Skip to content

Commit

Permalink
Merge pull request #5281 from stonezdj/testcase_ldap_group_admin
Browse files Browse the repository at this point in the history
Add testcase for define harbor admin by LDAP group DN
  • Loading branch information
stonezdj(Daojun Zhang) committed Aug 7, 2018
2 parents efce4b7 + 78d7ba9 commit 1f65f93
Showing 1 changed file with 31 additions and 0 deletions.
31 changes: 31 additions & 0 deletions tests/testcases/Group3-RBAC/3-08-LDAP-define-harbor-admin-by-dn.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
Test 3-08 - Define Harbor Admin By DN (LDAP Mode)
=======

# Purpose:

To verify that harbor admin can be defined by LDAP group DN

# References:
User guide

# Environment:
* This test requires that a Harbor instance is running and available.
* Harbor is set to authenticate against an LDAP or AD server. ( auth_mode is set to **ldap_auth** .) The user data is stored in an LDAP or AD server.
* A linux host with Docker CLI installed (Docker client).
* At least five(5) non-admin users are in Harbor.

# Test Steps:


1. Create group harbor_sys_admin in LDAP.
1. Create LDAP user sys_admin in LDAP, and add sys_admin to the member of group harbor_sys_admin.
1. Login as admin user, Go to Administration -> Configuration -> Authentication, set the configuration: "LDAP Groups With Admin Privilege" with the DN of harbor_sys_admin.
1. Login in with LDAP user sys_admin.


# Expected Outcome:

1. The sys_admin user can have admin privileges, such as change the configuration, add/remove replication policy, manage repositories etc.

# Possible Problems:
None

0 comments on commit 1f65f93

Please sign in to comment.