First set of functional tests for the basic syntax and functionality for th...

el_kaboing

08.08.2007 7658bf68b04c34f75abdeb68a5b2f33b50180353

First set of functional tests for the basic syntax and functionality for the aci keyword, targetfilter (Issue 436).

 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci1.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com")(targetattr="*")(targetfilter="(roomnumber=4135)")(version 3.0; acl "add_aci1"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci2.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com")(targetattr="*")(targetfilter!="(roomnumber=4135)")(version 3.0; acl "add_aci2"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci3.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com")(targetattr="*")(targetfilter="(|(cn=bad)(sn=bad)(roomnumber=4135))")(version 3.0; acl "add_aci3"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci4.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com")(targetattr="*")(targetfilter="(|(cn=bad)(sn=bad)(roomnumber=0000))")(version 3.0; acl "add_aci4"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci5.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com")(targetattr="*")(targetfilter="(&(cn=bad)(sn=bad)(roomnumber=3145))")(version 3.0; acl "add_aci5"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci6.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com")(targetattr="*")(targetfilter="(&(cn=David Miller)(sn=Miller)(roomnumber=4135))")(version 3.0; acl "add_aci6"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci7.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com")(targetattr="*")(targetfilter="( & (cn =David Miller)( sn=Miller )( roomnumber = 4135 ))")(version 3.0; acl "add_aci7"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci8.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com")(targetattr="*")(targetfilter=(&(cn=David Miller)(sn=Miller)(roomnumber=4135)))(version 3.0; acl "add_aci8"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/shared/data/aci/aci_targetfilter/add_aci9.ldif

New file
@@ -0,0 +1,30 @@
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE
# or https://OpenDS.dev.java.net/OpenDS.LICENSE.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at
# trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
# add the following below this CDDL HEADER, with the fields enclosed
# by brackets "[]" replaced with your own identifying information:
#      Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#      Portions Copyright 2007 Sun Microsystems, Inc.
#

dn: ou=aci branch, o=ACI Tests, dc=example,dc=com
changetype: modify
add: aci
aci: (target="ldap:///ou=aci branch, o=ACI Tests, dc=example,dc=com)(targetattr="*")(targetfilter=(&(cn=David Miller)(sn=Miller)(roomnumber=4135))")(version 3.0; acl "add_aci9"; allow (read) userdn="ldap:///all";)


 opends/tests/functional-tests/testcases/aci/aci.xml

@@ -87,6 +87,10 @@
              <call function="'aci_targetattr'" />
      
              <import machine="'%s' % (STAF_LOCAL_HOSTNAME)"
                file="'%s/testcases/aci/aci_targetfilter_syntax.xml' % (TESTS_DIR)"/>
              <call function="'aci_targetfilter_syntax'" />
      
              <import machine="'%s' % (STAF_LOCAL_HOSTNAME)"
                file="'%s/testcases/aci/aci_teardown.xml' % (TESTS_DIR)"/>
              <call function="'aci_teardown'" />
      

 opends/tests/functional-tests/testcases/aci/aci_targetfilter_syntax.xml

New file
@@ -0,0 +1,1823 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE stax SYSTEM "stax.dtd">
<!--
 ! CDDL HEADER START
 !
 ! The contents of this file are subject to the terms of the
 ! Common Development and Distribution License, Version 1.0 only
 ! (the "License").  You may not use this file except in compliance
 ! with the License.
 !
 ! You can obtain a copy of the license at
 ! trunk/opends/resource/legal-notices/OpenDS.LICENSE
 ! or https://OpenDS.dev.java.net/OpenDS.LICENSE.
 ! See the License for the specific language governing permissions
 ! and limitations under the License.
 !
 ! When distributing Covered Code, include this CDDL HEADER in each
 ! file and include the License file at
 ! trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
 ! add the following below this CDDL HEADER, with the fields enclosed
 ! by brackets "[]" replaced with your own identifying * information:
 !      Portions Copyright [yyyy] [name of copyright owner]
 !
 ! CDDL HEADER END
 !
 !      Portions Copyright 2007 Sun Microsystems, Inc.
 ! -->
<stax>

