test.ref 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480
  1. #
  2. # BEGIN COPYRIGHT BLOCK
  3. # This Program is free software; you can redistribute it and/or modify it under
  4. # the terms of the GNU General Public License as published by the Free Software
  5. # Foundation; version 2 of the License.
  6. #
  7. # This Program is distributed in the hope that it will be useful, but WITHOUT
  8. # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
  9. # FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
  10. #
  11. # You should have received a copy of the GNU General Public License along with
  12. # this Program; if not, write to the Free Software Foundation, Inc., 59 Temple
  13. # Place, Suite 330, Boston, MA 02111-1307 USA.
  14. #
  15. # In addition, as a special exception, Red Hat, Inc. gives You the additional
  16. # right to link the code of this Program with code not covered under the GNU
  17. # General Public License ("Non-GPL Code") and to distribute linked combinations
  18. # including the two, subject to the limitations in this paragraph. Non-GPL Code
  19. # permitted under this exception must only link to the code of this Program
  20. # through those well defined interfaces identified in the file named EXCEPTION
  21. # found in the source code files (the "Approved Interfaces"). The files of
  22. # Non-GPL Code may instantiate templates or use macros or inline functions from
  23. # the Approved Interfaces without causing the resulting work to be covered by
  24. # the GNU General Public License. Only Red Hat, Inc. may make changes or
  25. # additions to the list of Approved Interfaces. You must obey the GNU General
  26. # Public License in all respects for all of the Program code and other code used
  27. # in conjunction with the Program except the Non-GPL Code covered by this
  28. # exception. If you modify this file, you may extend this exception to your
  29. # version of the file, but you are not obligated to do so. If you do not wish to
  30. # provide this exception without modification, you must delete this exception
  31. # statement from your version and license this file solely under the GPL without
  32. # exception.
  33. #
  34. #
  35. # Copyright (C) 2001 Sun Microsystems, Inc. Used by permission.
  36. # Copyright (C) 2005 Red Hat, Inc.
  37. # All rights reserved.
  38. # END COPYRIGHT BLOCK
  39. #
  40. Start of test: ./auth 1 "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US" "cn=Directory Administrators, o=Ace Industry, c=US"
  41. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  42. groupdn: "cn=Directory Administrators, o=Ace Industry, c=US"
  43. base: "cn=Directory Administrators, o=Ace Industry, c=US"
  44. filter: "(| (uniquemember=cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US) (member=cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US))"
  45. scope: "LDAP_SCOPE_BASE"
  46. Authentication succeeded.
  47. Start of test: ./auth 1 "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US" "cn=Directory Administrators, o=Ace Industry, c=US"
  48. userdn: "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US"
  49. groupdn: "cn=Directory Administrators, o=Ace Industry, c=US"
  50. base: "cn=Directory Administrators, o=Ace Industry, c=US"
  51. filter: "(| (uniquemember=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US) (member=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US))"
  52. scope: "LDAP_SCOPE_BASE"
  53. ldap_search_s: Entry not found
  54. Find parent groups of "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US"
  55. base: "o=Ace Industry, c=US"
  56. filter: "(& (| (uniquemember=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US) (member=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US)) (| (objectclass=groupofuniquenames) (objectclass=groupofnames)))"
  57. scope: "LDAP_SCOPE_SUBTREE"
  58. ldap_search_s: Entry not found
  59. Authentication failed.
  60. Start of test: ./auth 2 "hmiller" "cn=Directory Administrators, o=Ace Industry, c=US"
  61. uid: "hmiller"
  62. groupdn: "cn=Directory Administrators, o=Ace Industry, c=US"
  63. base: "o=Ace Industry, c=US"
  64. filter: "uid=hmiller"
  65. scope: "LDAP_SCOPE_SUBTREE"
  66. base: "cn=Directory Administrators, o=Ace Industry, c=US"
  67. filter: "(| (uniquemember=cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US) (member=cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US))"
  68. scope: "LDAP_SCOPE_BASE"
