> On Feb 9, 2016, at 2:02 PM, Chris Pike <[email protected]> wrote:
> 
> Looks like I had some settings wrong in my slapd.conf, mainly I didn't have 
> the maxsize set on the dbs. Down to 2 tests not passing. The 
> "DelegatedMgrImplTest.testAddAdminUser" only fails on the first test run.
> 
> 
> Tests run: 113, Failures: 2, Errors: 0, Skipped: 0, Time elapsed: 209.148 sec 
> <<< FAILURE! - in org.apache.directory.fortress.core.impl.FortressJUnitTest
> testAddAdminUser(org.apache.directory.fortress.core.impl.DelegatedMgrImplTest)
>   Time elapsed: 0.216 sec  <<< FAILURE!
> junit.framework.AssertionFailedError: 
> org.apache.directory.fortress.core.impl.DelegatedMgrImplTestassignAdminUsers 
> list size check
>       at junit.framework.Assert.fail(Assert.java:57)
>       at junit.framework.Assert.assertTrue(Assert.java:22)
>       at junit.framework.TestCase.assertTrue(TestCase.java:192)
>       at 
> org.apache.directory.fortress.core.impl.DelegatedMgrImplTest.assignAdminUsers(DelegatedMgrImplTest.java:306)
>       at 
> org.apache.directory.fortress.core.impl.DelegatedMgrImplTest.testAddAdminUser(DelegatedMgrImplTest.java:174)
> 
> testSearchAuthZs(org.apache.directory.fortress.core.impl.AuditMgrImplTest)  
> Time elapsed: 2.706 sec  <<< FAILURE!
> junit.framework.AssertionFailedError: 
> org.apache.directory.fortress.core.impl.AuditMgrImplTestsearchAuthZs 
> failedOnly=true, search authorizations user [jtsUser1], objName [TOB3_1], 
> opName [TOP3_1], objId []
>       at junit.framework.Assert.fail(Assert.java:57)
>       at junit.framework.Assert.assertTrue(Assert.java:22)
>       at junit.framework.TestCase.assertTrue(TestCase.java:192)
>       at 
> org.apache.directory.fortress.core.impl.AuditMgrImplTest.searchAuthZs(AuditMgrImplTest.java:288)
>       at 
> org.apache.directory.fortress.core.impl.AuditMgrImplTest.testSearchAuthZs(AuditMgrImplTest.java:253)
> 
> 
> Results :
> 
> Failed tests: 
>  AuditMgrImplTest.testSearchAuthZs:253->searchAuthZs:288 
> org.apache.directory.fortress.core.impl.AuditMgrImplTestsearchAuthZs 
> failedOnly=true, search authorizations user [jtsUser1], objName [TOB3_1], 
> opName [TOP3_1], objId []
>  DelegatedMgrImplTest.testAddAdminUser:174->assignAdminUsers:306 
> org.apache.directory.fortress.core.impl.DelegatedMgrImplTestassignAdminUsers 
> list size check
> 
> Tests run: 113, Failures: 2, Errors: 0, Skipped: 0

There were some problems with the ACL’s in the slapd.conf base config that may 
have caused you problems with the audits.  

Try these (with appropriate substitutions on the uid/dn):

# Begin ACLS:
access to dn.base=""
  by * read

# LDAPv3 Schema
access to dn.base="cn=subschema"
  by * read

# Internal OpenLDAP config backend
access to dn.subtree="cn=config"
  by * none

# Generic overall privilege
access to *
  by anonymous auth
  by dn.base="cn=Manager,dc=example,dc=com" manage
  by * break

# Password should be protected, allow user to modify their own audit attributes.
access to attrs=userPassword,ftModifier,ftModCode,ftModId
  by self =wx
  by * none

# Self-readable password policy info
access to 
attrs=pwdFailureTime,pwdChangedTime,pwdGraceUseTime,pwdReset,pwdPolicySubentry
  by self read
  by * none

# Admin-only password policy info
access to attrs=pwdAccountLockedTime,pwdHistory
  by * none

# Users may read their own attributes
access to attrs=@inetorgperson
  by users read
  by * none

access to attrs=@shadowAccount
  by * none

access to * by users read
# ***  end ACL's

Shawn

Reply via email to