ipatests: add KRB5_TRACE to kinit in test_adtrust_install.py

The test test_adtrust_install.py::TestIpaAdTrustInstall::test_add_agent_not_allowed
sometimes fails at kinit in create_active_user:
```
kinit: Password has expired while getting initial credentials
```
Use krb5_trace to catch the required debug information.

Related-to: https://pagure.io/freeipa/issue/8353
Related-to: https://pagure.io/freeipa/issue/8271
Signed-off-by: François Cami <fcami@redhat.com>
Reviewed-By: Michal Polovka <mpolovka@redhat.com>
Reviewed-By: Robbie Harwood <rharwood@redhat.com>
This commit is contained in:
François Cami 2020-06-08 19:03:45 +02:00 committed by Alexander Bokovoy
parent e7319f628f
commit 8f8c560ffd

View File

@ -58,10 +58,14 @@ class TestIpaAdTrustInstall(IntegrationTest):
data_fmt = '{{"method":"trust_enable_agent","params":[["{}"],{{}}]}}' data_fmt = '{{"method":"trust_enable_agent","params":[["{}"],{{}}]}}'
try: try:
# Create a nonadmin user that will be used by curl # Create a nonadmin user that will be used by curl.
tasks.create_active_user(self.master, user, passwd, # krb5_trace set to True: https://pagure.io/freeipa/issue/8353
first=user, last=user) tasks.create_active_user(
tasks.kinit_as_user(self.master, user, passwd) self.master, user, passwd, first=user, last=user,
krb5_trace=True
)
tasks.kinit_as_user(self.master, user, passwd, krb5_trace=True)
# curl --negotiate -u : is using GSS-API i.e. nonadmin user # curl --negotiate -u : is using GSS-API i.e. nonadmin user
cmd_args = [ cmd_args = [
paths.BIN_CURL, paths.BIN_CURL,