X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=tests%2Fscripts%2Ftest025-limits;h=93c0221f9e76063f37ae615ae2f8b0265350a63c;hb=96e2da71a0a6a374a400efbe8d74342878ccaa9e;hp=efbb1f45cc238652faf1ee901f884ec2affea463;hpb=a23f94bc864f24c665110bf0c624cf1e0da5af69;p=openldap diff --git a/tests/scripts/test025-limits b/tests/scripts/test025-limits index efbb1f45cc..93c0221f9e 100755 --- a/tests/scripts/test025-limits +++ b/tests/scripts/test025-limits @@ -2,7 +2,7 @@ # $OpenLDAP$ ## This work is part of OpenLDAP Software . ## -## Copyright 1998-2004 The OpenLDAP Foundation. +## Copyright 1998-2005 The OpenLDAP Foundation. ## All rights reserved. ## ## Redistribution and use in source and binary forms, with or without @@ -13,6 +13,8 @@ ## top-level directory of the distribution or, alternatively, at ## . +## FIXME: need to exclude legal but wrong results... + echo "running defines.sh" . $SRCDIR/scripts/defines.sh @@ -71,13 +73,86 @@ echo "" echo "Testing no limits requested for unlimited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unlimited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Unlimited User,ou=People,dc=example,dc=com' \ + '(objectClass=*)' >$SEARCHOUT 2>&1 +RC=$? +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` +case $RC in + 0) + if test x"$COUNT" != x ; then + echo "...success (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + ;; + *) + echo "ldapsearch failed ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + ;; +esac + +echo "Testing no limits requested for rootdn=$MANAGERDN..." +$LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ + -D "$MANAGERDN" \ + '(objectClass=*)' >$SEARCHOUT 2>&1 +RC=$? +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` +case $RC in + 0) + if test x"$COUNT" != x ; then + echo "...success (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + ;; + *) + echo "ldapsearch failed ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + ;; +esac + +SIZELIMIT=4 +echo "Testing limit requested for rootdn=$MANAGERDN..." +$LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ + -D "$MANAGERDN" \ '(objectClass=*)' >$SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into the requested size limit ($SIZELIMIT; got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + ;; + 4) + if test x"$COUNT" != x ; then + if test "$COUNT" = "$SIZELIMIT" ; then + echo "...bumped into requested size limit ($SIZELIMIT)" + else + echo "...error: got $COUNT entries with a requested sizelimit of $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; *) echo "ldapsearch failed ($RC)!" @@ -89,16 +164,39 @@ esac SIZELIMIT=2 echo "Testing size limit request ($SIZELIMIT) for unlimited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Unlimited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Unlimited User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into the requested size limit ($SIZELIMIT; got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) - echo "...bumped into requested size limit ($SIZELIMIT)" + if test x"$COUNT" != x ; then + if test "$COUNT" = "$SIZELIMIT" ; then + echo "...bumped into requested size limit ($SIZELIMIT)" + else + echo "...error: got $COUNT entries with a requested sizelimit of $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; *) echo "ldapsearch failed ($RC)!" @@ -110,16 +208,25 @@ esac TIMELIMIT=10 echo "Testing time limit request ($TIMELIMIT s) for unlimited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -l $TIMELIMIT \ - -D 'cn=Unlimited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Unlimited User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into the requested time limit ($TIMELIMIT s; got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 3) - echo "...bumped into requested time limit ($TIMELIMIT s; $COUNT entries)" + if test x"$COUNT" != x ; then + COUNT=0 + fi + echo "...bumped into requested time limit ($TIMELIMIT s; got $COUNT entries)" ;; *) echo "ldapsearch failed ($RC)!" @@ -130,16 +237,28 @@ esac echo "Testing no limits requested for soft limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Soft Limited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Soft Limited User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) - echo "...bumped into server-side size limit ($COUNT)" + if test x"$COUNT" != x ; then + echo "...bumped into server-side size limit (got $COUNT entries)" + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; *) echo "ldapsearch failed ($RC)!" @@ -151,13 +270,24 @@ esac SIZELIMIT=2 echo "Testing lower than soft limit request ($SIZELIMIT) for soft limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Soft Limited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Soft Limited User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then @@ -167,7 +297,9 @@ case $RC in echo "...bumped into server-side size