freeipa/ipatests/test_integration
Rob Crittenden 38b83c2b93 Run HSM validation as pkiuser to verify token permissions
Run all commands as pkiuser when validating that the HSM token
is available, that the token library path is correct and that
the password can read keys. This will avoid issues where the
initial validation is ok but the pkiuser is not granted read
access to some part of the token. This is very possible
when using softhsm2.

Fixes: https://pagure.io/freeipa/issue/9626

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2024-07-31 16:19:02 -04:00
..
__init__.py Add marker needs_ipaapi and option to skip tests 2017-12-11 20:40:06 +01:00
base.py ipatests: test software HSM installation with server & replica 2024-05-16 08:46:32 -04:00
example_cli.py Add context manager to ipalib.API 2023-09-29 12:57:06 +02:00
test_acme.py test_acme: Use ipalib.x509 2024-01-25 18:07:20 +01:00
test_adtrust_install.py ipatests: Update ipa-adtrust-install test 2024-05-21 14:50:46 +02:00
test_advise.py ipatests: disable dnssec validation in tests using dnf 2023-12-19 14:59:42 +01:00
test_authselect.py ipatests: add new test with --subid installer option 2022-05-25 08:11:39 +03:00
test_automember.py ipatests: adapt for new automembership fixup behavior 2023-03-14 09:39:17 +01:00
test_backup_and_restore.py test_replica_install_after_restore: kinit after restore 2024-07-08 15:26:24 +02:00
test_ca_custom_sdn.py test_integration: add tests for custom CA subject DN 2019-10-17 08:17:46 +02:00
test_caless.py ipatests: test software HSM installation with server & replica 2024-05-16 08:46:32 -04:00
test_cert.py ipatests: mark test_ca_show_error_handling as xfail 2024-06-26 09:50:34 +02:00
test_cli_ipa_not_configured.py ipatests: Test for ipa-backup with ipa not configured 2019-08-27 12:04:45 +02:00
test_commands.py ipatests: fix / permissions to allow ssh with private key 2024-06-26 09:50:34 +02:00
test_crlgen_manage.py ipa-crlgen-manage: manage the cert status task execution time 2024-04-15 16:03:10 +02:00
test_custom_plugins.py ipatests: add suite for testing custom plugins 2021-08-05 17:36:46 +02:00
test_customized_ds_config_install.py ipatests: do not configure nameserver when installing client and replica 2021-03-04 18:47:32 +01:00
test_dns_locations.py ipatests: wait for replica update in test_dns_locations 2024-01-23 07:57:56 +01:00
test_dns.py Tests for fake_mname parameter setup 2020-08-06 18:43:53 +02:00
test_dnssec.py ipatests: re-enable dnssec tests 2022-11-21 14:24:17 +01:00
test_epn.py ipatests: Skip the test failing due to FIPS policy 2023-10-19 12:27:01 +02:00
test_external_ca.py ipatests: test software HSM installation with server & replica 2024-05-16 08:46:32 -04:00
test_fips.py ipatests: update the fake fips mode expected message 2022-12-19 15:38:05 +01:00
test_forced_client_reenrollment.py ipatests: do not manually modify /etc/resolv.conf in tests 2021-03-04 18:47:32 +01:00
test_hsm.py Run HSM validation as pkiuser to verify token permissions 2024-07-31 16:19:02 -04:00
test_http_kdc_proxy.py ipatests: add test for kdcproxy handling reply split to several TCP packets 2021-03-18 13:41:49 +01:00
test_idm_api.py batch: add keeponly option 2024-05-22 10:03:38 +02:00
test_idp.py ipatests: test_idp fails calling yum list wget 2024-01-30 18:27:12 +01:00
test_idviews.py ipatests: fix the method adding ifp to sssd.conf 2020-06-24 17:22:24 -04:00
test_installation_client.py ipatests: Test client install/uninstall with automount enabled 2024-01-11 17:13:35 +01:00
