net-ldap 0.16.1 → 0.16.2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (33) hide show
  1. checksums.yaml +5 -5
  2. data/.gitignore +1 -0
  3. data/.travis.yml +23 -1
  4. data/History.rdoc +7 -0
  5. data/README.rdoc +8 -3
  6. data/lib/net/ldap.rb +1 -1
  7. data/lib/net/ldap/connection.rb +4 -0
  8. data/lib/net/ldap/filter.rb +8 -1
  9. data/lib/net/ldap/version.rb +1 -1
  10. data/script/ldap-docker +12 -0
  11. data/test/fixtures/ca/docker-ca.pem +18 -0
  12. data/test/fixtures/{openldap/retcode.ldif → ldif/06-retcode.ldif} +7 -8
  13. data/test/fixtures/ldif/50-seed.ldif +374 -0
  14. data/test/integration/test_add.rb +1 -3
  15. data/test/integration/test_ber.rb +1 -1
  16. data/test/integration/test_bind.rb +12 -34
  17. data/test/integration/test_delete.rb +1 -3
  18. data/test/integration/test_open.rb +10 -11
  19. data/test/integration/test_password_modify.rb +10 -10
  20. data/test/integration/test_return_codes.rb +12 -4
  21. data/test/integration/test_search.rb +8 -8
  22. data/test/test_helper.rb +5 -6
  23. metadata +27 -41
  24. data/script/generate-fixture-ca +0 -48
  25. data/script/install-openldap +0 -134
  26. data/test/fixtures/ca/ca.info +0 -4
  27. data/test/fixtures/ca/cacert.pem +0 -24
  28. data/test/fixtures/ca/cakey.pem +0 -190
  29. data/test/fixtures/openldap/memberof.ldif +0 -33
  30. data/test/fixtures/openldap/slapd.conf.ldif +0 -67
  31. data/test/fixtures/seed.ldif +0 -374
  32. data/test/support/vm/openldap/README.md +0 -64
  33. data/test/support/vm/openldap/Vagrantfile +0 -34
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
- SHA1:
3
- metadata.gz: cd6f9335c52e3019675ba1733ce49135ffe54da7
4
- data.tar.gz: 6fbe8f791d39bf5934125393bf9eb9ae66351e06
2
+ SHA256:
3
+ metadata.gz: bb65f1bdb6d23c483e83e52762a8873b1a872a798e229320243262a1328cc8d8
4
+ data.tar.gz: 18ab54a1cea6eae374327f6933be93d7b4db83081c65db1f38a0c2600e044b34
5
5
  SHA512:
6
- metadata.gz: ecd3d8ce429ece15a44b9034e7626ddae80112539311b3992c424ac2c26d440d38d829b3d61eb6cc5d425ab5457231863895f32781cd30cb5f346e3c5bedb87d
7
- data.tar.gz: 19300497d3d524dbe8a7658f2e21c92c92380143bc06cf4d5a0928724828b55bbc9515333c9f291459d9a62b95e6049e8e8ca8412538023340c8c3f98e9e8ffe
6
+ metadata.gz: 0d6a96984d362d97954e112a4ebea4b594429a9e26781be7b34f7247f134401a99733d84d84b71aee193d169f1f8ea7fe0ce7b3264c8891d7bfe610198dfae01
7
+ data.tar.gz: 36feb9633daaf4c19a347c039d5abad063fb19f1a3dbb52320f2d8cc2ec56b86137f5f79e5700ba8dc364f1450be56bbcc5aca552e4f642a31f9c149451dfa88
data/.gitignore CHANGED
@@ -7,3 +7,4 @@ publish/
7
7
  Gemfile.lock
8
8
  .bundle
9
9
  bin/
10
+ .idea
data/.travis.yml CHANGED
@@ -3,12 +3,23 @@ rvm:
3
3
  - 2.0.0
4
4
  - 2.1
5
5
  - 2.2
6
+ - 2.3
7
+ - 2.4
8
+ - 2.5
9
+ - 2.6
6
10
  # optional
7
11
  - ruby-head
8
12
