Skip to content

Commit

Permalink
Add unit test and remove not needed parts
Browse files Browse the repository at this point in the history
  • Loading branch information
andriydnvd committed Oct 2, 2023
1 parent a70b5f6 commit 202eebf
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 21 deletions.
27 changes: 13 additions & 14 deletions doc/aaa/ldap/hld_ldap.md
Original file line number Diff line number Diff line change
Expand Up @@ -117,7 +117,6 @@ LDAP_TABLE:{
" hostname_check ": {{False}}
" ldap_version": {{3}}
" user_base_dn": {{ou=users,dc=example,dc=com (string)}}
" login_name_attribute ": {{num}}
" ldap_port": {{389}}
" referrals": {{enabled}}
" timeout": {{5 (duration_sec)}}
Expand Down Expand Up @@ -145,10 +144,6 @@ uid=6000(test_admin), groups=1000(admin),4(adm),27(sudo),999(docker),1001(redis)

not relevant

### Configuration and management
TODO restapi?
ngmi?

#### Manifest (if the feature is an Application Extension)

not relevant
Expand Down Expand Up @@ -286,13 +281,6 @@ module sonic-system-ldap {
description "Ldap user base dn";
}
leaf login_name_attribute {
type string {
length "1..65";
}
description "Ldap login name attribute";
}
leaf ldap_port {
type inet:port-number;
default 389;
Expand Down Expand Up @@ -412,7 +400,7 @@ Example of error flows:
• Timeout
• Loss of network connectivity

When LDAP login failed as result of authentication timeout. If configured fallback enabled(TBD: check if default in SONiC). The login flow will do the next follow the authentication method detected.
When LDAP login failed as result of authentication timeout the login flow will do the next following authentication method detected. If configured fallback enabled.
Authentication failed – user will not be able to connect like regular authentication fail.

### Restrictions/Limitations
Expand Down Expand Up @@ -443,7 +431,18 @@ AAA LDAP login configuration:
- Configure AAA authentication login local, ldap

#### Unit Test cases
TODO
#### Unit Test cases
Test changes in database affect end-point configuration.
Check config files after all config are set
- Configure base-dn
- Configure bind-dn
- Configure bind-password
- Configure ldap server-ip
- Configure group-attribute
- Configure ldap port
- Configure scope
- Configure timeout
- Configure version

#### System Test cases

Expand Down
7 changes: 0 additions & 7 deletions doc/aaa/ldap/sonic-system-ldap.yang
Original file line number Diff line number Diff line change
Expand Up @@ -127,13 +127,6 @@ module sonic-system-ldap {
description "Ldap user base dn";
}

leaf login_name_attribute {
type string {
length "1..65";
}
description "Ldap login name attribute";
}

leaf ldap_port {
type inet:port-number;
default 389;
Expand Down

0 comments on commit 202eebf

Please sign in to comment.