Alexander Bokovoy c3bc938650 ipatests: make sure PKINIT enrollment works with a strict policy ...

Previously, for a global policy which does not include
'password', krb5kdc restart was failing. Now it should succeed.

We set admin user authentication type to PASSWORD to simplify
configuration in the test.

What matters here is that global policy does not include PKINIT and that
means a code in the ticket policy check will allow PKINIT implicitly
rather than explicitly.

Related: https://pagure.io/freeipa/issue/9485

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Francisco Trivino <ftrivino@redhat.com>

2023-12-22 10:34:19 +01:00

..

__init__.py

Add marker needs_ipaapi and option to skip tests

2017-12-11 20:40:06 +01:00

base.py

Add tests for Random Serial Number v3 support

2022-06-09 08:35:15 +02:00

example_cli.py

Add context manager to ipalib.API

2023-09-29 12:57:06 +02:00

test_acme.py

ipatests: accommodate DST in ACME cert expiry

2023-08-23 13:10:02 -04:00

test_adtrust_install.py

ipatests: ipa-adtrust-install command test scenarios

2023-04-28 16:08:56 +02:00

test_advise.py

ipatests: disable dnssec validation in tests using dnf

2023-12-19 14:59:42 +01:00

test_authselect.py

ipatests: add new test with --subid installer option

2022-05-25 08:11:39 +03:00

test_automember.py

ipatests: adapt for new automembership fixup behavior

2023-03-14 09:39:17 +01:00

test_backup_and_restore.py

tests: fix backup-restore scenario with replica

2023-06-28 09:10:51 +02:00

test_ca_custom_sdn.py

test_integration: add tests for custom CA subject DN

2019-10-17 08:17:46 +02:00

test_caless.py

Added a check while removing 'cert_dir'. The teardown method is called even if all the tests are skipped since the required PKI version is not present. The teardown is trying to remove a non-existent directory.

2022-07-02 18:34:16 +02:00

test_cert.py

ipatests: remove test_rekey_keytype_DSA

2022-05-04 13:45:02 -04:00

test_cli_ipa_not_configured.py

ipatests: Test for ipa-backup with ipa not configured

2019-08-27 12:04:45 +02:00

test_commands.py

Add context manager to ipalib.API

2023-09-29 12:57:06 +02:00

test_crlgen_manage.py

ipatests: fix test_crlgen_manage

2019-11-29 11:17:13 +01:00

test_custom_plugins.py

ipatests: add suite for testing custom plugins

2021-08-05 17:36:46 +02:00

test_customized_ds_config_install.py

ipatests: do not configure nameserver when installing client and replica

2021-03-04 18:47:32 +01:00

test_dns_locations.py

Add URI system records for KDC

2021-08-31 18:28:27 -04:00

test_dns.py

Tests for fake_mname parameter setup

2020-08-06 18:43:53 +02:00

test_dnssec.py

ipatests: re-enable dnssec tests

2022-11-21 14:24:17 +01:00

test_epn.py

ipatests: Skip the test failing due to FIPS policy

2023-10-19 12:27:01 +02:00

test_external_ca.py

Make test_external_ca.py compatible with crypto 41.0.0

2023-12-11 09:49:47 +01:00

test_fips.py

ipatests: update the fake fips mode expected message

2022-12-19 15:38:05 +01:00

test_forced_client_reenrollment.py

ipatests: do not manually modify /etc/resolv.conf in tests

2021-03-04 18:47:32 +01:00

test_http_kdc_proxy.py

ipatests: add test for kdcproxy handling reply split to several TCP packets

2021-03-18 13:41:49 +01:00

test_idm_api.py

ipatests: idm api related tests.

