ipatests: mark xfail tests using sssctl domain-status

In fedora 37+, sssctl domain-status is failing.
Mark xfail the gating tests impacted by this issue, to avoid
breaking the CI gating when we move to f37.

Related: https://pagure.io/freeipa/issue/9234
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
Reviewed-By: Stanislav Levin <slev@altlinux.org>

ipatests/test_integration/test_adtrust_install.py

@@ -6,8 +6,10 @@
 
 import re
 import os
+import pytest
 import textwrap
 
+from ipaplatform.osinfo import osinfo
 from ipaplatform.paths import paths
 from ipapython.dn import DN
 from ipatests.pytest_ipa.integration import tasks
@@ -50,6 +52,9 @@ class TestIpaAdTrustInstall(IntegrationTest):
         res = self.master.run_command(['testparm', '-s'])
         assert 'ERROR' not in (res.stdout_text + res.stderr_text)
 
+    @pytest.mark.xfail(
+        osinfo.id == 'fedora' and osinfo.version_number >= (37,),
+        reason='freeipa ticket 9234', strict=True)
     def test_add_agent_not_allowed(self):
         """Check that add-agents can be run only by Admins."""
         user = "nonadmin"
@@ -251,6 +256,9 @@ class TestIpaAdTrustInstall(IntegrationTest):
                  '"member","ipaexternalmember")')
         assert value in entry_list
 
+    @pytest.mark.xfail(
+        osinfo.id == 'fedora' and osinfo.version_number >= (37,),
+        reason='freeipa ticket 9234', strict=True)
     def test_ipa_user_pac(self):
         """Test that a user can request a service ticket with PAC"""
         user = 'testpacuser'
@@ -279,6 +287,9 @@ class TestIpaAdTrustInstall(IntegrationTest):
             tasks.kinit_admin(self.master)
             self.master.run_command(['ipa', 'user-del', user])
 
+    @pytest.mark.xfail(
+        osinfo.id == 'fedora' and osinfo.version_number >= (37,),
+        reason='freeipa ticket 9234', strict=True)
     def test_ipa_user_s4u2self_pac(self):
         """Test that a service can request S4U2Self ticket with PAC"""
         user = 'tests4u2selfuser'

ipatests/test_integration/test_commands.py

@@ -24,6 +24,7 @@ from datetime import datetime, timedelta
 
 from ipalib.constants import IPAAPI_USER
 
+from ipaplatform.osinfo import osinfo
 from ipaplatform.paths import paths
 
 from ipapython.dn import DN
@@ -1606,6 +1607,9 @@ class TestIPACommandWithoutReplica(IntegrationTest):
         tasks.ldapsearch_dm(self.master, base, ldap_args=[], scope='sub')
         tasks.ldapsearch_dm(self.master, base, ldap_args=[], scope='base')
 
+    @pytest.mark.xfail(
+        osinfo.id == 'fedora' and osinfo.version_number >= (37,),
+        reason='freeipa ticket 9234', strict=True)
     def test_sid_generation(self):
         """
         Test SID generation