  - jruby-19mode
9
13
  - jruby-head
10
14
  - rbx-2
11
15
 
16
+ addons:
17
+ hosts:
18
+ - ldap.example.org # needed for TLS verification
19
+
20
+ services:
21
+ - docker
22
+
12
23
  env:
13
24
  - INTEGRATION=openldap
14
25
 
@@ -16,7 +27,18 @@ before_install:
16
27
  - gem update bundler
17
28
 
18
29
  install:
19
- - if [ "$INTEGRATION" = "openldap" ]; then sudo script/install-openldap; fi
30
+ - >
31
+ docker run \
32
+ --hostname ldap.example.org \
33
+ --env LDAP_TLS_VERIFY_CLIENT=try \
34
+ -p 389:389 \
35
+ -p 636:636 \
36
+ -v "$(pwd)"/test/fixtures/ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom \
37
+ --name openldap \
38
+ --detach \
39
+ osixia/openldap:1.3.0 \
40
+ --copy-service \
41
+ --loglevel debug \
20
42
  - bundle install
21
43
 
22
44
  script: bundle exec rake ci
data/History.rdoc CHANGED
@@ -1,3 +1,10 @@
1
+ === Net::LDAP 0.16.2
2
+
3
+ * Net::LDAP#open does not cache bind result {#334}[https://github.com/ruby-ldap/ruby-net-ldap/pull/334]
4
+ * Fix CI build {#333}[https://github.com/ruby-ldap/ruby-net-ldap/pull/333]
5
+ * Fix to "undefined method 'result_code'" {#308}[https://github.com/ruby-ldap/ruby-net-ldap/pull/308]
6
+ * Fixed Exception: incompatible character encodings: ASCII-8BIT and UTF-8 in filter.rb {#285}[https://github.com/ruby-ldap/ruby-net-ldap/pull/285]
7
+
1
8
  === Net::LDAP 0.16.1
2
9
 
3
10
  * Send DN and newPassword with password_modify request {#271}[https://github.com/ruby-ldap/ruby-net-ldap/pull/271]
data/README.rdoc CHANGED
@@ -53,9 +53,14 @@ This task will run the test suite and the
53
53
  rake rubotest
54
54
 
55
55
  CI takes too long? If your local box supports
56
- {Vagrant}[https://www.vagrantup.com/], you can run most of the tests
57
- in a VM on your local box. For more details and setup instructions, see
58
- {test/support/vm/openldap/README.md}[https://github.com/ruby-ldap/ruby-net-ldap/tree/master/test/support/vm/openldap/README.md]
56
+ {Docker}[https://www.docker.com/], you can also run integration tests locally.
57
+ Simply run:
58
+
59
+ script/ldap-docker
60
+ INTEGRATION=openldap rake test
61
+
62
+ CAVEAT: you need to add the following line to /etc/hosts
63
+ 127.0.0.1 ldap.example.org
59
64
 
60
65
  == Release
61
66
 
data/lib/net/ldap.rb CHANGED
@@ -712,7 +712,7 @@ class Net::LDAP
712
712
  begin
713
713
  @open_connection = new_connection
714
714
  payload[:connection] = @open_connection
715
- payload[:bind] = @open_connection.bind(@auth)
715
+ payload[:bind] = @result = @open_connection.bind(@auth)
716
716
  yield self
717
717
  ensure
718
718
  @open_connection.close if @open_connection
data/lib/net/ldap/connection.rb CHANGED
@@ -467,6 +467,10 @@ class Net::LDAP::Connection #:nodoc:
467
467
  end
468
468
  end
469
469
 
470
+ if result_pdu.nil?
