freeipa/ipatests/test_xmlrpc
Fraser Tweedale 68ada5f204 fix iPAddress cert issuance for >1 host/service
The 'cert_request' command accumulates DNS names from the CSR,
before checking that all IP addresses in the CSR are reachable from
those DNS names.  Before adding a DNS name to the set, we check that
that it corresponds to the FQDN of a known host/service principal
(including principal aliases).  When a DNS name maps to a
"alternative" principal (i.e.  not the one given via the 'principal'
argument), this check was not being performed correctly.
Specifically, we were looking for the 'krbprincipalname' field on
the RPC response object directly, instead of its 'result' field.

To resolve the issue, dereference the RPC response to its 'result'
field before invoking the '_dns_name_matches_principal' subroutine.

Fixes: https://pagure.io/freeipa/issue/8368
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2020-06-23 10:22:38 +10:00
..
data certprofile: add tests for config profileId scenarios 2018-04-19 08:57:53 -04:00
tracker tests: account for ID overrides as members of groups and roles 2020-06-08 12:39:34 -04:00
__init__.py Add marker needs_ipaapi and option to skip tests 2017-12-11 20:40:06 +01:00
mock_trust.py ipatests: Move trust mock helper functions to a separate module 2016-07-29 09:04:42 +02:00
objectclasses.py tests: tracker: Add CertmapconfigTracker to tests certmapconfig-* commands 2017-08-18 11:40:21 +02:00
test_add_remove_cert_cmd.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_attr.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_automember_plugin.py pytest: Migrate unittest/nose to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_automount_plugin.py Replace nose with unittest and pytest 2017-12-12 16:16:58 +01:00
test_baseldap_plugin.py Address inconsistent-return-statements 2018-11-13 13:37:58 +01:00
test_batch_plugin.py test_batch_plugin: fix py2/3 failing assertion 2017-11-30 15:51:24 +01:00
test_ca_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_caacl_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_caacl_profile_enforcement.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_cert_plugin.py Fix E712 comparison to True / False 2020-05-05 10:42:46 +02:00
test_cert_request_ip_address.py fix iPAddress cert issuance for >1 host/service 2020-06-23 10:22:38 +10:00
test_certmap_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_certprofile_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_config_plugin.py Make use of single configuration point for SELinux 2019-07-01 14:44:57 +03:00
test_delegation_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_dns_plugin.py pytest: Migrate unittest/nose to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_dns_realmdomains_integration.py Address inconsistent-return-statements 2018-11-13 13:37:58 +01:00
test_external_members.py pytest: Migrate unittest/nose to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_group_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_hbac_plugin.py Replace nose with unittest and pytest 2017-12-12 16:16:58 +01:00
test_hbacsvcgroup_plugin.py Performance: Find commands: do not process members by default 2016-05-31 14:08:54 +02:00
test_hbactest_plugin.py Fix E712 comparison to True / False 2020-05-05 10:42:46 +02:00
test_host_plugin.py ipatests: Remove deprecated yield_fixture 2020-04-21 13:24:50 +02:00
test_hostgroup_plugin.py Allow rename of a host group 2020-03-31 09:21:37 +03:00
test_idviews_plugin.py xmlrpc tests: add a test for idview-apply on a master 2020-03-19 10:55:11 +01:00
test_kerberos_principal_aliases.py ipatests: Remove deprecated yield_fixture 2020-04-21 13:24:50 +02:00
test_krbtpolicy.py baseldap: de-duplicate passed attributes when checking for limits 2020-05-19 11:58:56 -04:00
test_location_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_nesting.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_netgroup_plugin.py tests: account for ID overrides as members of groups and roles 2020-06-08 12:39:34 -04:00
test_old_permission_plugin.py Copy-paste error in permssions plugin, CID 323649 2018-11-08 13:16:26 +01:00
test_otptoken_plugin.py 389-ds OTP lasttoken plugin: Add unit test 2018-02-15 14:10:48 +01:00
test_passwd_plugin.py Replace nose with unittest and pytest 2017-12-12 16:16:58 +01:00
test_permission_plugin.py Allow permissions with 'self' bindruletype 2020-06-07 10:18:03 +03:00
test_ping_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_privilege_plugin.py Removed objectclass from LDAP*ReverseMember based tests 2016-08-10 13:53:55 +02:00
test_pwpolicy_plugin.py Replace nose with unittest and pytest 2017-12-12 16:16:58 +01:00
test_radiusproxy_plugin.py Test coverage for multiservers for radius proxy 2018-06-13 16:23:18 -04:00
test_range_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_realmdomains_plugin.py Prevent installation with single label domains 2017-11-09 11:32:31 +01:00
test_replace.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_role_plugin.py tests: account for ID overrides as members of groups and roles 2020-06-08 12:39:34 -04:00
test_schema_plugin.py Fixing param-{find,show} and output-{find,show} commands 2017-10-17 13:42:11 +02:00
test_selfservice_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_selinuxusermap_plugin.py tests: account for ID overrides as members of groups and roles 2020-06-08 12:39:34 -04:00
test_service_plugin.py tests: account for ID overrides as members of groups and roles 2020-06-08 12:39:34 -04:00
test_servicedelegation_plugin.py service delegation: allow to add and remove host principals 2020-05-14 21:47:17 +03:00
test_stageuser_plugin.py pytest: Migrate unittest/nose to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_sudocmd_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_sudocmdgroup_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_sudorule_plugin.py Convert members into types in sudorule-*-option 2018-08-15 12:52:52 +02:00
test_trust_plugin.py pytest: Migrate unittest/nose to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_user_plugin.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_vault_plugin.py pytest: Migrate unittest/nose to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_whoami_plugin.py Add test: test_xmlrpc/test_whoami_plugin.py 2017-07-12 15:54:55 +02:00
testcert.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
xmlrpc_test.py pytest: Migrate unittest/nose to Pytest fixtures 2020-02-12 18:08:32 +02:00