freeipa/ipatests
Rob Crittenden 38b83c2b93 Run HSM validation as pkiuser to verify token permissions
Run all commands as pkiuser when validating that the HSM token
is available, that the token library path is correct and that
the password can read keys. This will avoid issues where the
initial validation is ok but the pkiuser is not granted read
access to some part of the token. This is very possible
when using softhsm2.

Fixes: https://pagure.io/freeipa/issue/9626

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2024-07-31 16:19:02 -04:00
..
azure ap: Migrate to docker compose V2 2024-04-04 11:42:24 -04:00
man Simplify ipa-run-tests script 2019-07-16 13:23:21 +03:00
prci_definitions ipatests: Test replica installation using AD admin. 2024-07-17 09:11:13 +02:00
pytest_ipa ipatests: add test for ticket 9610 2024-06-24 14:51:38 +02:00
test_cmdline pylint: Fix used-before-assignment 2023-01-10 08:30:58 +01:00
test_custodia pylint: disable comparison-of-constants 2023-01-10 08:30:58 +01:00
test_install Unify access to FQDN 2020-10-26 17:11:19 +11:00
test_integration Run HSM validation as pkiuser to verify token permissions 2024-07-31 16:19:02 -04:00
test_ipaclient ipaclient: do not set TLS CA options in ldap.conf anymore 2022-10-10 09:50:39 +02:00
test_ipalib Compatibility fix for PyCA cryptography 42.0.0 2024-01-24 14:54:24 +01:00
test_ipalib_install validate_principal: Don't try to verify that the realm is known 2024-02-22 14:35:59 -05:00
test_ipaplatform ipatests/test_ipaplatform: Skip test_ipa_version on Debian 2021-11-25 21:02:56 -05:00
test_ipapython get_directive: don't error out on substring mismatch 2024-01-11 17:19:47 +01:00
test_ipaserver Integration tests for verifying Referer header in the UI 2024-01-10 10:27:06 +01:00
test_ipatests_plugins ipatests: Don't turn Pytest IPA deprecation warnings into errors 2020-07-29 15:10:00 -04:00
test_webui webui test: Update message for admin disable 2024-04-12 15:59:04 +02:00
test_xmlrpc Allow the admin user to be disabled 2024-04-10 09:26:47 +02:00
__init__.py Make an ipa-tests package 2013-06-17 19:22:50 +02:00
conftest.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
create_external_ca.py Use datetime.timezone.utc instead of newer datetime.UTC alias 2023-09-29 15:06:33 -04:00
data.py Fix more bytes/unicode issues 2015-10-22 18:34:46 +02:00
i18n.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
ipa-run-tests ipatests: Specify shell implementation 2020-04-21 13:24:50 +02:00
ipa-test-config Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
ipa-test-task ipatests: Fetch sudo rules without time offset 2021-06-03 09:21:45 +03:00
Makefile.am Build: fix distribution of static files for web UI 2016-11-09 13:08:32 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py rpcserver: validate Kerberos principal name before running kinit 2024-02-21 17:07:33 -05:00
test_util.py pylint: Fix unnecessary-lambda-assignment 2023-01-10 08:30:58 +01:00
util.py Move ipalib.install.kinit to ipalib 2024-03-27 18:07:17 +01:00