Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update cms.password.skipLdapConnTest default value #4570

Merged
merged 1 commit into from
Sep 20, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 24 additions & 1 deletion .github/workflows/ca-ds-connection-test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,6 @@ jobs:
-D pki_cert_id_generator=random \
-D pki_request_id_generator=random \
-v
docker exec pki pki-server ca-config-set cms.password.skipLdapConnTest true
docker exec pki pki-server ca-config-set internaldb.minConns 0
docker exec pki pki-server restart --wait
docker exec pki curl -s http://pki.example.com:8080/ca/admin/ca/getStatus
Expand All @@ -76,6 +75,7 @@ jobs:

- name: Test request enrollment
run: |
# enrollment should work
docker exec pki pki ca-cert-request-submit --profile caServerCert --csr-file sslserver.csr | tee output
grep "Reason:" output | wc -l > actual
echo "0" > expected
Expand All @@ -85,6 +85,8 @@ jobs:
run: |
docker stop ds
sleep 10

# enrollment should fail
docker exec pki pki ca-cert-request-submit --profile caServerCert --csr-file sslserver.csr | tee output
grep "Reason:" output | wc -l > actual
echo "1" > expected
Expand All @@ -94,6 +96,8 @@ jobs:
run: |
docker start ds
sleep 20

# enrollment should work
docker exec pki pki ca-cert-request-submit --profile caServerCert --csr-file sslserver.csr | tee output
grep "Reason:" output | wc -l > actual
echo "0" > expected
Expand All @@ -106,6 +110,8 @@ jobs:
docker exec pki pki-server ca-config-set ca.authorityMonitor.enable false
docker exec pki pki-server restart --wait
docker exec pki curl -s http://pki.example.com:8080/ca/admin/ca/getStatus

# enrollment should fail
docker exec pki pki ca-cert-request-submit --profile caServerCert --csr-file sslserver.csr | tee output
grep "Reason:" output | wc -l > actual
echo "1" > expected
Expand All @@ -115,7 +121,24 @@ jobs:
run: |
docker start ds
sleep 60

# enrollment should work
docker exec pki pki ca-cert-request-submit --profile caServerCert --csr-file sslserver.csr | tee output
grep "Reason:" output | wc -l > actual
echo "0" > expected
diff expected actual

- name: Gather artifacts
if: always()
run: |
tests/bin/ds-artifacts-save.sh --output=/tmp/artifacts/pki ds
tests/bin/pki-artifacts-save.sh pki
continue-on-error: true

- name: Upload artifacts
if: always()
uses: actions/upload-artifact@v3
with:
name: ca-ds-connection
path: |
/tmp/artifacts/pki
Original file line number Diff line number Diff line change
Expand Up @@ -478,7 +478,7 @@ public void testLDAPConnections() throws Exception {
return;
}

boolean skipLdapConnectionTest = config.getBoolean("cms.password.skipLdapConnTest", false);
boolean skipLdapConnectionTest = config.getBoolean("cms.password.skipLdapConnTest", true);
logger.debug("CMSEngine: skip LDAP connection test: " + skipLdapConnectionTest);

if (skipLdapConnectionTest) {
Expand Down
Loading