471
+ raise Net::LDAP::ResponseMissingOrInvalidError, "response missing"
472
+ end
473
+
470
474
  # count number of pages of results
471
475
  payload[:page_count] ||= 0
472
476
  payload[:page_count] += 1
data/lib/net/ldap/filter.rb CHANGED
@@ -645,8 +645,15 @@ class Net::LDAP::Filter
645
645
 
646
646
  ##
647
647
  # Converts escaped characters (e.g., "\\28") to unescaped characters
648
+ # @note slawson20170317: Don't attempt to unescape 16 byte binary data which we assume are objectGUIDs
649
+ # The binary form of 5936AE79-664F-44EA-BCCB-5C39399514C6 triggers a BINARY -> UTF-8 conversion error
648
650
  def unescape(right)
649
- right.to_s.gsub(/\\([a-fA-F\d]{2})/) { [$1.hex].pack("U") }
651
+ right = right.to_s
652
+ if right.length == 16 && right.encoding == Encoding::BINARY
653
+ right
654
+ else
655
+ right.to_s.gsub(/\\([a-fA-F\d]{2})/) { [$1.hex].pack("U") }
656
+ end
650
657
  end
651
658
  private :unescape
652
659
 
data/lib/net/ldap/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  module Net
2
2
  class LDAP
3
- VERSION = "0.16.1"
3
+ VERSION = "0.16.2"
4
4
  end
5
5
  end
data/script/ldap-docker ADDED
@@ -0,0 +1,12 @@
1
+ #!/usr/bin/env bash
2
+ # Usage: script/ldap-docker
3
+ #
4
+ # Starts a openldap docker container ready for integration tests
5
+
6
+ docker run --rm -ti \
7
+ --hostname ldap.example.org \
8
+ --env LDAP_TLS_VERIFY_CLIENT=try \
9
+ -p 389:389 -p 636:636 \
10
+ -v "$(pwd)"/test/fixtures/ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom \
11
+ --name my-openldap-container \
12
+ osixia/openldap:1.3.0 --copy-service --loglevel debug
data/test/fixtures/ca/docker-ca.pem ADDED
@@ -0,0 +1,18 @@
1
+ -----BEGIN CERTIFICATE-----
2
+ MIIC0zCCAlmgAwIBAgIUCfQ+m0pgZ/BjYAJvxrn/bdGNZokwCgYIKoZIzj0EAwMw
3
+ gZYxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxBMUEgQ2FyIFdhc2gxJDAiBgNVBAsT
4
+ G0luZm9ybWF0aW9uIFRlY2hub2xvZ3kgRGVwLjEUMBIGA1UEBxMLQWxidXF1ZXJx
5
+ dWUxEzARBgNVBAgTCk5ldyBNZXhpY28xHzAdBgNVBAMTFmRvY2tlci1saWdodC1i
6
+ YXNlaW1hZ2UwHhcNMTUxMjIzMTM1MzAwWhcNMjAxMjIxMTM1MzAwWjCBljELMAkG
7
+ A1UEBhMCVVMxFTATBgNVBAoTDEExQSBDYXIgV2FzaDEkMCIGA1UECxMbSW5mb3Jt
8
+ YXRpb24gVGVjaG5vbG9neSBEZXAuMRQwEgYDVQQHEwtBbGJ1cXVlcnF1ZTETMBEG
9
+ A1UECBMKTmV3IE1leGljbzEfMB0GA1UEAxMWZG9ja2VyLWxpZ2h0LWJhc2VpbWFn
10
+ ZTB2MBAGByqGSM49AgEGBSuBBAAiA2IABMZf/12pupAgl8Sm+j8GmjNeNbSFAZWW
11
+ oTmIvf2Mu4LWPHy4bTldkQgHUbBpT3xWz8f0lB/ru7596CHsGoL2A28hxuclq5hb
12
+ Ux1yrIt3bJIY3TuiX25HGTe6kGCJPB1aLaNmMGQwDgYDVR0PAQH/BAQDAgEGMBIG
13
+ A1UdEwEB/wQIMAYBAf8CAQIwHQYDVR0OBBYEFE+l6XolXDAYnGLTl4W6ULKHrm74
14
+ MB8GA1UdIwQYMBaAFE+l6XolXDAYnGLTl4W6ULKHrm74MAoGCCqGSM49BAMDA2gA
15
+ MGUCMQCXLZj8okyxW6UTL7hribUUbu63PbjuwIXnwi420DdNsvA9A7fcQEXScWFL
16