  69. Authentication succeeded.
  70. Start of test: ./auth 2 "scarter" "cn=Directory Administrators, o=Ace Industry, c=US"
  71. uid: "scarter"
  72. groupdn: "cn=Directory Administrators, o=Ace Industry, c=US"
  73. base: "o=Ace Industry, c=US"
  74. filter: "uid=scarter"
  75. scope: "LDAP_SCOPE_SUBTREE"
  76. base: "cn=Directory Administrators, o=Ace Industry, c=US"
  77. filter: "(| (uniquemember=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US) (member=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US))"
  78. scope: "LDAP_SCOPE_BASE"
  79. ldap_search_s: Entry not found
  80. Find parent groups of "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US"
  81. base: "o=Ace Industry, c=US"
  82. filter: "(& (| (uniquemember=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US) (member=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US)) (| (objectclass=groupofuniquenames) (objectclass=groupofnames)))"
  83. scope: "LDAP_SCOPE_SUBTREE"
  84. ldap_search_s: Entry not found
  85. Authentication failed.
  86. Start of test: ./auth 3 "hmiller" "Directory Administrators"
  87. uid: "hmiller"
  88. groupid: "Directory Administrators"
  89. base: "o=Ace Industry, c=US"
  90. filter: "(& (cn=Directory Administrators) (| (objectclass=groupofuniquenames) (objectclass=groupofnames)))"
  91. scope: "LDAP_SCOPE_SUBTREE"
  92. base: "o=Ace Industry, c=US"
  93. filter: "uid=hmiller"
  94. scope: "LDAP_SCOPE_SUBTREE"
  95. base: "cn=Directory Administrators, o=Ace Industry, c=US"
  96. filter: "(| (uniquemember=cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US) (member=cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US))"
  97. scope: "LDAP_SCOPE_BASE"
  98. Authentication succeeded.
  99. Start of test: ./auth 3 "scarter" "Directory Administrators"
  100. uid: "scarter"
  101. groupid: "Directory Administrators"
  102. base: "o=Ace Industry, c=US"
  103. filter: "(& (cn=Directory Administrators) (| (objectclass=groupofuniquenames) (objectclass=groupofnames)))"
  104. scope: "LDAP_SCOPE_SUBTREE"
  105. base: "o=Ace Industry, c=US"
  106. filter: "uid=scarter"
  107. scope: "LDAP_SCOPE_SUBTREE"
  108. base: "cn=Directory Administrators, o=Ace Industry, c=US"
  109. filter: "(| (uniquemember=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US) (member=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US))"
  110. scope: "LDAP_SCOPE_BASE"
  111. ldap_search_s: Entry not found
  112. Find parent groups of "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US"
  113. base: "o=Ace Industry, c=US"
  114. filter: "(& (| (uniquemember=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US) (member=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US)) (| (objectclass=groupofuniquenames) (objectclass=groupofnames)))"
  115. scope: "LDAP_SCOPE_SUBTREE"
  116. ldap_search_s: Entry not found
  117. Authentication failed.
  118. Start of test: ./auth 4 "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US" "Directory Administrators"
  119. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  120. groupid: "Directory Administrators"
  121. base: "o=Ace Industry, c=US"
  122. filter: "(& (cn=Directory Administrators) (| (objectclass=groupofuniquenames) (objectclass=groupofnames)))"
  123. scope: "LDAP_SCOPE_SUBTREE"
  124. base: "cn=Directory Administrators, o=Ace Industry, c=US"
  125. filter: "(| (uniquemember=cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US) (member=cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US))"
  126. scope: "LDAP_SCOPE_BASE"
