freeipa.git/tests/test_xmlrpc, branch hbactester

Hide the HBAC access type attribute now that deny is deprecated.

2011-07-21T05:11:45+00:00

It won't appear in the UI/CLI but is still available via XML-RPC.
allow is the default and deny will be rejected.

https://fedorahosted.org/freeipa/ticket/1495

Ticket 1485 - DN pairwise grouping

2011-07-21T04:29:38+00:00

The pairwise grouping used to form RDN's and AVA's proved to be
confusing in practice, this patch removes that functionality thus
requiring programmers to explicitly pair attr,value using a tuple or
list.

In addition it was discovered additional functionality was needed to
support some DN operations in freeipa. DN objects now support
startswith(), endswith() and the "in" membership test. These functions
and operators will accept either a DN or RDN.

The unittest was modified to remove the pairwise tests and add new
explicit tests. The unittest was augmented to test the new
functionality. In addition the unittest was cleaned up a bit to use
common utilty functions for improved readabilty and robustness.

The documentation was updated.

fix test_role_plugin use of DN to avoid pairwise grouping

With the external user/group management fixed, correct the unit tests.

2011-07-20T15:27:42+00:00

The unit tests were incorrectly expecting the removed data back when
removing external users.

Optionally wait for 389-ds postop plugins to complete

2011-07-19T11:06:16+00:00

Add a new command that lets you wait for an attribute to appear in
a value. Using this you can do things like wait for a managed entry
to be created, adding a new objectclass to the parent entry.

This is controlled by a new booleon option, wait_for_attr, defaulting
to False.

https://fedorahosted.org/freeipa/ticket/1144

Fix failing tests due to object name changes

2011-07-18T02:21:53+00:00

Some object names had spaces in them which was bad, update the tests
to reflect the new names.

Add new dnszone-find test

2011-07-18T07:50:23+00:00

Implement a test for new dnszone-find option --forward-only.
Fix example for reverse zone (zone was not fully qualified and
DNS plugin would forbid adding PTR records).

https://fedorahosted.org/freeipa/ticket/1473

Remove the ability to create new HBAC deny rules.

2011-07-14T23:23:17+00:00

New rules will all be allow type. Existing rules cannot be changed to
deny.

The type attribute now defaults to allow with autofill so it won't be
prompted in interactive mode in the cli.

https://fedorahosted.org/freeipa/ticket/1432

Convert nsaccountlock to always work as bool towards Python code

2011-07-13T10:02:46+00:00

https://fedorahosted.org/freeipa/ticket/1259

Python code will see nsaccountlock as bool. JavaScript code will also see it as bool.

This allows native boolean operations with the lock field. Passes both CLI and WebUI tests.

Add DNS record modification command

2011-07-12T18:20:16+00:00

The DNS record plugin does not support modification of a record. One
can only add A type addresses to a DNS record or remove the current
ones. To actually change a DNS record value it has to be removed and
then added with a desired value.

This patch adds a new DNS plugin command "dnsrecord-mod" which enables
user to:
 - modify a DNS record value (note than DNS record can hold multiple values
   and those will be overwritten)
 - remove a DNS record when an empty value is passed

New tests for this new command have been added to the CLI test suite.

https://fedorahosted.org/freeipa/ticket/1137

find_entry_by_attr() should fail if multiple entries are found

2011-07-11T22:45:49+00:00

It will only ever return one entry so if more than one are found
then we raise an exception. This is most easily seen in the host
plugin where we search on the server shortname which can be the
same across sub-domains (e.g. foo.example.com &
foo.lab.example.com).

https://fedorahosted.org/freeipa/ticket/1388