  <defaultcall function="aci_targetfilter_syntax"/>

  <function name="aci_targetfilter_syntax">
      <!---
            Place suite-specific test information here.
            #@TestSuiteName             ACI Targetfilter Tests - syntax
            #@TestSuitePurpose          Test the basic ACI Targetfilter Support. (allow(read))
            #@TestSuiteGroup            Basic ACI Targetfilter Tests allow(read)
            #@TestScript                aci_targetfilter.xml
      -->
      <sequence>

      <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetattr Tests
            #@TestName                  Preamble
            #@TestIssue                 436
            #@TestPurpose               Test default aci settings
            #@TestPreamble              none
            #@TestStep                  Client searches entry in a branch.
            #@TestStep                  Client searches entry in another branch.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        and no entries are returned 
                                        for all operations.
        -->
        <testcase name="'ACI: Targetfilter: Preamble'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Targetfilter: Preamble - user searching entry that will be targeted in future tests'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber telephonenumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Targetfilter: Preamble - user searching entry that will be non-targeted in future tests'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber telephonenumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>

     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with one statement
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with one statement
            #@TestPreamble              Admin adds an aci with the targetfilter containing one statement.
            #@TestStep                  Client searches entry which should be allowed with the targetfilter.
            #@TestStep                  Client searches entry which should not be allowed with the targetfilter.
            #@TestStep                  Client searches entry which is outside of the scope of the aci.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        Entry is returned only for step 1 
                                        and only with the appropriate attributes.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter Equals One Statement'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter Equals One Statement, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'   : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'   : '%s/aci/aci_targetfilter/add_aci1.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'      : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'roomnumber:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'cn:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'telephonenumber:' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement, user searching non-targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=scarter,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement, user searching non-targeted entry outside of the scope of the aci'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'    : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'    : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'      : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'    : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified' : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement, user searching previously targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>

      
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with one statement 2
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with one statement
            #@TestPreamble              Admin adds an aci with the targetfilter containing one statement.
            #@TestStep                  Client searches entry which should be allowed with the targetfilter.
            #@TestStep                  Client searches entry which should not be allowed with the targetfilter.
            #@TestStep                  Client searches entry which is outside of the scope of the aci.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        Entry is returned only for step 1 
                                        but with no attributes.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter Equals One Statement 2'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter Equals One Statement 2, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'   : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'   : '%s/aci/aci_targetfilter/add_aci1.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement 2, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'roomnumber:' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'cn:' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'telephonenumber:' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement, user searching non-targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=scarter,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement 2, user searching non-targeted entry outside of the scope of the aci'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement 2, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'    : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'    : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'      : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'    : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified' : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement 2, user searching previously targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>

     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with one statement 3
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with one statement
            #@TestPreamble              Admin adds an aci with the targetfilter containing one statement.
            #@TestStep                  Client searches entry which should be allowed with the targetfilter.
            #@TestStep                  Client searches entry which is outside of the scope of the aci.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        Entry is returned only for step 1 
                                        and only with the appropriate attributes.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter Equals One Statement 3'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter Equals One Statement 3, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'    : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'    : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'      : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'    : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified' : '%s/aci/aci_targetfilter/add_aci1.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement 3, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  }
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'roomnumber:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'cn:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'telephonenumber:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement 3, user searching non-targeted entry outside of the scope of the aci'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  }
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement 3, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'   : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'   : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals One Statement 3, user searching previously targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  }
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>
      
