privileges_unindexed_searches.xml revision 27b2f616132d4fc8bbbc4f9d331c48374f9eb565
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<?xml version="1.0" encoding="UTF-8" standalone="no"?>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<!DOCTYPE stax SYSTEM "/shared/stax.dtd">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<!--
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! CDDL HEADER START
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt !
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! The contents of this file are subject to the terms of the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! Common Development and Distribution License, Version 1.0 only
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! (the "License"). You may not use this file except in compliance
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! with the License.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt !
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! You can obtain a copy of the license at
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! trunk/opends/resource/legal-notices/OpenDS.LICENSE
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! or https://OpenDS.dev.java.net/OpenDS.LICENSE.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! See the License for the specific language governing permissions
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! and limitations under the License.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt !
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! When distributing Covered Code, include this CDDL HEADER in each
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! file and include the License file at
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! trunk/opends/resource/legal-notices/OpenDS.LICENSE. If applicable,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! add the following below this CDDL HEADER, with the fields enclosed
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! by brackets "[]" replaced with your own identifying information:
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ! Portions Copyright [yyyy] [name of copyright owner]
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt !
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews ! CDDL HEADER END
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt !
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews ! Copyright 2007-2008 Sun Microsystems, Inc.
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews ! -->
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<stax>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <defaultcall function="privileges_unindexed_searches"/>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews <function name="privileges_unindexed_searches">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <sequence>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <block name="'privileges-unindexed-searches'">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <sequence>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <script>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt if not CurrentTestPath.has_key('group'):
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt CurrentTestPath['group']='privileges'
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt CurrentTestPath['suite']=STAXCurrentBlock
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt </script>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <call function="'testSuite_Preamble'"/>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <!--- Define default value for ldifFile1, ldifFile2 and DNToMod -->
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <script>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt logPath = remote.data
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt privPath = '%s/privileges/privileges_unindexed_searches' % logPath
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ldifFile1 = '%s/50Entries.ldif' % privPath
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ldifFile2 = '%s/privileges/add_new_root_user.ldif' % logPath
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt DNToMod = 'cn=Directory Manager,cn=Root DNs,cn=config'
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt </script>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <!---
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Place suite-specific test information here.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestSuiteName Privileges Unindexed Searches Tests
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestSuitePurpose Test the basic Privileges Support in regard to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt unindexed searches.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestSuiteGroup Basic Privileges Unindexed Searches Tests
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestScript privileges_unindexed_searches.xml
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt -->
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <import machine="STAF_LOCAL_HOSTNAME"
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt file="'%s/testcases/privileges/privileges_setup.xml' %
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt (TESTS_DIR)"/>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <call function="'privileges_setup'" />
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <!---
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Place test-specific test information here.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The tag, TestMarker, must be the same as the tag, TestSuiteName.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestMarker Privileges Unindexed Searches Tests
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestName preamble
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestIssue none
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestPurpose Prepare for unindexed search privileges tests
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestPreamble none
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestStep Admin changing index-entry-limit.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestStep Admin importing 50 entries.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestPostamble none
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt #@TestResult Success if OpenDS returns 0
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt for all ldap operations,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt and the entries imported without error.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt -->
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <testcase name="getTestCaseName('preamble')">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <sequence>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <call function="'testCase_Preamble'"/>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <message>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'Privileges: Unindexed Searches: Preamble - \
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Admin changing index-entry-limit'
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt </message>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <call function="'dsconfigSet'">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt {
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'objectName' : 'backend' ,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'propertyType' : 'backend' ,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'propertyName' : 'userRoot' ,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'attributeName' : 'index-entry-limit' ,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'attributeValue' : '4'
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt }
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt </call>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <message>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'Privileges: Unindexed Searches: Preamble - \
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Admin adding import task'
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews </message>
<call function="'importLdifTask'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'taskID' : STAXCurrentTestcase ,
'ldifFile' : ldifFile1
}
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!---
Place test-specific test information here.
The tag, TestMarker, must be the same as the tag, TestSuiteName.
#@TestMarker Privileges Unindexed Searches Tests
#@TestName unindexed searches - non-root user
#@TestIssue none
#@TestPurpose Unindexed search privilege for normal users
#@TestPreamble none
#@TestStep User searches entry.
#@TestStep Admin adds privilege.
#@TestStep User searches entry.
#@TestStep Admin removes privilege.
#@TestStep User searches entry.
#@TestPostamble none
#@TestResult Success if OpenDS returns 50
for steps 1 and 5, and 0 for all
other ldap operations.