+ XAGC8rkCMGcqwXZPSRfwuI9r+R11gTrP92hnaVxs9sjRikctpkQpOyNlIXFPopFK
17
+ 8FdfWPypvA==
18
+ -----END CERTIFICATE-----
data/test/fixtures/{openldap/retcode.ldif → ldif/06-retcode.ldif} RENAMED
@@ -1,19 +1,18 @@
1
- dn: cn=module,cn=config
2
- cn: module
3
- objectClass: olcModuleList
4
- objectClass: top
5
- olcModulePath: /usr/lib/ldap
6
- olcModuleLoad: retcode.la
1
+ dn: cn=module{0},cn=config
2
+ changetype: modify
3
+ add: olcModuleLoad
4
+ olcModuleLoad: retcode
7
5
 
8
6
  # source: http://www.opensource.apple.com/source/OpenLDAP/OpenLDAP-186/OpenLDAP/tests/data/retcode.conf?txt
9
7
 
10
- dn: olcOverlay={2}retcode,olcDatabase={1}hdb,cn=config
8
+ dn: olcOverlay={2}retcode,olcDatabase={1}{{ LDAP_BACKEND }},cn=config
9
+ changetype: add
11
10
  objectClass: olcConfig
12
11
  objectClass: olcRetcodeConfig
13
12
  objectClass: olcOverlayConfig
14
13
  objectClass: top
15
14
  olcOverlay: retcode
16
- olcRetcodeParent: ou=Retcodes,dc=rubyldap,dc=com
15
+ olcRetcodeParent: ou=Retcodes,dc=example,dc=org
17
16
  olcRetcodeInDir: TRUE
18
17
  olcRetcodeSleep: 0
19
18
  olcRetcodeItem: "cn=success" 0x00
data/test/fixtures/ldif/50-seed.ldif ADDED
@@ -0,0 +1,374 @@
1
+ dn: ou=People,dc=example,dc=org
2
+ objectClass: top
3
+ objectClass: organizationalUnit
4
+ ou: People
5
+
6
+ dn: ou=Groups,dc=example,dc=org
7
+ objectClass: top
8
+ objectClass: organizationalUnit
9
+ ou: Groups
10
+
11
+ # Directory Superuser
12
+ dn: uid=admin,dc=example,dc=org
13
+ uid: admin
14
+ cn: system administrator
15
+ sn: administrator
16
+ objectClass: top
17
+ objectClass: person
18
+ objectClass: organizationalPerson
19
+ objectClass: inetOrgPerson
20
+ displayName: Directory Superuser
21
+ userPassword: passworD1
22
+
23
+ # Users 1-10
24
+
25
+ dn: uid=user1,ou=People,dc=example,dc=org
26
+ uid: user1
27
+ cn: user1
28
+ sn: user1
29
+ objectClass: top
30
+ objectClass: person
31
+ objectClass: organizationalPerson
32
+ objectClass: inetOrgPerson
33
+ userPassword: passworD1
34
+ mail: user1@rubyldap.com
35
+
36
+ dn: uid=user2,ou=People,dc=example,dc=org
37
+ uid: user2
38
+ cn: user2
39
+ sn: user2
40
+ objectClass: top
41
+ objectClass: person
42
+ objectClass: organizationalPerson
43
+ objectClass: inetOrgPerson
44
+ userPassword: passworD1
45
+ mail: user2@rubyldap.com
46
+
47
+ dn: uid=user3,ou=People,dc=example,dc=org
48
+ uid: user3
49
+ cn: user3
50
+ sn: user3
51
+ objectClass: top
52
+ objectClass: person
53
+ objectClass: organizationalPerson
54
+ objectClass: inetOrgPerson
55
+ userPassword: passworD1
56
+ mail: user3@rubyldap.com
57
+
58
+ dn: uid=user4,ou=People,dc=example,dc=org
59
+ uid: user4
60
+ cn: user4
61
+ sn: user4
62
+ objectClass: top
63
+ objectClass: person
64
+ objectClass: organizationalPerson
65
