redfish/account_service/test_ldap_configuration

[fangkaiyu2023]

LDAP user with Operator privilege is able to add or delete IP address, so the expected valid_status_code should be HTTP_OK.

[mdmillerii]

Is this reporting that the Operator is supposed to have this access or is bmcweb not enforcing and the testcase detects the issue?

[fangkaiyu2023]

@mdmillerii the Operator is supposed to have this access

[gkeishin]

@prkatti1 @swe12345 Please look into this.

[prkatti1]

ldap operator user should not be able add ip delete ip of the system

[fangkaiyu2023]

@prkatti1 Thank you for your reply! However, based on my testing, I discovered that in OpenBMC 2.11.0 and 2.17.0-dev, the operator user is able to add or delete IP addresses through bmcweb (Redfish API). Below, I’ve outlined my testing environment and results:

[prkatti1]

Pls open a defect