'Security: Last Login: Preamble - Checking existence of ds-cfg-idle-lockout-interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'attrToBeCompared' : 'ds-cfg-idle-lockout-interval:0 seconds', 'entryToBeCompared' : 'cn=Default Password Policy,cn=Password Policies,cn=config' } 'Security: Last Login: Admin Enable Last Login Attribute Only' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-attribute' , 'attributeValue' : 'ds-pwp-last-login-time' } 'Security: Last Login: User Binding With Password' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Checking for Absence of Last Login Time' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'ds-pwp-last-login-time' } { 'returnString' : returnString , 'testString' : 'ds-pwp-last-login-time' } 'Security: Last Login: Admin Disable Last Login Attribute Only' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-attribute' , 'modifyType' : 'reset' } 'Security: Last Login: Admin Enable Last Login Format Only' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-format' , 'attributeValue' : 'EEE, MMM dd, yyyy HH:mm:ss' } 'Security: Last Login: User Binding With Password' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Checking for Absence of Last Login Time' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'ds-pwp-last-login-time' } { 'returnString' : returnString , 'testString' : 'ds-pwp-last-login-time' } 'Security: Last Login: Admin Enable Last Login Attribute And Format' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-attribute' , 'attributeValue' : 'ds-pwp-last-login-time' } 'Security: Last Login: User Binding With Password' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Checking for Absence of Last Login Time' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'ds-pwp-last-login-time' } { 'returnString' : returnString , 'expectedString' : 'ds-pwp-last-login-time' } 'Security: Last Login: Long Idle Lockout Step 1. Check User Bind' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout Step 2. Admin Changing Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '50 s' } 'Security: Last Login: Long Idle Lockout Step 3. User Binding Before Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout Step 4. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Long Idle Lockout Step 5. User Binding After Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base', 'expectedRC' : 49 } 'Security: Last Login: Reset Idle Lockout Step 1. Admin Resetting Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '0 s' } 'Security: Last Login: Reset Idle Lockout Step 2. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy', 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout Step 3. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Reset Idle Lockout Step 4. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Password Change Override Step 1. Check User Bind' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Password Change Override Step 2. Admin Changing Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '50 s' } 'Security: Last Login: Long Idle Lockout - Password Change Override Step 3. User Binding Before Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'destroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout Step 4. Sleep' { 'sleepForMilliSeconds' : 30000 } 'Security: Last Login: Long Idle Lockout - Password Change Override Step 5. User Changing Password' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=jreuter,ou=People,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'attributeName' : 'userpassword' , 'newAttributeValue' : 'newdestroy' , 'changetype' : 'replace' } 'Security: Last Login: Long Idle Lockout Step 6. Sleep' { 'sleepForMilliSeconds' : 30000 } 'Security: Last Login: Long Idle Lockout Step 7. User Binding After Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout 2 Step 1. Admin Resetting Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '0 s' } 'Security: Last Login: Reset Idle Lockout 2 Step 2. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy', 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout 2 Step 3. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Reset Idle Lockout 2 Step 4. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - User Bind Reset Step 1. Check User Bind' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - User Bind Reset Step 2. Admin Changing Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '50 s' } 'Security: Last Login: Long Idle Lockout - User Bind Reset Step 3. User Binding Before Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - User Bind Reset Step 4. Sleep' { 'sleepForMilliSeconds' : 30000 } 'Security: Last Login: Long Idle Lockout - User Bind Reset Step 5. User Bind To Reset Last Login Time' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - User Bind Reset Step 6. Sleep' { 'sleepForMilliSeconds' : 30000 } 'Security: Last Login: Long Idle Lockout - User Bind Reset Step 7. User Binding After Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout Step 1. Admin Resetting Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '0 s' } 'Security: Last Login: Reset Idle Lockout Step 2. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy', 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout Step 3. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Reset Idle Lockout Step 4. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Disabled Last Login Step 1. Disable Last Login' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-attribute' , 'modifyType' : 'reset' } 'Security: Last Login: Long Idle Lockout - Disabled Last Login Step 2. Check User Bind' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Disabled Last Login Step 3. Admin Changing Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '50 s' } 'Security: Last Login: Long Idle Lockout - Disabled Last Login Step 4. