Christian Heimes 7a9ac1f586 Allow hosts to read DNS records for IP SAN ...

For SAN IPAddress extension the cert plugin verifies that the IP address
matches the host entry. Certmonger uses the host principal to
authenticate and retrieve certificates. But the host principal did not
have permission to read DNS entries from LDAP.

Allow all hosts to read some entries from active DNS records.

Fixes: https://pagure.io/freeipa/issue/8098
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2020-03-16 13:04:17 +01:00

..

azure

Azure: Report elapsed time

2020-02-25 18:02:12 +02:00

man

Simplify ipa-run-tests script

2019-07-16 13:23:21 +03:00

prci_definitions

ipatests: add test for ipa-adtrust-install --add-agents

2020-03-05 14:40:58 +01:00

pytest_ipa

Move wait_for_request() method to tasks.py

2020-03-11 15:48:42 -04:00

test_cmdline

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_install

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_integration

Allow hosts to read DNS records for IP SAN

2020-03-16 13:04:17 +01:00

test_ipaclient

Fix Pytest4.x warning about message

2019-06-19 19:20:14 +10:00

test_ipalib

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00

test_ipaplatform

Don't configure KEYRING ccache in containers

2019-01-18 11:33:11 +01:00

test_ipapython

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00

test_ipaserver

ipatests: Properly kill gpg-agent

2020-02-12 18:08:32 +02:00

test_ipatests_plugins

ipatests: Allow zero-length arguments

2020-02-14 09:29:20 +02:00

test_webui

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_xmlrpc

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

__init__.py

Make an ipa-tests package

2013-06-17 19:22:50 +02:00

conftest.py

Azure: Allow to run integration tests

2020-02-25 18:02:12 +02:00

create_external_ca.py

Test external CA with DNS name constraints

2019-08-06 12:39:46 +02:00

data.py

Fix more bytes/unicode issues

2015-10-22 18:34:46 +02:00

i18n.py

Sprinkle raw strings across the code base

2018-09-27 10:23:03 +02:00

ipa-run-tests

ipatests: Allow zero-length arguments

2020-02-14 09:29:20 +02:00

ipa-test-config

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

ipa-test-task

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

Makefile.am

Build: fix distribution of static files for web UI

2016-11-09 13:08:32 +01:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Simplify ipa-run-tests script

2019-07-16 13:23:21 +03:00

test_util.py

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00

util.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00