Add tests for user auth type management

https://fedorahosted.org/freeipa/ticket/3368

2 files changed, 102 insertions, 0 deletions

diff --git a/ipatests/test_xmlrpc/test_config_plugin.py b/ipatests/test_xmlrpc/test_config_plugin.py
index 3d9a31daf..56baf7f0b 100644
--- a/ipatests/test_xmlrpc/test_config_plugin.py
+++ b/ipatests/test_xmlrpc/test_config_plugin.py
@@ -118,4 +118,34 @@ class test_config(Declarative):
                 error='SELinux user map default user not in order list'),
         ),
 
+        dict(
+            desc='Set user auth type',
+            command=('config_mod', [], dict(ipauserauthtype=u'password')),
+            expected=dict(
+                    result=lambda d: d['ipauserauthtype'] == (u'password',),
+                    value=u'',
+                    summary=None,
+                ),
+        ),
+
+        dict(
+            desc='Check user auth type',
+            command=('config_show', [], {}),
+            expected=dict(
+                    result=lambda d: d['ipauserauthtype'] == (u'password',),
+                    value=u'',
+                    summary=None,
+                ),
+        ),
+
+        dict(
+            desc='Unset user auth type',
+            command=('config_mod', [], dict(ipauserauthtype=None)),
+            expected=dict(
+                    result=lambda d: 'ipauserauthtype' not in d,
+                    value=u'',
+                    summary=None,
+                ),
+        ),
+
     ]
diff --git a/ipatests/test_xmlrpc/test_user_plugin.py b/ipatests/test_xmlrpc/test_user_plugin.py
index 9df5d5d5b..4f30ec614 100644
--- a/ipatests/test_xmlrpc/test_user_plugin.py
+++ b/ipatests/test_xmlrpc/test_user_plugin.py
@@ -1337,4 +1337,76 @@ class test_user(Declarative):
             extra_check = upg_check,
         ),
 
+        dict(
+            desc='Set ipauserauthtype for "%s"' % user1,
+            command=('user_mod', [user1], dict(ipauserauthtype=u'password')),
+            expected=dict(
+                result=dict(
+                    givenname=[u'Test'],
+                    homedirectory=[u'/home/tuser1'],
+                    loginshell=[u'/bin/sh'],
+                    sn=[u'User1'],
+                    uid=[user1],
+                    uidnumber=[fuzzy_digits],
+                    gidnumber=[fuzzy_digits],
+                    mail=[u'%s@%s' % (user1, api.env.domain)],
+                    memberof_group=[u'ipausers'],
+                    nsaccountlock=False,
+                    has_keytab=False,
+                    has_password=False,
+                    ipauserauthtype=[u'password'],
+                ),
+                value=user1,
+                summary='Modified user "%s"' % user1,
+            ),
+        ),
+
+        dict(
+            desc='Retrieve "%s" to verify ipauserauthtype' % user1,
+            command=('user_show', [user1], {}),
+            expected=dict(
+                result=dict(
+                    dn=get_user_dn(user1),
+                    givenname=[u'Test'],
+                    homedirectory=[u'/home/tuser1'],
+                    loginshell=[u'/bin/sh'],
+                    sn=[u'User1'],
+                    uid=[user1],
+                    uidnumber=[fuzzy_digits],
+                    gidnumber=[fuzzy_digits],
+                    mail=[u'%s@%s' % (user1, api.env.domain)],
+                    memberof_group=[u'ipausers'],
+                    nsaccountlock=False,
+                    has_keytab=False,
+                    has_password=False,
+                    ipauserauthtype=[u'password'],
+                ),
+                value=user1,
+                summary=None,
+            ),
+        ),
+
+        dict(
+            desc='Unset ipauserauthtype for "%s"' % user1,
+            command=('user_mod', [user1], dict(ipauserauthtype=None)),
+            expected=dict(
+                result=dict(
+                    givenname=[u'Test'],
+                    homedirectory=[u'/home/tuser1'],
+                    loginshell=[u'/bin/sh'],
+                    sn=[u'User1'],
+                    uid=[user1],
+                    uidnumber=[fuzzy_digits],
+                    gidnumber=[fuzzy_digits],
+                    mail=[u'%s@%s' % (user1, api.env.domain)],
+                    memberof_group=[u'ipausers'],
+                    nsaccountlock=False,
+                    has_keytab=False,
+                    has_password=False,
+                ),
+                value=user1,
+                summary='Modified user "%s"' % user1,
+            ),
+        ),
+
     ]