From 0df4e8813d573f3e6ad1d084823764cf40a4b5c9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fran=C3=A7ois=20Cami?= Date: Thu, 25 Jun 2020 09:20:49 +0200 Subject: [PATCH] ipatests: display SSSD kdcinfo in test_adtrust_install.py MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The test test_adtrust_install.py::TestIpaAdTrustInstall::test_add_agent_not_allowed sometimes fails at kinit in create_active_user: ``` kinit: Password has expired while getting initial credentials ``` krb5_strace shows that this happens when kinit changes servers between password change and TGT requests. Display SSSD's kdcinfo to see if kinit should be pinned to one server. Related-to: https://pagure.io/freeipa/issue/8353 Related-to: https://pagure.io/freeipa/issue/8271 Signed-off-by: François Cami Reviewed-By: Michal Polovka Reviewed-By: Sumit Bose Reviewed-By: Robbie Harwood --- ipatests/test_integration/test_adtrust_install.py | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/ipatests/test_integration/test_adtrust_install.py b/ipatests/test_integration/test_adtrust_install.py index 317ba1022..e50f05c68 100644 --- a/ipatests/test_integration/test_adtrust_install.py +++ b/ipatests/test_integration/test_adtrust_install.py @@ -59,7 +59,13 @@ class TestIpaAdTrustInstall(IntegrationTest): try: # Create a nonadmin user that will be used by curl. - # krb5_trace set to True: https://pagure.io/freeipa/issue/8353 + # First, display SSSD kdcinfo: + # https://bugzilla.redhat.com/show_bug.cgi?id=1850445#c1 + self.master.run_command([ + "cat", + "/var/lib/sss/pubconf/kdcinfo.%s" % self.master.domain.realm + ], raiseonerr=False) + # Set krb5_trace to True: https://pagure.io/freeipa/issue/8353 tasks.create_active_user( self.master, user, passwd, first=user, last=user, krb5_trace=True