upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-15 19:34:10 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#9156 Add some ppolicy v10 tests

Browse source
This commit is contained in:
Ondřej Kuzník 2019-10-24 14:14:05 +01:00
parent 16793977ff
commit 373e497b0e
3 changed files with 67 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
tests/data/ppolicy.ldif
View file

@ -27,6 +27,7 @@ pwdCheckQuality: 2
pwdExpireWarning: 10
pwdMaxAge: 30
pwdMinLength: 5
pwdMaxLength: 13
pwdGraceAuthnLimit: 3
pwdAllowUserChange: TRUE
pwdMustChange: TRUE

2
tests/data/slapd-ppolicy.conf
View file

@ -39,6 +39,8 @@ rootpw secret
#ndb#dbname db_1
#ndb#include @DATADIR@/ndb.conf
lastbind on
overlay ppolicy
ppolicy_default "cn=Standard Policy,ou=Policies,dc=example,dc=com"
ppolicy_use_lockout

64
tests/scripts/test022-ppolicy
View file

@ -329,6 +329,18 @@ if test $COUNT != 1 ; then
exit 1
fi
$LDAPPASSWD -h $LOCALHOST -p $PORT1 \
-w $PASS -a $PASS -s passwordthatistoolong \
-D "$USER" -e ppolicy > ${TESTOUT}.2 2>&1
RC=$?
cat ${TESTOUT}.2 >> $TESTOUT
COUNT=`grep "Password is too long for policy" ${TESTOUT}.2 | wc -l`
if test $COUNT != 1 ; then
echo "Control not returned in response"
test $KILLSERVERS != no && kill -HUP $KILLPIDS
exit 1
fi
echo "Testing hashed length requirement..."
$LDAPMODIFY -h $LOCALHOST -p $PORT1 -D "$USER" -w $PASS > \
@ -405,6 +417,58 @@ if test $RC = 0 ; then
exit 1
fi
echo "Testing idle password expiration"
echo "Reconfiguring policy to replace expiration with idle expiration..."
$LDAPMODIFY -v -D "$MANAGERDN" -h $LOCALHOST -p $PORT1 -w $PASSWD >> \
$TESTOUT 2>&1 << EOMODS
dn: cn=Standard Policy, ou=Policies, dc=example, dc=com
changetype: modify
delete: pwdMaxAge
-
add: pwdMaxIdle
pwdMaxIdle: 15
EOMODS
RC=$?
if test $RC != 0 ; then
echo "ldapmodify failed ($RC)!"
test $KILLSERVERS != no && kill -HUP $KILLPIDS
exit $RC
fi
$LDAPSEARCH -e ppolicy -h $LOCALHOST -p $PORT1 -D "$USER" -w $PASS \
-b "$BASEDN" -s base > $SEARCHOUT 2>&1
echo "Waiting 20 seconds for password to expire..."
sleep 20
$LDAPSEARCH -e ppolicy -h $LOCALHOST -p $PORT1 -D "$USER" -w $PASS \
-b "$BASEDN" -s base >> $SEARCHOUT 2>&1
RC=$?
if test $RC != 49 ; then
echo "Password idle expiration failed ($RC)!"
test $KILLSERVERS != no && kill -HUP $KILLPIDS
exit 1
fi
echo "Reverting policy changes..."
$LDAPMODIFY -v -D "$MANAGERDN" -h $LOCALHOST -p $PORT1 -w $PASSWD >> \
$TESTOUT 2>&1 << EOMODS
dn: cn=Standard Policy, ou=Policies, dc=example, dc=com
changetype: modify
delete: pwdMaxIdle
-
add: pwdMaxAge
pwdMaxAge: 30
EOMODS
RC=$?
if test $RC != 0 ; then
echo "ldapmodify failed ($RC)!"
test $KILLSERVERS != no && kill -HUP $KILLPIDS
exit $RC
fi
if test "$BACKLDAP" != "ldapno" && test "$SYNCPROV" != "syncprovno" ; then
echo ""
echo "Setting up policy state forwarding test..."