124N/A<?xml version="1.0" encoding="UTF-8" standalone="no"?>

124N/A<!DOCTYPE stax SYSTEM "/shared/stax.dtd">

124N/A<stax>

124N/A

568N/A <defaultcall function="replication_encryption"/>

618N/A

124N/A <function name="replication_encryption">

124N/A

124N/A <sequence>

124N/A

124N/A <block name="'encryption'">

124N/A

124N/A <sequence>

124N/A

124N/A <script>

124N/A if not CurrentTestPath.has_key('group'):

124N/A CurrentTestPath['group']='replication'

124N/A CurrentTestPath['suite']=STAXCurrentBlock

124N/A </script>

124N/A

124N/A <call function="'testSuite_Preamble'"/>

124N/A

124N/A <!--- Test Suite information

<import machine="STAF_LOCAL_HOSTNAME"

file="'%s/testcases/replication/replication_setup.xml'

% (TESTS_DIR)"/>

<call function="'replication_setup'">

{ 'topologyFile' : '%s/3server_topology.txt' \

% REPLICATION_CONFIG_DIR,

'secureReplication': True,

'dataFile' : 'Example.ldif'

}

</call>

<script>

consumer = consumerList[0]

</script>

<!--- Test Case information

-->

<testcase name="getTestCaseName('Add entry')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Add entry. Check entry add over \

secured replication'

</message>

<iterate var="server" in="_topologyServerList" indexvar="i">

<sequence>

<script>

serverPath = '%s/%s' % (server.getDir(), OPENDSNAME)

userDn = 'uid=iabizen-%s, ou=People, %s' % (i,synchroSuffix)

if i == 0:

myKnownIssue = None

else:

# if we fail to add the entry to the 'consumer' servers

# => it may mean that the initialize-all is not completely

# done yet, and so we may have come across Issue 3315

# (dsreplication initialize-all returns before peer

# has completed initialisation)

myKnownIssue = '3315'

</script>

<!-- Add entry to one of the other servers -->

<script>

listAttr = []

listAttr.append('objectclass:top')

listAttr.append('objectclass:organizationalperson')

listAttr.append('objectclass:inetorgperson')

listAttr.append('objectclass:person')

listAttr.append('givenname:Izen-%s' % i)

listAttr.append('sn:Abizen-%s' % i)

listAttr.append('cn:Izen-%s Abizen-%s' % (i, i))

listAttr.append('l:ICNC')

</script>

<call function="'addAnEntry'">

{ 'location' : server.getHostname(),

'dsPath' : serverPath,

'dsInstanceHost' : server.getHostname(),

'dsInstancePort' : server.getPort(),

'dsInstanceDn' : server.getRootDn(),

'dsInstancePswd' : server.getRootPwd(),

'DNToAdd' : userDn,

'listAttributes' : listAttr,

'expectedRC' : 0,

'knownIssue' : myKnownIssue

}

</call>

</sequence>

</iterate>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<!--- Test Case information

-->

<testcase name="getTestCaseName('Modify entry')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Modify entry. Check entry modify \

over secured replication'

</message>

<iterate var="server" in="_topologyServerList" indexvar="i">

<sequence>

<script>

serverPath = '%s/%s' % (server.getDir(), OPENDSNAME)

userDn = 'uid=iabizen-%s, ou=People, %s' % (i,synchroSuffix)

if i == 0:

myKnownIssue = None

else:

# if we fail to modify the entry in the 'consumer' servers

# => it may mean that the initialize-all is not completely

# done yet, and so we may have come across Issue 3315

# (dsreplication initialize-all returns before peer

# has completed initialisation)

myKnownIssue = '3315'

</script>

<!-- Modify entry on one of the servers -->

<call function="'modifyAnAttribute'">

{ 'location' : server.getHostname(),

'dsPath' : serverPath,

'dsInstanceHost' : server.getHostname(),

'dsInstancePort' : server.getPort(),

'dsInstanceDn' : server.getRootDn(),

'dsInstancePswd' : server.getRootPwd(),

'DNToModify' : userDn,

'attributeName' : 'l',

'newAttributeValue' : 'GEC',

'changetype' : 'replace',

'knownIssue' : myKnownIssue

}

</call>

</sequence>

</iterate>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<!--- Test Case information