test_installation.py Compatibility fix for PyCA cryptography 42.0.0 2024-01-24 14:54:24 +01:00
test_ipa_cert_fix.py ipatests: some tests are date-sensitive and fail Feb 29 2024-03-01 11:53:48 +01:00
test_ipa_ipa_migration.py ipatests: remove xfail for test_ipa_migrate_stage_mode 2024-07-19 08:39:21 -04:00
test_ipahealthcheck.py ipatests: Ignore spacing in OpenSSL validation error message 2024-04-04 16:30:09 -04:00
test_kerberos_flags.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_krbtpolicy.py ipa tests: Add LANG before kinit command to fix issue with locale settings 2023-01-19 16:15:11 +01:00
test_legacy_clients.py ipatests: Fetch sudo rules without time offset 2021-06-03 09:21:45 +03:00
test_membermanager.py ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario 2023-03-15 09:45:08 +01:00
test_netgroup.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_nfs.py Remove the --no-sssd option from ipa-client-automount 2022-03-18 09:40:37 +01:00
test_ntp_options.py ipatests: interactive install prompts for netbios name 2021-11-02 10:11:28 +01:00
test_otp.py ipa-pwd-extop: differentiate OTP requirements in LDAP binds 2024-07-17 09:06:14 +02:00
test_pki_config_override.py Fix and extend pki config override test 2019-04-24 17:08:24 +02:00
test_pkinit_install.py ipatests: make sure PKINIT enrollment works with a strict policy 2023-12-22 10:34:19 +01:00
test_pkinit_manage.py Ensure that KDC cert has SAN DNS entry 2021-01-29 13:36:41 -05:00
test_pwpolicy.py Allow password policy minlength to be removed like other values 2023-10-16 13:23:20 -04:00
test_random_serial_numbers.py Additional tests for RSN v3 2022-08-04 13:26:00 -04:00
test_replica_promotion.py ipatests: Test replica installation using AD admin. 2024-07-17 09:11:13 +02:00
test_replication_layouts.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_resolvers_manager.py ipatests: add utility for managing domain name resolvers 2021-03-04 18:47:32 +01:00
test_server_del.py pylint: Fix consider-using-dict-items 2022-03-11 13:37:08 -05:00
test_service_permissions.py RBCD: add basic test for RBCD handling 2023-04-05 14:55:22 -04:00
test_simple_replication.py Integration tests: add a test to ipa-server-upgrade 2023-06-21 20:50:59 +02:00
test_smb.py ipatest: remove xfail from test_smb 2023-06-05 09:41:14 +02:00
test_sso.py ipatests: xfail on all fedora for test_ipa_login_with_sso_user 2022-12-14 11:26:17 +01:00
test_sssd.py ipatests: fix / permissions for test_nested_group_members 2024-07-02 08:53:03 +02:00
test_subids.py ipatests: ipa-client-install --subid adds entry in nsswitch.conf 2022-08-01 09:28:30 -04:00
test_sudo.py ipatests: test addition of invalid sudo command 2021-02-15 09:59:41 +02:00
test_testconfig.py tests: Fix failing test test_testconfig.py with missing token variables 2024-05-16 08:46:32 -04:00
test_topologies.py Fix comparison-with-callable 2018-11-13 13:37:58 +01:00
test_topology.py ipatests: fix test_topology 2023-08-14 09:58:05 +02:00
test_trust.py ipatests: add xfail for autoprivate group test with override 2024-02-12 08:32:20 +01:00
test_uninstallation.py Clean up more files and directories created by the installer(s) 2024-06-26 13:30:48 +02:00
test_upgrade.py ipatests: add test for ticket 9610 2024-06-24 14:51:38 +02:00
test_user_permissions.py host: update System: Manage Host Keytab permission 2024-01-12 18:41:01 -05:00
test_vault.py Additional tests for RSN v3 2022-08-04 13:26:00 -04:00
test_winsyncmigrate.py pylint: Fix use-maxsplit-arg 2022-03-11 13:37:08 -05:00