policy can authenticated to remote server
5541N/A #@TestPurpose Verify user with a LDAP PTA unmapped policy can authenticated to remote server
5548N/A options.append('--backend-name "AD"')
5548N/A options.append('--set enabled:true')
5548N/A { 'location' : local_ldap_server.getHostname(),
5548N/A % (local_ldap_server.getDir(),OPENDSNAME),
5548N/A 'dsInstanceHost' : local_ldap_server.getHostname(),
5548N/A 'dsInstanceAdminPort' : local_ldap_server.getAdminPort(),
5548N/A 'dsInstanceDn' : local_ldap_server.getRootDn(),
5548N/A 'dsInstancePswd' : local_ldap_server.getRootPwd(),
5546N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5548N/A options.append('--set mapping-policy:unmapped')
5546N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5546N/A options.append('--type ldap-pass-through')
5548N/A #@TestPurpose Verify user with a LDAP PTA mapped-bind policy can authenticated to remote server
5548N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5548N/A options.append('--set mapped-attribute:seealso')
5548N/A options.append('--set mapping-policy:mapped-bind')
5548N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5548N/A options.append('--type ldap-pass-through')
5541N/A #@TestPurpose Verify user with a LDAP PTA mapped-search policy can authenticated to remote server
5541N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5541N/A options.append('--set mapped-attribute:cn')
5541N/A options.append('--set mapped-search-base-dn:dc=AD,dc=com')
5541N/A options.append('--set mapping-policy:mapped-search')
5541N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5541N/A options.append('--type ldap-pass-through')
5548N/A #@TestPurpose Verify user with a LDAP PTA mapped-search policy can authenticated to remote server
5548N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5548N/A options.append('--set mapped-attribute:cn')
5548N/A options.append('--set mapped-search-base-dn:dc=AD,dc=com')
5548N/A options.append('--set mapped-search-bind-dn:"cn=Directory Manager"')
5548N/A options.append('--set mapped-search-bind-password:secret12')
5548N/A options.append('--set mapping-policy:mapped-search')
5548N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5548N/A options.append('--type ldap-pass-through')
5562N/A #@TestPurpose Verify user with a LDAP PTA mapped-search policy can authenticated to remote server
5562N/A #@TestPurpose Verify user with a LDAP PTA mapped-search policy can authenticated to remote server
5562N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5562N/A options.append('--set mapped-attribute:cn')
5562N/A options.append('--set mapped-search-base-dn:dc=AD,dc=com')
5562N/A options.append('--set mapped-search-bind-dn:"cn=Directory Manager"')
5562N/A options.append('--set mapped-search-bind-password-file:%s' % remotePTAuserPswdFile)
5562N/A options.append('--set mapping-policy:mapped-search')
5562N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5562N/A options.append('--type ldap-pass-through')
5562N/A #@TestPurpose Verify user with a LDAP PTA mapped-search policy can authenticated to remote server
5551N/A #@TestPurpose Verify user with a LDAP PTA mapped-search policy can authenticated to remote server
5551N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primarySslPort))
5551N/A options.append('--set mapped-attribute:cn')
5551N/A options.append('--set mapped-search-base-dn:dc=AD,dc=com')
5551N/A options.append('--set mapping-policy:mapped-search')
5551N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondarySslPort))
5551N/A options.append('--set trust-manager-provider:JKS')
5551N/A options.append('--set use-ssl:true')
5551N/A options.append('--type ldap-pass-through')
5551N/A #@TestPurpose Verify user with a LDAP PTA mapped-search policy can authenticated to remote server
5551N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primarySslPort))
