'Privileges: Directory Manager: bypass-acl, preamble, alternate root user removing global search ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global_aci , 'changetype' : 'delete' } 'Privileges: Directory Manager: bypass-acl, DM searching entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=scarter,ou=People,o=Privileges Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'cn sn uid'} { 'returnString' : returnString , 'testString' : 'dn: uid=scarter,ou=People,o=Privileges Tests' } { 'returnString' : returnString , 'testString' : 'sn: Carter' } 'Privileges: Directory Manager: bypass-acl, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-bypass-acl' , 'changetype' : 'add' } 'Privileges: Directory Manager: bypass-acl, DM searching entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=scarter,ou=People,o=Privileges Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'cn sn uid', 'expectedRC' : 0 } { 'returnString' : returnString , 'testString' : 'dn: uid=scarter,ou=People,o=Privileges Tests' } 'Privileges: Directory Manager: bypass-acl, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-bypass-acl' , 'changetype' : 'delete' } 'Privileges: Directory Manager: bypass-acl, DM searching entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'dsBaseDN' : 'uid=scarter,ou=People,o=Privileges Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'cn sn uid'} { 'returnString' : returnString , 'testString' : 'dn: uid=scarter,ou=People,o=Privileges Tests' } { 'returnString' : returnString , 'testString' : 'sn: Carter' } 'Privileges: Directory Manager: bypass-acl, alternate root user putting back global search ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global_aci , 'changetype' : 'add' } 'Privileges: Directory Manager: bypass-acl, DM searching entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=scarter,ou=People,o=Privileges Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'cn sn uid', 'expectedRC' : 0 } { 'returnString' : returnString , 'expectedString' : 'dn: uid=scarter,ou=People,o=Privileges Tests' } 'Privileges: Directory Manager: bypass-acl, alternate bind DN, alternate root user removing global search ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global_aci , 'changetype' : 'delete' } 'Privileges: Directory Manager: bypass-acl, alternate bind DN, DM searching entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=scarter,ou=People,o=Privileges Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'cn sn uid', 'expectedRC' : 0 } { 'returnString' : returnString , 'testString' : 'dn: uid=scarter,ou=People,o=Privileges Tests' } { 'returnString' : returnString , 'testString' : 'sn: Carter' } 'Privileges: Directory Manager: bypass-acl, alternate bind DN, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-bypass-acl' , 'changetype' : 'add' , 'expectedRC' : 32 } 'Privileges: Directory Manager: bypass-acl, alternate bind DN, alternate root user putting back global search ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global_aci , 'changetype' : 'add' } 'Privileges: Directory Manager: bypass-acl, alternate bind DN, DM searching entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=scarter,ou=People,o=Privileges Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'cn sn uid', 'expectedRC' : 0 } { 'returnString' : returnString , 'expectedString' : 'dn: uid=scarter,ou=People,o=Privileges Tests' } 'Privileges: Directory Manager: modify-acl - add aci, check default, DM adding ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search_aci , 'changetype' : 'add' } 'Privileges: Directory Manager: modify-acl - add aci, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-modify-acl' , 'changetype' : 'add' } 'Privileges: Directory Manager: modify-acl - add aci, DM adding ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search2_aci , 'changetype' : 'add' , 'expectedRC' : 50 } 'Privileges: Directory Manager: modify-acl - add aci, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-modify-acl' , 'changetype' : 'delete' } 'Privileges: Directory Manager: modify-acl - add aci, DM adding ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search2_aci , 'changetype' : 'add' } 'Privileges: Directory Manager: modify-acl - add aci, alternate root user deleting ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search_aci , 'changetype' : 'delete' } 'Privileges: Directory Manager: modify-acl - add aci, alternate root user deleting ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search2_aci , 'changetype' : 'delete' } { 'returncode' : RC , 'result' : STAXResult } 'Privileges: Directory Manager: modify-acl - replace aci, check default, DM replacing ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=tmorris, ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search_aci , 'changetype' : 'replace' } 'Privileges: Directory Manager: modify-acl - replace aci, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-modify-acl' , 'changetype' : 'add' } 'Privileges: Directory Manager: modify-acl - replace aci, DM replacing ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=tmorris, ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search_aci , 'changetype' : 'replace' , 'expectedRC' : 50 } 'Privileges: Directory Manager: modify-acl - replace aci, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-modify-acl' , 'changetype' : 'delete' } 'Privileges: Directory Manager: modify-acl - replace aci, DM replacing ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=tmorris, ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search_aci , 'changetype' : 'replace' } { 'returncode' : RC , 'result' : STAXResult } 'Privileges: Directory Manager: modify-acl - delete aci, check default, DM deleting ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=gfarmer, ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search_aci , 'changetype' : 'delete' } 'Privileges: Directory Manager: modify-acl - delete aci, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-modify-acl' , 'changetype' : 'add' } 'Privileges: Directory Manager: modify-acl - delete aci, DM delete ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=abergin, ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search2_aci , 'changetype' : 'delete' , 'expectedRC' : 50 } 'Privileges: Directory Manager: modify-acl - delete aci, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-modify-acl' , 