-->

<testcase name="getTestCaseName('Delete entry')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Delete entry. Check delete modify \

over secured replication'

</message>

<iterate var="server" in="_topologyServerList" indexvar="i">

<sequence>

<script>

serverPath = '%s/%s' % (server.getDir(), OPENDSNAME)

userDn = 'uid=iabizen-%s, ou=People, %s' % (i,synchroSuffix)

if i == 0:

myKnownIssue = None

else:

# if we fail to delete the entry to the 'consumer' servers

# => it may mean that the initialize-all is not completely

# done yet, and so we may have come across Issue 3315

# (dsreplication initialize-all returns before peer

# has completed initialisation)

myKnownIssue = '3315'

</script>

<!-- Delete entry on one of the servers -->

<call function="'DeleteEntry'">

{ 'location' : server.getHostname(),

'dsPath' : serverPath,

'dsInstanceHost' : server.getHostname(),

'dsInstancePort' : server.getPort() ,

'dsInstanceDn' : server.getRootDn() ,

'dsInstancePswd' : server.getRootPwd() ,

'dsBaseDN' : userDn,

'knownIssue' : myKnownIssue

}

</call>

</sequence>

</iterate>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<!--- Test Case information

-->

<testcase name="getTestCaseName

('Modify Entry - add binary attribute')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Modify Entry - add binary attribute. \

Check that an entry modify is well propagated by secured \

replication.'

</message>

<script>

filename = 'replication_mod_add_binary.ldif'

filePath = '%s/%s' % (local.data,filename)

binaryFilePath = '%s/replication/photo1.uu' % source.data

dn = 'uid=hmiller, ou=People,%s' % synchroSuffix

modif = 'add'

attrType = 'jpegPhoto'

write_replication_mod_binary_ldif_file(filePath, dn, modif,

attrType, binaryFilePath)

</script>

<!-- Copy the replication_mod ldif to client host -->

<message>

'Copy %s file from %s to %s' % (filename,local.data,

clientDataDir)

</message>

<call function="'copyFile'">

{ 'srcfile' : filePath,

'destfile' : '%s/%s' % (clientDataDir,filename),

'remotehost' : client.getHostname() }

</call>

<!-- Modify "master" server -->

<call function="'ldapModifyWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsFilename' : '%s/%s' % (clientDataDir, filename)

}

</call>

<!-- Check modify worked on "master" server -->

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=hmiller, ou=People,%s' \

% synchroSuffix,

'dsFilter' : 'jpegPhoto=*',

'expectedRC' : 0

}

</call>

<script>

searchRC = STAXResult[0][0]

searchResult = STAXResult[0][1]

resultLength = len(searchResult) > 0

</script>

<call function="'checktestRC'">

{ 'returncode' : resultLength ,

'result' : searchResult ,

'expected' : 1

}

</call>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<!--- Test Case information

-->

<testcase name="getTestCaseName

('Modify Entry - replace binary attribute')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Modify Entry - replace binary \

attribute. \

Check that an entry modify is well propagated by secured \

replication.'

</message>

<script>

filename = 'replication_mod_replace_binary.ldif'

filePath = '%s/%s' % (local.data,filename)

binaryFilePath = '%s/replication/photo2.uu' % source.data

dn = 'uid=hmiller, ou=People,%s' % synchroSuffix

modif = 'replace'

attrType = 'jpegPhoto'

write_replication_mod_binary_ldif_file(filePath, dn, modif,

attrType,

binaryFilePath)

</script>

<!-- Copy the replication_mod ldif to client host -->

<message>

'Copy %s file from %s to %s' % (filename,local.data,

clientDataDir)

</message>

<call function="'copyFile'">

{ 'srcfile' : filePath,

'destfile' : '%s/%s' % (clientDataDir,filename),

'remotehost' : client.getHostname()

}

</call>

<!-- Modify "master" server -->

<call function="'ldapModifyWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsFilename' : '%s/%s' % (clientDataDir, filename)