limit ($COUNT)" fi else - echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC fi ;; *) @@ -180,13 +312,24 @@ esac SIZELIMIT=100 echo "Testing higher than soft limit request ($SIZELIMIT) for soft limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Soft Limited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Soft Limited User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then @@ -196,7 +339,9 @@ case $RC in echo "...bumped into server-side size limit ($COUNT)" fi else - echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC fi ;; *) @@ -209,13 +354,24 @@ esac SIZELIMIT=2 echo "Testing lower than hard limit request ($SIZELIMIT) for hard limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Hard Limited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Hard Limited User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) echo "...bumped into requested ($SIZELIMIT) size limit" @@ -230,20 +386,79 @@ esac SIZELIMIT=100 echo "Testing higher than hard limit request ($SIZELIMIT) for hard limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Hard Limited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Hard Limited User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) - echo "...bumped into requested ($SIZELIMIT) size limit" + if test x"$COUNT" != x ; then + if test "$COUNT" = "$SIZELIMIT" ; then + echo "...error: bumped into requested ($SIZELIMIT) size limit" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + else + echo "...got size limit $COUNT instead of requested $SIZELIMIT entries" + fi + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; - 11) - echo "...bumped into server-side hard size administrative limit" +# 11) +# echo "...bumped into server-side hard size administrative limit" +# ;; + *) + echo "ldapsearch failed ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + ;; +esac + +SIZELIMIT=max +echo "Testing max limit request ($SIZELIMIT) for hard limited ID..." +$LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ + -D 'cn=Hard Limited User,ou=People,dc=example,dc=com' \ + '(objectClass=*)' > $SEARCHOUT 2>&1 +RC=$? +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` +case $RC in + 0) + if test x"$COUNT" != x ; then + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + ;; + 4) + if test x"$COUNT" != x ; then + echo "...bumped into requested ($SIZELIMIT=$COUNT) size limit" + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; +# 11) +# echo "...bumped into server-side hard size administrative limit" +# ;; *) echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS @@ -253,16 +468,24 @@ esac echo "Testing lower than unchecked limit request for unchecked limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unchecked Limited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Unchecked Limited User,ou=People,dc=example,dc=com' \ '(uid=uncheckedlimited)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 11) - echo "...bumped into unchecked administrative limit" + echo "...error: bumped into unchecked administrative limit" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC ;; *) echo "ldapsearch failed ($RC)!" @@ -273,13 +496,19 @@ esac echo "Testing higher than unchecked limit requested for unchecked limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unchecked Limited User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Unchecked Limited User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...error: didn't bump into server-side unchecked limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + fi + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC ;; 11) echo "...bumped into unchecked administrative limit" @@ -293,13 +522,19 @@ esac echo "Testing no limits requested for unchecked limited group..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unchecked Limited User 2,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Unchecked Limited User 2,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...error: didn't bump into server-side unchecked limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + fi + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC ;; 11) echo "...bumped into unchecked administrative limit" @@ -313,23 +548,27 @@ esac echo "Testing no limits requested for limited regex..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Foo User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Foo User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then - if test "x$SIZELIMIT" = "x$COUNT" ; then - echo "...bumped into requested ($SIZELIMIT) size limit" - else - echo "...bumped into server-side size limit ($COUNT)" - fi + echo "...bumped into server-side size limit ($COUNT)" else - echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC fi ;; *) @@ -341,23 +580,27 @@ esac echo "Testing no limits requested for limited onelevel..