  127. Authentication succeeded.
  128. Start of test: ./auth 4 "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US" "Directory Administrators"
  129. userdn: "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US"
  130. groupid: "Directory Administrators"
  131. base: "o=Ace Industry, c=US"
  132. filter: "(& (cn=Directory Administrators) (| (objectclass=groupofuniquenames) (objectclass=groupofnames)))"
  133. scope: "LDAP_SCOPE_SUBTREE"
  134. base: "cn=Directory Administrators, o=Ace Industry, c=US"
  135. filter: "(| (uniquemember=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US) (member=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US))"
  136. scope: "LDAP_SCOPE_BASE"
  137. ldap_search_s: Entry not found
  138. Find parent groups of "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US"
  139. base: "o=Ace Industry, c=US"
  140. filter: "(& (| (uniquemember=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US) (member=cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US)) (| (objectclass=groupofuniquenames) (objectclass=groupofnames)))"
  141. scope: "LDAP_SCOPE_SUBTREE"
  142. ldap_search_s: Entry not found
  143. Authentication failed.
  144. Start of test: ./auth 5 "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US" "[email protected]"
  145. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  146. attrFilter: "[email protected]"
  147. base: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  148. filter: "[email protected]"
  149. scope: "LDAP_SCOPE_BASE"
  150. Authentication succeeded.
  151. Start of test: ./auth 5 "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US" "[email protected]"
  152. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  153. attrFilter: "[email protected]"
  154. base: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  155. filter: "[email protected]"
  156. scope: "LDAP_SCOPE_BASE"
  157. ldap_search_s: Entry not found
  158. Authentication failed.
  159. Start of test: ./auth 5 "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US" "[email protected]"
  160. userdn: "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US"
  161. attrFilter: "[email protected]"
  162. base: "cn=Sam Carter, ou=Accounting, o=Ace Industry, c=US"
  163. filter: "[email protected]"
  164. scope: "LDAP_SCOPE_BASE"
  165. ldap_search_s: Entry not found
  166. Authentication failed.
  167. Start of test: ./auth 6 "hmiller" "[email protected]"
  168. uid: "hmiller"
  169. attrFilter: "[email protected]"
  170. base: "o=Ace Industry, c=US"
  171. filter: "(& (uid=hmiller) ([email protected]))"
  172. scope: "LDAP_SCOPE_SUBTREE"
  173. Authentication succeeded.
  174. Start of test: ./auth 6 "hmiller" "[email protected]"
  175. uid: "hmiller"
  176. attrFilter: "[email protected]"
  177. base: "o=Ace Industry, c=US"
  178. filter: "(& (uid=hmiller) ([email protected]))"
  179. scope: "LDAP_SCOPE_SUBTREE"
  180. ldap_search_s: Entry not found
  181. Authentication failed.
  182. Start of test: ./auth 6 "scarter" "[email protected]"
  183. uid: "scarter"
  184. attrFilter: "[email protected]"
  185. base: "o=Ace Industry, c=US"
  186. filter: "(& (uid=scarter) ([email protected]))"
  187. scope: "LDAP_SCOPE_SUBTREE"
  188. ldap_search_s: Entry not found
  189. Authentication failed.
  190. Start of test: ./auth 7 "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US" "hillock"
  191. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  192. password: "hillock"
  193. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  194. password: "hillock"
  195. Authentication succeeded.
  196. Start of test: ./auth 7 "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US" "garbage"
  197. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  198. password: "garbage"
  199. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  200. password: "garbage"
  201. ldap_simple_bind_s: Invalid credentials
  202. Authentication failed.
  203. Start of test: ./auth 8 "hmiller" "hillock"
  204. uid: "hmiller"
  205. password: "hillock"
  206. base: "o=Ace Industry, c=US"
  207. filter: "uid=hmiller"
  208. scope: "LDAP_SCOPE_SUBTREE"
  209. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  210. password: "hillock"
  211. Authentication succeeded.
  212. Start of test: ./auth 8 "hmiller" "garbage"
  213. uid: "hmiller"
  214. password: "garbage"
  215. base: "o=Ace Industry, c=US"
  216. filter: "uid=hmiller"
  217. scope: "LDAP_SCOPE_SUBTREE"
  218. userdn: "cn=Harry Miller, ou=Human Resources, o=Ace Industry, c=US"
  219. password: "garbage"
  220. ldap_simple_bind_s: Invalid credentials
  221. Authentication failed.
  222. Start of test: ./auth 9 "o=Ace Industry, c=US" "cn=Kirsten Vaughan, ou=Human Resources, o=Ace Industry, c=US"
  223. Cert Map issuer DN: "o=Ace Industry, c=US"
  224. Cert Map subject DN: "cn=Kirsten Vaughan, ou=Human Resources, o=Ace Industry, c=US"
  225. plugin_init_fn called.
