security_mult_pwd_policies.xml revision d81978a0815d5b8a75633c35e3e1f8708d36f017
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE stax SYSTEM "/shared/stax.dtd">
<!--
! CDDL HEADER START
!
! The contents of this file are subject to the terms of the
! Common Development and Distribution License, Version 1.0 only
! (the "License"). You may not use this file except in compliance
! with the License.
!
! You can obtain a copy of the license at
! trunk/opends/resource/legal-notices/OpenDS.LICENSE
! or https://OpenDS.dev.java.net/OpenDS.LICENSE.
! See the License for the specific language governing permissions
! and limitations under the License.
!
! When distributing Covered Code, include this CDDL HEADER in each
! file and include the License file at
! trunk/opends/resource/legal-notices/OpenDS.LICENSE. If applicable,
! add the following below this CDDL HEADER, with the fields enclosed
! by brackets "[]" replaced with your own identifying information:
! Portions Copyright [yyyy] [name of copyright owner]
!
! CDDL HEADER END
!
! Copyright 2006-2008 Sun Microsystems, Inc.
! -->
<stax>
<defaultcall function="mult_pwd_policies"/>
<function name="mult_pwd_policies">
<sequence>
<!--- Test Suite information
#@TestSuiteName Multiple Password Policies
#@TestSuitePurpose Test Multiple Password Policies
#@TestSuiteGroup Multiple Password Policies
#@TestScript security_mult_pwd_policies.xml
-->
<!--- Define default value for basedn, msg1, msg2 -->
<script>
basedn = 'ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com'
msg1 = 'default-password-storage-scheme:Salted SHA-1'
msg2 = 'password-attribute:userPassword'
</script>
<!--- Test Case information
#@TestMarker Multiple Password Policies
#@TestName Add New Password Policy
#@TestIssue none
#@TestPurpose Preamble - Add Sales Password Policy
#@TestPreamble none
#@TestStep with dsconfig create-password-policy Sales
Password Policy and set
default-password-storage-schemeSalted SHA-1
#@TestPostamble none
#@TestResult Success if dsconfig returns 0
-->
<testcase name="getTestCaseName('Preamble')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Security: Mult Pwd Policies: Preamble - Add Sales Password Policy'
</message>
<call function="'dsconfig'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'subcommand' : 'create-password-policy' ,
'objectType' : 'policy-name' ,
'objectName' : 'Sales Password Policy',
'optionsString' : '--set "%s" --set %s' % (msg1,msg2),
'expectedRC' : 0 }
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!--- Test Case information
#@TestMarker Multiple Password Policies
#@TestName Adding New Entry With Sales Password Policy
#@TestIssue none
#@TestPurpose Adding New Entry With Sales Password Policy
#@TestPreamble none
#@TestStep addEntry add_sales_person.ldif
SearchObject with uid=sguy returns 0
SearchObject with uid=sgal eturns 0
#@TestPostamble none
#@TestResult Success if the test is PASS
-->
<testcase name="getTestCaseName('Add New Entry')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Security: Mult Pwd Policies: Adding New Entry With Sales Password Policy'
</message>
<call function="'addEntry'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'entryToBeAdded' : '%s/security/pwd_policy/add_sales_person.ldif' \
% remote.data }
</call>
<call function="'SearchObject'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=sguy,%s' % basedn ,
'dsInstancePswd' : 'superguy' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'objectclass=*' ,
'extraParams' : '-s base' }
</call>
<call function="'SearchObject'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=sgal,%s' % basedn ,
'dsInstancePswd' : 'supergal' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'objectclass=*' ,
'extraParams' : '-s base' }
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!--- Test Case information
#@TestMarker Multiple Password Policies
#@TestName Modify Sales Pwd Policy
#@TestIssue none
#@TestPurpose Admin Changing Sales Lockout Count
#@TestPreamble none
#@TestStep Admin Changing Sales Lockout Count
modifyPwdPolicy for Sales Password Policy
set lockout-failure-count to 3
#@TestPostamble none
#@TestResult Success if modifyPwdPolicy returns 0
-->
<testcase name="getTestCaseName('Modify Sales Pwd Policy')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Security: Mult Pwd Policies: Admin Changing Sales Lockout Count'
</message>