-->
<testcase name="getTestCaseName('unindexed search non-root user')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Privileges: Unindexed Searches: user searching entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=user.0,ou=People,dc=example,dc=com' ,
'dsInstancePswd' : 'smellyFish' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*' ,
'expectedRC' : 50
}
</call>
<message>
'Privileges: Unindexed Searches: Admin adding privilege'
</message>
<call function="'modifyAnAttribute'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'DNToModify' : 'uid=user.0,ou=People,dc=example,dc=com' ,
'attributeName' : 'ds-privilege-name' ,
'newAttributeValue' : 'unindexed-search' ,
'changetype' : 'add'
}
</call>
<message>
'Privileges: Unindexed Searches: user searching entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=user.0,ou=People,dc=example,dc=com' ,
'dsInstancePswd' : 'smellyFish' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*'
}
</call>
<message>
'Privileges: Unindexed Searches: Admin deleting privilege'
</message>
<call function="'modifyAnAttribute'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'DNToModify' : 'uid=user.0,ou=People,dc=example,dc=com' ,
'attributeName' : 'ds-privilege-name' ,
'newAttributeValue' : 'unindexed-search' ,
'changetype' : 'delete'
}
</call>
<message>
'Privileges: Unindexed Searches: user searching entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=user.0,ou=People,dc=example,dc=com' ,
'dsInstancePswd' : 'smellyFish' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*' ,
'expectedRC' : 50
}
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!---
Place test-specific test information here.
The tag, TestMarker, must be the same as the tag, TestSuiteName.
#@TestMarker Privileges Unindexed Searches Tests
#@TestName unindexed searches - Directory Manager
#@TestIssue none
#@TestPurpose Unindexed search privilege for Directory
Manager
#@TestPreamble none
#@TestStep Directory Manager searches entry.
#@TestStep Alternate Admin removes privilege.
#@TestStep Directory Manager searches entry.
#@TestStep Alternate Admin puts back privilege.
#@TestStep Directory Manager searches entry.
#@TestPostamble none
#@TestResult Success if OpenDS returns 50
for step 3, and 0 for all
other ldap operations.
-->
<testcase name="getTestCaseName
('unindexed search Directory Manager')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Privileges: Unindexed Searches: Directory Manager \
searching entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*'
}
</call>
<message>
'Privileges: Unindexed Searches: alternative root user \
removing privilege from Directory Manager'
</message>
<call function="'modifyAnAttribute'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'cn=Aroot' ,
'dsInstancePswd' : 'PrivsRule' ,
'DNToModify' : DNToMod ,
'attributeName' : 'ds-privilege-name' ,
'newAttributeValue' : '-unindexed-search' ,
'changetype' : 'add'
}
</call>
<message>
'Privileges: Unindexed Searches: Directory Manager \
searching entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*' ,
'expectedRC' : 50
}
</call>
<message>
'Privileges: Unindexed Searches: alternative root user \
putting back privilege to Directory Manager'
</message>
<call function="'modifyAnAttribute'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'cn=Aroot' ,
'dsInstancePswd' : 'PrivsRule' ,
'DNToModify' : DNToMod ,
'attributeName' : 'ds-privilege-name' ,
'newAttributeValue' : '-unindexed-search' ,
'changetype' : 'delete'
}
</call>
<message>
'Privileges: Unindexed Searches: Directory Manager \
searching entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*'
}
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!---
Place test-specific test information here.
The tag, TestMarker, must be the same as the tag, TestSuiteName.
#@TestMarker Privileges Unindexed Searches Tests
#@TestName unindexed searches - new root user
#@TestIssue none
#@TestPurpose Unindexed search privilege for new root user
#@TestPreamble none
#@TestStep Directory Manager adds new root user.
#@TestStep New root user searches entries.
#@TestStep Alternate root user removes privilege.
#@TestStep New root user searches entry.
#@TestStep Alternate root user puts back privilege.
#@TestStep New root user searches entry.
#@TestPostamble none
#@TestResult Success if OpenDS returns 50
for step 3, and 0 for all
other ldap operations.
