Anuja More f395e162e1 ipatests: Refactor and port trust functional SUDO tests. ...

- Test scenarios :
  - AD users running commands as root via external groups
  - AD users switching to other AD user accounts
  - IPA users running commands as AD users
  - Sudo rule disable/enable functionality
  - Command allow/deny restrictions
  - Access denial for users not in sudo rules
- Automated with Cursor+Claude

Related : https://pagure.io/freeipa/issue/9845

Signed-off-by: Anuja More <amore@redhat.com>
Reviewed-By: David Hanina <dhanina@redhat.com>

2025-11-03 16:01:12 -05:00

..

__init__.py

Add marker needs_ipaapi and option to skip tests

2017-12-11 20:40:06 +01:00

base.py

ipatests: Update ipatests to test topology with multiple domain.

2024-10-31 15:29:28 +05:30

example_cli.py

Add context manager to ipalib.API

2023-09-29 12:57:06 +02:00

test_32bit_idranges.py

ipatests: Tests for 32BitIdranges.

2025-06-25 17:01:22 +05:30

test_acme.py

ipatests: certbot removed the --manual-public-ip-logging-ok parameter

2025-01-07 16:31:13 +01:00

test_adtrust_install.py

ipatests: fix test_adtrust_install_with_non_ipa_user

2025-06-24 11:33:39 +02:00

test_advise.py

ipatests: disable dnssec validation in tests using dnf

2023-12-19 14:59:42 +01:00

test_authselect.py

ipatests: add new test with --subid installer option

2022-05-25 08:11:39 +03:00

test_automember.py

ipatests: adapt for new automembership fixup behavior

2023-03-14 09:39:17 +01:00

test_backup_and_restore.py

ipatests: force the version for uninstall/reinstall

2025-01-16 13:41:35 -05:00

test_ca_custom_sdn.py

test_integration: add tests for custom CA subject DN

2019-10-17 08:17:46 +02:00

test_caless.py

ipatests: test software HSM installation with server & replica

2024-05-16 08:46:32 -04:00

test_cert.py

test_cert: adapt the expect error message to PKI 11.7.0-5

2025-10-17 17:22:08 +02:00

test_cli_ipa_not_configured.py

ipa-idrange-fix: check that IPA server is installed

2025-06-19 13:48:18 +02:00

test_cockpit.py

Minimal test for Cockpit integration on IPA master

2024-10-10 10:30:58 +02:00

test_commands.py

Integration test: fix teardown of test_expiration_date_post_2038

2025-10-17 17:22:08 +02:00

test_crlgen_manage.py

ipa-crlgen-manage: manage the cert status task execution time

2024-04-15 16:03:10 +02:00

test_custom_plugins.py

ipatests: add suite for testing custom plugins

2021-08-05 17:36:46 +02:00

test_customized_ds_config_install.py

ipatests: do not configure nameserver when installing client and replica

2021-03-04 18:47:32 +01:00

test_dns_locations.py

ipatests: wait for replica update in test_dns_locations

2024-01-23 07:57:56 +01:00

test_dns.py

Tests for fake_mname parameter setup

2020-08-06 18:43:53 +02:00

test_dnssec.py

ipatests: re-enable dnssec tests

2022-11-21 14:24:17 +01:00

test_edns.py

Extended eDNS testsuite with Relaxed policy testcases. 1. Relaxed policy without certs and including --no-dnssec-validation 2. Relaxed policy with external CA and including --no-dnssec-validation