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter set to negative of one statement
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with (not equals) one statement
            #@TestPreamble              Admin adds an aci with the targetfilter containing a negative of one statement.
            #@TestStep                  Client searches entry which should not be allowed with the targetfilter.
            #@TestStep                  Client searches entry which should be allowed with the targetfilter.
            #@TestStep                  Client searches entry which is outside of the scope of the aci.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        Entry is returned only for step 2 
                                        and only with the appropriate attributes.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter Not Equals One Statement'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter Not Equals One Statement, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_targetfilter/add_aci2.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Not Equals One Statement, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Not Equals One Statement, user searching non-targeted entry in ACI branch'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=scarter,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'roomnumber:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'cn:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'telephonenumber:' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Not Equals One Statement, user searching non-targeted entry outside of the scope of the aci'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Not Equals One Statement, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Not Equals One Statement, user searching previously non-targeted entry in ACI branch'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=scarter,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>
      
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with three statements with or, one statement true
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with three statements with or and one statement is true
            #@TestPreamble              Admin adds an aci with the targetfilter containing three statements with or.
            #@TestStep                  Client searches entry which should be allowed with the targetfilter.
            #@TestStep                  Client searches entry which should not be allowed with the targetfilter.
            #@TestStep                  Client searches entry which is outside of the scope of the aci.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        Entry is returned only for step 1 
                                        and only with the appropriate attributes.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter Equals Three Statements With or, one true'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, one true, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_targetfilter/add_aci3.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, one true, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'roomnumber:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'cn:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'telephonenumber:' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, one true, user searching non-targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=scarter,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, one true, user searching non-targeted entry outside of the scope of the aci'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, one true, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, one true, user searching previously targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>
      
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with three statements with or, no statement true 
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with three statements with or and no statement is true
            #@TestPreamble              Admin adds an aci with the targetfilter containing three statements with or.
            #@TestStep                  Client searches entry which should not be allowed with the targetfilter.
            #@TestStep                  Client searches entry which is outside of the scope of the aci.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        No entries are returned in any steps.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter Equals Three Statements With or, none true'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, none true, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'   : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'   : '%s/aci/aci_targetfilter/add_aci4.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, none true, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'      : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, none true, user searching non-targeted entry outside of the scope of the aci'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, none true, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'   : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'   : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With or, none true, user searching previously targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'      : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>
      
      
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with three statements with and, one statement true
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with three statements with and and one statement is true
            #@TestPreamble              Admin adds an aci with the targetfilter containing three statements with and.
            #@TestStep                  Client searches entry which should not be allowed with the targetfilter.
            #@TestStep                  Client searches entry which is outside of the scope of the aci.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        No entries are returned in any steps.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter Equals Three Statements With and, one true'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, one true, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_targetfilter/add_aci5.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, one true, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, one true, user searching non-targeted entry outside of the scope of the aci'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, one true, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, one true, user searching previously targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>
      
      
      
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with three statements with and, all statements true 
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with three statements with and and all statements are true
            #@TestPreamble              Admin adds an aci with the targetfilter containing three statements with and.
            #@TestStep                  Client searches entry which should be allowed with the targetfilter.
            #@TestStep                  Client searches entry which should not be allowed with the targetfilter.
            #@TestStep                  Client searches entry which is outside of the scope of the aci.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        Entry is returned only for step 1 
                                        and only with the appropriate attributes.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter Equals Three Statements With and, all true'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, all true, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_targetfilter/add_aci6.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, all true, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'roomnumber:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'cn:' }
            </call>
            
            <if expr="returnCode != '1'">
                <tcstatus result="'fail'"/>
            </if>

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'telephonenumber:' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, all true, user searching non-targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=scarter,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, all true, user searching non-targeted entry outside of the scope of the aci'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, all true, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter Equals Three Statements With and, all true, user searching previously targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>
      
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with extra spaces 
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with extra spaces
            #@TestPreamble              Admin adds an aci with the targetfilter containing extra spaces.
            #@TestStep                  Client searches entry which should not be allowed with the targetfilter.
            #@TestStep                  Remove aci.
            #@TestStep                  Client searches entry which was previously not allowed with the targetfilter.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        for all ldap operations. 
                                        No entries are returned for any steps.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter With Extra Spaces'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter With Extra Spaces, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_targetfilter/add_aci7.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter With Extra Spaces, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter With Extra Spaces, admin deleting aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'        : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'        : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'          : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'        : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'     : '%s/aci/aci_target/del_aci.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 0">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter With Extra Spaces, user searching previously targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>
      
