freeipa/ipatests/test_integration
Alexander Bokovoy c3bc938650
ipatests: make sure PKINIT enrollment works with a strict policy
Previously, for a global policy which does not include
'password', krb5kdc restart was failing. Now it should succeed.

We set admin user authentication type to PASSWORD to simplify
configuration in the test.

What matters here is that global policy does not include PKINIT and that
means a code in the ticket policy check will allow PKINIT implicitly
rather than explicitly.

Related: https://pagure.io/freeipa/issue/9485

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Francisco Trivino <ftrivino@redhat.com>
2023-12-22 10:34:19 +01:00
..
__init__.py Add marker needs_ipaapi and option to skip tests 2017-12-11 20:40:06 +01:00
base.py Add tests for Random Serial Number v3 support 2022-06-09 08:35:15 +02:00
example_cli.py Add context manager to ipalib.API 2023-09-29 12:57:06 +02:00
test_acme.py ipatests: accommodate DST in ACME cert expiry 2023-08-23 13:10:02 -04:00
test_adtrust_install.py ipatests: ipa-adtrust-install command test scenarios 2023-04-28 16:08:56 +02:00
test_advise.py ipatests: disable dnssec validation in tests using dnf 2023-12-19 14:59:42 +01:00
test_authselect.py ipatests: add new test with --subid installer option 2022-05-25 08:11:39 +03:00
test_automember.py ipatests: adapt for new automembership fixup behavior 2023-03-14 09:39:17 +01:00
test_backup_and_restore.py tests: fix backup-restore scenario with replica 2023-06-28 09:10:51 +02:00
test_ca_custom_sdn.py test_integration: add tests for custom CA subject DN 2019-10-17 08:17:46 +02:00
test_caless.py Added a check while removing 'cert_dir'. The teardown method is called even if all the tests are skipped since the required PKI version is not present. The teardown is trying to remove a non-existent directory. 2022-07-02 18:34:16 +02:00
test_cert.py ipatests: remove test_rekey_keytype_DSA 2022-05-04 13:45:02 -04:00
test_cli_ipa_not_configured.py ipatests: Test for ipa-backup with ipa not configured 2019-08-27 12:04:45 +02:00
test_commands.py Add context manager to ipalib.API 2023-09-29 12:57:06 +02:00
test_crlgen_manage.py ipatests: fix test_crlgen_manage 2019-11-29 11:17:13 +01:00
test_custom_plugins.py ipatests: add suite for testing custom plugins 2021-08-05 17:36:46 +02:00
test_customized_ds_config_install.py ipatests: do not configure nameserver when installing client and replica 2021-03-04 18:47:32 +01:00
test_dns_locations.py Add URI system records for KDC 2021-08-31 18:28:27 -04:00
test_dns.py Tests for fake_mname parameter setup 2020-08-06 18:43:53 +02:00
test_dnssec.py ipatests: re-enable dnssec tests 2022-11-21 14:24:17 +01:00
test_epn.py ipatests: Skip the test failing due to FIPS policy 2023-10-19 12:27:01 +02:00
test_external_ca.py Make test_external_ca.py compatible with crypto 41.0.0 2023-12-11 09:49:47 +01:00
test_fips.py ipatests: update the fake fips mode expected message 2022-12-19 15:38:05 +01:00
test_forced_client_reenrollment.py ipatests: do not manually modify /etc/resolv.conf in tests 2021-03-04 18:47:32 +01:00
test_http_kdc_proxy.py ipatests: add test for kdcproxy handling reply split to several TCP packets 2021-03-18 13:41:49 +01:00
test_idm_api.py ipatests: idm api related tests. 2023-08-14 09:55:42 +02:00
test_idp.py test_external_idp: update code for selenium 4.10 2023-12-11 09:52:05 +01:00
test_idviews.py ipatests: fix the method adding ifp to sssd.conf 2020-06-24 17:22:24 -04:00