5551N/A options.append('--set mapped-attribute:cn')
5551N/A options.append('--set mapped-search-base-dn:dc=AD,dc=com')
5551N/A options.append('--set mapped-search-bind-dn:"cn=Directory Manager"')
5551N/A options.append('--set mapped-search-bind-password:secret12')
5551N/A options.append('--set mapping-policy:mapped-search')
5551N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondarySslPort))
5551N/A options.append('--set trust-manager-provider:JKS')
5551N/A options.append('--set use-ssl:true')
5551N/A options.append('--type ldap-pass-through')
5560N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5560N/A options.append('--set mapped-attribute:cn')
5560N/A options.append('--set mapped-search-base-dn:dc=AD,dc=com')
5560N/A options.append('--set mapped-search-bind-dn:"cn=Directory Manager"')
5560N/A options.append('--set mapped-search-bind-password:secret12')
5560N/A options.append('--set mapping-policy:mapped-search')
5560N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5560N/A options.append('--type ldap-pass-through')
5561N/A { 'stepMessage' : 'Configure LDAP PTA Policy using mapped-search-bind credentials over ssl.' }
5560N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primarySslPort))
5560N/A options.append('--set mapped-attribute:cn')
5560N/A options.append('--set mapped-search-base-dn:dc=AD,dc=com')
5560N/A options.append('--set mapped-search-bind-dn:"cn=Directory Manager"')
5560N/A options.append('--set mapped-search-bind-password:secret12')
5560N/A options.append('--set mapping-policy:mapped-search')
5560N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondarySslPort))
5560N/A options.append('--set trust-manager-provider:JKS')
5560N/A options.append('--set use-ssl:true')
5560N/A options.append('--type ldap-pass-through')
5571N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5571N/A options.append('--set mapped-attribute:cn')
5571N/A options.append('--set mapped-search-base-dn:dc=AD,dc=com')
5571N/A options.append('--set mapped-search-bind-dn:"cn=Directory Manager"')
5571N/A options.append('--set mapped-search-bind-password:secret12')
5571N/A options.append('--set mapping-policy:mapped-search')
5571N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5571N/A options.append('--type ldap-pass-through')
5908N/A #@TestStep Configure LDAP PTA Policy use cache true and cached password storage scheme Clear
5908N/A options.append('--backend-name "AD"')
5908N/A options.append('--set enabled:true')
5908N/A { 'location' : local_ldap_server.getHostname(),
5908N/A % (local_ldap_server.getDir(),OPENDSNAME),
5908N/A 'dsInstanceHost' : local_ldap_server.getHostname(),
5908N/A 'dsInstanceAdminPort' : local_ldap_server.getAdminPort(),
5908N/A 'dsInstanceDn' : local_ldap_server.getRootDn(),
5908N/A 'dsInstancePswd' : local_ldap_server.getRootPwd(),
5908N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5908N/A options.append('--set mapping-policy:unmapped')
5908N/A options.append('--set cached-password-storage-scheme:Clear')
5908N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5908N/A options.append('--set use-password-caching:true')
5908N/A options.append('--type ldap-pass-through')
5908N/A in="userNamePswd.keys()"
5908N/A ldapObject.append('userPassword:secret12')
5908N/A { 'location' : server.getHostname(),
5908N/A % (server.getDir(),OPENDSNAME),
5908N/A 'dsInstanceHost' : server.getHostname() ,
5908N/A 'dsInstancePort' : server.getPort(),
5908N/A 'dsInstanceDn' : server.getRootDn(),
5908N/A 'dsInstancePswd' : server.getRootPwd(),
5908N/A in="userNamePswd.keys()"
5908N/A { 'location' : local_ldap_server.getHostname(),
5908N/A % (local_ldap_server.getDir(),OPENDSNAME),
5908N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5908N/A 'dsInstancePort' : local_ldap_server.getPort(),
5908N/A { 'stepMessage' : 'User logs in with new password - should succeed and password cache/date refreshed.' }