}

</call>

<!-- Check modify worked on "master" server -->

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=hmiller, ou=People,%s' \

% synchroSuffix,

'dsFilter' : 'jpegPhoto=*',

'expectedRC' : 0

}

</call>

<script>

searchRC = STAXResult[0][0]

searchResult = STAXResult[0][1]

resultLength = len(searchResult) > 0

</script>

<call function="'checktestRC'">

{ 'returncode' : resultLength ,

'result' : searchResult ,

'expected' : 1

}

</call>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<!--- Test Case information

-->

<testcase name="getTestCaseName

('Modify Entry - delete binary attribute')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Modify Entry - delete binary \

attribute. \

Check that an entry modify is well propagated by secured \

replication.'

</message>

<script>

filename = 'replication_mod_delete_binary.ldif'

filePath = '%s/%s' % (local.data,filename)

dn = 'uid=hmiller, ou=People,%s' % synchroSuffix

modif = 'delete'

attrType = 'jpegPhoto'

attrValue = None

write_replication_mod_ldif_file(filePath, dn, modif, attrType,

attrValue)

</script>

<!-- Copy the replication_mod ldif to client host -->

<message>

'Copy %s file from %s to %s' % (filename,local.data,

clientDataDir)

</message>

<call function="'copyFile'">

{ 'srcfile' : filePath,

'destfile' : '%s/%s' % (clientDataDir,filename),

'remotehost' : client.getHostname() }

</call>

<!-- Modify "master" server -->

<call function="'ldapModifyWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsFilename' : '%s/%s' % (clientDataDir, filename)

}

</call>

<!-- Check modify worked on "master" server -->

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=hmiller, ou=People,%s' \

% synchroSuffix,

'dsFilter' : 'jpegPhoto=*',

'expectedRC' : 0

}

</call>

<script>

searchRC = STAXResult[0][0]

searchResult = STAXResult[0][1]

resultLength = len(searchResult) > 0

</script>

<call function="'checktestRC'">

{ 'returncode' : resultLength ,

'result' : searchResult ,

'expected' : 0

}

</call>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<!--- Test Case information

-->

<testcase name="getTestCaseName('Rename Entry')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Rename Entry. Check that a rename \

(modrdn) operation is well propagated by secured replication.'

</message>

<script>

filename = 'replication_modrdn.ldif'

filePath = '%s/%s' % (local.data,filename)

dn = 'uid=kvaughan, ou=People,%s' % synchroSuffix

newrdn = 'uid=kvaughan2'

newsuperior = None

deleteoldrdn = 1

write_replication_moddn_ldif_file(filePath, dn, newrdn,

newsuperior, deleteoldrdn)

</script>

<!-- Copy the replication_mod ldif to client host -->

<message>

'Copy %s file from %s to %s' % (filename,local.data,

clientDataDir)

</message>

<call function="'copyFile'">

{ 'srcfile' : filePath,

'destfile' : '%s/%s' % (clientDataDir,filename),

'remotehost' : client.getHostname()

}

</call>

<!-- Modify "master" server -->

<call function="'ldapModifyWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsFilename' : '%s/%s' % (clientDataDir, filename)

}

</call>

<!-- Check modify worked on "master" server -->

<!-- check that "uid=kvaughan, ou=People, ${DIRECTORY_BASE}"

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=kvaughan, ou=People,%s' \

% synchroSuffix,

'dsFilter' : 'objectclass=*',

'expectedRC' : 32

}

</call>

<!-- check that new entry "uid=kvaughan2, ou=People,

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=kvaughan2, ou=People,%s' \

% synchroSuffix,

'dsFilter' : 'objectclass=*'

}

</call>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<!--- Test Case information

-->

<testcase name="getTestCaseName

('Rename Entry (preserving old rdn)')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Rename Entry (preserving old rdn). \

Check that a rename (modrdn) operation is well propagated by \

secured replication.'

