freeipa/ipatests/test_integration
Christian Heimes 7a9ac1f586 Allow hosts to read DNS records for IP SAN
For SAN IPAddress extension the cert plugin verifies that the IP address
matches the host entry. Certmonger uses the host principal to
authenticate and retrieve certificates. But the host principal did not
have permission to read DNS entries from LDAP.

Allow all hosts to read some entries from active DNS records.

Fixes: https://pagure.io/freeipa/issue/8098
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-16 13:04:17 +01:00
..
__init__.py Add marker needs_ipaapi and option to skip tests 2017-12-11 20:40:06 +01:00
base.py lint: Make Pylint-2.4 happy again 2020-02-12 18:08:32 +02:00
test_adtrust_install.py ipatests: add test for ipa-adtrust-install --add-agents 2020-03-05 14:40:58 +01:00
test_advise.py pylint: Synchronize pylint plugin to ipatests code 2020-02-12 18:08:32 +02:00
test_authselect.py Remove unused tests 2019-01-17 14:36:27 +01:00
test_automember.py Tests for autounmembership feature 2019-06-06 16:51:55 +02:00
test_backup_and_restore.py Fix for regression from PR#3962 2020-02-19 10:42:01 +01:00
test_ca_custom_sdn.py test_integration: add tests for custom CA subject DN 2019-10-17 08:17:46 +02:00
test_caless.py ipatests: add test for certinstall with notBefore in the future 2019-12-19 15:50:44 +01:00
test_cert.py Allow hosts to read DNS records for IP SAN 2020-03-16 13:04:17 +01:00
test_cli_ipa_not_configured.py ipatests: Test for ipa-backup with ipa not configured 2019-08-27 12:04:45 +02:00
test_commands.py ipatests: replace utility for editing sssd.conf 2020-03-09 16:17:13 +01:00
test_crlgen_manage.py ipatests: fix test_crlgen_manage 2019-11-29 11:17:13 +01:00
test_customized_ds_config_install.py Speed up test_customized_ds_config_install 2018-11-08 17:46:38 +01:00
test_dns_locations.py Fix div-by-zero when svc weight is 0 for all masters in location 2020-02-26 13:42:10 -05:00
test_dnssec.py ipatests: fix TestMigrateDNSSECMaster teardown 2019-12-05 17:48:42 +01:00
test_external_ca.py Removes several pylint warnings. 2019-09-27 09:38:32 +02:00
test_fips.py Test installation with (fake) userspace FIPS 2019-11-14 16:01:15 +01:00
test_forced_client_reenrollment.py ipatests/test_integration/test_forced_client_reenrollment.py: Use unshare 2018-12-03 11:26:08 +01:00
test_http_kdc_proxy.py ipatests/test_integration/test_http_kdc_proxy.py: Use new firewall import 2018-12-03 11:26:08 +01:00
test_idviews.py Add integration tests for idviews 2018-12-07 11:39:23 +01:00
test_installation.py Move wait_for_request() method to tasks.py 2020-03-11 15:48:42 -04:00
test_ipahealthcheck.py Move execution of ipa-healthcheck to a separate function 2020-03-12 17:24:33 -04:00
test_kerberos_flags.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_krbtpolicy.py Add integration test for otp kerberos ticket policy. 2019-12-20 16:29:30 +02:00
test_legacy_clients.py pytest: Migrate unittest/nose to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_membermanager.py Show group-add/remove-member-manager failures 2019-11-20 17:08:40 +01:00
test_netgroup.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_nfs.py ipatests: make sure ipa-client-automount reverts sssd.conf 2020-02-14 09:33:43 +02:00
test_ntp_options.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_ordering.py pytest: Migrate xunit-style setups to Pytest fixtures 2020-02-12 18:08:32 +02:00
test_otp.py ipatests: Added test when 2FA prompting configurations is set. 2020-03-03 10:23:58 +02:00
test_pki_config_override.py Fix and extend pki config override test 2019-04-24 17:08:24 +02:00
test_pkinit_manage.py test: add non-reg test checking pkinit after server install 2019-02-20 09:18:38 +01:00
test_replica_promotion.py ipatests: fix TestSubCAkeyReplication 2020-03-05 07:20:15 +01:00
test_replication_layouts.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_server_del.py ipatests/test_integration/test_server_del.py: Enable dns in fw for dnssec 2018-12-07 17:29:59 +01:00
test_service_permissions.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_simple_replication.py ipatests: add integration test for ipa-replica-manage list 2019-05-28 15:02:49 -04:00
test_smb.py pylint: Synchronize pylint plugin to ipatests code 2020-02-12 18:08:32 +02:00
test_sssd.py ipatests: add test for SSSD updating expired cache items 2020-03-12 07:39:12 +01:00
test_sudo.py ipatests: replace utility for editing sssd.conf 2020-03-09 16:17:13 +01:00
test_testconfig.py Test installation with (fake) userspace FIPS 2019-11-14 16:01:15 +01:00
test_topologies.py Fix comparison-with-callable 2018-11-13 13:37:58 +01:00
test_topology.py Removes several pylint warnings. 2019-09-27 09:38:32 +02:00
test_trust.py ipatests: replace utility for editing sssd.conf 2020-03-09 16:17:13 +01:00
test_uninstallation.py Replace imports from ipaserver 2019-05-16 13:20:38 +02:00
test_upgrade.py pylint: Synchronize pylint plugin to ipatests code 2020-02-12 18:08:32 +02:00
test_user_permissions.py Skip paramiko tests in FIPS mode 2019-11-29 17:02:16 +01:00
test_vault.py Add a shared-vault-retrieve test 2018-11-21 15:41:00 +01:00
test_winsyncmigrate.py pylint: Synchronize pylint plugin to ipatests code 2020-02-12 18:08:32 +02:00