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with missing quotes
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with missing quotes
            #@TestPreamble              none
            #@TestStep                  Admin adds an aci with the targetfilter with missing quotes.
            #@TestStep                  Client searches entry which should not be allowed.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 50
                                        and the aci was not addded.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter With Missing Quotes'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter With Missing Quotes, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'   : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'   : '%s/aci/aci_targetfilter/add_aci8.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 50">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter With Missing Quotes, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'      : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>
 
     <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetfilter Tests - syntax
            #@TestName                  Targetfilter with misplaced quotes
            #@TestIssue                 436
            #@TestPurpose               Test with a targetfilter with misplaced quotes
            #@TestPreamble              none
            #@TestStep                  Admin adds an aci with the targetfilter with misplaced quotes.
            #@TestStep                  Client searches entry which should not be allowed.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 50
                                        and the aci was not addded.
        -->
      <!-- cross reference to http://docs.sun.com/source/816-6698-10/aci.html -->
      <!-- cross reference to DS6 docs -->
        <testcase name="'ACI: Target: Targetfilter With Missing Quotes 2'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Target: Targetfilter With Missing Quotes 2, preamble adding aci'
            </message>

            <call function="'modifyEntry'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : DIRECTORY_INSTANCE_DN ,
                'dsInstancePswd'   : DIRECTORY_INSTANCE_PSWD ,
                'entryToBeModified'   : '%s/aci/aci_targetfilter/add_aci9.ldif' % STAGED_DATA_DIR }
            </call>

            <if expr="RC != 50">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Target: Targetfilter With Missing Quotes 2, user searching targeted entry'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'      : 'cn sn uid roomnumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>

              <!---
            Place test-specific test information here.
            The tag, TestMarker, must be the same as the tag, TestSuiteName.
            #@TestMarker                ACI Targetattr Tests
            #@TestName                  Postamble
            #@TestIssue                 436
            #@TestPurpose               Test default aci settings
            #@TestPreamble              none
            #@TestStep                  Client searches entry in one branch.
            #@TestStep                  Client searches entry in another branch.
            #@TestPostamble             none
            #@TestResult                Success if OpenDS returns 0
                                        and no entries are returned 
                                        for all operations.
        -->
        <testcase name="'ACI: Targetfilter: Postamble'">
          <sequence>
            <call function="'testCase_Preamble'"/>
            <message>
               'ACI: Targetfilter: Postamble - user searching entry that was targeted'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber telephonenumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'searchStringForSubstring'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=aci branch,o=ACI Tests' }
            </call>
            
            <if expr="returnCode != '0'">
                <tcstatus result="'fail'"/>
            </if>

            <message>
               'ACI: Targetfilter: Postamble - user searching entry that was non-targeted'
            </message>

            <call function="'SearchObject'">
              { 'dsInstanceHost'   : DIRECTORY_INSTANCE_HOST ,
                'dsInstancePort'   : DIRECTORY_INSTANCE_PORT ,
                'dsInstanceDn'     : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' ,
                'dsInstancePswd'   : 'ACIRules' ,
                'dsBaseDN'         : 'uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' ,
                'dsFilter'         : 'objectclass=*'  ,
                'attributes'       : 'cn sn uid roomnumber telephonenumber'}
            </call>

            <script> 
             returnString = STAXResult[0][1]
            </script> 

            <call function="'checktestStringNotPresent'">
                { 'returnString'       : returnString ,
                  'testString'         : 'dn: uid=dmiller,ou=People,ou=non-aci branch,o=ACI Tests' }
            </call>
            
            <call function="'testCase_Postamble'"/>

          </sequence>
        </testcase>

      </sequence>

  </function>

</stax>