diff options
author | Andrew Bartlett <abartlet@samba.org> | 2008-06-19 14:53:14 +1000 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2008-06-19 14:53:14 +1000 |
commit | 48100ca5c6ccfda390ca7804ddbb6726e8631428 (patch) | |
tree | 8cd68f64900bc82f05abab8231eaf45102dd61e0 /testprogs | |
parent | 9ea25cacf1c564a485897432b73beebf2e634f55 (diff) | |
download | samba-48100ca5c6ccfda390ca7804ddbb6726e8631428.tar.gz |
Remove old ldap.js test, we have replicated it in python now.
This will soon allow the removal of smbscript, once the samba3sam test
conversion is complete.
Andrew Bartlett
(This used to be commit 60c93b9777d9bd7dce89f9024ba767f5404ac72d)
Diffstat (limited to 'testprogs')
-rwxr-xr-x | testprogs/ejs/ldap.js | 1596 |
1 files changed, 0 insertions, 1596 deletions
diff --git a/testprogs/ejs/ldap.js b/testprogs/ejs/ldap.js deleted file mode 100755 index a5e6ab37c4..0000000000 --- a/testprogs/ejs/ldap.js +++ /dev/null @@ -1,1596 +0,0 @@ -#!/bin/sh -exec smbscript "$0" ${1+"$@"} -/* - test certin LDAP behaviours -*/ - -var ldb = ldb_init(); -var gc_ldb = ldb_init(); - -var options = GetOptions(ARGV, - "POPT_AUTOHELP", - "POPT_COMMON_SAMBA", - "POPT_COMMON_CREDENTIALS"); -if (options == undefined) { - println("Failed to parse options"); - return -1; -} - -libinclude("base.js"); - -if (options.ARGV.length != 1) { - println("Usage: ldap.js <HOST>"); - return -1; -} - -var host = options.ARGV[0]; - -function basic_tests(ldb, gc_ldb, base_dn, configuration_dn, schema_dn) -{ - println("Running basic tests"); - - ldb.del("cn=ldaptestcomputer,cn=computers," + base_dn); - ldb.del("cn=ldaptestcomputer3,cn=computers," + base_dn); - ldb.del("cn=ldaptest2computer,cn=computers," + base_dn); - ldb.del("cn=ldaptestuser,cn=users," + base_dn); - ldb.del("cn=ldaptestuser2,cn=users," + base_dn); - ldb.del("cn=ldaptestuser3,cn=users," + base_dn); - ldb.del("cn=ldaptestuser4,cn=users," + base_dn); - ldb.del("cn=ldaptestuser5,cn=users," + base_dn); - ldb.del("CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn); - ldb.del("cn=ldaptestuser7,cn=users," + base_dn); - ldb.del("CN=ldaptestcontainer2," + base_dn); - ldb.del("cn=ldaptestgroup,cn=users," + base_dn); - ldb.del("cn=ldaptestgroup2,cn=users," + base_dn); - - println("Testing group add with invalid member"); - var ok = ldb.add(" -dn: cn=ldaptestgroup,cn=uSers," + base_dn + " -objectclass: group -member: cn=ldaptestuser,cn=useRs," + base_dn + " -"); - - if (ok.error != 32) { /* LDAP_NO_SUCH_OBJECT */ - println(ok.errstr); - assert(ok.error == 32); - } - - println("Testing user add"); - var ok = ldb.add(" -dn: cn=ldaptestuser,cn=uSers," + base_dn + " -objectclass: user -objectclass: person -cN: LDAPtestUSER -givenname: ldap -sn: testy -"); - if (ok.error != 0) { - ok = ldb.del("cn=ldaptestuser,cn=users," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - ok = ldb.add(" -dn: cn=ldaptestuser,cn=uSers," + base_dn + " -objectclass: user -objectclass: person -cN: LDAPtestUSER -givenname: ldap -sn: testy -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - } - - var ok = ldb.add(" -dn: cn=ldaptestgroup,cn=uSers," + base_dn + " -objectclass: group -member: cn=ldaptestuser,cn=useRs," + base_dn + " -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - var ok = ldb.add(" -dn: cn=ldaptestcomputer,cn=computers," + base_dn + " -objectclass: computer -cN: LDAPtestCOMPUTER -"); - if (ok.error != 0) { - ok = ldb.del("cn=ldaptestcomputer,cn=computers," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - ok = ldb.add(" -dn: cn=ldaptestcomputer,cn=computers," + base_dn + " -objectClass: computer -cn: LDAPtestCOMPUTER -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - } - - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - var ok = ldb.add(" -dn: cn=ldaptest2computer,cn=computers," + base_dn + " -objectClass: computer -cn: LDAPtest2COMPUTER -userAccountControl: 4096 -displayname: ldap testy -"); - if (ok.error != 0) { - ok = ldb.del("cn=ldaptest2computer,cn=computers," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - // assert(ok.error == 0); - } - ok = ldb.add(" -dn: cn=ldaptest2computer,cn=computers," + base_dn + " -objectClass: computer -cn: LDAPtest2COMPUTER -userAccountControl: 4096 -displayname: ldap testy -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - } - - var ok = ldb.add(" -dn: cn=ldaptestcomputer3,cn=computers," + base_dn + " -objectClass: computer -cn: LDAPtest2COMPUTER -"); - if (ok.error != 34) { - println("Did not reject invalid RDN compared with DN: " + ok.errstr); - assert(ok.error == 34); - } - - var ok = ldb.add(" -dn: cn=ldaptestcomputer3,cn=computers," + base_dn + " -objectClass: computer -cn: LDAPtestCOMPUTER3 -sAMAccountType: 805306368 -"); - - if (ok.error != 53) { - println("Did not reject invalid 'sAMAccountType: 805306368': " + ok.errstr); - assert(ok.error == 53); - } - - var ok = ldb.add(" -dn: cn=ldaptestcomputer3,cn=computers," + base_dn + " -objectClass: computer -cn: LDAPtestCOMPUTER3 -userAccountControl: 0 -"); - - if (ok.error != 53) { - println("Did not reject invalid 'userAccountControl: 0': " + ok.errstr); - assert(ok.error == 53); - } - - var ok = ldb.add(" -dn: cn=ldaptestuser7,cn=users," + base_dn + " -objectClass: user -cn: LDAPtestuser7 -userAccountControl: 0 -"); - - if (ok.error != 53) { - println("Did not reject invalid 'userAccountControl: 0': " + ok.errstr); - assert(ok.error == 53); - } - - var ok = ldb.add(" -dn: cn=ldaptestuser7,cn=users," + base_dn + " -objectClass: user -cn: LDAPtestuser7 -userAccountControl: 2 -"); - - if (ok.error != 0) { - println("Did not accept 'userAccountControl: 2': " + ok.errstr); - assert(ok.error == 0); - } - - ldb.del("cn=ldaptestuser7,cn=users," + base_dn); - - var ok = ldb.add(" -dn: cn=ldaptestcomputer3,cn=computers," + base_dn + " -objectclass: computer -cN: LDAPtestCOMPUTER3 -"); - if (ok.error != 0) { - ok = ldb.del("cn=ldaptestcomputer3,cn=computers," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - ok = ldb.add(" -dn: cn=ldaptestcomputer3,cn=computers," + base_dn + " -objectClass: computer -cn: LDAPtestCOMPUTER3 -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - } - - println("Testing ldb.search for (&(cn=ldaptestcomputer3)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestcomputer3)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestcomputer3)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestcomputer3,CN=Computers," + base_dn)); - assert(res.msgs[0].cn == "ldaptestcomputer3"); - assert(res.msgs[0].name == "ldaptestcomputer3"); - assert(res.msgs[0].objectClass[0] == "top"); - assert(res.msgs[0].objectClass[1] == "person"); - assert(res.msgs[0].objectClass[2] == "organizationalPerson"); - assert(res.msgs[0].objectClass[3] == "user"); - assert(res.msgs[0].objectClass[4] == "computer"); - assert(res.msgs[0].objectGUID != undefined); - assert(res.msgs[0].whenCreated != undefined); - assert(res.msgs[0].objectCategory == ("CN=Computer,CN=Schema,CN=Configuration," + base_dn)); - assert(res.msgs[0].primaryGroupID == 513); - assert(res.msgs[0].sAMAccountType == 805306368); - assert(res.msgs[0].userAccountControl == 546); - - ldb.del(res.msgs[0].dn); - - println("Testing attribute or value exists behaviour"); - ok = ldb.modify(" -dn: cn=ldaptest2computer,cn=computers," + base_dn + " -changetype: modify -replace: servicePrincipalName -servicePrincipalName: host/ldaptest2computer -servicePrincipalName: host/ldaptest2computer -servicePrincipalName: cifs/ldaptest2computer -"); - -//LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS - if (ok.error != 20) { - println("Expected error LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS, got :" + ok.errstr); - assert(ok.error == 20); - } - - ok = ldb.modify(" -dn: cn=ldaptest2computer,cn=computers," + base_dn + " -changetype: modify -replace: servicePrincipalName -servicePrincipalName: host/ldaptest2computer -servicePrincipalName: cifs/ldaptest2computer -"); - - if (ok.error != 0) { - println("Failed to replace servicePrincpalName:" + ok.errstr); - assert(ok.error == 20); - } - - ok = ldb.modify(" -dn: cn=ldaptest2computer,cn=computers," + base_dn + " -changetype: modify -add: servicePrincipalName -servicePrincipalName: host/ldaptest2computer -"); - -//LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS - if (ok.error != 20) { - println("Expected error LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS, got :" + ok.errstr); - assert(ok.error == 20); - } - - println("Testing ranged results"); - ok = ldb.modify(" -dn: cn=ldaptest2computer,cn=computers," + base_dn + " -changetype: modify -replace: servicePrincipalName -"); - if (ok.error != 0) { - println("Failed to replace servicePrincpalName:" + ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.modify(" -dn: cn=ldaptest2computer,cn=computers," + base_dn + " -changetype: modify -add: servicePrincipalName -servicePrincipalName: host/ldaptest2computer0 -servicePrincipalName: host/ldaptest2computer1 -servicePrincipalName: host/ldaptest2computer2 -servicePrincipalName: host/ldaptest2computer3 -servicePrincipalName: host/ldaptest2computer4 -servicePrincipalName: host/ldaptest2computer5 -servicePrincipalName: host/ldaptest2computer6 -servicePrincipalName: host/ldaptest2computer7 -servicePrincipalName: host/ldaptest2computer8 -servicePrincipalName: host/ldaptest2computer9 -servicePrincipalName: host/ldaptest2computer10 -servicePrincipalName: host/ldaptest2computer11 -servicePrincipalName: host/ldaptest2computer12 -servicePrincipalName: host/ldaptest2computer13 -servicePrincipalName: host/ldaptest2computer14 -servicePrincipalName: host/ldaptest2computer15 -servicePrincipalName: host/ldaptest2computer16 -servicePrincipalName: host/ldaptest2computer17 -servicePrincipalName: host/ldaptest2computer18 -servicePrincipalName: host/ldaptest2computer19 -servicePrincipalName: host/ldaptest2computer20 -servicePrincipalName: host/ldaptest2computer21 -servicePrincipalName: host/ldaptest2computer22 -servicePrincipalName: host/ldaptest2computer23 -servicePrincipalName: host/ldaptest2computer24 -servicePrincipalName: host/ldaptest2computer25 -servicePrincipalName: host/ldaptest2computer26 -servicePrincipalName: host/ldaptest2computer27 -servicePrincipalName: host/ldaptest2computer28 -servicePrincipalName: host/ldaptest2computer29 -"); - - if (ok.error != 0) { - println("Failed to replace servicePrincpalName:" + ok.errstr); - assert(ok.error == 0); - } - - - var attrs = new Array("servicePrincipalName;range=0-*"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) for servicePrincipalName;range=0-*"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } -// println(res.msgs[0]["servicePrincipalName;range=0-*"].length); - assert(res.msgs[0]["servicePrincipalName;range=0-*"].length == 30); - - var attrs = new Array("servicePrincipalName;range=0-19"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) for servicePrincipalName;range=0-19"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } -// println(res.msgs[0]["servicePrincipalName;range=0-19"].length); - assert(res.msgs[0]["servicePrincipalName;range=0-19"].length == 20); - - var attrs = new Array("servicePrincipalName;range=0-30"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) at servicePrincipalName;range=0-19"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - assert(res.msgs[0]["servicePrincipalName;range=0-*"].length == 30); - - var attrs = new Array("servicePrincipalName;range=0-40"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) at servicePrincipalName;range=0-40"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - assert(res.msgs[0]["servicePrincipalName;range=0-*"].length == 30); - - var attrs = new Array("servicePrincipalName;range=30-40"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) at servicePrincipalName;range=30-40"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - assert(res.msgs[0]["servicePrincipalName;range=30-*"].length == 0); - - var attrs = new Array("servicePrincipalName;range=10-40"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) at servicePrincipalName;range=10-40"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - assert(res.msgs[0]["servicePrincipalName;range=10-*"].length == 20); -// var pos_11 = res.msgs[0]["servicePrincipalName;range=10-*"][18]; - - var attrs = new Array("servicePrincipalName;range=11-40"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) at servicePrincipalName;range=10-*"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - assert(res.msgs[0]["servicePrincipalName;range=11-*"].length == 19); -// println(res.msgs[0]["servicePrincipalName;range=11-*"][18]); -// println(pos_11); -// assert((res.msgs[0]["servicePrincipalName;range=11-*"][18]) == pos_11); - - var attrs = new Array("servicePrincipalName;range=11-15"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) at servicePrincipalName;range=11-15"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - assert(res.msgs[0]["servicePrincipalName;range=11-15"].length == 5); -// assert(res.msgs[0]["servicePrincipalName;range=11-15"][4] == pos_11); - - var attrs = new Array("servicePrincipalName"); - var res = ldb.search("(cn=ldaptest2computer))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (cn=ldaptest2computer) at servicePrincipalName"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } -// println(res.msgs[0]["servicePrincipalName"][18]); -// println(pos_11); - assert(res.msgs[0]["servicePrincipalName"].length == 30); -// assert(res.msgs[0]["servicePrincipalName"][18] == pos_11); - - ok = ldb.add(" -dn: cn=ldaptestuser2,cn=useRs," + base_dn + " -objectClass: person -objectClass: user -cn: LDAPtestUSER2 -givenname: testy -sn: ldap user2 -"); - if (ok.error != 0) { - ok = ldb.del("cn=ldaptestuser2,cn=users," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - ok = ldb.add(" -dn: cn=ldaptestuser2,cn=useRs," + base_dn + " -objectClass: person -objectClass: user -cn: LDAPtestUSER2 -givenname: testy -sn: ldap user2 -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - } - - - println("Testing Ambigious Name Resolution"); -// Testing ldb.search for (&(anr=ldap testy)(objectClass=user)) - var res = ldb.search("(&(anr=ldap testy)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 3) { - println("Could not find (&(anr=ldap testy)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 3); - } - -// Testing ldb.search for (&(anr=testy ldap)(objectClass=user)) - var res = ldb.search("(&(anr=testy ldap)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 2) { - println("Found only " + res.msgs.length + " for (&(anr=testy ldap)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 2); - } - - var res = ldb.search("(&(anr=\"testy ldap\")(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 0) { - println("Found " + res.msgs.length + " for (&(anr=\"testy ldap\")(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 0); - } - -// Testing ldb.search for (&(anr=ldap)(objectClass=user)) - var res = ldb.search("(&(anr=ldap)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 4) { - println("Found only " + res.msgs.length + " for (&(anr=ldap)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 4); - } - -// Testing ldb.search for (&(anr==ldap)(objectClass=user)) - var res = ldb.search("(&(anr==ldap)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Found only " + res.msgs.length + " for (&(anr=ldap)(objectClass=user))"); - println("Could not find (&(anr==ldap)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestuser"); - assert(res.msgs[0].name == "ldaptestuser"); - -// Testing ldb.search for (&(anr=testy)(objectClass=user)) - var res = ldb.search("(&(anr=testy)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 2) { - println("Found only " + res.msgs.length + " for (&(anr=testy)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 2); - } - -// Testing ldb.search for (&(anr=ldap testy)(objectClass=user)) - var res = ldb.search("(&(anr=testy ldap)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 2) { - println("Found only " + res.msgs.length + " for (&(anr=ldap testy)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 2); - } - -// Testing ldb.search for (&(anr==ldap testy)(objectClass=user)) - var res = ldb.search("(&(anr==testy ldap)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Found only " + res.msgs.length + " for (&(anr==ldap testy)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestuser"); - assert(res.msgs[0].name == "ldaptestuser"); - -// Testing ldb.search for (&(anr==testy ldap)(objectClass=user)) - var res = ldb.search("(&(anr==testy ldap)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(anr==testy ldap)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestuser"); - assert(res.msgs[0].name == "ldaptestuser"); - - // Testing ldb.search for (&(anr=testy ldap user)(objectClass=user)) - var res = ldb.search("(&(anr=testy ldap user)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(anr=testy ldap user)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser2,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestuser2"); - assert(res.msgs[0].name == "ldaptestuser2"); - - // Testing ldb.search for (&(anr==testy ldap user2)(objectClass=user)) - var res = ldb.search("(&(anr==testy ldap user2)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(anr==testy ldap user2)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser2,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestuser2"); - assert(res.msgs[0].name == "ldaptestuser2"); - - // Testing ldb.search for (&(anr==ldap user2)(objectClass=user)) - var res = ldb.search("(&(anr==ldap user2)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(anr==ldap user2)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser2,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestuser2"); - assert(res.msgs[0].name == "ldaptestuser2"); - - // Testing ldb.search for (&(anr==not ldap user2)(objectClass=user)) - var res = ldb.search("(&(anr==not ldap user2)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 0) { - println("Must not find (&(anr==not ldap user2)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 0); - } - - // Testing ldb.search for (&(anr=not ldap user2)(objectClass=user)) - var res = ldb.search("(&(anr=not ldap user2)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 0) { - println("Must not find (&(anr=not ldap user2)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 0); - } - - println("Testing Group Modifies"); - ok = ldb.modify(" -dn: cn=ldaptestgroup,cn=users," + base_dn + " -changetype: modify -add: member -member: cn=ldaptestuser2,cn=users," + base_dn + " -member: cn=ldaptestcomputer,cn=computers," + base_dn + " -"); - - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.del("cn=ldaptestuser3,cn=users," + base_dn); - - println("Testing adding non-existent user to a group"); - ok = ldb.modify(" -dn: cn=ldaptestgroup,cn=users," + base_dn + " -changetype: modify -add: member -member: cn=ldaptestuser3,cn=users," + base_dn + " -"); - if (ok.error != 32) { /* LDAP_NO_SUCH_OBJECT */ - println(ok.errstr); - assert(ok.error == 32); - } - - println("Testing Renames"); - - ok = ldb.rename("cn=ldaptestuser2,cn=users," + base_dn, "cn=ldaptestuser3,cn=users," + base_dn); - if (ok.error != 0) { - println("Could not rename cn=ldaptestuser2,cn=users," + base_dn + " into cn=ldaptestuser3,cn=users," + base_dn + ": " + ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.rename("cn=ldaptestuser3,cn=users," + base_dn, "cn=ldaptestuser3,cn=users," + base_dn); - if (ok.error != 0) { - println("Could not rename cn=ldaptestuser3,cn=users," + base_dn + " onto itself: " + ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.rename("cn=ldaptestuser3,cn=users," + base_dn, "cn=ldaptestUSER3,cn=users," + base_dn); - if (ok.error != 0) { - println("Could not rename cn=ldaptestuser3,cn=users," + base_dn + " into cn=ldaptestUSER3,cn=users," + base_dn + ": " + ok.errstr); - assert(ok.error == 0); - } - - println("Testing ldb.search for (&(cn=ldaptestuser3)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestuser3)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser3)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestUSER3,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestUSER3"); - assert(res.msgs[0].name == "ldaptestUSER3"); - - println("Testing ldb.search for (&(&(cn=ldaptestuser3)(userAccountControl=*))(objectClass=user))"); - var res = ldb.search("(&(&(cn=ldaptestuser3)(userAccountControl=*))(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser3)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestUSER3,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestUSER3"); - assert(res.msgs[0].name == "ldaptestUSER3"); - - println("Testing ldb.search for (&(&(cn=ldaptestuser3)(userAccountControl=546))(objectClass=user))"); - var res = ldb.search("(&(&(cn=ldaptestuser3)(userAccountControl=546))(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(&(cn=ldaptestuser3)(userAccountControl=546))(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestUSER3,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestUSER3"); - assert(res.msgs[0].name == "ldaptestUSER3"); - - println("Testing ldb.search for (&(&(cn=ldaptestuser3)(userAccountControl=547))(objectClass=user))"); - var res = ldb.search("(&(&(cn=ldaptestuser3)(userAccountControl=547))(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 0) { - println("Should not find (&(&(cn=ldaptestuser3)(userAccountControl=547))(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 0); - } - -// This is a Samba special, and does not exist in real AD -// println("Testing ldb.search for (dn=CN=ldaptestUSER3,CN=Users," + base_dn + ")"); -// var res = ldb.search("(dn=CN=ldaptestUSER3,CN=Users," + base_dn + ")"); -// if (res.error != 0 || res.msgs.length != 1) { -// println("Could not find (dn=CN=ldaptestUSER3,CN=Users," + base_dn + ")"); -// assert(res.error == 0); -// assert(res.msgs.length == 1); -// } -// assert(res.msgs[0].dn == ("CN=ldaptestUSER3,CN=Users," + base_dn)); -// assert(res.msgs[0].cn == "ldaptestUSER3"); -// assert(res.msgs[0].name == "ldaptestUSER3"); - - println("Testing ldb.search for (distinguishedName=CN=ldaptestUSER3,CN=Users," + base_dn + ")"); - var res = ldb.search("(distinguishedName=CN=ldaptestUSER3,CN=Users," + base_dn + ")"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (dn=CN=ldaptestUSER3,CN=Users," + base_dn + ")"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - assert(res.msgs[0].dn == ("CN=ldaptestUSER3,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestUSER3"); - assert(res.msgs[0].name == "ldaptestUSER3"); - - // ensure we cannot add it again - ok = ldb.add(" -dn: cn=ldaptestuser3,cn=userS," + base_dn + " -objectClass: person -objectClass: user -cn: LDAPtestUSER3 -"); -//LDB_ERR_ENTRY_ALREADY_EXISTS - if (ok.error != 68) { - println("expected error LDB_ERR_ENTRY_ALREADY_EXISTS, got: " + ok.errstr); - assert(ok.error == 68); - } - - // rename back - ok = ldb.rename("cn=ldaptestuser3,cn=users," + base_dn, "cn=ldaptestuser2,cn=users," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - // ensure we cannnot rename it twice - ok = ldb.rename("cn=ldaptestuser3,cn=users," + base_dn, "cn=ldaptestuser2,cn=users," + base_dn); -//LDB_ERR_NO_SUCH_OBJECT - assert(ok.error == 32); - - // ensure can now use that name - ok = ldb.add(" -dn: cn=ldaptestuser3,cn=users," + base_dn + " -objectClass: person -objectClass: user -cn: LDAPtestUSER3 -"); - - // ensure we now cannnot rename - ok = ldb.rename("cn=ldaptestuser2,cn=users," + base_dn, "cn=ldaptestuser3,cn=users," + base_dn); -//LDB_ERR_ENTRY_ALREADY_EXISTS - if (ok.error != 68) { - println("expected error LDB_ERR_ENTRY_ALREADY_EXISTS, got: " + ok.errstr); - assert(ok.error == 68); - } - assert(ok.error == 68); - ok = ldb.rename("cn=ldaptestuser3,cn=users," + base_dn, "cn=ldaptestuser3,cn=configuration," + base_dn); - if (ok.error != 71 && ok.error != 64) { - println("expected error LDB_ERR_ENTRY_ALREADY_EXISTS or LDAP_NAMING_VIOLATION, got: " + ok.errstr); - assert(ok.error == 71 || ok.error == 64); - } - assert(ok.error == 71 || ok.error == 64); - - ok = ldb.rename("cn=ldaptestuser3,cn=users," + base_dn, "cn=ldaptestuser5,cn=users," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.del("cn=ldaptestuser5,cn=users," + base_dn); - - ok = ldb.del("cn=ldaptestgroup2,cn=users," + base_dn); - - ok = ldb.rename("cn=ldaptestgroup,cn=users," + base_dn, "cn=ldaptestgroup2,cn=users," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - println("Testing subtree Renames"); - - ok = ldb.add(" -dn: cn=ldaptestcontainer," + base_dn + " -objectClass: container -"); - - ok = ldb.add(" -dn: CN=ldaptestuser4,CN=ldaptestcontainer," + base_dn + " -objectClass: person -objectClass: user -cn: LDAPtestUSER4 -"); - if (ok.error != 0) { - ok = ldb.del("cn=ldaptestuser4,cn=ldaptestcontainer," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - ok = ldb.add(" -dn: CN=ldaptestuser4,CN=ldaptestcontainer," + base_dn + " -objectClass: person -objectClass: user -cn: LDAPtestUSER4 -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - } - - ok = ldb.modify(" -dn: cn=ldaptestgroup2,cn=users," + base_dn + " -changetype: modify -add: member -member: cn=ldaptestuser4,cn=ldaptestcontainer," + base_dn + " -"); - if (ok.error != 0) { - println("Failure adding ldaptestuser4 to a group"); - println(ok.errstr); - assert(ok.error == 0); - } - - println("Testing ldb.rename of cn=ldaptestcontainer," + base_dn + " to cn=ldaptestcontainer2," + base_dn); - ok = ldb.rename("CN=ldaptestcontainer," + base_dn, "CN=ldaptestcontainer2," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - println("Testing ldb.search for (&(cn=ldaptestuser4)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestuser4)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser4)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - println("Testing subtree ldb.search for (&(cn=ldaptestuser4)(objectClass=user)) in (just renamed from) cn=ldaptestcontainer," + base_dn); - var res = ldb.search("(&(cn=ldaptestuser4)(objectClass=user))", "cn=ldaptestcontainer," + base_dn, ldb.SCOPE_SUBTREE); - if (res.error != 32) { - println(res.errstr); - assert(res.error == 32); - } - - println("Testing one-level ldb.search for (&(cn=ldaptestuser4)(objectClass=user)) in (just renamed from) cn=ldaptestcontainer," + base_dn); - var res = ldb.search("(&(cn=ldaptestuser4)(objectClass=user))", "cn=ldaptestcontainer," + base_dn, ldb.SCOPE_ONELEVEL); - if (res.error != 32) { - println(res.errstr); - assert(res.error == 32); - } - - println("Testing ldb.search for (&(cn=ldaptestuser4)(objectClass=user)) in renamed container"); - var res = ldb.search("(&(cn=ldaptestuser4)(objectClass=user))", "cn=ldaptestcontainer2," + base_dn, ldb.SCOPE_SUBTREE); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser4)(objectClass=user)) under cn=ldaptestcontainer2," + base_dn); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn)); - assert(strupper(res.msgs[0].memberOf[0]) == (strupper("CN=ldaptestgroup2,CN=Users," + base_dn))); - - println("Testing ldb.search for (&(cn=ldaptestgroup2)(objectClass=group)) in cn=users"); - var res_group = ldb.search("(&(cn=ldaptestgroup2)(objectClass=group))", "cn=users," + base_dn, ldb.SCOPE_SUBTREE); - if (res_group.error != 0 || res_group.msgs.length != 1) { - println("Could not find (&(cn=ldaptestgroup2)(objectClass=group)) under cn=users," + base_dn); - assert(res_group.error == 0); - assert(res_group.msgs.length == 1); - } - - println("Testing ldb.search for (member=CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn + ") to check subtree renames and linked attributes"); - var res = ldb.search("(member=CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn + ")", base_dn, ldb.SCOPE_SUBTREE); - if (res.error != 0 || res.msgs.length != 1) { - for (i=0; i < res_group.msgs[0].member.length; i++) { - println("res_group.member[" + i + "]: " + res_group.msgs[0].member[i]); - } - - println("Could not find (member=CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn + "), perhaps linked attributes are not conistant with subtree renames?"); - println("Testing ldb.search for (member=CN=ldaptestuser4,CN=ldaptestcontainer," + base_dn + ") to check if it just hasn't been updated"); - var res2 = ldb.search("(member=CN=ldaptestuser4,CN=ldaptestcontainer," + base_dn + ")", base_dn, ldb.SCOPE_SUBTREE); - if (res2.error != 0 || res2.msgs.length != 1) { - println("Could not find (member=CN=ldaptestuser4,CN=ldaptestcontainer," + base_dn + "), very odd, it wasn't here at all.."); - } - - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - println("Testing ldb.rename (into itself) of cn=ldaptestcontainer2," + base_dn + " to cn=ldaptestcontainer,cn=ldaptestcontainer2," + base_dn); - ok = ldb.rename("cn=ldaptestcontainer2," + base_dn, "cn=ldaptestcontainer,cn=ldaptestcontainer2," + base_dn); - if (ok.error != 53) { /* LDAP_UNWILLING_TO_PERFORM */ - println(ok.errstr); - assert(ok.error == 53); - } - - println("Testing ldb.rename (into non-existent container) of cn=ldaptestcontainer2," + base_dn + " to cn=ldaptestcontainer,cn=ldaptestcontainer3," + base_dn); - ok = ldb.rename("cn=ldaptestcontainer2," + base_dn, "cn=ldaptestcontainer,cn=ldaptestcontainer3," + base_dn); - if (ok.error != 53 && ok.error != 80) { /* LDAP_UNWILLING_TO_PERFORM or LDAP_OTHER*/ - println(ok.errstr); - assert(ok.error == 53 || ok.error == 80); - } - - println("Testing delete (should fail, not a leaf node) of renamed cn=ldaptestcontainer2," + base_dn); - ok = ldb.del("cn=ldaptestcontainer2," + base_dn); - if (ok.error != 66) { /* LDB_ERR_NOT_ALLOWED_ON_NON_LEAF */ - println(ok.errstr); - assert(ok.error == 66); - } - - println("Testing base ldb.search for CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn); - var res = ldb.search("(objectclass=*)", ("CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn), ldb.SCOPE_BASE); - if (res.error == 0 && res.count == 1) { - assert(res.error == 0 && res.count == 1); - } - var res = ldb.search("(cn=ldaptestuser40)", ("CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn), ldb.SCOPE_BASE); - if (res.error == 0 && res.count == 0) { - assert(res.error == 0 && res.count == 0); - } - - println("Testing one-level ldb.search for (&(cn=ldaptestuser4)(objectClass=user)) in cn=ldaptestcontainer2," + base_dn); - var res = ldb.search("(&(cn=ldaptestuser4)(objectClass=user))", "cn=ldaptestcontainer2," + base_dn, ldb.SCOPE_ONELEVEL); - if (res.error == 0 && res.count == 0) { - assert(res.error == 0 && res.count == 0); - } - - println("Testing one-level ldb.search for (&(cn=ldaptestuser4)(objectClass=user)) in cn=ldaptestcontainer2," + base_dn); - var res = ldb.search("(&(cn=ldaptestuser4)(objectClass=user))", "cn=ldaptestcontainer2," + base_dn, ldb.SCOPE_SUBTREE); - if (res.error == 0 && res.count == 0) { - assert(res.error == 0 && res.count == 0); - } - - println("Testing delete of subtree renamed "+("CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn)); - ok = ldb.del(("CN=ldaptestuser4,CN=ldaptestcontainer2," + base_dn)); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - println("Testing delete of renamed cn=ldaptestcontainer2," + base_dn); - ok = ldb.del("cn=ldaptestcontainer2," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.add(" -dn: cn=ldaptestutf8user èùéìòà ,cn=users," + base_dn + " -objectClass: user -"); - if (ok.error != 0) { - ok = ldb.del("cn=ldaptestutf8user èùéìòà ,cn=users," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - ok = ldb.add(" -dn: cn=ldaptestutf8user èùéìòà ,cn=users," + base_dn + " -objectClass: user -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - } - - ok = ldb.add(" -dn: cn=ldaptestutf8user2 èùéìòà ,cn=users," + base_dn + " -objectClass: user -"); - if (ok.error != 0) { - ok = ldb.del("cn=ldaptestutf8user2 èùéìòà ,cn=users," + base_dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - ok = ldb.add(" -dn: cn=ldaptestutf8user2 èùéìòà ,cn=users," + base_dn + " -objectClass: user -"); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - } - - println("Testing ldb.search for (&(cn=ldaptestuser)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestuser)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestuser"); - assert(res.msgs[0].name == "ldaptestuser"); - assert(res.msgs[0].objectClass[0] == "top"); - assert(res.msgs[0].objectClass[1] == "person"); - assert(res.msgs[0].objectClass[2] == "organizationalPerson"); - assert(res.msgs[0].objectClass[3] == "user"); - assert(res.msgs[0].objectGUID != undefined); - assert(res.msgs[0].whenCreated != undefined); - assert(res.msgs[0].objectCategory == ("CN=Person,CN=Schema,CN=Configuration," + base_dn)); - assert(res.msgs[0].sAMAccountType == 805306368); - assert(res.msgs[0].userAccountControl == 546); - assert(strupper(res.msgs[0].memberOf[0]) == strupper("CN=ldaptestgroup2,CN=Users," + base_dn)); - assert(res.msgs[0].memberOf.length == 1); - - println("Testing ldb.search for (&(cn=ldaptestuser)(objectCategory=cn=person,cn=schema,cn=configuration," + base_dn + "))"); - var res2 = ldb.search("(&(cn=ldaptestuser)(objectCategory=cn=person,cn=schema,cn=configuration," + base_dn + "))"); - if (res2.error != 0 || res2.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser)(objectCategory=cn=person,cn=schema,cn=configuration," + base_dn + "))"); - assert(res2.error == 0); - assert(res2.msgs.length == 1); - } - - assert(res.msgs[0].dn == res2.msgs[0].dn); - - println("Testing ldb.search for (&(cn=ldaptestuser)(objectCategory=PerSon))"); - var res3 = ldb.search("(&(cn=ldaptestuser)(objectCategory=PerSon))"); - if (res3.error != 0) { - println("Could not find (&(cn=ldaptestuser)(objectCategory=PerSon)): " + res3.errstr); - assert(res3.error == 0); - } else if (res3.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser)(objectCategory=PerSon)): matched " + res3.msgs.length); - assert(res3.msgs.length == 1); - } - - assert(res.msgs[0].dn == res3.msgs[0].dn); - - if (gc_ldb != undefined) { - println("Testing ldb.search for (&(cn=ldaptestuser)(objectCategory=PerSon)) in Global Catalog"); - var res3gc = gc_ldb.search("(&(cn=ldaptestuser)(objectCategory=PerSon))"); - if (res3gc.error != 0) { - println("Could not find (&(cn=ldaptestuser)(objectCategory=PerSon)) in Global Catalog: " + res3gc.errstr); - assert(res3gc.error == 0); - } else if (res3gc.