+ objectClass: inetOrgPerson
66
+ userPassword: passworD1
67
+ mail: user4@rubyldap.com
68
+
69
+ dn: uid=user5,ou=People,dc=example,dc=org
70
+ uid: user5
71
+ cn: user5
72
+ sn: user5
73
+ objectClass: top
74
+ objectClass: person
75
+ objectClass: organizationalPerson
76
+ objectClass: inetOrgPerson
77
+ userPassword: passworD1
78
+ mail: user5@rubyldap.com
79
+
80
+ dn: uid=user6,ou=People,dc=example,dc=org
81
+ uid: user6
82
+ cn: user6
83
+ sn: user6
84
+ objectClass: top
85
+ objectClass: person
86
+ objectClass: organizationalPerson
87
+ objectClass: inetOrgPerson
88
+ userPassword: passworD1
89
+ mail: user6@rubyldap.com
90
+
91
+ dn: uid=user7,ou=People,dc=example,dc=org
92
+ uid: user7
93
+ cn: user7
94
+ sn: user7
95
+ objectClass: top
96
+ objectClass: person
97
+ objectClass: organizationalPerson
98
+ objectClass: inetOrgPerson
99
+ userPassword: passworD1
100
+ mail: user7@rubyldap.com
101
+
102
+ dn: uid=user8,ou=People,dc=example,dc=org
103
+ uid: user8
104
+ cn: user8
105
+ sn: user8
106
+ objectClass: top
107
+ objectClass: person
108
+ objectClass: organizationalPerson
109
+ objectClass: inetOrgPerson
110
+ userPassword: passworD1
111
+ mail: user8@rubyldap.com
112
+
113
+ dn: uid=user9,ou=People,dc=example,dc=org
114
+ uid: user9
115
+ cn: user9
116
+ sn: user9
117
+ objectClass: top
118
+ objectClass: person
119
+ objectClass: organizationalPerson
120
+ objectClass: inetOrgPerson
121
+ userPassword: passworD1
122
+ mail: user9@rubyldap.com
123
+
124
+ dn: uid=user10,ou=People,dc=example,dc=org
125
+ uid: user10
126
+ cn: user10
127
+ sn: user10
128
+ objectClass: top
129
+ objectClass: person
130
+ objectClass: organizationalPerson
131
+ objectClass: inetOrgPerson
132
+ userPassword: passworD1
133
+ mail: user10@rubyldap.com
134
+
135
+ # Emailless User
136
+
137
+ dn: uid=emailless-user1,ou=People,dc=example,dc=org
138
+ uid: emailless-user1
139
+ cn: emailless-user1
140
+ sn: emailless-user1
141
+ objectClass: top
142
+ objectClass: person
143
+ objectClass: organizationalPerson
144
+ objectClass: inetOrgPerson
145
+ userPassword: passworD1
146
+
147
+ # Groupless User
148
+
149
+ dn: uid=groupless-user1,ou=People,dc=example,dc=org
150
+ uid: groupless-user1
151
+ cn: groupless-user1
152
+ sn: groupless-user1
153
+ objectClass: top
154
+ objectClass: person
155
+ objectClass: organizationalPerson
156
+ objectClass: inetOrgPerson
157
+ userPassword: passworD1
158
+
159
+ # Admin User
160
+
161
+ dn: uid=admin1,ou=People,dc=example,dc=org
162
+ uid: admin1
163
+ cn: admin1
164
+ sn: admin1
165
+ objectClass: top
166
+ objectClass: person
167
+ objectClass: organizationalPerson
168
+ objectClass: inetOrgPerson
169
+ userPassword: passworD1
170
