IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

test_ldap: Read a publicly accessible attribute when testing anonymous bind

Browse Source 
The usercertificate attribute is slated to not be readable for
anonymous users. Use associateddomain in $SUFFIX instead.

Reviewed-By: Martin Kosek <mkosek@redhat.com>
This commit is contained in:
Petr Viktorin 2014-04-23 19:09:31 +02:00 committed by Martin Kosek
parent d893b77fb6
commit edee79a32f
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
ipatests/test_ipaserver/test_ldap.py
View File

@ -61,11 +61,10 @@ class test_ldap(object):
""" """
self.conn = ldap2(shared_instance=False, ldap_uri=self.ldapuri) self.conn = ldap2(shared_instance=False, ldap_uri=self.ldapuri)
self.conn.connect() self.conn.connect()
entry_attrs = self.conn.get_entry(self.dn, ['usercertificate']) dn = api.env.basedn
cert = entry_attrs.get('usercertificate') entry_attrs = self.conn.get_entry(dn, ['associateddomain'])
cert = cert[0] domain = entry_attrs.single_value['associateddomain']
serial = unicode(x509.get_serial_number(cert, x509.DER)) assert domain == api.env.domain
assert serial is not None
def test_GSSAPI(self): def test_GSSAPI(self):
""" """