'ACI: Targetcontrol: Preamble - Removing Search Global ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'aciValue' : GLOBAL_ACI_SEARCH , 'opType' : 'remove' } { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : allow_aci , 'changetype' : 'add' } 'ACI: Targetcontrol: Preamble - Admin adding get effective rights ACI,\n %s' % curr_aci { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/aci/aci_targetcontrol/%s' % (logsRemoteDataDir,curr_aci_ldif_file) } { 'returncode' : RC , 'result' : STAXResult } 'ACI: Targetcontrol: Basic - search, preamble adding aci,\n %s' % curr_aci { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/aci/aci_targetcontrol/%s' % (logsRemoteDataDir,curr_aci_ldif_file) } 'ACI: Targetcontrol: Basic - search, user searching targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'uid aclRights roomnumber' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' } { 'returnString' : returnString , 'testString' : 'entryLevel: add:0,delete:0,read:1,write:0,proxy:0' , 'expectedResult' : '1' } { 'returnString' : returnString , 'testString' : 'attributeLevel;uid: search:1,read:0,compare:0,write:0,selfwrite_add:0,selfwrite_delete:0,proxy:0' , 'expectedResult' : '1' } { 'returnString' : returnString , 'testString' : 'attributeLevel;roomnumber: search:1,read:0,compare:0,write:0,selfwrite_add:0,selfwrite_delete:0,proxy:0' , 'expectedResult' : '1' } 'ACI: Targetcontrol: Basic - search, user searching non-targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'aclRights' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' } { 'returnString' : returnString , 'testString' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' , 'expectedResult' : '0' } 'ACI: Targetcontrol: Basic - search, admin deleting aci' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/aci/aci_targetcontrol/del_aci.ldif' % logsRemoteDataDir } 'ACI: Targetcontrol: Basic - search, user searching previously targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'aclRights' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' } { 'returnString' : returnString , 'testString' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' } { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : deny_aci , 'changetype' : 'add' } 'ACI: Targetcontrol: Basic - search, preamble adding aci,\n %s' % curr_aci { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/aci/aci_targetcontrol/%s' % (logsRemoteDataDir,curr_aci_ldif_file) } 'ACI: Targetcontrol: Basic - search, user searching targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'uid aclRights roomnumber' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' , 'expectedRC' : 50 } { 'returnString' : returnString , 'testString' : 'entryLevel:' , 'expectedResult' : '0' } { 'returnString' : returnString , 'testString' : 'attributeLevel;' , 'expectedResult' : '0' } { 'returnString' : returnString , 'testString' : 'insufficient access rights' , 'expectedResult' : '1' } 'ACI: Targetcontrol: Basic - search, user searching non-targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'aclRights' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' , 'expectedRC' : 50 } { 'returnString' : returnString , 'testString' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' , 'expectedResult' : '0' } 'ACI: Targetcontrol: Basic - search, admin deleting aci' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/aci/aci_targetcontrol/del_aci.ldif' % logsRemoteDataDir } 'ACI: Targetcontrol: Basic - search, user searching previously targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'aclRights' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' , 'expectedRC' : 50 } { 'returnString' : returnString , 'testString' : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' , 'expectedResult' : '0' } { 'returnString' : returnString , 'testString' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' , 'expectedResult' : '0' } { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : deny_aci , 'changetype' : 'delete' } 'ACI: Targetcontrol: Basic - search, preamble adding aci,\n %s' % curr_aci { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/aci/aci_targetcontrol/%s' % (logsRemoteDataDir,curr_aci_ldif_file) } 'ACI: Targetcontrol: Basic - search, user searching targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'uid aclRights roomnumber' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' } { 'returnString' : returnString , 'testString' : 'entryLevel: add:0,delete:0,read:1,write:0,proxy:0' , 'expectedResult' : '1' } { 'returnString' : returnString , 'testString' : 'attributeLevel;uid: search:1,read:0,compare:0,write:0,selfwrite_add:0,selfwrite_delete:0,proxy:0' , 'expectedResult' : '1' } { 'returnString' : returnString , 'testString' : 'attributeLevel;roomnumber: search:1,read:0,compare:0,write:0,selfwrite_add:0,selfwrite_delete:0,proxy:0' , 'expectedResult' : '1' } 'ACI: Targetcontrol: Basic - search, user searching non-targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'aclRights' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' } { 'returnString' : returnString , 'testString' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' , 'expectedResult' : '0' } 'ACI: Targetcontrol: Basic - search, admin deleting aci' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/aci/aci_targetcontrol/del_aci.ldif' % logsRemoteDataDir } 'ACI: Targetcontrol: Basic - search, user searching previously targeted entry' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : 'uid=auser,ou=people,o=ACI Tests,dc=example,dc=com' , 'dsInstancePswd' : 'ACIRules' , 'dsBaseDN' : 'uid=scarter,ou=People,ou=aci branch,o=ACI Tests,dc=example,dc=com' , 'dsFilter' : 'objectclass=*' , 'attributes' : 'aclRights' , 'extraParams' : '-T -g "dn: uid=auser,ou=people,o=ACI Tests,dc=example,dc=com" -e uid -e roomnumber -e aclRights' } { 'returnString' : returnString , 'testString' : 'uid=scarter,ou=People,ou=non-aci branch,o=ACI Tests,dc=example,dc=com' } 'ACI: Targetcontrol: Postamble - Admin deleting get effective rights ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'entryToBeModified' : '%s/aci/aci_targetcontrol/del_effrights_aci.ldif' % (logsRemoteDataDir) } { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'DNToModify' : 'dc=example,dc=com' , 'attributeName' : 'aci' , 'newAttributeValue' : allow_aci , 'changetype' : 'delete' } 'ACI: Targetcontrol: Preamble - putting back Search Global ACI' { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , 'dsInstancePort' : DIRECTORY_INSTANCE_PORT , 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , 'aciValue' : GLOBAL_ACI_SEARCH , 'opType' : 'add' }