+ mail: admin1@rubyldap.com
171
+
172
+ # Groups
173
+
174
+ dn: cn=ghe-users,ou=Groups,dc=example,dc=org
175
+ cn: ghe-users
176
+ objectClass: groupOfNames
177
+ member: uid=user1,ou=People,dc=example,dc=org
178
+ member: uid=emailless-user1,ou=People,dc=example,dc=org
179
+
180
+ dn: cn=all-users,ou=Groups,dc=example,dc=org
181
+ cn: all-users
182
+ objectClass: groupOfNames
183
+ member: cn=ghe-users,ou=Groups,dc=example,dc=org
184
+ member: uid=user1,ou=People,dc=example,dc=org
185
+ member: uid=user2,ou=People,dc=example,dc=org
186
+ member: uid=user3,ou=People,dc=example,dc=org
187
+ member: uid=user4,ou=People,dc=example,dc=org
188
+ member: uid=user5,ou=People,dc=example,dc=org
189
+ member: uid=user6,ou=People,dc=example,dc=org
190
+ member: uid=user7,ou=People,dc=example,dc=org
191
+ member: uid=user8,ou=People,dc=example,dc=org
192
+ member: uid=user9,ou=People,dc=example,dc=org
193
+ member: uid=user10,ou=People,dc=example,dc=org
194
+ member: uid=emailless-user1,ou=People,dc=example,dc=org
195
+
196
+ dn: cn=ghe-admins,ou=Groups,dc=example,dc=org
197
+ cn: ghe-admins
198
+ objectClass: groupOfNames
199
+ member: uid=admin1,ou=People,dc=example,dc=org
200
+
201
+ dn: cn=all-admins,ou=Groups,dc=example,dc=org
202
+ cn: all-admins
203
+ objectClass: groupOfNames
204
+ member: cn=ghe-admins,ou=Groups,dc=example,dc=org
205
+ member: uid=admin1,ou=People,dc=example,dc=org
206
+
207
+ dn: cn=n-member-group10,ou=Groups,dc=example,dc=org
208
+ cn: n-member-group10
209
+ objectClass: groupOfNames
210
+ member: uid=user1,ou=People,dc=example,dc=org
211
+ member: uid=user2,ou=People,dc=example,dc=org
212
+ member: uid=user3,ou=People,dc=example,dc=org
213
+ member: uid=user4,ou=People,dc=example,dc=org
214
+ member: uid=user5,ou=People,dc=example,dc=org
215
+ member: uid=user6,ou=People,dc=example,dc=org
216
+ member: uid=user7,ou=People,dc=example,dc=org
217
+ member: uid=user8,ou=People,dc=example,dc=org
218
+ member: uid=user9,ou=People,dc=example,dc=org
219
+ member: uid=user10,ou=People,dc=example,dc=org
220
+
221
+ dn: cn=nested-group1,ou=Groups,dc=example,dc=org
222
+ cn: nested-group1
223
+ objectClass: groupOfNames
224
+ member: uid=user1,ou=People,dc=example,dc=org
225
+ member: uid=user2,ou=People,dc=example,dc=org
226
+ member: uid=user3,ou=People,dc=example,dc=org
227
+ member: uid=user4,ou=People,dc=example,dc=org
228
+ member: uid=user5,ou=People,dc=example,dc=org
229
+
230
+ dn: cn=nested-group2,ou=Groups,dc=example,dc=org
231
+ cn: nested-group2
232
+ objectClass: groupOfNames
233
+ member: uid=user6,ou=People,dc=example,dc=org
234
+ member: uid=user7,ou=People,dc=example,dc=org
235
+ member: uid=user8,ou=People,dc=example,dc=org
236
+ member: uid=user9,ou=People,dc=example,dc=org