</message>

<script>

filename = 'replication_modrdn_preserve.ldif'

filePath = '%s/%s' % (local.data,filename)

dn = 'uid=jwallace, ou=People,%s' % synchroSuffix

newrdn = 'uid=igueye'

newsuperior = None

deleteoldrdn = 0

write_replication_moddn_ldif_file(filePath, dn, newrdn,

newsuperior, deleteoldrdn)

</script>

<!-- Copy the replication_mod ldif to client host -->

<message>

'Copy %s file from %s to %s' % (filename,local.data,

clientDataDir)

</message>

<call function="'copyFile'">

{ 'srcfile' : filePath,

'destfile' : '%s/%s' % (clientDataDir,filename),

'remotehost' : client.getHostname()

}

</call>

<!-- Modify "master" server -->

<call function="'ldapModifyWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsFilename' : '%s/%s' % (clientDataDir, filename)

}

</call>

<!-- Check modify worked on "master" server -->

<!-- check that "uid=jwallace, ou=People, ${DIRECTORY_BASE}"

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=jwallace, ou=People,%s' \

% synchroSuffix,

'dsFilter' : 'objectclass=*',

'expectedRC' : 32

}

</call>

<!-- check that new entry "uid=igueye, ou=People,

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=igueye, ou=People,%s' % synchroSuffix,

'dsFilter' : 'uid=jwallace'

}

</call>

<script>

searchRC = STAXResult[0][0]

searchResult = STAXResult[0][1]

resultLength = len(searchResult) > 0

</script>

<call function="'checktestRC'">

{ 'returncode' : resultLength ,

'result' : searchResult ,

'expected' : 1

}

</call>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<!--- Test Case information

-->

<testcase name="getTestCaseName('Rename Subtree')">

<sequence>

<call function="'testCase_Preamble'"/>

<message>

'Replication: Encryption: Rename Subtree. Check that a \

subtree rename (moddn) operation is well propagated by \

secured replication.'

</message>

<script>

filename = 'replication_moddn.ldif'

filePath = '%s/%s' % (local.data,filename)

dn = 'ou=People,%s' % synchroSuffix

newrdn = 'ou=Special People'

newsuperior = 'ou=Special Users,%s' % synchroSuffix

deleteoldrdn = 0

write_replication_moddn_ldif_file(filePath, dn, newrdn,

newsuperior, deleteoldrdn)

</script>

<!-- Copy the replication_mod ldif to client host -->

<message>

'Copy %s file from %s to %s' % (filename,local.data,

clientDataDir)

</message>

<call function="'copyFile'">

{ 'srcfile' : filePath,

'destfile' : '%s/%s' % (clientDataDir,filename),

'remotehost' : client.getHostname() }

</call>

<!-- Modify "master" server -->

<call function="'ldapModifyWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsFilename' : '%s/%s' % (clientDataDir, filename)

}

</call>

<!-- Check modify worked on "master" server -->

<!-- check that "uid=gfarmer, ou=People, ${DIRECTORY_BASE}"

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=gfarmer, ou=People,%s' \

% synchroSuffix,

'dsFilter' : 'objectclass=*',

'expectedRC' : 32

}

</call>

<!-- check that new entry "uid=gfarmer, ou=Special People,

<call function="'ldapSearchWithScript'">

{ 'location' : clientHost,

'dsPath' : clientPath,

'dsInstanceHost' : masterHost ,

'dsInstancePort' : master.getPort() ,

'dsInstanceDn' : master.getRootDn() ,

'dsInstancePswd' : master.getRootPwd() ,

'dsBaseDN' : 'uid=gfarmer, ou=Special People, \

ou=Special Users,%s' % synchroSuffix,

'dsFilter' : 'objectclass=*'

}

</call>

<!-- Verify the synchronization of the trees among the servers in

the topology -->

<call function="'verifyTrees'">

[ clientHost, clientPath, master, consumerList, synchroSuffix ]

</call>

<call function="'testCase_Postamble'"/>

</sequence>

</testcase>

<import machine="STAF_LOCAL_HOSTNAME"

file="'%s/testcases/replication/replication_cleanup.xml'

% (TESTS_DIR)"/>

<call function="'replication_cleanup'" />

<call function="'testSuite_Postamble'"/>

</sequence>

</block>

</sequence>

</function>

</stax>