IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-26 16:16:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add test for sssd ad trust lookup with dn in certmaprule

Browse Source 
Related to https://pagure.io/SSSD/sssd/issue/3721

Signed-off-by: Sergio Oliveira Campos <seocam@redhat.com>
Reviewed-By: Anuja More <amore@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Sumit Bose <sbose@redhat.com>
This commit is contained in:
Sergio Oliveira Campos 2020-04-25 18:43:52 -03:00 committed by Sergio Oliveira Campos
parent 6e5d40e2d2
commit e071933e64
No known key found for this signature in database
GPG Key ID: DB4E3C6473D2AE0A
1 changed files with 36 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
ipatests/test_integration/test_sssd.py
View File

@ -406,6 +406,42 @@ class TestSSSDWithAdTrust(IntegrationTest):
# verify the user can be retrieved after re-enabling trustdomain
self.master.run_command(['id', user])
@pytest.mark.xfail(
osinfo.id == 'fedora' and osinfo.version_number <= (31,),
reason='https://pagure.io/SSSD/sssd/issue/3721',
)
def test_subdomain_lookup_with_certmaprule_containing_dn(self):
"""DN names on certmaprules should not break AD Trust lookups.
Regression test for https://pagure.io/SSSD/sssd/issue/3721
"""
tasks.kinit_admin(self.master)
# verify the user can be retrieved initially
first_res = self.master.run_command(['id', self.users['ad']['name']])
cert_cn = 'CN=adca'
cert_dcs = 'DC=' + ',DC='.join(self.ad.domain.name.split('.'))
cert_subject = cert_cn + ',' + cert_dcs
self.master.run_command([
'ipa',
'certmaprule-add',
"'{}'".format(cert_subject),
"--maprule='(userCertificate;binary={cert!bin})'",
"--matchrule='<ISSUER>{}'".format(cert_subject),
"--domain={}".format(self.master.domain.name)
])
tasks.clear_sssd_cache(self.master)
# verify the user can be retrieved after the certmaprule is added
second_res = self.master.run_command(['id', self.users['ad']['name']])
assert first_res.stdout_text == second_res.stdout_text
verify_in_stdout = ['gid', 'uid', 'groups', self.users['ad']['name']]
for text in verify_in_stdout:
assert text in second_res.stdout_text
class TestNestedMembers(IntegrationTest):
num_clients = 1