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser)(objectCategory=PerSon)) in Global Catalog: matched " + res3gc.msgs.length); - assert(res3gc.msgs.length == 1); - } - - assert(res.msgs[0].dn == res3gc.msgs[0].dn); - } - - println("Testing ldb.search for (&(cn=ldaptestuser)(objectCategory=PerSon)) in with 'phantom root' control"); - var attrs = new Array("cn"); - var controls = new Array("search_options:1:2"); - var res3control = gc_ldb.search("(&(cn=ldaptestuser)(objectCategory=PerSon))", base_dn, ldb.SCOPE_SUBTREE, attrs, controls); - if (res3control.error != 0 || res3control.msgs.length != 1) { - println("Could not find (&(cn=ldaptestuser)(objectCategory=PerSon)) in Global Catalog"); - assert(res3control.error == 0); - assert(res3control.msgs.length == 1); - } - - assert(res.msgs[0].dn == res3control.msgs[0].dn); - - ok = ldb.del(res.msgs[0].dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - println("Testing ldb.search for (&(cn=ldaptestcomputer)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestcomputer)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestcomputer)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestcomputer,CN=Computers," + base_dn)); - assert(res.msgs[0].cn == "ldaptestcomputer"); - assert(res.msgs[0].name == "ldaptestcomputer"); - assert(res.msgs[0].objectClass[0] == "top"); - assert(res.msgs[0].objectClass[1] == "person"); - assert(res.msgs[0].objectClass[2] == "organizationalPerson"); - assert(res.msgs[0].objectClass[3] == "user"); - assert(res.msgs[0].objectClass[4] == "computer"); - assert(res.msgs[0].objectGUID != undefined); - assert(res.msgs[0].whenCreated != undefined); - assert(res.msgs[0].objectCategory == "cn=Computer,cn=Schema,cn=Configuration," + base_dn); - assert(res.msgs[0].sAMAccountType == 805306368); - assert(res.msgs[0].userAccountControl == 546); - - println("Testing ldb.search for (&(cn=ldaptestcomputer)(objectCategory=cn=computer,cn=schema,cn=configuration," + base_dn + "))"); - var res2 = ldb.search("(&(cn=ldaptestcomputer)(objectCategory=cn=computer,cn=schema,cn=configuration," + base_dn + "))"); - if (res2.error != 0 || res2.msgs.length != 1) { - println("Could not find (&(cn=ldaptestcomputer)(objectCategory=cn=computer,cn=schema,cn=configuration," + base_dn + "))"); - assert(res2.error == 0); - assert(res2.msgs.length == 1); - } - - assert(res.msgs[0].dn == res2.msgs[0].dn); - - if (gc_ldb != undefined) { - println("Testing ldb.search for (&(cn=ldaptestcomputer)(objectCategory=cn=computer,cn=schema,cn=configuration," + base_dn + ")) in Global Catlog"); - var res2gc = gc_ldb.search("(&(cn=ldaptestcomputer)(objectCategory=cn=computer,cn=schema,cn=configuration," + base_dn + "))"); - if (res2gc.error != 0 || res2gc.msgs.length != 1) { - println("Could not find (&(cn=ldaptestcomputer)(objectCategory=cn=computer,cn=schema,cn=configuration," + base_dn + ")) in Global Catlog"); - assert(res2gc.error == 0); - assert(res2gc.msgs.length == 1); - } - - assert(res.msgs[0].dn == res2gc.msgs[0].dn); - } - - println("Testing ldb.search for (&(cn=ldaptestcomputer)(objectCategory=compuTER))"); - var res3 = ldb.search("(&(cn=ldaptestcomputer)(objectCategory=compuTER))"); - if (res3.error != 0 || res3.msgs.length != 1) { - println("Could not find (&(cn=ldaptestcomputer)(objectCategory=compuTER))"); - assert(res3.error == 0); - assert(res3.msgs.length == 1); - } - - assert(res.msgs[0].dn == res3.msgs[0].dn); - - if (gc_ldb != undefined) { - println("Testing ldb.search for (&(cn=ldaptestcomputer)(objectCategory=compuTER)) in Global Catalog"); - var res3gc = gc_ldb.search("(&(cn=ldaptestcomputer)(objectCategory=compuTER))"); - if (res3gc.error != 0 || res3gc.msgs.length != 1) { - println("Could not find (&(cn=ldaptestcomputer)(objectCategory=compuTER)) in Global Catalog"); - assert(res3gc.error == 0); - assert(res3gc.msgs.length == 1); - } - - assert(res.msgs[0].dn == res3gc.msgs[0].dn); - } - - println("Testing ldb.search for (&(cn=ldaptestcomp*r)(objectCategory=compuTER))"); - var res4 = ldb.search("(&(cn=ldaptestcomp*r)(objectCategory=compuTER))"); - if (res4.error != 0 || res4.msgs.length != 1) { - println("Could not find (&(cn=ldaptestcomp*r)(objectCategory=compuTER))"); - assert(res4.error == 0); - assert(res4.msgs.length == 1); - } - - assert(res.msgs[0].dn == res4.msgs[0].dn); - - println("Testing ldb.search for (&(cn=ldaptestcomput*)(objectCategory=compuTER))"); - var res5 = ldb.search("(&(cn=ldaptestcomput*)(objectCategory=compuTER))"); - if (res5.error != 0 || res5.msgs.length != 1) { - println("Could not find (&(cn=ldaptestcomput*)(objectCategory=compuTER))"); - assert(res5.error == 0); - assert(res5.msgs.length == 1); - } - - assert(res.msgs[0].dn == res5.msgs[0].dn); - - println("Testing ldb.search for (&(cn=*daptestcomputer)(objectCategory=compuTER))"); - var res6 = ldb.search("(&(cn=*daptestcomputer)(objectCategory=compuTER))"); - if (res6.error != 0 || res6.msgs.length != 1) { - println("Could not find (&(cn=*daptestcomputer)(objectCategory=compuTER))"); - assert(res6.error == 0); - assert(res6.msgs.length == 1); - } - - assert(res.msgs[0].dn == res6.msgs[0].dn); - - ok = ldb.del(res.msgs[0].dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - println("Testing ldb.search for (&(cn=ldaptest2computer)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptest2computer)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptest2computer)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptest2computer,CN=Computers," + base_dn)); - assert(res.msgs[0].cn == "ldaptest2computer"); - assert(res.msgs[0].name == "ldaptest2computer"); - assert(res.msgs[0].objectClass[0] == "top"); - assert(res.msgs[0].objectClass[1] == "person"); - assert(res.msgs[0].objectClass[2] == "organizationalPerson"); - assert(res.msgs[0].objectClass[3] == "user"); - assert(res.msgs[0].objectClass[4] == "computer"); - assert(res.msgs[0].objectGUID != undefined); - assert(res.msgs[0].whenCreated != undefined); - assert(res.msgs[0].objectCategory == "cn=Computer,cn=Schema,cn=Configuration," + base_dn); - assert(res.msgs[0].sAMAccountType == 805306369); - assert(res.msgs[0].userAccountControl == 4096); - - - ok = ldb.del(res.msgs[0].dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - var attrs = new Array("cn", "name", "objectClass", "objectGUID", "whenCreated", "nTSecurityDescriptor", "memberOf"); - println("Testing ldb.search for (&(cn=ldaptestUSer2)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestUSer2)(objectClass=user))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestUSer2)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestuser2,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestuser2"); - assert(res.msgs[0].name == "ldaptestuser2"); - assert(res.msgs[0].objectClass[0] == "top"); - assert(res.msgs[0].objectClass[1] == "person"); - assert(res.msgs[0].objectClass[2] == "organizationalPerson"); - assert(res.msgs[0].objectClass[3] == "user"); - assert(res.msgs[0].objectGUID != undefined); - assert(res.msgs[0].whenCreated != undefined); - assert(res.msgs[0].nTSecurityDescriptor != undefined); - assert(res.msgs[0].memberOf[0] == ("CN=ldaptestgroup2,CN=Users," + base_dn)); - - var attrs = new Array("cn", "name", "objectClass", "objectGUID", "whenCreated", "nTSecurityDescriptor", "member"); - println("Testing ldb.search for (&(cn=ldaptestgroup2)(objectClass=group))"); - var res = ldb.search("(&(cn=ldaptestgroup2)(objectClass=group))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestgroup2)(objectClass=group))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestgroup2,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestgroup2"); - assert(res.msgs[0].name == "ldaptestgroup2"); - assert(res.msgs[0].objectClass[0] == "top"); - assert(res.msgs[0].objectClass[1] == "group"); - assert(res.msgs[0].objectGUID != undefined); - assert(res.msgs[0].whenCreated != undefined); - assert(res.msgs[0].nTSecurityDescriptor != undefined); - assert(res.msgs[0].member[0] == ("CN=ldaptestuser2,CN=Users," + base_dn)); - assert(res.msgs[0].member.length == 1); - - ok = ldb.modify(" -dn: cn=ldaptestgroup2,cn=users," + base_dn + " -changetype: modify -replace: member -member: CN=ldaptestuser2,CN=Users," + base_dn + " -member: CN=ldaptestutf8user èùéìòà,CN=Users," + base_dn + " -"); - if (ok.error != 0) { - println("Failure testing replace of linked attributes"); - println(ok.errstr); - assert(ok.error == 0); - } - - println("Testing Linked attribute behaviours"); - ok = ldb.modify(" -dn: cn=ldaptestgroup2,cn=users," + base_dn + " -changetype: modify -delete: member -"); - if (ok.error != 0) { - println("Failure testing delete of linked attributes"); - println(ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.modify(" -dn: cn=ldaptestgroup2,cn=users," + base_dn + " -changetype: modify -add: member -member: CN=ldaptestuser2,CN=Users," + base_dn + " -member: CN=ldaptestutf8user èùéìòà,CN=Users," + base_dn + " -"); - if (ok.error != 0) { - println("Failure testing add of linked attributes"); - println(ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.modify(" -dn: cn=ldaptestgroup2,cn=users," + base_dn + " -changetype: modify -replace: member -"); - if (ok.error != 0) { - println("Failure testing replace of linked attributes"); - println(ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.modify(" -dn: cn=ldaptestgroup2,cn=users," + base_dn + " -changetype: modify -add: member -member: CN=ldaptestuser2,CN=Users," + base_dn + " -member: CN=ldaptestutf8user èùéìòà,CN=Users," + base_dn + " -"); - if (ok.error != 0) { - println("Failure testing add of linked attributes"); - println(ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.modify(" -dn: cn=ldaptestgroup2,cn=users," + base_dn + " -changetype: modify -delete: member -member: CN=ldaptestutf8user èùéìòà,CN=Users," + base_dn + " -"); - if (ok.error != 0) { - println("Failure testing replace of linked attributes"); - println(ok.errstr); - assert(ok.error == 0); - } - - var res = ldb.search("(&(cn=ldaptestgroup2)(objectClass=group))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestgroup2)(objectClass=group))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestgroup2,CN=Users," + base_dn)); - assert(res.msgs[0].member[0] == ("CN=ldaptestuser2,CN=Users," + base_dn)); - assert(res.msgs[0].member.length == 1); - - ok = ldb.del(("CN=ldaptestuser2,CN=Users," + base_dn)); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - var attrs = new Array("cn", "name", "objectClass", "objectGUID", "whenCreated", "nTSecurityDescriptor", "member"); - println("Testing ldb.search for (&(cn=ldaptestgroup2)(objectClass=group)) to check linked delete"); - var res = ldb.search("(&(cn=ldaptestgroup2)(objectClass=group))", base_dn, ldb.SCOPE_SUBTREE, attrs); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestgroup2)(objectClass=group)) to check linked delete"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestgroup2,CN=Users," + base_dn)); - assert(res.msgs[0].member == undefined); - - println("Testing ldb.search for (&(cn=ldaptestutf8user ÈÙÉÌÒÀ)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestutf8user ÈÙÉÌÒÀ)(objectClass=user))"); - - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestutf8user ÈÙÉÌÒÀ)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - assert(res.msgs[0].dn == ("CN=ldaptestutf8user èùéìòà,CN=Users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestutf8user èùéìòà"); - assert(res.msgs[0].name == "ldaptestutf8user èùéìòà"); - assert(res.msgs[0].objectClass[0] == "top"); - assert(res.msgs[0].objectClass[1] == "person"); - assert(res.msgs[0].objectClass[2] == "organizationalPerson"); - assert(res.msgs[0].objectClass[3] == "user"); - assert(res.msgs[0].objectGUID != undefined); - assert(res.msgs[0].whenCreated != undefined); - - ok = ldb.del(res.msgs[0].dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - println("Testing ldb.search for (&(cn=ldaptestutf8user2*)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestutf8user2*)(objectClass=user))"); - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (&(cn=ldaptestutf8user2*)(objectClass=user))"); - assert(res.error == 0); - assert(res.msgs.length == 1); - } - - ok = ldb.del(res.msgs[0].dn); - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - ok = ldb.del(("CN=ldaptestgroup2,CN=Users," + base_dn)) - if (ok.error != 0) { - println(ok.errstr); - assert(ok.error == 0); - } - - println("Testing ldb.search for (&(cn=ldaptestutf8user2 ÈÙÉÌÒÀ)(objectClass=user))"); - var res = ldb.search("(&(cn=ldaptestutf8user ÈÙÉÌÒÀ)(objectClass=user))"); - - if (res.error != 0 || res.msgs.length != 1) { - println("Could not find (expect space collapse, win2k3 fails) (&(cn=ldaptestutf8user2 ÈÙÉÌÒÀ)(objectClass=user))"); - } else { - assert(res.msgs[0].dn == ("cn=ldaptestutf8user2 èùéìòà,cn=users," + base_dn)); - assert(res.msgs[0].cn == "ldaptestutf8user2 èùéìòà"); - } - - println("Testing that we can't get at the configuration DN from the main search base"); - var attrs = new Array("cn"); - var res = ldb.search("objectClass=crossRef", base_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - if (res.msgs.length != 0) { - println("Got configuration DN " + res.msgs[0].dn + " which should not be able to be seen from main search base"); - } - assert(res.msgs.length == 0); - - println("Testing that we can get at the configuration DN from