-->
<testcase name="getTestCaseName('unindexed search New Root User')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Privileges: Unindexed Searches: Directory Manager adding \
new root user'
</message>
<call function="'addEntry'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'entryToBeAdded' : ldifFile2
}
</call>
<message>
'Privileges: Unindexed Searches: New root user searching \
entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'cn=Zroot' ,
'dsInstancePswd' : 'PrivsRule',
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*'
}
</call>
<message>
'Privileges: Unindexed Searches: Alternative root user \
removing privilege'
</message>
<call function="'modifyAnAttribute'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'cn=Aroot' ,
'dsInstancePswd' : 'PrivsRule' ,
'DNToModify' : 'cn=Zroot Manager,cn=Root DNs,cn=config' ,
'attributeName' : 'ds-privilege-name' ,
'newAttributeValue' : '-unindexed-search' ,
'changetype' : 'add'
}
</call>
<message>
'Privileges: Unindexed Searches: New root user searching \
entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'cn=Zroot' ,
'dsInstancePswd' : 'PrivsRule',
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*' ,
'expectedRC' : 50
}
</call>
<message>
'Privileges: Unindexed Searches: Alternative root user \
putting back privilege'
</message>
<call function="'modifyAnAttribute'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'cn=Aroot' ,
'dsInstancePswd' : 'PrivsRule' ,
'DNToModify' : 'cn=Zroot Manager,cn=Root DNs,cn=config' ,
'attributeName' : 'ds-privilege-name' ,
'newAttributeValue' : '-unindexed-search' ,
'changetype' : 'delete'
}
</call>
<message>
'Privileges: Unindexed Searches: New root user \
searching entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'cn=Zroot' ,
'dsInstancePswd' : 'PrivsRule',
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*'
}
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!---
Place test-specific test information here.
The tag, TestMarker, must be the same as the tag, TestSuiteName.
#@TestMarker Privileges Unindexed Searches Tests
#@TestName unindexed searches - global configuration
#@TestIssue none
#@TestPurpose Unindexed search privilege in the global
configuration
#@TestPreamble none
#@TestStep User searches entries.
#@TestStep Anonymous search.
#@TestStep Root user removes privilege in global
configuration.
#@TestStep User searches entries.
#@TestStep Anonymous search.
#@TestStep Root user puts back privilege in global
configuration.
#@TestStep User searches entries.
#@TestStep Anonymous search.
#@TestPostamble none
#@TestResult Success if OpenDS returns 50
for step 1, 2, 7, 8 and 0 for all
other ldap operations.
-->
<testcase name="getTestCaseName
('unindexed searches - global configuration')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Privileges: Unindexed Searches: User searching entries'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=user.0,ou=People,dc=example,dc=com' ,
'dsInstancePswd' : 'smellyFish' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*' ,
'expectedRC' : 50
}
</call>
<message>
'Privileges: Unindexed Searches: Anonymous search'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*' ,
'expectedRC' : 50
}
</call>
<message>
'Privileges: Unindexed Searches: Admin enabling \
unindexed-search privilege in the global configuration'
</message>
<call function="'dsconfigSet'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'objectName' : 'global-configuration' ,
'attributeName' : 'disabled-privilege' ,
'attributeValue' : 'unindexed-search'
}
</call>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=user.0,ou=People,dc=example,dc=com' ,
'dsInstancePswd' : 'smellyFish' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*'
}
</call>
<message>
'Privileges: Unindexed Searches: Anonymous search'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*'
}
</call>
<message>
'Privileges: Unindexed Searches: Admin disabling \
unindexed-search privilege in the global configuration'
</message>
<call function="'dsconfigSet'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'objectName' : 'global-configuration' ,
'modifyType' : 'reset' ,
'attributeName' : 'disabled-privilege'
}
</call>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=user.0,ou=People,dc=example,dc=com' ,
'dsInstancePswd' : 'smellyFish' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*' ,
'expectedRC' : 50
}
</call>
<message>
'Privileges: Unindexed Searches: Anonymous search'
</message>
<call function="'SearchObject'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'facsimiletelephonenumber=*512*' ,
'expectedRC' : 50
}
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!---
Place test-specific test information here.
The tag, TestMarker, must be the same as the tag, TestSuiteName.
#@TestMarker Privileges Unindexed Searches Tests
#@TestName postamble
#@TestIssue none
#@TestPurpose Reset after unindexed saerch tests
#@TestPreamble none
#@TestStep Admin changing index-entry-limit.
#@TestPostamble none
#@TestResult Success if OpenDS returns 0
for all other ldap operations.
-->
<testcase name="getTestCaseName('postamble')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Privileges: Unindexed Searches: Postamble - \
Admin changing index-entry-limit'
</message>
<call function="'dsconfigSet'">
{
'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'objectName' : 'backend' ,
'propertyType' : 'backend' ,
'propertyName' : 'userRoot' ,
'attributeName' : 'index-entry-limit' ,
'attributeValue' : '4000'
}
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<import machine="STAF_LOCAL_HOSTNAME"
file="'%s/testcases/privileges/privileges_cleanup.xml'%
(TESTS_DIR)"/>
<call function="'privileges_cleanup'" />
<call function="'testSuite_Postamble'"/>
</sequence>
</block>
</sequence>
</function>
</stax>