5908N/A in="userNamePswd.keys()"
5908N/A { 'location' : local_ldap_server.getHostname(),
5908N/A % (local_ldap_server.getDir(),OPENDSNAME),
5908N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5908N/A 'dsInstancePort' : local_ldap_server.getPort(),
5908N/A in="userNamePswd.keys()"
5908N/A { 'location' : local_ldap_server.getHostname(),
5908N/A % (local_ldap_server.getDir(),OPENDSNAME),
5908N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5908N/A 'dsInstancePort' : local_ldap_server.getPort(),
5908N/A in="userNamePswd.keys()"
5908N/A ldapObject.append('userPassword:%s' % userNamePswd[remotePTAuserName][0])
5908N/A { 'location' : server.getHostname(),
5908N/A % (server.getDir(),OPENDSNAME),
5908N/A 'dsInstanceHost' : server.getHostname() ,
5908N/A 'dsInstancePort' : server.getPort(),
5908N/A 'dsInstanceDn' : server.getRootDn(),
5908N/A 'dsInstancePswd' : server.getRootPwd(),
5909N/A options.append('--backend-name "AD"')
5909N/A options.append('--set enabled:true')
5909N/A { 'location' : local_ldap_server.getHostname(),
5909N/A % (local_ldap_server.getDir(),OPENDSNAME),
5909N/A 'dsInstanceHost' : local_ldap_server.getHostname(),
5909N/A 'dsInstanceAdminPort' : local_ldap_server.getAdminPort(),
5909N/A 'dsInstanceDn' : local_ldap_server.getRootDn(),
5909N/A 'dsInstancePswd' : local_ldap_server.getRootPwd(),
6297N/A { 'stepMessage' : 'Configure LDAP PTA Policy to use password caching with short ttl (%ss).' % ttl }
5909N/A options.append('--set primary-remote-ldap-server:%s:%s' % (primaryHost,primaryPort))
5909N/A options.append('--set mapping-policy:unmapped')
5909N/A options.append('--set cached-password-storage-scheme:Clear')
6297N/A options.append('--set cached-password-ttl:%ss' % ttl)
5909N/A options.append('--set secondary-remote-ldap-server:%s:%s' % (secondaryHost,secondaryPort))
5909N/A options.append('--set use-password-caching:true')
5909N/A options.append('--type ldap-pass-through')
5909N/A in="userNamePswd.keys()"
5909N/A ldapObject.append('userPassword:secret12')
5909N/A { 'location' : server.getHostname(),
5909N/A % (server.getDir(),OPENDSNAME),
5909N/A 'dsInstanceHost' : server.getHostname() ,
5909N/A 'dsInstancePort' : server.getPort(),
5909N/A 'dsInstanceDn' : server.getRootDn(),
5909N/A 'dsInstancePswd' : server.getRootPwd(),
5909N/A in="userNamePswd.keys()"
5909N/A { 'location' : local_ldap_server.getHostname(),
5909N/A % (local_ldap_server.getDir(),OPENDSNAME),
5909N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5909N/A 'dsInstancePort' : local_ldap_server.getPort(),
5909N/A in="userNamePswd.keys()"
5909N/A { 'location' : local_ldap_server.getHostname(),
5909N/A % (local_ldap_server.getDir(),OPENDSNAME),
5909N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5909N/A 'dsInstancePort' : local_ldap_server.getPort(),
5909N/A { 'stepMessage' : 'User logs in with new password - should succeed and password cache/date refreshed.' }
5909N/A in="userNamePswd.keys()"
5909N/A { 'location' : local_ldap_server.getHostname(),
5909N/A % (local_ldap_server.getDir(),OPENDSNAME),
5909N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5909N/A 'dsInstancePort' : local_ldap_server.getPort(),
5909N/A in="userNamePswd.keys()"
5909N/A { 'location' : local_ldap_server.getHostname(),
5909N/A % (local_ldap_server.getDir(),OPENDSNAME),
5909N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5909N/A 'dsInstancePort' : local_ldap_server.getPort(),
5909N/A in="userNamePswd.keys()"
5909N/A ldapObject.append('userPassword:%s' % userNamePswd[remotePTAuserName][0])
5909N/A { 'location' : server.getHostname(),
5909N/A % (server.getDir(),OPENDSNAME),
5909N/A 'dsInstanceHost' : server.getHostname() ,
5909N/A 'dsInstancePort' : server.getPort(),
5909N/A 'dsInstanceDn' : server.getRootDn(),
5909N/A 'dsInstancePswd' : server.getRootPwd(),