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Bar User,ou=People,o=University of Michigan,c=US' \ + -D 'cn=Bar User,ou=People,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then - if test "x$SIZELIMIT" = "x$COUNT" ; then - echo "...bumped into requested ($SIZELIMIT) size limit" - else - echo "...bumped into server-side size limit ($COUNT)" - fi + echo "...bumped into server-side size limit ($COUNT)" else - echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC fi ;; *) @@ -369,23 +612,27 @@ esac echo "Testing no limit requested for limited children..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unchecked Limited Users,ou=Groups,o=University of Michigan,c=US' \ + -D 'cn=Unchecked Limited Users,ou=Groups,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then - if test "x$SIZELIMIT" = "x$COUNT" ; then - echo "...bumped into requested ($SIZELIMIT) size limit" - else - echo "...bumped into server-side size limit ($COUNT)" - fi + echo "...bumped into server-side size limit ($COUNT)" else - echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC fi ;; *) @@ -397,23 +644,27 @@ esac echo "Testing no limit requested for limited subtree..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unchecked Limited User 3,ou=Admin,o=University of Michigan,c=US' \ + -D 'cn=Unchecked Limited User 3,ou=Admin,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then - if test "x$SIZELIMIT" = "x$COUNT" ; then - echo "...bumped into requested ($SIZELIMIT) size limit" - else - echo "...bumped into server-side size limit ($COUNT)" - fi + echo "...bumped into server-side size limit ($COUNT)" else - echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC fi ;; *) @@ -425,23 +676,27 @@ esac echo "Testing no limit requested for limited users..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Special User,o=University of Michigan,c=US' \ + -D 'cn=Special User,dc=example,dc=com' \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then - if test "x$SIZELIMIT" = "x$COUNT" ; then - echo "...bumped into requested ($SIZELIMIT) size limit" - else - echo "...bumped into server-side size limit ($COUNT)" - fi + echo "...bumped into server-side size limit ($COUNT)" else - echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC fi ;; *) @@ -455,20 +710,24 @@ echo "Testing no limit requested for limited anonymous..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 \ '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then - if test "x$SIZELIMIT" = "x$COUNT" ; then - echo "...bumped into requested ($SIZELIMIT) size limit" - else - echo "...bumped into server-side size limit ($COUNT)" - fi + echo "...bumped into server-side size limit ($COUNT)" else - echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC fi ;; *) @@ -490,20 +749,40 @@ case $BACKEND in ;; esac +if test x"$SLAPD_PAGE_SIZE" != x ; then + PAGESIZE="$SLAPD_PAGE_SIZE" + if test "$PAGESIZE" -le 0 ; then + test $KILLSERVERS != no && kill -HUP $KILLPIDS + + echo "" + echo "Testing with pagedResults control disabled" + echo "" + echo ">>>>> Test succeeded" + exit 0 + fi +else + PAGESIZE=5 +fi + echo "" -echo "Testing regular search limits with pagedResults control" +echo "Testing regular search limits with pagedResults control (page size $PAGESIZE)" echo "" -PAGESIZE=5 echo "Testing no limits requested for unlimited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unlimited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Unlimited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' >$SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...success (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; *) echo "ldapsearch failed ($RC)!" @@ -515,16 +794,39 @@ esac SIZELIMIT=2 echo "Testing size limit request ($SIZELIMIT) for unlimited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Unlimited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Unlimited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into the requested size limit ($SIZELIMIT; got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) - echo "...bumped into requested size limit ($SIZELIMIT)" + if test x"$COUNT" != x ; then + if test $COUNT = $SIZELIMIT ; then + echo "...bumped into requested size limit ($SIZELIMIT)" + else + echo "...error: got $COUNT entries while requesting $SIZELIMIT..." + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; *) echo "ldapsearch failed ($RC)!" @@ -536,16 +838,25 @@ esac TIMELIMIT=10 echo "Testing time limit request ($TIMELIMIT s) for unlimited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -l $TIMELIMIT \ - -D 'cn=Unlimited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Unlimited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into the requested time limit ($TIMELIMIT s; got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 3) - echo "...bumped into requested time limit ($TIMELIMIT s; $COUNT