237
+ member: uid=user10,ou=People,dc=example,dc=org
238
+
239
+ dn: cn=nested-groups,ou=Groups,dc=example,dc=org
240
+ cn: nested-groups
241
+ objectClass: groupOfNames
242
+ member: cn=nested-group1,ou=Groups,dc=example,dc=org
243
+ member: cn=nested-group2,ou=Groups,dc=example,dc=org
244
+
245
+ dn: cn=n-member-nested-group1,ou=Groups,dc=example,dc=org
246
+ cn: n-member-nested-group1
247
+ objectClass: groupOfNames
248
+ member: cn=nested-group1,ou=Groups,dc=example,dc=org
249
+
250
+ dn: cn=deeply-nested-group0.0.0,ou=Groups,dc=example,dc=org
251
+ cn: deeply-nested-group0.0.0
252
+ objectClass: groupOfNames
253
+ member: uid=user1,ou=People,dc=example,dc=org
254
+ member: uid=user2,ou=People,dc=example,dc=org
255
+ member: uid=user3,ou=People,dc=example,dc=org
256
+ member: uid=user4,ou=People,dc=example,dc=org
257
+ member: uid=user5,ou=People,dc=example,dc=org
258
+
259
+ dn: cn=deeply-nested-group0.0.1,ou=Groups,dc=example,dc=org
260
+ cn: deeply-nested-group0.0.1
261
+ objectClass: groupOfNames
262
+ member: uid=user6,ou=People,dc=example,dc=org
263
+ member: uid=user7,ou=People,dc=example,dc=org
264
+ member: uid=user8,ou=People,dc=example,dc=org
265
+ member: uid=user9,ou=People,dc=example,dc=org
266
+ member: uid=user10,ou=People,dc=example,dc=org
267
+
268
+ dn: cn=deeply-nested-group0.0,ou=Groups,dc=example,dc=org
269
+ cn: deeply-nested-group0.0
270
+ objectClass: groupOfNames
271
+ member: cn=deeply-nested-group0.0.0,ou=Groups,dc=example,dc=org
272
+ member: cn=deeply-nested-group0.0.1,ou=Groups,dc=example,dc=org
273
+
274
+ dn: cn=deeply-nested-group0,ou=Groups,dc=example,dc=org
275
+ cn: deeply-nested-group0
276
+ objectClass: groupOfNames
277
+ member: cn=deeply-nested-group0.0,ou=Groups,dc=example,dc=org
278
+
279
+ dn: cn=deeply-nested-groups,ou=Groups,dc=example,dc=org
280
+ cn: deeply-nested-groups
281
+ objectClass: groupOfNames
282
+ member: cn=deeply-nested-group0,ou=Groups,dc=example,dc=org
283
+
284
+ dn: cn=n-depth-nested-group1,ou=Groups,dc=example,dc=org
285
+ cn: n-depth-nested-group1
286
+ objectClass: groupOfNames
287
+ member: cn=nested-group1,ou=Groups,dc=example,dc=org
288
+
289
+ dn: cn=n-depth-nested-group2,ou=Groups,dc=example,dc=org
290
+ cn: n-depth-nested-group2
291
+ objectClass: groupOfNames
292
+ member: cn=n-depth-nested-group1,ou=Groups,dc=example,dc=org
293
+
294
+ dn: cn=n-depth-nested-group3,ou=Groups,dc=example,dc=org
295
+ cn: n-depth-nested-group3
296
+ objectClass: groupOfNames
297
+ member: cn=n-depth-nested-group2,ou=Groups,dc=example,dc=org
298
+
299
+ dn: cn=n-depth-nested-group4,ou=Groups,dc=example,dc=org
300
+ cn: n-depth-nested-group4
301
+ objectClass: groupOfNames
302
+ member: cn=n-depth-nested-group3,ou=Groups,dc=example,dc=org
