Christian Heimes 24a5d4d06b Ensure that KDC cert has SAN DNS entry ...

The dns parameter of request_and_wait_for_cert() must be a string of
hostnames.

* Enforce list/tuple type so that API misuse no longer passes silently.
* Add commonNameToSANDefaultImpl to KDCs_PKINIT_Certs profile
* Explicitly pass hostname for service certs

Fixes: https://pagure.io/freeipa/issue/8685
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-01-29 13:36:41 -05:00

..

__init__.py

Add marker needs_ipaapi and option to skip tests

2017-12-11 20:40:06 +01:00

base.py

lint: Make Pylint-2.4 happy again

2020-02-12 18:08:32 +02:00

test_acme.py

Revert "Remove test for minimum ACME support and rely on package deps"

2021-01-15 10:07:33 +01:00

test_adtrust_install.py

ipatests: display SSSD kdcinfo in test_adtrust_install.py

2020-07-01 12:05:14 +02:00

test_advise.py

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00

test_authselect.py

ipatests: fix test_authselect

2020-07-30 13:10:39 +02:00

test_automember.py

Tests for autounmembership feature

2019-06-06 16:51:55 +02:00

test_backup_and_restore.py

ipatests: Remove deprecated yield_fixture

2020-04-21 13:24:50 +02:00

test_ca_custom_sdn.py

test_integration: add tests for custom CA subject DN

2019-10-17 08:17:46 +02:00

test_caless.py

ipatests: Check permissions of /etc/ipa/ca.crt new installations

2020-08-06 12:49:51 +02:00

test_cert.py

ipatests: Test certmonger IPA responder switched to JSONRPC

2020-11-18 08:16:58 -05:00

test_cli_ipa_not_configured.py

ipatests: Test for ipa-backup with ipa not configured

2019-08-27 12:04:45 +02:00

test_commands.py

ipatests: Don't assume sshd flush its logs immediately

2021-01-26 19:57:17 +01:00

test_crlgen_manage.py

ipatests: fix test_crlgen_manage

2019-11-29 11:17:13 +01:00

test_customized_ds_config_install.py

Fix nsslapd-db-lock tuning of BDB backend

2020-09-24 17:03:00 +02:00

test_dns_locations.py

dnspython: Add compatibility shim

2020-08-31 09:46:03 +03:00

test_dns.py

Tests for fake_mname parameter setup

2020-08-06 18:43:53 +02:00

test_dnssec.py

dnspython: Add compatibility shim

2020-08-31 09:46:03 +03:00

test_epn.py

EPN: Allow authentication by SMTP client's certificate

2020-11-17 14:25:39 +02:00

test_external_ca.py

Removes several pylint warnings.

2019-09-27 09:38:32 +02:00

test_fips.py

Test installation with (fake) userspace FIPS

2019-11-14 16:01:15 +01:00

test_forced_client_reenrollment.py

ipatests/test_integration/test_forced_client_reenrollment.py: Use unshare

2018-12-03 11:26:08 +01:00

test_http_kdc_proxy.py

ipatests/test_integration/test_http_kdc_proxy.py: Use new firewall import

2018-12-03 11:26:08 +01:00

test_idviews.py

ipatests: fix the method adding ifp to sssd.conf

2020-06-24 17:22:24 -04:00

test_installation_client.py

ipatests: make sure dns_lookup_kdc is always true

2020-12-18 13:35:06 +02:00

test_installation.py

Check that IPA cert is added to trust store after server install

2021-01-19 11:21:29 +01:00

test_ipa_cert_fix.py

ipatests: add a test for ipa-cert-fix

2021-01-07 16:21:16 +01:00

test_ipahealthcheck.py

ipatests: fix expected output for ipahealthcheck.ipa.files

2021-01-22 12:53:44 -05:00

test_kerberos_flags.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_krbtpolicy.py

ipatests: test that stale caches are removed using the sweeper

2020-12-03 16:57:01 -05:00

test_legacy_clients.py

ipatests: when talking to AD DCs, use FQDN credentials

2021-01-26 13:05:27 -05:00

test_membermanager.py

Show group-add/remove-member-manager failures

2019-11-20 17:08:40 +01:00

test_netgroup.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_nfs.py

ipatests: remove the xfail for test_nfs.py

2020-07-30 13:10:39 +02:00

test_ntp_options.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_otp.py

ipatests: test_otp: convert test_2fa_enable_single_prompt to run_ssh_cmd

2020-07-29 13:53:52 +02:00

test_pki_config_override.py

Fix and extend pki config override test

2019-04-24 17:08:24 +02:00

test_pkinit_manage.py

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

test_pwpolicy.py

ipatests: add test for password policies

2020-10-23 09:32:52 -04:00

test_replica_promotion.py

ipatests: Respect platform's openssl dir

2020-11-17 14:25:39 +02:00

test_replication_layouts.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_server_del.py

ipatests/test_integration/test_server_del.py: Enable dns in fw for dnssec

2018-12-07 17:29:59 +01:00

test_service_permissions.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_simple_replication.py

Check ca_wrapped in ipa-custodia-check

2020-10-05 14:24:55 +02:00

test_smb.py

ipatests: do not set dns_lookup to true

2021-01-07 13:36:28 +01:00

test_sssd.py

ipatests: cleanup in test_subdomain_lookup_with_certmaprule_containing_dn

2020-07-06 15:33:53 +02:00

test_sudo.py

Azure Pipelines: Override services known to not work in containers

2020-05-06 09:14:29 +02:00

test_testconfig.py

Test installation with (fake) userspace FIPS

2019-11-14 16:01:15 +01:00

test_topologies.py

Fix comparison-with-callable

2018-11-13 13:37:58 +01:00

test_topology.py

Removes several pylint warnings.

2019-09-27 09:38:32 +02:00

test_trust.py

ipatests: rewrite test for requests routing to subordinate suffixes

2021-01-29 16:50:43 +01:00

test_uninstall.py

ipatests: Test if server setup without dns uninstall properly

2021-01-21 13:46:18 +01:00

test_uninstallation.py

Replace imports from ipaserver

2019-05-16 13:20:38 +02:00

test_upgrade.py

ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection

2021-01-14 14:56:26 +01:00

test_user_permissions.py

ipatests: test_user_permissions: test_selinux_user_optimized Paramiko=>OpenSSH

2020-07-29 13:53:52 +02:00

test_vault.py

Fix E266 too many leading '#' for block comment

2020-05-05 10:42:46 +02:00

test_winsyncmigrate.py

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00