sssd.git/src/tests, branch sudo1-13

intg: Fix execution with dbus-1.11.18

2017-10-04T04:42:03+00:00

Since dbus-1.11.18 DBUS_COOKIE_SHA1 respect $HOME variable
and fallback to value returned from getpwnam only if env HOME
does not exist. It caused problem for dbus communication
between sssd processes because local user usually do not have
directory $HOME/.dbus-keyrings/. And directory created in cwrap
environment is problmatic

[build@host ~]$ ls -ld ~/.dbus-keyrings/
drw-------. 2 build build 6 Oct  3 10:44 /home/build/.dbus-keyrings/

[buildhost ~]$ ls -lna ~/.dbus-keyrings/
ls: cannot access '/home/build/.dbus-keyrings/.': Permission denied
ls: cannot access '/home/build/.dbus-keyrings/..': Permission denied
total 0
d????????? ? ? ? ?            ? .
d????????? ? ? ? ?            ? ..

[build@host ~]$ touch ~/.dbus-keyrings/test
touch: cannot touch '/home/build/.dbus-keyrings/test': Permission denied

Other alternative would be to set env variable HOME to the
same value as in fake passwd file:
  HOME=$(abs_builddir)/root

Related dbus bug:
https://bugs.freedesktop.org/show_bug.cgi?id=101960

Resolves:
https://pagure.io/SSSD/sssd/issue/3531

Reviewed-by: Fabiano Fidêncio 
(cherry picked from commit 82c36227e36de155b13e6eb7cfa3e80a25774157)
(cherry picked from commit ff2ff94a1cdb98a55a2d8a3c3bbe06e1fb948d5a)

TEST_NEGCACHE: Ensure root's uid and gid are always added to ncache

2017-08-31T20:23:57+00:00

In order to do so two new functions have been introduced and
test_sss_ncache_prepopulate() has been modified in order to ensure that
root's uid and gid are always added to the negative cache.

Related: https://pagure.io/SSSD/sssd/issue/3460

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek 
(cherry picked from commit b4b3d0642120ca05f63959fe2f317a6b93031929)
(cherry picked from commit 7e48fb252d1cf032d9aa11bbad1366d753ed081d)

TEST_NEGCACHE: Test that "root" is always added to ncache

2017-08-31T20:22:26+00:00

Simply modify test_sss_ncache_prepopulate() in order to ensure that
"root" user and group are always added to the negative cache, no matter
whether they're set as part of the filter_users or filter_groups
options.

Related: https://pagure.io/SSSD/sssd/issue/3460

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek 
(cherry picked from commit e54764d62bfcc48770d9b2578132979aa58636e5)
(cherry picked from commit cfc62a3cc9683a78e5a5ccb31c7e5094c1b91a91)

tests: update expired certificate

2017-06-26T15:31:32+00:00

This is a short term fix to un-break the unit tests. The proper fix
would be to create the certificates at runtime during the tests.

Related to https://pagure.io/SSSD/sssd/issue/3436

Reviewed-by: Lukáš Slebodník 
(cherry picked from commit 2ccfa9502abf52941d8b6e44b5f7cfdd13311a2d)
(cherry picked from commit a3f85d196d14d2699af3ccd87c69c89287ce09fa)

BUILD: Fix build without ssh

2017-05-25T12:06:41+00:00

autoreconf -if
./configure --without-ssh
make check

src/tests/cmocka/test_utils-test_sss_ssh.o: In function `test_textual_public_key':
src/tests/cmocka/test_sss_ssh.c:78: undefined reference to `sss_ssh_format_pubkey'
src/tests/cmocka/test_sss_ssh.c:82: undefined reference to `sss_ssh_format_pubkey'
src/tests/cmocka/test_sss_ssh.c:86: undefined reference to `sss_ssh_format_pubkey'
src/tests/cmocka/test_sss_ssh.c:89: undefined reference to `sss_ssh_format_pubkey'
src/tests/cmocka/test_sss_ssh.c:92: undefined reference to `sss_ssh_format_pubkey'
src/tests/cmocka/test_utils-test_sss_ssh.o:src/tests/cmocka/test_sss_ssh.c:95:
    more undefined references to `sss_ssh_format_pubkey' follow
collect2: error: ld returned 1 exit status

Reviewed-by: Fabiano Fidêncio 
(cherry picked from commit d82ffa52dd4c3bb11115b1687edc189284797329)
(cherry picked from commit f46d1474b7b249eda690e78b02adea981fbb058c)

libwbclient-sssd: wbcLookupSid() allow NULL arguments

2017-01-21T19:19:25+00:00

Some caller might not be interested in some of the values wbcLookupSid()
returns and just pass NULL. Currently 'net ads user info' does this
because it is not interested in the domain. wbcLookupSid() should handle
this gracefully.

Resolves:
https://fedorahosted.org/sssd/ticket/3273

Reviewed-by: Lukáš Slebodník 
(cherry picked from commit 0b78b4e32955ced0f35c6d4685bd277bb03d04cb)
(cherry picked from commit 924122b5457f8f93687a81d8171757c8036c8b0f)

views: properly override group member names

2016-11-08T07:55:39+00:00

Resolves https://fedorahosted.org/sssd/ticket/2948

Reviewed-by: Jakub Hrozek 
(cherry picked from commit 1594701fbdc341069e11cff9a85e7a795e52db3d)

PAM: add pam_response_filter option

2016-11-02T13:02:18+00:00

Currently the main use-case for this new option is to not set the
KRB5CCNAME environment varible for services like 'sudo-i'.

Resolves https://fedorahosted.org/sssd/ticket/2296

Reviewed-by: Jakub Hrozek

PAM: add a test for filter_responses()

2016-11-02T13:02:14+00:00

Reviewed-by: Jakub Hrozek

TESTS: Fix check for py bindings in dlopen tests

2016-10-17T18:51:30+00:00

The current code checks only for "HAVE_PYTHON_BINDINGS", which is not
even a valid check. Let's do the proper check according to the python
version (HAVE_PYTHON2_BINDINGS or HAVE_PYTHON3_BINDINGS).

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Lukáš Slebodník 
(cherry picked from commit 8a681cc41672afd1532b4a0c7e9da3a4eb2014a7)