5571N/A in="userNamePswd.keys()"
5571N/A options.append('--policy-name "%s"' % myldapPtaPolicyName)
5571N/A { 'location' : local_ldap_server.getHostname(),
5571N/A % (local_ldap_server.getDir(),OPENDSNAME),
5571N/A 'dsInstanceHost' : local_ldap_server.getHostname(),
5571N/A 'dsInstanceAdminPort' : local_ldap_server.getAdminPort(),
5571N/A 'dsInstanceDn' : local_ldap_server.getRootDn(),
5571N/A 'dsInstancePswd' : local_ldap_server.getRootPwd(),
5571N/A in="userNamePswd.keys()"
5571N/A options.append('--policy-name "%s"' % myldapPtaPolicyName)
5571N/A { 'location' : local_ldap_server.getHostname(),
5571N/A % (local_ldap_server.getDir(),OPENDSNAME),
5571N/A 'dsInstanceHost' : local_ldap_server.getHostname(),
5571N/A 'dsInstanceAdminPort' : local_ldap_server.getAdminPort(),
5571N/A 'dsInstanceDn' : local_ldap_server.getRootDn(),
5571N/A 'dsInstancePswd' : local_ldap_server.getRootPwd(),
5571N/A in="userNamePswd.keys()"
5908N/A ldapObject.append('ds-pwp-password-policy-dn:%s' % myldapPtaPolicyDn)
5571N/A { 'location' : local_ldap_server.getHostname(),
5571N/A % (local_ldap_server.getDir(),OPENDSNAME),
5571N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5571N/A 'dsInstancePort' : local_ldap_server.getPort(),
5571N/A 'dsInstanceDn' : local_ldap_server.getRootDn(),
5571N/A 'dsInstancePswd' : local_ldap_server.getRootPwd(),
5571N/A { 'stepMessage' : 'Search users entries as Directory Manager for ds-pwp-password-policy-dn.' }
5571N/A in="userNamePswd.keys()"
5571N/A { 'location' : local_ldap_server.getHostname(),
5571N/A % (local_ldap_server.getDir(),OPENDSNAME),
5571N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5571N/A 'dsInstancePort' : local_ldap_server.getPort(),
5571N/A 'dsInstanceDn' : local_ldap_server.getRootDn(),
5571N/A 'dsInstancePswd' : local_ldap_server.getRootPwd(),
5571N/A in="userNamePswd.keys()"
5571N/A { 'location' : local_ldap_server.getHostname(),
5571N/A % (local_ldap_server.getDir(),OPENDSNAME),
5571N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5571N/A 'dsInstancePort' : local_ldap_server.getPort(),
5908N/A in="userNamePswd.keys()"
5908N/A { 'location' : local_ldap_server.getHostname(),
5908N/A % (local_ldap_server.getDir(),OPENDSNAME),
5908N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5908N/A 'dsInstancePort' : local_ldap_server.getPort(),
5908N/A 'dsInstanceDn' : local_ldap_server.getRootDn(),
5908N/A 'dsInstancePswd' : local_ldap_server.getRootPwd(),
5909N/A ldapObject.append('description:I am now a remote LDAP PTA user')
5571N/A in="userNamePswd.keys()"
5571N/A { 'location' : local_ldap_server.getHostname(),
5571N/A % (local_ldap_server.getDir(),OPENDSNAME),
5571N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5571N/A 'dsInstancePort' : local_ldap_server.getPort(),
5571N/A in="userNamePswd.keys()"
5561N/A { 'location' : local_ldap_server.getHostname(),
5561N/A % (local_ldap_server.getDir(),OPENDSNAME),
5561N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5561N/A 'dsInstancePort' : local_ldap_server.getPort(),
5909N/A ldapObject.append('description:I am now a remote LDAP PTA user')
5571N/A in="userNamePswd.keys()"
5561N/A { 'location' : local_ldap_server.getHostname(),
5561N/A % (local_ldap_server.getDir(),OPENDSNAME),
5561N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5561N/A 'dsInstancePort' : local_ldap_server.getPort(),
5571N/A in="userNamePswd.keys()"
5561N/A { 'location' : local_ldap_server.getHostname(),
5561N/A % (local_ldap_server.getDir(),OPENDSNAME),
5561N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5561N/A 'dsInstancePort' : local_ldap_server.getPort(),
5571N/A in="userNamePswd.keys()"
5561N/A { 'location' : local_ldap_server.getHostname(),
5561N/A % (local_ldap_server.getDir(),OPENDSNAME),
5561N/A 'dsInstanceHost' : local_ldap_server.getHostname() ,
5561N/A 'dsInstancePort' : local_ldap_server.getPort(),