the main search base on the LDAP port with the 'phantom root' search_options control"); - var attrs = new Array("cn"); - var controls = new Array("search_options:1:2"); - var res = ldb.search("objectClass=crossRef", base_dn, ldb.SCOPE_SUBTREE, attrs, controls); - assert(res.error == 0); - assert(res.msgs.length > 0); - - if (gc_ldb != undefined) { - println("Testing that we can get at the configuration DN from the main search base on the GC port with the search_options control == 0"); - var attrs = new Array("cn"); - var controls = new Array("search_options:1:0"); - var res = gc_ldb.search("objectClass=crossRef", base_dn, gc_ldb.SCOPE_SUBTREE, attrs, controls); - assert(res.error == 0); - assert(res.msgs.length > 0); - - println("Testing that we do find configuration elements in the global catlog"); - var attrs = new Array("cn"); - var res = gc_ldb.search("objectClass=crossRef", base_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - assert (res.msgs.length > 0); - - println("Testing that we do find configuration elements and user elements at the same time"); - var attrs = new Array("cn"); - var res = gc_ldb.search("(|(objectClass=crossRef)(objectClass=person))", base_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - assert (res.msgs.length > 0); - - println("Testing that we do find configuration elements in the global catlog, with the configuration basedn"); - var attrs = new Array("cn"); - var res = gc_ldb.search("objectClass=crossRef", configuration_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - assert (res.msgs.length > 0); - } - - println("Testing that we can get at the configuration DN on the main LDAP port"); - var attrs = new Array("cn"); - var res = ldb.search("objectClass=crossRef", configuration_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - assert (res.msgs.length > 0); - - println("Testing objectCategory canonacolisation"); - var attrs = new Array("cn"); - var res = ldb.search("objectCategory=ntDsDSA", configuration_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - if (res.msgs.length == 0) { - println("Didn't find any records with objectCategory=ntDsDSA"); - } - assert(res.msgs.length != 0); - - var attrs = new Array("cn"); - var res = ldb.search("objectCategory=CN=ntDs-DSA," + schema_dn, configuration_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - if (res.msgs.length == 0) { - println("Didn't find any records with objectCategory=CN=ntDs-DSA," + schema_dn); - } - assert(res.msgs.length != 0); - - println("Testing objectClass attribute order on "+ base_dn); - var attrs = new Array("objectClass"); - var res = ldb.search("objectClass=domain", base_dn, ldb.SCOPE_BASE, attrs); - assert(res.error == 0); - assert(res.msgs.length == 1); - - assert(res.msgs[0].objectClass[0] == "top"); - assert(res.msgs[0].objectClass[1] == "domain"); - assert(res.msgs[0].objectClass[2] == "domainDNS"); - -// check enumeration - - var attrs = new Array("cn"); - println("Testing ldb.search for objectCategory=person"); - var res = ldb.search("objectCategory=person", base_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - assert(res.msgs.length > 0); - - var attrs = new Array("cn"); - var controls = new Array("domain_scope:1"); - println("Testing ldb.search for objectCategory=person with domain scope control"); - var res = ldb.search("objectCategory=person", base_dn, ldb.SCOPE_SUBTREE, attrs, controls); - assert(res.error == 0); - assert(res.msgs.length > 0); - - var attrs = new Array("cn"); - println("Testing ldb.search for objectCategory=user"); - var res = ldb.search("objectCategory=user", base_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - assert(res.msgs.length > 0); - - var attrs = new Array("cn"); - var controls = new Array("domain_scope:1"); - println("Testing ldb.search for objectCategory=user with domain scope control"); - var res = ldb.search("objectCategory=user", base_dn, ldb.SCOPE_SUBTREE, attrs, controls); - assert(res.error == 0); - assert(res.msgs.length > 0); - - var attrs = new Array("cn"); - println("Testing ldb.search for objectCategory=group"); - var res = ldb.search("objectCategory=group", base_dn, ldb.SCOPE_SUBTREE, attrs); - assert(res.error == 0); - assert(res.msgs.length > 0); - - var attrs = new Array("cn"); - var controls = new Array("domain_scope:1"); - println("Testing ldb.search for objectCategory=group with domain scope control"); - var res = ldb.search("objectCategory=group", base_dn, ldb.SCOPE_SUBTREE, attrs, controls); - assert(res.error == 0); - assert(res.msgs.length > 0); - -} - -function basedn_tests(ldb, gc_ldb) -{ - println("Testing for all rootDSE attributes"); - var attrs = new Array(); - var res = ldb.search("", "", ldb.SCOPE_BASE, attrs); - assert(res.error == 0); - assert(res.msgs.length == 1); - - println("Testing for highestCommittedUSN"); - var attrs = new Array("highestCommittedUSN"); - var res = ldb.search("", "", ldb.SCOPE_BASE, attrs); - assert(res.error == 0); - assert(res.msgs.length == 1); - assert(res.msgs[0].highestCommittedUSN != undefined); - assert(res.msgs[0].highestCommittedUSN != 0); - - println("Testing for netlogon via LDAP"); - var attrs = new Array("netlogon"); - var res = ldb.search("", "", ldb.SCOPE_BASE, attrs); - assert(res.error == 0); - assert(res.msgs.length == 0); - - println("Testing for netlogon and highestCommittedUSN via LDAP"); - var attrs = new Array("netlogon", "highestCommittedUSN"); - var res = ldb.search("", "", ldb.SCOPE_BASE, attrs); - assert(res.error == 0); - assert(res.msgs.length == 0); -} - -function find_basedn(ldb) -{ - var attrs = new Array("defaultNamingContext"); - var res = ldb.search("", "", ldb.SCOPE_BASE, attrs); - assert(res.error == 0); - assert(res.msgs.length == 1); - return res.msgs[0].defaultNamingContext; -} - -function find_configurationdn(ldb) -{ - var attrs = new Array("configurationNamingContext"); - var res = ldb.search("", "", ldb.SCOPE_BASE, attrs); - assert(res.error == 0); - assert(res.msgs.length == 1); - return res.msgs[0].configurationNamingContext; -} - -function find_schemadn(ldb) -{ - var attrs = new Array("schemaNamingContext"); - var res = ldb.search("", "", ldb.SCOPE_BASE, attrs); - assert(res.error == 0); - assert(res.msgs.length == 1); - return res.msgs[0].schemaNamingContext; -} - -/* use command line creds if available */ -ldb.credentials = options.get_credentials(); -gc_ldb.credentials = options.get_credentials(); - -var ok = ldb.connect("ldap://" + host); -var base_dn = find_basedn(ldb); - -var configuration_dn = find_configurationdn(ldb); -var schema_dn = find_schemadn(ldb); - -println("baseDN: %s\n", base_dn); - -var ok = gc_ldb.connect("ldap://" + host + ":3268"); -if (!ok) { - gc_ldb = undefined; -} - -basic_tests(ldb, gc_ldb, base_dn, configuration_dn, schema_dn) - -basedn_tests(ldb, gc_ldb) - -return 0; |