entries)" + if test x"$COUNT" = x ; then + COUNT=0 + fi + echo "...bumped into requested time limit ($TIMELIMIT s; got $COUNT entries)" ;; *) echo "ldapsearch failed ($RC)!" @@ -556,16 +867,28 @@ esac echo "Testing no limits requested for soft limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Soft Limited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Soft Limited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) - echo "...bumped into server-side size limit ($COUNT)" + if test x"$COUNT" != x ; then + echo "...bumped into server-side size limit (got $COUNT entries)" + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; *) echo "ldapsearch failed ($RC)!" @@ -577,13 +900,24 @@ esac SIZELIMIT=2 echo "Testing lower than soft limit request ($SIZELIMIT) for soft limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Soft Limited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Soft Limited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then @@ -606,13 +940,24 @@ esac SIZELIMIT=100 echo "Testing higher than soft limit request ($SIZELIMIT) for soft limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Soft Limited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Soft Limited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) if test "x$COUNT" != "x" ; then @@ -635,16 +980,39 @@ esac SIZELIMIT=2 echo "Testing lower than hard limit request ($SIZELIMIT) for hard limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Hard Limited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Hard Limited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) - echo "...bumped into requested ($SIZELIMIT) size limit" + if test x"$COUNT" != x ; then + if test "$COUNT" = "$SIZELIMIT" ; then + echo "...bumped into requested ($SIZELIMIT) size limit" + else + echo "...error: got size limit $SIZELIMIT but $COUNT entries" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; *) echo "ldapsearch failed ($RC)!" @@ -656,20 +1024,79 @@ esac SIZELIMIT=100 echo "Testing higher than hard limit request ($SIZELIMIT) for hard limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ - -D 'cn=Hard Limited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Hard Limited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + if test "$COUNT" -gt "$SIZELIMIT" ; then + echo "...error: got $COUNT entries instead of the requested $SIZELIMIT" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) - echo "...bumped into requested ($SIZELIMIT) size limit" + if test x"$COUNT" != x ; then + if test "$COUNT" = "$SIZELIMIT" ; then + echo "...error: bumped into requested ($SIZELIMIT) size limit" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + else + echo "...got size limit $COUNT instead of requested $SIZELIMIT entries" + fi + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; - 11) - echo "...bumped into hard size administrative limit" +# 11) +# echo "...bumped into hard size administrative limit" +# ;; + *) + echo "ldapsearch failed ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC ;; +esac + +SIZELIMIT=max +echo "Testing max limit request ($SIZELIMIT) for hard limited ID..." +$LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret -z $SIZELIMIT \ + -D 'cn=Hard Limited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 +RC=$? +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` +case $RC in + 0) + if test x"$COUNT" != x ; then + echo "...didn't bump into either requested ($SIZELIMIT) or server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + ;; + 4) + if test x"$COUNT" != x ; then + echo "...bumped into requested ($SIZELIMIT=$COUNT) size limit" + else + echo "...error: bumped into size limit but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + ;; +# 11) +# echo "...bumped into hard size administrative limit" +# ;; *) echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS @@ -679,17 +1106,23 @@ esac echo "Testing lower than unchecked limit request for unchecked limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unchecked Limited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(uid=uncheckedlimited)' $SEARCHOUT 2>&1 + -D 'cn=Unchecked Limited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(uid=uncheckedlimited)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" - ;; - 11) - echo "...bumped into unchecked administrative limit" - ;; + if test x"$COUNT" != x ; then + echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi + ;; +# 11) +# echo "...bumped into unchecked administrative limit" +# ;; *) echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS @@ -699,13 +1132,19 @@ esac echo "Testing higher than unchecked limit requested for unchecked limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unchecked Limited User,ou=People,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Unchecked Limited