test_installation_client.py ipatests: Check that SSSD_PUBCONF_KRB5_INCLUDE_D_DIR is not included in krb5.conf 2023-06-09 10:04:20 +02:00
test_installation.py ipatests: disable dnssec validation in tests using dnf 2023-12-19 14:59:42 +01:00
test_ipa_cert_fix.py ipatests: restart ipa services after moving date 2023-09-18 17:51:30 +02:00
test_ipahealthcheck.py ipatests: fix expected output for ipahealthcheck.ipa.host 2023-11-16 15:51:03 -05:00
test_kerberos_flags.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_krbtpolicy.py ipa tests: Add LANG before kinit command to fix issue with locale settings 2023-01-19 16:15:11 +01:00
test_legacy_clients.py ipatests: Fetch sudo rules without time offset 2021-06-03 09:21:45 +03:00
test_membermanager.py ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario 2023-03-15 09:45:08 +01:00
test_netgroup.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_nfs.py Remove the --no-sssd option from ipa-client-automount 2022-03-18 09:40:37 +01:00
test_ntp_options.py ipatests: interactive install prompts for netbios name 2021-11-02 10:11:28 +01:00
test_otp.py ipatests: add negative test for otptoken-sync 2022-09-29 07:58:44 -04:00
test_pki_config_override.py Fix and extend pki config override test 2019-04-24 17:08:24 +02:00
test_pkinit_install.py ipatests: make sure PKINIT enrollment works with a strict policy 2023-12-22 10:34:19 +01:00
test_pkinit_manage.py Ensure that KDC cert has SAN DNS entry 2021-01-29 13:36:41 -05:00
test_pwpolicy.py Allow password policy minlength to be removed like other values 2023-10-16 13:23:20 -04:00
test_random_serial_numbers.py Additional tests for RSN v3 2022-08-04 13:26:00 -04:00
test_replica_promotion.py ipatests: ignore nsslapd-accesslog-logbuffering WARN in healthcheck 2023-11-16 15:51:03 -05:00
test_replication_layouts.py Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
test_resolvers_manager.py ipatests: add utility for managing domain name resolvers 2021-03-04 18:47:32 +01:00
test_server_del.py pylint: Fix consider-using-dict-items 2022-03-11 13:37:08 -05:00
test_service_permissions.py RBCD: add basic test for RBCD handling 2023-04-05 14:55:22 -04:00
test_simple_replication.py Integration tests: add a test to ipa-server-upgrade 2023-06-21 20:50:59 +02:00
test_smb.py ipatest: remove xfail from test_smb 2023-06-05 09:41:14 +02:00
test_sso.py ipatests: xfail on all fedora for test_ipa_login_with_sso_user 2022-12-14 11:26:17 +01:00
test_sssd.py ipatests : Test query to AD specific attributes is successful. 2022-10-18 07:03:29 +02:00
test_subids.py ipatests: ipa-client-install --subid adds entry in nsswitch.conf 2022-08-01 09:28:30 -04:00
test_sudo.py ipatests: test addition of invalid sudo command 2021-02-15 09:59:41 +02:00
test_testconfig.py ipatests: mock resolver factory 2021-03-04 18:47:32 +01:00
test_topologies.py Fix comparison-with-callable 2018-11-13 13:37:58 +01:00
test_topology.py ipatests: fix test_topology 2023-08-14 09:58:05 +02:00
test_trust.py ipatests: mark known failures for autoprivategroup 2023-04-17 16:44:57 +02:00
test_uninstallation.py ipatests: do not configure nameserver when installing client and replica 2021-03-04 18:47:32 +01:00
test_upgrade.py Integration test: add a test for upgrade and PKI drop-in file 2023-06-21 08:48:07 +02:00
test_user_permissions.py ipatests: Test that non admin user can search hbac rule. 2023-03-22 16:52:49 +01:00
test_vault.py Additional tests for RSN v3 2022-08-04 13:26:00 -04:00
test_winsyncmigrate.py pylint: Fix use-maxsplit-arg 2022-03-11 13:37:08 -05:00