2023-08-14 09:55:42 +02:00

test_idp.py

test_external_idp: update code for selenium 4.10

2023-12-11 09:52:05 +01:00

test_idviews.py

ipatests: fix the method adding ifp to sssd.conf

2020-06-24 17:22:24 -04:00

test_installation_client.py

ipatests: Check that SSSD_PUBCONF_KRB5_INCLUDE_D_DIR is not included in krb5.conf

2023-06-09 10:04:20 +02:00

test_installation.py

ipatests: disable dnssec validation in tests using dnf

2023-12-19 14:59:42 +01:00

test_ipa_cert_fix.py

ipatests: restart ipa services after moving date

2023-09-18 17:51:30 +02:00

test_ipahealthcheck.py

ipatests: fix expected output for ipahealthcheck.ipa.host

2023-11-16 15:51:03 -05:00

test_kerberos_flags.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_krbtpolicy.py

ipa tests: Add LANG before kinit command to fix issue with locale settings

2023-01-19 16:15:11 +01:00

test_legacy_clients.py

ipatests: Fetch sudo rules without time offset

2021-06-03 09:21:45 +03:00

test_membermanager.py

ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario

2023-03-15 09:45:08 +01:00

test_netgroup.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_nfs.py

Remove the --no-sssd option from ipa-client-automount

2022-03-18 09:40:37 +01:00

test_ntp_options.py

ipatests: interactive install prompts for netbios name

2021-11-02 10:11:28 +01:00

test_otp.py

ipatests: add negative test for otptoken-sync

2022-09-29 07:58:44 -04:00

test_pki_config_override.py

Fix and extend pki config override test

2019-04-24 17:08:24 +02:00

test_pkinit_install.py

ipatests: make sure PKINIT enrollment works with a strict policy

2023-12-22 10:34:19 +01:00

test_pkinit_manage.py

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

test_pwpolicy.py

Allow password policy minlength to be removed like other values

2023-10-16 13:23:20 -04:00

test_random_serial_numbers.py

Additional tests for RSN v3

2022-08-04 13:26:00 -04:00

test_replica_promotion.py

ipatests: ignore nsslapd-accesslog-logbuffering WARN in healthcheck

2023-11-16 15:51:03 -05:00

test_replication_layouts.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_resolvers_manager.py

ipatests: add utility for managing domain name resolvers

2021-03-04 18:47:32 +01:00

test_server_del.py

pylint: Fix consider-using-dict-items

2022-03-11 13:37:08 -05:00

test_service_permissions.py

RBCD: add basic test for RBCD handling

2023-04-05 14:55:22 -04:00

test_simple_replication.py

Integration tests: add a test to ipa-server-upgrade

2023-06-21 20:50:59 +02:00

test_smb.py

ipatest: remove xfail from test_smb

2023-06-05 09:41:14 +02:00

test_sso.py

ipatests: xfail on all fedora for test_ipa_login_with_sso_user

2022-12-14 11:26:17 +01:00

test_sssd.py

ipatests : Test query to AD specific attributes is successful.

2022-10-18 07:03:29 +02:00

test_subids.py

ipatests: ipa-client-install --subid adds entry in nsswitch.conf

2022-08-01 09:28:30 -04:00

test_sudo.py

ipatests: test addition of invalid sudo command

2021-02-15 09:59:41 +02:00

test_testconfig.py

ipatests: mock resolver factory

2021-03-04 18:47:32 +01:00

test_topologies.py

Fix comparison-with-callable

2018-11-13 13:37:58 +01:00

test_topology.py

ipatests: fix test_topology

2023-08-14 09:58:05 +02:00

test_trust.py

ipatests: mark known failures for autoprivategroup

2023-04-17 16:44:57 +02:00

test_uninstallation.py

ipatests: do not configure nameserver when installing client and replica

2021-03-04 18:47:32 +01:00

test_upgrade.py

Integration test: add a test for upgrade and PKI drop-in file

2023-06-21 08:48:07 +02:00

test_user_permissions.py

ipatests: Test that non admin user can search hbac rule.

2023-03-22 16:52:49 +01:00

test_vault.py

Additional tests for RSN v3

2022-08-04 13:26:00 -04:00

test_winsyncmigrate.py

pylint: Fix use-maxsplit-arg

2022-03-11 13:37:08 -05:00