  226. plugin_init_fn called.
  227. plugin_mapping_fn called.
  228. Value of attrs from subject DN & issuer DN:
  229. Cert: "cn=Kirsten Vaughan, ou=Human Resources, o=Ace Industry, c=US"
  230. subjdn: "cn=Kirsten Vaughan, ou=Human Resources, o=Ace Industry, c=US"
  231. cn: "Kirsten Vaughan"
  232. ou: "Human Resources"
  233. o: "Ace Industry"
  234. c: "US"
  235. issuerDN: "o=Ace Industry, c=US"
  236. cn: *** Empty ***
  237. ou: *** Empty ***
  238. o: "Ace Industry"
  239. c: "US"
  240. plugin_search_fn called.
  241. base: "ou=Human Resources, o=Ace Industry, c=US"
  242. filter: "cn=Kirsten Vaughan"
  243. scope: "LDAP_SCOPE_BASE"
  244. ldap_search_s: Entry not found
  245. base: "ou=Human Resources, o=Ace Industry, c=US"
  246. filter: "cn=Kirsten Vaughan"
  247. scope: "LDAP_SCOPE_SUBTREE"
  248. plugin_verify_fn called.
  249. Matched entry to cert: "cn=Kirsten Vaughan, ou=Human Resources, o=Ace Industry, c=US"
  250. Authentication succeeded.
  251. Start of test: ./auth 10 "cn=Foo Bar, o=Fedora Project, c=US" "foobar"
  252. Config file written: config_out.conf
  253. binddn from config file: "cn=Foo Bar, o=Fedora Project, c=US"
  254. bindpw from config file: "foobar"
  255. Config file test succeeded
  256. Authentication succeeded.
  257. Start of test: ./auth 11 "dblist.conf" "ignore"
  258. dbname[0] = "default"
  259. dbname[1] = "default1"
  260. dbname[2] = "default2"
  261. dbname[3] = "default3"
  262. dbname[4] = "default4"
  263. dbname[5] = "default5"
  264. dbname[6] = "default6"
  265. Authentication succeeded.
  266. Start of test: ./auth 12 "certmap.new" "certmap.conf"
  267. plugin_init_fn called.
  268. plugin_init_fn called.
  269. Authentication succeeded.
  270. # Comments before any certmap directive - line 1
  271. # Comments before any certmap directive - line 2
  272. # Comments before any certmap directive - line 3
  273. # Comments before any certmap directive - line 4
  274. # Comments before any certmap directive - line 5
  275. # Comments before any certmap directive - line 6
  276. certmap default default
  277. #default:DNComps o, ou ,c
  278. #default:FilterComps cn
  279. certmap default1 o=Fedora Project, c=US
  280. default1:library ./plugin.so
  281. default1:InitFn plugin_init_fn
  282. default1:DNComps ou o c
  283. default1:FilterComps l
  284. #default1:verifycert
  285. # Following line has trailing spaces
  286. certmap default2 o=Ace Industry, c=US
  287. default2:InitFn plugin_init_fn
  288. default2:DNComps cn o ou c
  289. default2:FilterComps l
  290. default2:verifycert on
  291. # Comments before any certmap directive - line 1
  292. # Comments before any certmap directive - line 2
  293. # Comments before any certmap directive - line 3
  294. # Comments before any certmap directive - line 4
  295. # Comments before any certmap directive - line 5
  296. # Comments before any certmap directive - line 6
  297. certmap default default
  298. certmap default1 o=Fedora Project, c=US
  299. default1:library ./plugin.so
  300. default1:InitFn plugin_init_fn
  301. default1:DNComps ou o c
  302. default1:FilterComps l
  303. certmap default2 o=Ace Industry, c=US
  304. default2:InitFn plugin_init_fn
  305. default2:DNComps cn o ou c
  306. default2:FilterComps l
  307. default2:verifycert on
  308. Start of test: ./auth 13 "certmap.new" "certmap.conf"
  309. plugin_init_fn called.