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' , 'expectedRC' : 49 } 'Security: Last Login: Reset Idle Lockout Step 1. Enable Last Login - Attribute' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-attribute' , 'attributeValue' : 'ds-pwp-last-login-time' } 'Security: Last Login: Reset Idle Lockout Step 2. Admin Resetting Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '0 s' } 'Security: Last Login: Reset Idle Lockout Step 3. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy', 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout Step 4. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Reset Idle Lockout Step 5. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Disabled Last Login 2 Step 1. Disable Last Login' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-format' , 'modifyType' : 'reset' } 'Security: Last Login: Long Idle Lockout - Disabled Last Login 2 Step 2. Check User Bind' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Disabled Last Login 2 Step 3. Admin Changing Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '50 s' } 'Security: Last Login: Long Idle Lockout - Disabled Last Login 2 Step 4. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' , 'expectedRC' : 49 } 'Security: Last Login: Reset Idle Lockout Step 1. Enable Last Login - Attribute' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-format' , 'attributeValue' : 'EEE, MMM dd, yyyy HH:mm:ss' } 'Security: Last Login: Reset Idle Lockout Step 2. Admin Resetting Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '0 s' } 'Security: Last Login: Reset Idle Lockout Step 3. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy', 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout Step 4. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Reset Idle Lockout Step 5. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout Step 1. Check User Bind' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout Step 2. Admin Changing Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '50 s' } 'Security: Last Login: Long Idle Lockout Step 3. User Binding Before Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout Step 4. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Long Idle Lockout Step 5. User Binding After Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' , 'expectedRC' : 49 } 'Security: Last Login: Reset Idle Lockout Step 1. Admin Resetting Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '0 s' } 'Security: Last Login: Reset Idle Lockout Step 2. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy', 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout Step 3. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Reset Idle Lockout Step 4. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 2 Step 1. Check User Bind' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 2 Step 2. Admin Changing Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '50 s' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 2 Step 3. User Binding Before Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'newdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 2 Step 4. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 2 Step 5. User Changing Password' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=jreuter,ou=People,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'attributeName' : 'userpassword' , 'newAttributeValue' : 'anotherdestroy' , 'changetype' : 'replace' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 2 Step 6. User Binding After Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'anotherdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout Step 1. Admin Resetting Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '0 s' } 'Security: Last Login: Reset Idle Lockout Step 2. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'anotherdestroy', 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Reset Idle Lockout Step 3. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Reset Idle Lockout Step 4. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'anotherdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 3 Step 1. Disable Last Login' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-format' , 'modifyType' : 'reset' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 3 Step 2. Check User Bind' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'anotherdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 3 Step 3. Admin Changing Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '50 s' } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 3 Step 4. User Binding Before Idle Lockout' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'anotherdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' , 'expectedRC' : 49 } 'Security: Last Login: Long Idle Lockout - Pwd Change Override 3 Step 5. Admin Changing Password' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=jreuter,ou=People,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'attributeName' : 'userpassword' , 'newAttributeValue' : 'lastdestroy' , 'changetype' : 'replace' } 'Security: Last Login: Pwd Override 3 Step 6. User Binding After Admin Pwd Change' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'lastdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Postamble Step 1. Admin Resetting Idle Lockout Interval' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'idle-lockout-interval' , 'attributeValue' : '0 s' } 'Security: Last Login: Postamble Step 2. Admin Disabling Last Login Time Attribute' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'propertyName' : 'Default Password Policy' , 'attributeName' : 'last-login-time-attribute' , 'modifyType' : 'reset' } 'Security: Last Login: Postamble Step 3. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'lastdestroy', 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' } 'Security: Last Login: Postamble Step 4. Sleep' { 'sleepForMilliSeconds' : 60000 } 'Security: Last Login: Postamble Step 5. User Binding' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=jreuter,ou=people,ou=password tests,o=Pwd Policy Tests,dc=example,dc=com' , 'dsInstancePswd' : 'lastdestroy' , 'dsBaseDN' : 'dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'extraParams' : '-s base' }