freeipa/ipatests/test_xmlrpc
Fraser Tweedale 5f0e13ce9c ca-add: validate Subject DN name attributes
If the Subject DN is syntactically valid but contains unrecognised
name attributes, FreeIPA accepts it but Dogtag rejects it, returning
status 400 and causing the framework to raise RemoteRetrieveError.

Update the ca-add command to perform some additional validation on
the user-supplied Subject DN, making sure that we recognise all the
attributes.

Fixes: https://pagure.io/freeipa/issue/6987
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Felipe Volpone <felipevolpone@gmail.com>
2017-06-01 09:28:36 +02:00
..
data ipatests: remove ipacertbase option from test CSR configuration 2016-07-12 10:55:50 +02:00
tracker Add SHA256 fingerprints for certs 2017-03-07 19:52:43 +01:00
__init__.py pytest 3.x compatibility 2017-03-27 18:03:14 +02:00
mock_trust.py ipatests: Move trust mock helper functions to a separate module 2016-07-29 09:04:42 +02:00
objectclasses.py ipatests: Tracker implementation for Sub CA feature 2016-07-12 10:55:50 +02:00
test_add_remove_cert_cmd.py tests: Stageuser-{add,remove}-cert 2017-02-07 13:58:48 +01:00
test_attr.py frontend: re-raise remote RequirementError using CLI name in CLI 2016-05-25 16:06:26 +02:00
test_automember_plugin.py test: automember: Fix expected exception message 2016-06-29 10:49:37 +02:00
test_automount_plugin.py Fix Python 3 bugs discovered by pylint 2016-11-25 16:18:22 +01:00
test_baseldap_plugin.py Remove unused variables in tests 2016-09-27 13:35:58 +02:00
test_batch_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_ca_plugin.py ca-add: validate Subject DN name attributes 2017-06-01 09:28:36 +02:00
test_caacl_plugin.py Test for caacl-add-service 2016-08-30 10:35:58 +02:00
test_caacl_profile_enforcement.py py3: tests_xmlrpc: do not call str() on bytes 2017-02-02 13:43:16 +01:00
test_cert_plugin.py Fixing the cert-request comparing whole email address case-sensitively. 2017-05-16 09:50:22 +02:00
test_certprofile_plugin.py Tests: Remove --force options from tracker base class 2016-09-21 18:39:56 +02:00
test_config_plugin.py config-mod: normalize attribute names for --usersearch/--groupsearch 2016-08-22 17:53:31 +02:00
test_delegation_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_dns_plugin.py DNS: Support URI resource record type 2016-10-11 16:48:47 +02:00
test_dns_realmdomains_integration.py DNS: Fix tests for realm domains integration with DNS zone add 2016-06-28 14:19:56 +02:00
test_external_members.py rpc: specify connection options in API config 2016-06-03 09:00:34 +02:00
test_group_plugin.py Tests: Remove silent deleting and creating entries by tracker 2016-10-06 19:16:37 +02:00
test_hbac_plugin.py Allow renaming of the HBAC rule objects 2017-03-27 19:08:26 +02:00
test_hbacsvcgroup_plugin.py Performance: Find commands: do not process members by default 2016-05-31 14:08:54 +02:00
test_hbactest_plugin.py remove trailing newlines form python modules 2016-10-12 10:38:52 +02:00
test_host_plugin.py Silence pytest.yield_fixture deprecation warning 2017-05-30 12:28:51 +02:00
test_hostgroup_plugin.py Performance: Find commands: do not process members by default 2016-05-31 14:08:54 +02:00
test_idviews_plugin.py Generate sha256 ssh pubkey fingerprints for hosts 2017-01-12 11:09:46 +01:00
test_kerberos_principal_aliases.py Silence pytest.yield_fixture deprecation warning 2017-05-30 12:28:51 +02:00
test_krbtpolicy.py Applied tier0 and tier1 marks on unit tests and xmlrpc tests 2015-11-09 11:49:17 +01:00
test_location_plugin.py Tests: Fix for failing location tests 2016-06-23 15:29:06 +02:00
test_nesting.py Refactor test_nesting, create HostGroupTracker 2016-03-24 14:36:55 +01:00
test_netgroup_plugin.py Unify display of principal names/aliases across entities 2016-07-01 09:37:25 +02:00
test_old_permission_plugin.py Removed objectclass from LDAP*ReverseMember based tests 2016-08-10 13:53:55 +02:00
test_passwd_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_permission_plugin.py Remove "Request Certificate with SubjectAltName" permission 2016-12-21 17:04:18 +01:00
test_ping_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_privilege_plugin.py Removed objectclass from LDAP*ReverseMember based tests 2016-08-10 13:53:55 +02:00
test_pwpolicy_plugin.py Remove unused variables in tests 2016-09-27 13:35:58 +02:00
test_radiusproxy_plugin.py radiusproxy plugin tests: Expect bytes, not text, for ipatokenradiussecret 2016-05-05 16:42:46 +02:00
test_range_plugin.py tests: add non-reg for idrange-add 2017-04-07 12:45:32 +02:00
test_realmdomains_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_replace.py Refactor test_replace 2016-01-26 19:03:15 +01:00
test_role_plugin.py The LDAP*ReverseMember shouldn't imply --all is always specified 2016-06-29 10:44:30 +02:00
test_selfservice_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_selinuxusermap_plugin.py Unify display of principal names/aliases across entities 2016-07-01 09:37:25 +02:00
test_service_plugin.py Add SHA256 fingerprints for certs 2017-03-07 19:52:43 +01:00
test_servicedelegation_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_stageuser_plugin.py Stage User: Test to create stage user with minimal values 2017-01-19 17:36:46 +01:00
test_sudocmd_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_sudocmdgroup_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_sudorule_plugin.py Allow renaming of the sudorule objects 2017-03-27 19:08:26 +02:00
test_trust_plugin.py Tests: Add missing attributes to test_xmlrpc/test_trust tests 2016-08-31 15:05:41 +02:00
test_user_plugin.py Update get_attr_filter in LDAPSearch to handle nsaccountlock user searches 2017-04-26 10:20:42 +00:00
test_vault_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
testcert.py Moving ipaCert from HTTPD_ALIAS_DIR 2017-03-01 09:43:41 +00:00
xmlrpc_test.py Add options to write lightweight CA cert or chain to file 2016-12-12 13:03:15 +01:00