2025-10-10 11:48:12 +02:00

test_epn.py

ipatests: Skip the test failing due to FIPS policy

2023-10-19 12:27:01 +02:00

test_external_ca.py

ipatests: test software HSM installation with server & replica

2024-05-16 08:46:32 -04:00

test_fips.py

ipatests: test_fips: Remove obsolete patch

2025-07-28 14:31:07 +02:00

test_forced_client_reenrollment.py

ipatests: do not manually modify /etc/resolv.conf in tests

2021-03-04 18:47:32 +01:00

test_hsm.py

Include the HSM token name when creating LWCAs

2025-10-27 18:20:45 -03:00

test_http_kdc_proxy.py

ipatests: add test for kdcproxy handling reply split to several TCP packets

2021-03-18 13:41:49 +01:00

test_idm_api.py

batch: add keeponly option

2024-05-22 10:03:38 +02:00

test_idp.py

Stop using deprecated pkg_resources

2025-05-06 13:48:35 +02:00

test_idviews.py

ipatests: fix the method adding ifp to sssd.conf

2020-06-24 17:22:24 -04:00

test_installation_client.py

ipatests: Activate ssh in sssd.conf

2024-10-10 09:41:00 +02:00

test_installation.py

ipatests: add xfail for TestKRAinstallAfterCertRenew

2025-09-18 17:16:06 +02:00

test_ipa_cert_fix.py

Test fix for the update

2025-03-25 10:33:06 +01:00

test_ipa_idrange_fix.py

ipatests: fix invalid range creation in test_ipa_idrange_fix.py

2025-06-04 09:47:16 +02:00

test_ipa_ipa_migration.py

ipatests: fix TestIPAMigratewithBackupRestore setup

2025-09-22 18:14:21 +02:00

test_ipahealthcheck.py

ipatests: exclude TomcatFileCheck when RSN are enabled

2025-09-18 17:14:08 +02:00

test_kerberos_flags.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_krbtpolicy.py

ipa tests: Add LANG before kinit command to fix issue with locale settings

2023-01-19 16:15:11 +01:00

test_legacy_clients.py

ipatests: Fetch sudo rules without time offset

2021-06-03 09:21:45 +03:00

test_membermanager.py

ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario

2023-03-15 09:45:08 +01:00

test_mkey_upgrade.py

Add test for master key upgrade

2025-06-20 17:24:23 +02:00

test_multidomain_ipa.py

ipatests: Update ipatests to test topology with multiple domain.

2024-10-31 15:29:28 +05:30

test_netgroup.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_nfs.py

ipatests: fix TestIpaClientAutomountDiscovery

2025-10-03 16:06:08 +02:00

test_ntp_options.py

ipatests: interactive install prompts for netbios name

2021-11-02 10:11:28 +01:00

test_otp.py

ipatests: fix test_otp

2025-09-05 17:13:55 +02:00

test_pki_config_override.py

Add token options to immutables for pki override

2025-06-20 16:30:04 +02:00

test_pkinit_install.py

ipatests: make sure PKINIT enrollment works with a strict policy

2023-12-22 10:34:19 +01:00

test_pkinit_manage.py

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

test_pwpolicy.py

Add support for libpwpolicy credit to password policy

2025-10-03 15:29:40 -04:00

test_random_serial_numbers.py

ipatests: Test that when lmdb is available, enable RSN

2024-11-22 16:30:48 +01:00

test_replica_promotion.py

ipatests: mark test_scale_add_subca as xfail

2025-10-17 17:22:08 +02:00

test_replication_layouts.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_resolvers_manager.py

ipatests: add utility for managing domain name resolvers

2021-03-04 18:47:32 +01:00

test_server_del.py

pylint: Fix consider-using-dict-items

2022-03-11 13:37:08 -05:00

test_service_permissions.py

RBCD: add basic test for RBCD handling

2023-04-05 14:55:22 -04:00

test_simple_replication.py

Integration tests: add a test to ipa-server-upgrade

2023-06-21 20:50:59 +02:00

test_smb.py

ipatest: remove xfail from test_smb

2023-06-05 09:41:14 +02:00

test_sso.py

Migrate Keycloak tests to JDK 21 and Keycloak 26

2025-01-21 17:23:13 +01:00

test_sssd.py

ipatests: fix / permissions for test_nested_group_members

2024-07-01 15:01:48 +02:00

test_subids.py

ipatests: ipa-client-install --subid adds entry in nsswitch.conf

2022-08-01 09:28:30 -04:00

test_sudo.py

Azure CI: use podman instead of docker through emulation

2025-04-15 16:23:32 +05:30

test_testconfig.py

tests: Fix failing test test_testconfig.py with missing token variables

2024-05-16 08:46:32 -04:00

test_topologies.py

Fix comparison-with-callable

2018-11-13 13:37:58 +01:00

test_topology.py

ipatests: fix test_topology

2023-08-14 09:58:05 +02:00

test_trust_functional.py

ipatests: Refactor and port trust functional SUDO tests.

2025-11-03 16:01:12 -05:00

test_trust.py

ipatests: Refactor and port trust functional HBAC tests.

2025-10-08 09:29:28 +02:00

test_uninstallation.py

ipatests: Ignore /run/log/journal in test_uninstallation.py

2025-05-27 07:47:04 +02:00

test_upgrade.py

ipatests: Check Default PAC type is added to config

2024-08-28 18:53:45 +02:00

test_user_permissions.py

host: update System: Manage Host Keytab permission

2024-01-12 18:41:01 -05:00

test_vault.py

Additional tests for RSN v3

2022-08-04 13:26:00 -04:00

test_winsyncmigrate.py

pylint: Fix use-maxsplit-arg

2022-03-11 13:37:08 -05:00