'changetype' : 'delete' } { 'returncode' : RC , 'result' : STAXResult } 'Privileges: Directory Manager: config-read, check default privilege, DM searching cn=config' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'cn=config' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'ds-cfg-check-schema' , 'extraParams' : '-s base' } { 'returnString' : returnString , 'testString' : 'dn: cn=config' } { 'returnString' : returnString , 'testString' : 'ds-cfg-check-schema:' } 'Privileges: Directory Manager: config-read, alternate root removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-read' , 'changetype' : 'add' } 'Privileges: Directory Manager: config-read, DM searching cn=config' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'cn=config' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'ds-cfg-check-schema' , 'extraParams' : '-s base' , 'expectedRC' : 50 } 'Privileges: Directory Manager: config-read, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-read' , 'changetype' : 'delete' } 'Privileges: Directory Manager: config-read, DM searching cn=config' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'cn=config' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'ds-cfg-check-schema' , 'extraParams' : '-s base' } { 'returnString' : returnString , 'expectedString' : 'dn: cn=config' } 'Privileges: Directory Manager: config-write, check default privilege, DM modifying cn=config' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=config' , 'attributeName' : 'ds-cfg-check-schema' , 'newAttributeValue' : 'true' , 'changetype' : 'replace' } 'Privileges: Directory Manager: config-write, alternate root user removing read privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-read' , 'changetype' : 'add' } 'Privileges: Directory Manager: config-write, DM modifying cn=config' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=config' , 'attributeName' : 'ds-cfg-check-schema' , 'newAttributeValue' : 'true' , 'changetype' : 'replace' , 'expectedRC' : 50 } 'Privileges: Directory Manager: config-write, alternate root user removing write privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-write' , 'changetype' : 'add' } 'Privileges: Directory Manager: config-write, DM modifying cn=config' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=config' , 'attributeName' : 'ds-cfg-check-schema' , 'newAttributeValue' : 'true' , 'changetype' : 'replace' , 'expectedRC' : 50 } 'Privileges: Directory Manager: config-write, alternate root user putting back read privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-read' , 'changetype' : 'delete' } 'Privileges: Directory Manager: config-write, DM modifying cn=config' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=config' , 'attributeName' : 'ds-cfg-check-schema' , 'newAttributeValue' : 'true' , 'changetype' : 'replace' , 'expectedRC' : 50 } 'Privileges: Directory Manager: config-write, alternate root user putting back write privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-write' , 'changetype' : 'delete' } 'Privileges: Directory Manager: config-write, DM modifying cn=config' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=config' , 'attributeName' : 'ds-cfg-check-schema' , 'newAttributeValue' : 'true' , 'changetype' : 'replace' } { 'returncode' : RC , 'result' : STAXResult } 'Privileges: Directory Manager: config-write - add global aci, check default, DM adding global ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global_aci , 'changetype' : 'add' } 'Privileges: Directory Manager: config-write - add global aci, alternate root user removing config-read privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-read' , 'changetype' : 'add' } 'Privileges: Directory Manager: config-write - add global aci, DM adding ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global2_aci , 'changetype' : 'add' , 'expectedRC' : 50 } 'Privileges: Directory Manager: config-write - add global aci, alternate user removing config-write privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-write' , 'changetype' : 'add' } 'Privileges: Directory Manager: config-write - add global aci, alternate root user putting back config-read privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-read' , 'changetype' : 'delete' } 'Privileges: Directory Manager: config-write - add global aci, DM adding global ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global2_aci , 'changetype' : 'add' , 'expectedRC' : 50 } 'Privileges: Directory Manager: config-write - add global aci, alternate root user putting back config-write privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-config-write' , 'changetype' : 'delete' } 'Privileges: Directory Manager: config-write - add global aci, DM adding global ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global2_aci , 'changetype' : 'add' } 'Privileges: Directory Manager: config-write - add global aci, alternate root user deleting write global ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global_aci , 'changetype' : 'delete' } 'Privileges: Directory Manager: config-write - add global aci, alternate root user deleting write global ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'cn=Access Control Handler,cn=config' , 'attributeName' : 'ds-cfg-global-aci' , 'newAttributeValue' : global2_aci , 'changetype' : 'delete' } { 'returncode' : RC , 'result' : STAXResult } 'Privileges: Directory Manager: password-reset, check default privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=tmason, ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'userpassword' , 'newAttributeValue' : 'pickles' , 'changetype' : 'replace' } 'Privileges: Directory Manager: password-reset, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-password-reset' , 'changetype' : 'add' } 'Privileges: Directory Manager: password-reset, DM resetting password' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=tmason, ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'userpassword' , 'newAttributeValue' : 'pickles' , 'changetype' : 'replace' , 'expectedRC' : 50 } 'Privileges: Directory Manager: password-reset, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-password-reset' , 'changetype' : 'delete' } 'Privileges: Directory Manager: password-reset, DM resetting password' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=tmason, ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'userpassword' , 'newAttributeValue' : 'pickles' , 'changetype' : 'replace' } { 'returncode' : RC , 'result' : STAXResult } 'Privileges: Directory Manager: update-schema, alternate root user adding entry that users new object class' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'entryToBeAdded' : '%s/privileges/add_entry_with_new_objclass.ldif' % logsRemoteDataDir , 'expectedRC' : 65 } 'Privileges: Directory Manager: update-schema, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-update-schema' , 'changetype' : 'add' } 'Privileges: Directory Manager: update-schema, DM adding new schema object' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/privileges/addmozobj.ldif' % logsRemoteDataDir , 'expectedRC' : 50 } 'Privileges: Directory Manager: update-schema, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-update-schema' , 'changetype' : 'delete' } 'Privileges: Directory Manager: update-schema, DM adding new schema object' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/privileges/addmozobj.ldif' % logsRemoteDataDir , 'expectedRC' : 0 } 'Privileges: Directory Manager: update-schema, alternate root user adding entry that users new object class' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'entryToBeAdded' : '%s/privileges/add_entry_with_new_objclass.ldif' % logsRemoteDataDir , 'expectedRC' : 0 } 'Privileges: Directory Manager: update-schema, alternate root user searching entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'dsBaseDN' : 'uid=sfish,ou=People,o=Privileges Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'uid'} { 'returnString' : returnString , 'testString' : 'dn: uid=sfish,ou=People,o=Privileges Tests' } { 'returnString' : returnString , 'expectedString' : 'uid: sfish' } 'Privileges: Directory Manager: privilege-change, preamble, alternate root user adding write ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : write_aci , 'changetype' : 'add' } 'Privileges: Directory Manager: privilege-change, alternate root user removing privilege from DM' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-privilege-change' , 'changetype' : 'add' } 'Privileges: Directory Manager: privilege-change, DM adding privilege to second user' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=buser,o=Privileges Tests,dc=example,dc=com' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : 'modify-acl' , 'changetype' : 'add' , 'expectedRC' : 50 } 'Privileges: Directory Manager: privilege-change, alternate root user putting back privilege to DM' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-privilege-change' , 'changetype' : 'delete' } 'Privileges: Directory Manager: privilege-change, DM adding privilege to second user' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=buser,o=Privileges Tests,dc=example,dc=com' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : 'modify-acl' , 'changetype' : 'add' } 'Privileges: Directory Manager: privilege-change, second user adding ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=buser,o=Privileges Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'DNToModify' : 'ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search_aci , 'changetype' : 'add' } 'Privileges: Directory Manager: privilege-change, DM removing privilege to second user' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'uid=buser,o=Privileges Tests,dc=example,dc=com' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : 'modify-acl' , 'changetype' : 'delete' } 'Privileges: Directory Manager: privilege-change, alternate root user deleting ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'ou=People, o=Privileges Tests, dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : search_aci , 'changetype' : 'delete' } 'Privileges: Directory Manager: privilege-change, alternate root user deleting write ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : write_aci , 'changetype' : 'delete' } { 'returncode' : RC , 'result' : STAXResult } 'Privileges: Directory Manager: server-shutdown, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-server-shutdown' , 'changetype' : 'add' } 'Privileges: Directory Manager: server-shutdown, user adding server shutdown task' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST, 'dsInstancePort' : DIRECTORY_INSTANCE_PORT, 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'taskID' : STAXCurrentTestcase, } 'Privileges: Directory Manager: server-shutdown, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-server-shutdown' , 'changetype' : 'delete' } 'Privileges: Directory Manager: server-shutdown, user adding server shutdown task' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST, 'dsInstancePort' : DIRECTORY_INSTANCE_PORT, 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'taskID' : STAXCurrentTestcase, } 'Start DS to run on port %s' % (DIRECTORY_INSTANCE_PORT) { 'location' : STAF_REMOTE_HOSTNAME } { 'returncode' : RC , 'result' : STAXResult } { 'noOfLoops' : 5 , 'noOfMilliSeconds' : 2000 } 'Privileges: Directory Manager: server-shutdown, DM searching entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'dsBaseDN' : 'uid=scarter,ou=People,o=Privileges Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'cn sn uid'} { 'returnString' : returnString , 'expectedString' : 'dn: uid=scarter,ou=People,o=Privileges Tests' } 'Privileges: Directory Manager: server-restart, alternate root user removing privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-server-restart' , 'changetype' : 'add' } 'Privileges: Directory Manager: server-restart, DM adding server restart task' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST, 'dsInstancePort' : DIRECTORY_INSTANCE_PORT, 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'taskID' : STAXCurrentTestcase, } 'Privileges: Directory Manager: server-restart, alternate root user putting back privilege' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'cn=Aroot' , 'dsInstancePswd' : 'PrivsRule' , 'DNToModify' : 'cn=Directory Manager,cn=Root DNs,cn=config' , 'attributeName' : 'ds-privilege-name' , 'newAttributeValue' : '-server-restart' , 'changetype' : 'delete' } 'Privileges: Directory Manager: server-restart, DM adding server restart task' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'taskID' : STAXCurrentTestcase } { 'returncode' : RC , 'result' : STAXResult }