mirror of
https://github.com/osixia/container-openldap.git
synced 2026-11-06 12:40:36 -04:00
Bertrand Gouny
02b5f0354d
Expose management hidden attribute lists through bootstrap environment defaults and keep ACL rendering in the LDIF template. Align management assets with database-readonly naming and drop the MONITOR and AUDITLOG flag suffixes. Update documentation, migration notes and integration coverage for custom hidden attributes, empty effective lists, audit logging and monitoring.
46 lines
1.2 KiB
Go
46 lines
1.2 KiB
Go
package tests
|
|
|
|
import (
|
|
"context"
|
|
_ "embed"
|
|
"fmt"
|
|
|
|
"dagger.io/dagger"
|
|
)
|
|
|
|
// AuditLog checks file-based auditing, custom paths, rotation and process restarts.
|
|
func AuditLog(ctx context.Context, client *dagger.Client, image *dagger.Container) error {
|
|
passwords, err := rootPasswords(ctx, image)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
for _, mode := range []string{"default", "enabled", "custom", "minimal", "explicit"} {
|
|
settings := env{}
|
|
file := "/var/log/openldap/audit.ldif"
|
|
if mode != "default" {
|
|
settings["OPENLDAP_BOOTSTRAP_AUDITLOG"] = "true"
|
|
}
|
|
if mode == "custom" {
|
|
file = "/var/log/openldap/custom audit.ldif"
|
|
settings["OPENLDAP_BOOTSTRAP_AUDITLOG_FILE"] = file
|
|
}
|
|
if mode == "minimal" || mode == "explicit" {
|
|
settings["OPENLDAP_BOOTSTRAP_MODULES"] = "back_mdb.so argon2.so auditlog.so"
|
|
if mode == "explicit" {
|
|
settings["OPENLDAP_BOOTSTRAP_MODULES"] = "back_mdb.so argon2.so /usr/lib/openldap/auditlog.so"
|
|
}
|
|
}
|
|
if err := check(ctx, withEnv(image, merge(passwords, settings)), nil, env{
|
|
"TEST_AUDITLOG_MODE": mode,
|
|
"TEST_AUDITLOG_FILE": file,
|
|
}, auditlogCheck); err != nil {
|
|
return fmt.Errorf("auditlog %s: %w", mode, err)
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
//go:embed testdata/auditlog.sh
|
|
var auditlogCheck string
|