r18459: Set access to test LDAP server as system to anonymous, but also note
authorAndrew Bartlett <abartlet@samba.org>
Wed, 13 Sep 2006 10:26:32 +0000 (10:26 +0000)
committerGerald (Jerry) Carter <jerry@samba.org>
Wed, 10 Oct 2007 19:18:33 +0000 (14:18 -0500)
the correct authz-regexp for future use.

Fail to test if slapd fails and TEST_LDAP=yes
(This used to be commit 1daf4e7bd47df4f127447ab9b5d583bbe7b2a10a)

source4/script/tests/mktestsetup.sh
source4/script/tests/selftest.sh
source4/script/tests/test_functions.sh

index f107f54ace58ad87d8e05933a8d3488660e2853a..9453a2f0cd94bb8d16e73e5f4abf4c0141d022b8 100755 (executable)
@@ -101,6 +101,8 @@ cat >$CONFFILE<<EOF
        server max protocol = SMB2
        notify:inotify = false
 
+system:anonymous = true
+
 [tmp]
        path = $TMPDIR
        read only = no
@@ -292,13 +294,15 @@ argsfile  $LDAPDIR/slapd.args
 sasl-realm $DNSNAME
 access to * by * write
 
+allow update_anon
+
 authz-regexp
           uid=([^,]*),cn=$DNSNAME,cn=digest-md5,cn=auth
-          ldap:///$BASEDN??sub?(samAccountName=$1)
+          ldap:///$BASEDN??sub?(samAccountName=\$1)
 
 authz-regexp
           uid=([^,]*),cn=([^,]*),cn=digest-md5,cn=auth
-          ldap:///$BASEDN??sub?(samAccountName=$1)
+          ldap:///$BASEDN??sub?(samAccountName=\$1)
 
 include $LDAPDIR/modules.conf
 
index 8c4c41e197c8cd32c97b73a22027c762bfff3576..a6b1cb7fc36256b8c584ef31f4f0fa913ea9ea7f 100755 (executable)
@@ -63,7 +63,7 @@ incdir=`dirname $ARG0`
 
 #Start slapd before smbd
 if [ x"$TEST_LDAP" = x"yes" ]; then
-    slapd_start
+    slapd_start || exit 1;
     echo -n "LDAP PROVISIONING..."
     $srcdir/bin/smbscript $srcdir/setup/provision $PROVISION_OPTIONS --ldap-backend=$LDAPI || {
        echo "LDAP PROVISIONING failed: $srcdir/bin/smbscript $srcdir/setup/provision $PROVISION_OPTIONS --ldap-backend=$LDAPI"
index b66e70935dcca28378e09c2bb01c52f3b9125df5..6baec4982dfc7835d30520704f610c5a556cc441 100755 (executable)
@@ -69,10 +69,12 @@ slapd_start() {
     OLDPATH=$PATH
     PATH=/usr/local/sbin:/usr/sbin:/sbin:$PATH
     export PATH
-    slapd -f $SLAPD_CONF -h $LDAPI_ESCAPE
+# running slapd in the background means it stays in the same process group, so it can be
+# killed by timelimit
+    slapd -d0 -f $SLAPD_CONF -h $LDAPI_ESCAPE &
     PATH=$OLDPATH
     export PATH
-    return 0;
+    return $?;
 }
 
 testit() {