303
+
304
+ dn: cn=n-depth-nested-group5,ou=Groups,dc=example,dc=org
305
+ cn: n-depth-nested-group5
306
+ objectClass: groupOfNames
307
+ member: cn=n-depth-nested-group4,ou=Groups,dc=example,dc=org
308
+
309
+ dn: cn=n-depth-nested-group6,ou=Groups,dc=example,dc=org
310
+ cn: n-depth-nested-group6
311
+ objectClass: groupOfNames
312
+ member: cn=n-depth-nested-group5,ou=Groups,dc=example,dc=org
313
+
314
+ dn: cn=n-depth-nested-group7,ou=Groups,dc=example,dc=org
315
+ cn: n-depth-nested-group7
316
+ objectClass: groupOfNames
317
+ member: cn=n-depth-nested-group6,ou=Groups,dc=example,dc=org
318
+
319
+ dn: cn=n-depth-nested-group8,ou=Groups,dc=example,dc=org
320
+ cn: n-depth-nested-group8
321
+ objectClass: groupOfNames
322
+ member: cn=n-depth-nested-group7,ou=Groups,dc=example,dc=org
323
+
324
+ dn: cn=n-depth-nested-group9,ou=Groups,dc=example,dc=org
325
+ cn: n-depth-nested-group9
326
+ objectClass: groupOfNames
327
+ member: cn=n-depth-nested-group8,ou=Groups,dc=example,dc=org
328
+
329
+ dn: cn=head-group,ou=Groups,dc=example,dc=org
330
+ cn: head-group
331
+ objectClass: groupOfNames
332
+ member: cn=tail-group,ou=Groups,dc=example,dc=org
333
+ member: uid=user1,ou=People,dc=example,dc=org
334
+ member: uid=user2,ou=People,dc=example,dc=org
335
+ member: uid=user3,ou=People,dc=example,dc=org
336
+ member: uid=user4,ou=People,dc=example,dc=org
337
+ member: uid=user5,ou=People,dc=example,dc=org
338
+
339
+ dn: cn=tail-group,ou=Groups,dc=example,dc=org
340
+ cn: tail-group
341
+ objectClass: groupOfNames
342
+ member: cn=head-group,ou=Groups,dc=example,dc=org
343
+ member: uid=user6,ou=People,dc=example,dc=org
344
+ member: uid=user7,ou=People,dc=example,dc=org
345
+ member: uid=user8,ou=People,dc=example,dc=org
346
+ member: uid=user9,ou=People,dc=example,dc=org
347
+ member: uid=user10,ou=People,dc=example,dc=org
348
+
349
+ dn: cn=recursively-nested-groups,ou=Groups,dc=example,dc=org
350
+ cn: recursively-nested-groups
351
+ objectClass: groupOfNames
352
+ member: cn=head-group,ou=Groups,dc=example,dc=org
353
+ member: cn=tail-group,ou=Groups,dc=example,dc=org
354
+
355
+ # posixGroup
356
+
357
+ dn: cn=posix-group1,ou=Groups,dc=example,dc=org
358
+ cn: posix-group1
359
+ objectClass: posixGroup
360
+ gidNumber: 1001
361
+ memberUid: user1
362
+ memberUid: user2
363
+ memberUid: user3
364
+ memberUid: user4
365
+ memberUid: user5
366
+
367
+ # missing members
368
+
369
+ dn: cn=missing-users,ou=Groups,dc=example,dc=org
370
+ cn: missing-users
371
+ objectClass: groupOfNames
372
+ member: uid=user1,ou=People,dc=example,dc=org
373
+ member: uid=user2,ou=People,dc=example,dc=org
374
+ member: uid=nonexistent-user,ou=People,dc=example,dc=org