<call function="'modifyPwdPolicy'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'propertyName' : 'Sales Password Policy' ,
'attributeName' : 'lockout-failure-count' ,
'attributeValue' : '3' }
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!--- Test Case information
#@TestMarker Multiple Password Policies
#@TestName Test Sales Password Policy
#@TestIssue none
#@TestPurpose Test Sales Password Policy
#@TestPreamble none
#@TestStep Testing Sales Pwd Policy with Lockout Count
search with bad pwd 3x good pwd 1x
SearchObject returns 49 4x
#@TestPostamble none
#@TestResult Success if the test is PASS
-->
<testcase name="getTestCaseName('Test Sales Pwd Policy')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Security: Mult Pwd Policies: Testing Sales Pwd Policy with Lockout Count'
</message>
<script>
search_pwds = ['bad', 'bad', 'bad', 'superguy']
</script>
<iterate var="pwds" in="search_pwds" indexvar="index">
<call function="'SearchObject'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=sguy,%s' % basedn ,
'dsInstancePswd' : '%s' % pwds ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'objectclass=*' ,
'extraParams' : '-s base' ,
'expectedRC' : 49 }
</call>
</iterate>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!--- Test Case information
#@TestMarker Multiple Password Policies
#@TestName Testing Default Pwd Policy with Lockout Count
#@TestIssue none
#@TestPurpose Testing Default Pwd Policy with Lockout Count
#@TestPreamble none
#@TestStep Testing Default Pwd Policy with Lockout Count
search with bad pwd 3x good pwd 1x
SearchObject returns 49 3x
SearchObject returns 0 1x
#@TestPostamble none
#@TestResult Success if the test is PASS
-->
<testcase name="getTestCaseName('Test Default Pwd Policy')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Security: Mult Pwd Policies: Testing Default Pwd Policy with Lockout Count'
</message>
<script>
search_pwds = ['bad', 'bad', 'bad']
</script>
<iterate var="pwds" in="search_pwds" indexvar="index">
<call function="'SearchObject'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=tclow,%s' % basedn ,
'dsInstancePswd' : '%s' % pwds ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'objectclass=*' ,
'extraParams' : '-s base' ,
'expectedRC' : 49 }
</call>
</iterate>
<call function="'SearchObject'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=tclow,%s' % basedn ,
'dsInstancePswd' : 'cardreader' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'objectclass=*' ,
'extraParams' : '-s base' }
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!--- Test Case information
#@TestMarker Multiple Password Policies
#@TestName Delete Sales Pwd Policy
#@TestIssue none
#@TestPurpose Admin Deleting Sales Lockout Count
#@TestPreamble none
#@TestStep Admin Deleting Sales Lockout Count
dsconfig delete Sales Password Policy
#@TestPostamble none
#@TestResult Success if dsconfig returns 0
-->
<testcase name="getTestCaseName('Delete Sales Pwd Policy')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Security: Mult Pwd Policies: Admin Deleting Sales Lockout Count'
</message>
<call function="'dsconfig'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : DIRECTORY_INSTANCE_DN ,
'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD ,
'subcommand' : 'delete-password-policy' ,
'objectType' : 'policy-name' ,
'objectName' : 'Sales Password Policy',
'expectedRC' : 0 }
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
<!--- Test Case information
#@TestMarker Multiple Password Policies
#@TestName Test Sales Pwd Policy after Remove
#@TestIssue none
#@TestPurpose Test Sales Pwd Policy after Remove
#@TestPreamble none
#@TestStep Testing Sales Pwd Policy after removing it
#@TestPostamble none
#@TestResult Success if SearchObject returns 80 (Other)
-->
<testcase name="getTestCaseName('Test Sales Pwd Policy 2')">
<sequence>
<call function="'testCase_Preamble'"/>
<message>
'Security: Mult Pwd Policies: Testing Sales Pwd Policy with Lockout Count'
</message>
<call function="'SearchObject'">
{ 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST ,
'dsInstancePort' : DIRECTORY_INSTANCE_PORT ,
'dsInstanceDn' : 'uid=sgal,%s' % basedn ,
'dsInstancePswd' : 'supergal' ,
'dsBaseDN' : 'dc=example,dc=com' ,
'dsFilter' : 'objectclass=*' ,
'extraParams' : '-s base' ,
'expectedRC' : 80 }
</call>
<call function="'testCase_Postamble'"/>
</sequence>
</testcase>
</sequence>
</function>
</stax>