c.Fatalf("Unable to detach user policy: %v", err)
	}
}

// In this test, the parent users gets their permissions from a group, rather
// than having a policy set directly on them.
func (s *TestSuiteIAM) TestLDAPSTSServiceAccountsWithGroups(c *check) {
	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
	defer cancel()

	bucket := getRandomBucketName()

lue":"500"},{"key":"transition_workers","value":"100"},{"key":"stale_uploads_cleanup_interval","value":"6h"},{"key":"stale_uploads_expiry","value":"24h"},{"key":"delete_cleanup_interval","value":"5m"},{"key":"disable_odirect","value":""},{"key":"odirect","value":"on"},{"key":"gzip_objects","value":"off"},{"key":"root_access","value":"on"},{"key":"sync_events","value":"off"},{"key":"object_max_versions","value":"9223372036854775807"}]},"audit_kafka":{"_":[{"key":"enable","value":"off"},{"key":"to...

			}

			// See if the new object is formed.
			// testing whether the copy was successful.
			// Note that this goes directly to the file system,
			// so encryption/compression may interfere at some point.
			buffers[0].Reset()
			r, err := obj.GetObjectNInfo(context.Background(), testCase.bucketName, testCase.newObjectName, nil, nil, opts)

pkg syscall (freebsd-386), const O_APPEND = 8
pkg syscall (freebsd-386), const O_ASYNC = 64
pkg syscall (freebsd-386), const O_CLOEXEC = 0
pkg syscall (freebsd-386), const O_CREAT = 512
pkg syscall (freebsd-386), const O_DIRECT = 65536
pkg syscall (freebsd-386), const O_DIRECTORY = 131072
pkg syscall (freebsd-386), const O_EXCL = 2048
pkg syscall (freebsd-386), const O_EXEC = 262144
pkg syscall (freebsd-386), const O_EXLOCK = 32

// information in IAM (i.e sys.iam*Map) - this info is stored only in the STS
// generated credentials. Thus we skip looking up group memberships, user map,
// and group map and check the appropriate policy maps directly.
func (c *iamCache) policyDBGet(store *IAMStoreSys, name string, isGroup bool, policyPresent bool) ([]string, time.Time, error) {
	if isGroup {
		if store.getUsersSysType() == MinIOUsersSysType {

ryption-S3-Sealed-Key":"IAAfAK+EC8AUWcKSPpNhnr52XfF==","X-Minio-Internal-Server-Side-Encryption-Seal-Algorithm":"DAREv2-HMAC-SHA256","content-type":"application/octet-stream"}},{"Bucket":"buck1","Name":"go_113/src/cmd/vendor/golang.org/x/sys/unix/dirent.go","UserDef":{"X-Minio-Internal-Server-Side-Encryption-Iv":"8sNbBKsVPm0h109z99xz=","X-Minio-Internal-Server-Side-Encryption-S3-Kms-Key-Id":"my-minio-key","X-Minio-Internal-Server-Side-Encryption-S3-Kms-Sealed-Key":"IAAfAMvZJzthJAVErGzG/I2a0dZUsf...