mirror of
https://github.com/osixia/container-openldap.git
synced 2026-11-06 12:40:36 -04:00
Bertrand Gouny
02b5f0354d
Expose management hidden attribute lists through bootstrap environment defaults and keep ACL rendering in the LDIF template. Align management assets with database-readonly naming and drop the MONITOR and AUDITLOG flag suffixes. Update documentation, migration notes and integration coverage for custom hidden attributes, empty effective lists, audit logging and monitoring.
73 lines
2.5 KiB
Go
73 lines
2.5 KiB
Go
package tests
|
|
|
|
import (
|
|
"context"
|
|
_ "embed"
|
|
"fmt"
|
|
|
|
"dagger.io/dagger"
|
|
)
|
|
|
|
// AutomaticModules checks automatic selection and exact explicit module ordering.
|
|
func AutomaticModules(ctx context.Context, client *dagger.Client, image *dagger.Container) error {
|
|
passwords, err := rootPasswords(ctx, image)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
const baseModules = "back_mdb.so argon2.so"
|
|
const explicitModules = "back_mdb.so pw-sha2.so argon2.so memberof refint.so unique /usr/lib/openldap/ppolicy.so auditlog"
|
|
type moduleCase struct {
|
|
name string
|
|
settings env
|
|
modules string
|
|
fails bool
|
|
}
|
|
cases := []moduleCase{
|
|
{"default", nil, baseModules, false},
|
|
{"custom order", env{"OPENLDAP_BOOTSTRAP_MODULES": "back_mdb.so pw-sha2.so argon2.so memberof.so"}, "back_mdb.so pw-sha2.so argon2.so memberof.so", false},
|
|
{"explicit aliases", env{
|
|
"OPENLDAP_BOOTSTRAP_MODULES": explicitModules,
|
|
"OPENLDAP_BOOTSTRAP_AUDITLOG": "true",
|
|
"OPENLDAP_BOOTSTRAP_PPOLICY": "true",
|
|
"OPENLDAP_BOOTSTRAP_UNIQUE": "true",
|
|
"OPENLDAP_BOOTSTRAP_REFINT": "true",
|
|
"OPENLDAP_BOOTSTRAP_MEMBEROF": "true",
|
|
}, explicitModules, false},
|
|
{"missing explicit module", env{
|
|
"OPENLDAP_BOOTSTRAP_MODULES": baseModules,
|
|
"OPENLDAP_BOOTSTRAP_UNIQUE": "true",
|
|
}, "", true},
|
|
{"all automatic", env{
|
|
"OPENLDAP_BOOTSTRAP_AUDITLOG": "true",
|
|
"OPENLDAP_BOOTSTRAP_PPOLICY": "true",
|
|
"OPENLDAP_BOOTSTRAP_UNIQUE": "true",
|
|
"OPENLDAP_BOOTSTRAP_REFINT": "true",
|
|
"OPENLDAP_BOOTSTRAP_MEMBEROF": "true",
|
|
"OPENLDAP_BOOTSTRAP_REPLICATION": "true",
|
|
"OPENLDAP_BOOTSTRAP_REPLICATION_DATA_READONLY_PASSWORD": replicationPassword,
|
|
}, baseModules + " ppolicy.so unique.so refint.so memberof.so auditlog.so syncprov.so", false},
|
|
}
|
|
for _, feature := range []struct{ flag, module string }{
|
|
{"AUDITLOG", "auditlog"},
|
|
{"PPOLICY", "ppolicy"},
|
|
{"UNIQUE", "unique"},
|
|
{"REFINT", "refint"},
|
|
{"MEMBEROF", "memberof"},
|
|
} {
|
|
cases = append(cases, moduleCase{feature.module, env{"OPENLDAP_BOOTSTRAP_" + feature.flag: "true"}, baseModules + " " + feature.module + ".so", false})
|
|
}
|
|
for _, tc := range cases {
|
|
if err := check(ctx, withEnv(image, merge(passwords, tc.settings)), nil, env{
|
|
"TEST_MODULES": tc.modules,
|
|
"TEST_BOOTSTRAP_FAILS": fmt.Sprint(tc.fails),
|
|
}, modulesCheck); err != nil {
|
|
return fmt.Errorf("modules %s: %w", tc.name, err)
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
//go:embed testdata/modules.sh
|
|
var modulesCheck string
|