Alexander Bokovoy a620ac0f6f ipatests: test sysaccount password change with a password policy applied ...

ipa-pwd-extop plugin had a bug which prevented a cn=Directory Manager
to change a password to a value that is not allowed by an associated
password policy. Password policy checks should not apply to any
operations done as cn=Directory Manager.

The test creates a system account with associated policy that prevents
password reuse. It then goes to try to change a password three times:
 - as a user: must succeeed
 - as a cn=Directory Manager: must succeed even with a password re-use
 - as a user again: must fail due to password re-use

Related: https://pagure.io/freeipa/issue/7181
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>

2020-03-25 10:11:48 +01:00

..

__init__.py

Add marker needs_ipaapi and option to skip tests

2017-12-11 20:40:06 +01:00

base.py

lint: Make Pylint-2.4 happy again

2020-02-12 18:08:32 +02:00

test_adtrust_install.py

Test if schema-compat-entry-attribute is set

2020-03-24 13:49:57 +01:00

test_advise.py

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00

test_authselect.py

Remove unused tests

2019-01-17 14:36:27 +01:00

test_automember.py

Tests for autounmembership feature

2019-06-06 16:51:55 +02:00

test_backup_and_restore.py

ipatests: wait for SSSD to become online in backup/restore tests

2020-03-21 07:37:05 +02:00

test_ca_custom_sdn.py

test_integration: add tests for custom CA subject DN

2019-10-17 08:17:46 +02:00

test_caless.py

ipatests: add test for certinstall with notBefore in the future

2019-12-19 15:50:44 +01:00

test_cert.py

Allow hosts to read DNS records for IP SAN

2020-03-16 13:04:17 +01:00

test_cli_ipa_not_configured.py

ipatests: Test for ipa-backup with ipa not configured

2019-08-27 12:04:45 +02:00

test_commands.py

ipatests: test sysaccount password change with a password policy applied

2020-03-25 10:11:48 +01:00

test_crlgen_manage.py

ipatests: fix test_crlgen_manage

2019-11-29 11:17:13 +01:00

test_customized_ds_config_install.py

Speed up test_customized_ds_config_install

2018-11-08 17:46:38 +01:00

test_dns_locations.py

Fix div-by-zero when svc weight is 0 for all masters in location

2020-02-26 13:42:10 -05:00

test_dnssec.py

ipatests: fix TestMigrateDNSSECMaster teardown

2019-12-05 17:48:42 +01:00

test_external_ca.py

Removes several pylint warnings.

2019-09-27 09:38:32 +02:00

test_fips.py

Test installation with (fake) userspace FIPS

2019-11-14 16:01:15 +01:00

test_forced_client_reenrollment.py

ipatests/test_integration/test_forced_client_reenrollment.py: Use unshare

2018-12-03 11:26:08 +01:00

test_http_kdc_proxy.py

ipatests/test_integration/test_http_kdc_proxy.py: Use new firewall import

2018-12-03 11:26:08 +01:00

test_idviews.py

Add integration tests for idviews

2018-12-07 11:39:23 +01:00

test_installation.py

ipatests: check HTTP certificate contains ipa-ca.$DOMAIN dnsname

2020-03-25 11:13:03 +11:00

test_ipahealthcheck.py

Test that ipa-healthcheck human output translates error strings

2020-03-21 09:36:40 +01:00

test_kerberos_flags.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_krbtpolicy.py

Add integration test for otp kerberos ticket policy.

2019-12-20 16:29:30 +02:00

test_legacy_clients.py

pytest: Migrate unittest/nose to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_membermanager.py

Show group-add/remove-member-manager failures

2019-11-20 17:08:40 +01:00

test_netgroup.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_nfs.py

ipatests: make sure ipa-client-automount reverts sssd.conf

2020-02-14 09:33:43 +02:00

test_ntp_options.py

pytest: Migrate xunit-style setups to Pytest fixtures

2020-02-12 18:08:32 +02:00

test_otp.py

ipatests: Added test when 2FA prompting configurations is set.

2020-03-03 10:23:58 +02:00

test_pki_config_override.py

Fix and extend pki config override test

2019-04-24 17:08:24 +02:00

test_pkinit_manage.py

test: add non-reg test checking pkinit after server install

2019-02-20 09:18:38 +01:00

test_replica_promotion.py

ipatests: fix TestSubCAkeyReplication

2020-03-05 07:20:15 +01:00

test_replication_layouts.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_server_del.py

ipatests/test_integration/test_server_del.py: Enable dns in fw for dnssec

2018-12-07 17:29:59 +01:00

test_service_permissions.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

test_simple_replication.py

ipatests: add integration test for ipa-replica-manage list

2019-05-28 15:02:49 -04:00

test_smb.py

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00

test_sssd.py

ipatests: always skip additional input for group-add-member --external

2020-03-25 09:39:01 +02:00

test_sudo.py

ipatests: replace utility for editing sssd.conf

2020-03-09 16:17:13 +01:00

test_testconfig.py

Test installation with (fake) userspace FIPS

2019-11-14 16:01:15 +01:00

test_topologies.py

Fix comparison-with-callable

2018-11-13 13:37:58 +01:00

test_topology.py

Removes several pylint warnings.

2019-09-27 09:38:32 +02:00

test_trust.py

ipatests: provide AD admin password when trying to establish trust

2020-03-24 18:26:03 +01:00

test_uninstallation.py

Replace imports from ipaserver

2019-05-16 13:20:38 +02:00

test_upgrade.py

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00

test_user_permissions.py

Skip paramiko tests in FIPS mode

2019-11-29 17:02:16 +01:00

test_vault.py

Add a shared-vault-retrieve test

2018-11-21 15:41:00 +01:00

test_winsyncmigrate.py

pylint: Synchronize pylint plugin to ipatests code

2020-02-12 18:08:32 +02:00