mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
ipatests: Add PTR record for IP SAN
If PTR record is missing for an IP address then cert request with SAN option throws an error. This fix is to add the PTR record so that cert request doesn't throw an error. Signed-off-by: Mohammad Rizwan <myusuf@redhat.com> Reviewed-By: Kaleemullah Siddiqui <ksiddiqu@redhat.com>
This commit is contained in:
committed by
Alexander Bokovoy
parent
ffbbc30146
commit
32b1242549
@@ -99,6 +99,17 @@ class TestInstallMasterClient(IntegrationTest):
|
||||
certfile = '/etc/pki/tls/certs/test2.pem'
|
||||
|
||||
tasks.kinit_admin(self.master)
|
||||
|
||||
zone = tasks.prepare_reverse_zone(self.master, self.clients[0].ip)[0]
|
||||
|
||||
# add PTR dns record for cert request with SAN extention
|
||||
rec = str(self.clients[0].ip).split('.')[3]
|
||||
result = self.master.run_command(
|
||||
['ipa', 'dnsrecord-add', zone, rec, '--ptr-rec', hostname]
|
||||
)
|
||||
assert 'Record name: {}'.format(rec) in result.stdout_text
|
||||
assert 'PTR record: {}'.format(hostname) in result.stdout_text
|
||||
|
||||
name, zone = hostname.split('.', 1)
|
||||
self.master.run_command(['ipa', 'dnsrecord-show', zone, name])
|
||||
tasks.kdestroy_all(self.master)
|
||||
|
||||
Reference in New Issue
Block a user