Alexander Bokovoy 642b81e99f test_trust: add tests for using AD users and groups in SUDO rules ...

Tests test_integration/test_trust.py::TestTrust::test_sudorules_ad_*
check that a user from a trusted AD domain can perform SUDO
authentication without a password for any command based on a direct user
reference or on indirect AD group reference. The test suite also ensures
an AD user and group can be used for runAsUser/runAsGroup settings.

Due to https://github.com/SSSD/sssd/issues/5475 anything added to
'ipaSudoRunAsExtUserGroup' attribute will be prefixed with '%' and thus
any relying on the value of this attribute displayed by 'sudo -l'
command will fail. The test only validates that a proper group name
appears in the 'sudo' output, so we handle both prefixes in the
corresponding test check. It is not possible to differ by the SSSD
version as a fix to the issue is only a patch on top of 2.4.0 in RHEL.

Fixes: https://pagure.io/freeipa/issue/3226
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2021-01-26 13:05:27 -05:00

..

data

certprofile: add tests for config profileId scenarios

2018-04-19 08:57:53 -04:00

tracker

tests: fix cleanup for CATracker

2020-07-07 10:07:48 -04:00

__init__.py

Add marker needs_ipaapi and option to skip tests

2017-12-11 20:40:06 +01:00

mock_trust.py

ipatests: Move trust mock helper functions to a separate module

2016-07-29 09:04:42 +02:00

objectclasses.py

Add new pwpolicy objectclass to test_xmprpc/objectclasses.py

2020-10-23 09:32:52 -04:00

test_add_remove_cert_cmd.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_attr.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_automember_plugin.py

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_automount_plugin.py

Replace nose with unittest and pytest

2017-12-12 16:16:58 +01:00

test_baseldap_plugin.py

Address inconsistent-return-statements

2018-11-13 13:37:58 +01:00

test_batch_plugin.py

test_batch_plugin: fix py2/3 failing assertion

2017-11-30 15:51:24 +01:00

test_ca_plugin.py

tests: fix cleanup for CATracker

2020-07-07 10:07:48 -04:00

test_caacl_plugin.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_caacl_profile_enforcement.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_cert_plugin.py

Fix E712 comparison to True / False

2020-05-05 10:42:46 +02:00

test_cert_request_ip_address.py

fix iPAddress cert issuance for >1 host/service

2020-06-23 10:22:38 +10:00

test_certmap_plugin.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_certprofile_plugin.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_config_plugin.py

Make use of single configuration point for SELinux

2019-07-01 14:44:57 +03:00

test_delegation_plugin.py

ipatests: Add test for ACI attribute and permission uniqueness

2020-09-14 09:15:59 +03:00

test_dns_plugin.py

dns: allow PTR records in arbitrary zones

2020-11-11 10:24:38 +02:00

test_dns_realmdomains_integration.py

Address inconsistent-return-statements

2018-11-13 13:37:58 +01:00

test_external_members.py

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_group_plugin.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_hbac_plugin.py

Replace nose with unittest and pytest

2017-12-12 16:16:58 +01:00

test_hbacsvcgroup_plugin.py

Performance: Find commands: do not process members by default

2016-05-31 14:08:54 +02:00

test_hbactest_plugin.py

Fix E712 comparison to True / False

2020-05-05 10:42:46 +02:00

test_host_plugin.py

ipatests: Remove deprecated yield_fixture

2020-04-21 13:24:50 +02:00

test_hostgroup_plugin.py

Allow rename of a host group

2020-03-31 09:21:37 +03:00

test_idviews_plugin.py

xmlrpc tests: add a test for idview-apply on a master

2020-03-19 10:55:11 +01:00

test_kerberos_principal_aliases.py

ipatests: Remove deprecated yield_fixture

2020-04-21 13:24:50 +02:00

test_krbtpolicy.py

baseldap: de-duplicate passed attributes when checking for limits

2020-05-19 11:58:56 -04:00

test_location_plugin.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_nesting.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_netgroup_plugin.py

tests: account for ID overrides as members of groups and roles

2020-06-08 12:39:34 -04:00

test_old_permission_plugin.py

Copy-paste error in permssions plugin, CID 323649

2018-11-08 13:16:26 +01:00

test_otptoken_plugin.py

389-ds OTP lasttoken plugin: Add unit test

2018-02-15 14:10:48 +01:00

test_passwd_plugin.py

Replace nose with unittest and pytest

2017-12-12 16:16:58 +01:00

test_permission_plugin.py

ipatests: test that modifying a permission attrs handles failure

2021-01-13 13:50:45 +01:00

test_ping_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_privilege_plugin.py

Removed objectclass from LDAP*ReverseMember based tests

2016-08-10 13:53:55 +02:00

test_pwpolicy_plugin.py

Replace nose with unittest and pytest

2017-12-12 16:16:58 +01:00

test_radiusproxy_plugin.py

Test coverage for multiservers for radius proxy

2018-06-13 16:23:18 -04:00

test_range_plugin.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_realmdomains_plugin.py

Prevent installation with single label domains

2017-11-09 11:32:31 +01:00

test_replace.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_role_plugin.py

tests: account for ID overrides as members of groups and roles

2020-06-08 12:39:34 -04:00

test_schema_plugin.py

Fixing param-{find,show} and output-{find,show} commands

2017-10-17 13:42:11 +02:00

test_selfservice_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_selinuxusermap_plugin.py

tests: account for ID overrides as members of groups and roles

2020-06-08 12:39:34 -04:00

test_service_plugin.py

tests: account for ID overrides as members of groups and roles

2020-06-08 12:39:34 -04:00

test_servicedelegation_plugin.py

service delegation: allow to add and remove host principals

2020-05-14 21:47:17 +03:00

test_stageuser_plugin.py

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_sudocmd_plugin.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_sudocmdgroup_plugin.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_sudorule_plugin.py

test_trust: add tests for using AD users and groups in SUDO rules

2021-01-26 13:05:27 -05:00

test_trust_plugin.py

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_user_plugin.py

xmlrpctests: remove harcoded expiration date from test_user_plugin

2020-12-10 09:45:44 +02:00

test_vault_plugin.py

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_whoami_plugin.py

Add test: test_xmlrpc/test_whoami_plugin.py

2017-07-12 15:54:55 +02:00

testcert.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

xmlrpc_test.py

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00