IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

ipatests: display SSSD kdcinfo in test_adtrust_install.py

Browse Source 
The test test_adtrust_install.py::TestIpaAdTrustInstall::test_add_agent_not_allowed
sometimes fails at kinit in create_active_user:
```
kinit: Password has expired while getting initial credentials
```
krb5_strace shows that this happens when kinit changes servers
between password change and TGT requests.
Display SSSD's kdcinfo to see if kinit should be pinned to one
server.

Related-to: https://pagure.io/freeipa/issue/8353
Related-to: https://pagure.io/freeipa/issue/8271
Signed-off-by: François Cami <fcami@redhat.com>
Reviewed-By: Michal Polovka <mpolovka@redhat.com>
Reviewed-By: Sumit Bose <sbose@redhat.com>
Reviewed-By: Robbie Harwood <rharwood@redhat.com>
This commit is contained in:
François Cami 2020-06-25 09:20:49 +02:00
parent 9858e8636f
commit 0df4e8813d
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ipatests/test_integration/test_adtrust_install.py
View File

@ -59,7 +59,13 @@ class TestIpaAdTrustInstall(IntegrationTest):
try: try:
# Create a nonadmin user that will be used by curl. # Create a nonadmin user that will be used by curl.
# krb5_trace set to True: https://pagure.io/freeipa/issue/8353 # First, display SSSD kdcinfo:
# https://bugzilla.redhat.com/show_bug.cgi?id=1850445#c1
self.master.run_command([
"cat",
"/var/lib/sss/pubconf/kdcinfo.%s" % self.master.domain.realm
], raiseonerr=False)
# Set krb5_trace to True: https://pagure.io/freeipa/issue/8353
tasks.create_active_user( tasks.create_active_user(
self.master, user, passwd, first=user, last=user, self.master, user, passwd, first=user, last=user,
krb5_trace=True krb5_trace=True