User,ou=People,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...error: didn't bump into server-side unchecked limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + fi + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC ;; 11) echo "...bumped into unchecked administrative limit" @@ -723,16 +1162,28 @@ echo "" echo "Testing no limit requested for unlimited page size ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Unlimited User,ou=Paged Results Users,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Unlimited User,ou=Paged Results Users,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) - echo "...success; didn't bump into server-side size limit (got $COUNT entries)" + if test x"$COUNT" != x ; then + echo "...success; didn't bump into server-side size limit (got $COUNT entries)" + else + echo "...error: did not expect ldapsearch success ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; 4) - echo "...bumped into server-side size limit ($COUNT)" + if test x"$COUNT" != x ; then + echo "...bumped into server-side size limit (got $COUNT entries)" + else + echo "...error: bumped into server-side size limit, but got no entries!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + fi ;; *) echo "ldapsearch failed ($RC)!" @@ -743,10 +1194,10 @@ esac echo "Testing no limit requested for limited page size ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Page Size Limited User,ou=Paged Results Users,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Page Size Limited User,ou=Paged Results Users,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) echo "...success; didn't bump into server-side page size limit (got $COUNT entries)" @@ -766,10 +1217,10 @@ esac echo "Testing no limit requested for pagedResults disabled ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Paged Results Disabled User,ou=Paged Results Users,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Paged Results Disabled User,ou=Paged Results Users,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" @@ -789,10 +1240,10 @@ esac echo "Testing no limit requested for pagedResults total count limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Paged Results Limited User,ou=Paged Results Users,o=University of Michigan,c=US' \ - -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Paged Results Limited User,ou=Paged Results Users,dc=example,dc=com' \ + -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) echo "...success; didn't bump into server-side unchecked limit (got $COUNT entries)" @@ -813,10 +1264,10 @@ esac SIZELIMIT=8 echo "Testing higher than hard but lower then total count limit requested for pagedResults total count limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Paged Results Limited User,ou=Paged Results Users,o=University of Michigan,c=US' \ - -z $SIZELIMIT -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Paged Results Limited User,ou=Paged Results Users,dc=example,dc=com' \ + -z $SIZELIMIT -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side unchecked limit (got $COUNT entries)" @@ -845,10 +1296,42 @@ esac SIZELIMIT=15 echo "Testing higher than total count limit requested for pagedResults total count limited ID..." $LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ - -D 'cn=Paged Results Limited User,ou=Paged Results Users,o=University of Michigan,c=US' \ - -z $SIZELIMIT -E '!pr='$PAGESIZE '(objectClass=*)' $SEARCHOUT 2>&1 + -D 'cn=Paged Results Limited User,ou=Paged Results Users,dc=example,dc=com' \ + -z $SIZELIMIT -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 +RC=$? +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` +case $RC in + 0) + echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side unchecked limit (got $COUNT entries)" + ;; + 4) + if test "x$COUNT" != "x" ; then + if test "x$SIZELIMIT" = "x$COUNT" ; then + echo "...bumped into requested ($SIZELIMIT) size limit" + else + echo "...bumped into server-side size limit ($COUNT)" + fi + else + echo "...bumped into either requested ($SIZELIMIT) or server-side size limit" + fi + ;; + 11) + echo "...bumped into pagedResults total count administrative limit" + ;; + *) + echo "ldapsearch failed ($RC)!" + test $KILLSERVERS != no && kill -HUP $KILLPIDS + exit $RC + ;; +esac + +SIZELIMIT=max +echo "Testing max limit requested for pagedResults total count limited ID..." +$LDAPRSEARCH -S "" -b "$BASEDN" -h $LOCALHOST -p $PORT1 -w secret \ + -D 'cn=Paged Results Limited User,ou=Paged Results Users,dc=example,dc=com' \ + -z $SIZELIMIT -E '!pr='$PAGESIZE'/noprompt' '(objectClass=*)' > $SEARCHOUT 2>&1 RC=$? -COUNT=`cat $SEARCHOUT | grep '^# numEntries:' | sed 's;[^0-9]\+\([0-9]\+\)$;\1;'` +COUNT=`awk '/^# numEntries:/ {print $3}' $SEARCHOUT` case $RC in 0) echo "...success; didn't bump into either requested ($SIZELIMIT) or server-side unchecked limit (got $COUNT entries)"