  310. plugin_init_fn called.
  311. Authentication succeeded.
  312. # Comments before any certmap directive - line 1
  313. # Comments before any certmap directive - line 2
  314. # Comments before any certmap directive - line 3
  315. # Comments before any certmap directive - line 4
  316. # Comments before any certmap directive - line 5
  317. # Comments before any certmap directive - line 6
  318. certmap default default
  319. #default:DNComps o, ou ,c
  320. #default:FilterComps cn
  321. certmap default1 o=Fedora Project, c=US
  322. default1:library ./plugin.so
  323. default1:InitFn plugin_init_fn
  324. default1:DNComps ou o c
  325. default1:FilterComps l
  326. #default1:verifycert
  327. # Following line has trailing spaces
  328. certmap default2 o=Ace Industry, c=US
  329. default2:InitFn plugin_init_fn
  330. default2:DNComps cn o ou c
  331. default2:FilterComps l
  332. default2:verifycert on
  333. # Comments before any certmap directive - line 1
  334. # Comments before any certmap directive - line 2
  335. # Comments before any certmap directive - line 3
  336. # Comments before any certmap directive - line 4
  337. # Comments before any certmap directive - line 5
  338. # Comments before any certmap directive - line 6
  339. certmap default default
  340. certmap default2 o=Ace Industry, c=US
  341. default2:InitFn plugin_init_fn
  342. default2:DNComps cn o ou c
  343. default2:FilterComps l
  344. default2:verifycert on
  345. Start of test: ./auth 14 "certmap.new" "certmap.conf"
  346. plugin_init_fn called.
  347. plugin_init_fn called.
  348. Authentication succeeded.
  349. # Comments before any certmap directive - line 1
  350. # Comments before any certmap directive - line 2
  351. # Comments before any certmap directive - line 3
  352. # Comments before any certmap directive - line 4
  353. # Comments before any certmap directive - line 5
  354. # Comments before any certmap directive - line 6
  355. certmap default default
  356. #default:DNComps o, ou ,c
  357. #default:FilterComps cn
  358. certmap default1 o=Fedora Project, c=US
  359. default1:library ./plugin.so
  360. default1:InitFn plugin_init_fn
  361. default1:DNComps ou o c
  362. default1:FilterComps l
  363. #default1:verifycert
  364. # Following line has trailing spaces
  365. certmap default2 o=Ace Industry, c=US
  366. default2:InitFn plugin_init_fn
  367. default2:DNComps cn o ou c
  368. default2:FilterComps l
  369. default2:verifycert on
  370. # Comments before any certmap directive - line 1
  371. # Comments before any certmap directive - line 2
  372. # Comments before any certmap directive - line 3
  373. # Comments before any certmap directive - line 4
  374. # Comments before any certmap directive - line 5
  375. # Comments before any certmap directive - line 6
  376. certmap default default
  377. certmap default1 o=Fedora Project, c=US
  378. default1:library ./plugin.so
  379. default1:InitFn plugin_init_fn
  380. default1:DNComps ou o c
  381. default1:FilterComps l
  382. certmap default2 o=Ace Industry, c=US
  383. default2:InitFn plugin_init_fn
  384. default2:DNComps cn o ou c
  385. default2:FilterComps l
  386. default2:verifycert on
  387. certmap newmap o=Mcom Communications, c=US
  388. newmap:prop1 val1
  389. newmap:prop2 val2
  390. newmap:prop3