Unix Story Test

Last modified 12 Nov 2021 16:57 +01:00
Story tests

MidPoint contains a set of "story tests". Such tests implement almost complete midPoint deployment scenarios with all the configuration, resources and policies. These tests have a configuration that is almost real-world but the individual resources and data are simplified so we are able to automatically execute them as integration tests. This helps to make sure that midPoint works in situations that are very close to reality.

As the story tests contain almost complete sophisticated scenarios they are not only interesting to developers but also to system engineers. The configuration used in story tests can be used as an inspiration for midPoint configuration in similar real-world scenarios. Therefore pages like this one document the story tests. Each page describes the basic idea of the test and the most important part of the configuration that is used in the test.

Basic Idea

The tests demonstrates the provisioning to the LDAP server using Unix-friendly data structures. Namely the posixUser and posixGroup auxiliary object classes are used. The test has only one resource, and it is OpenDJ directory server. However, there are two quite distinct roles:

  • Role Basic User grants normal user privileges in the directory server. Just ordinary inetOrgPerson object class is used in this case.

  • Role Unix User sets up the account to be also used as an Unix account. The posixUser object class is used in addition to the inetOrgPerson object class.

The interesting thing is that role Unix User can be arbitrarily assigned and unassigned from the user. This causes the change in objectclass structure and attributes. When the Unix User role is added, the posixUser auxiliary object class is added and also all the mandatory attributes that this object class requires (otherwise there would be a schema violation error). When the Unix User role is unassigned the posixUser auxiliary object class is removed and also all the extra attributes that are defined here (otherwise there also would be a schema violation error).

TODO: sequneces

TODO: groups


Resource Type Definition Description




Target Resource


Target resource. It is assumed that this is both general-purpose directory system and also a directory system for connecting Unix systems.

Resource Objects kind intent Description

user accounts



LDAP groups



UNIX (posix) groups



Was this page helpful?
Thanks for your feedback