freeipa.git/tests, branch abbra

Enforce sizelimit in permission-find, post_callback returns truncated

2012-05-30T06:46:21+00:00

We actually perform two searches in permission-find. The first looks
for matches within the permission object itself. The second looks at
matches in the underlying aci.

We need to break out in two places. The first is if we find enough
matches in the permission itself. The second when we are appending
matches from acis.

The post_callback() definition needed to be modified to return
the truncated value so a plugin author can modify that value.

https://fedorahosted.org/freeipa/ticket/2322

Provide a better error message when deleting nonexistent attributes

2012-05-29T04:38:40+00:00

If --delattr is used on an attribute that's not present on an entry,
and --{set,add}attr isn't being used on that same attribute,
say that there's "no such attribute" instead of " does
not contain ".

https://fedorahosted.org/freeipa/ticket/2699

Disallow setattr on no_update/no_create params

2012-05-29T07:23:26+00:00

Make --{set,add,del}attr fail on parameters with the no_update/no_create
flag for the respective command.

For attributes that can be modified, but we just don't want to display
in the CLI, use the 'no_option' flag. These are "locking" attributes
(ipaenabledflag, nsaccountlock) and externalhost.

Document the 'no_option' flag. Add some tests.

https://fedorahosted.org/freeipa/ticket/2580

Reset krbtpolicy when a unit test is finished

2012-05-28T15:24:08+00:00

Kerberos ticket maximum life was being set to 1 hour which then
affected lifetime of Kerberos tickets returned by IPA server under
the test.

Make sure that the policy is reset before and after the unit test to
keep the IPA server settings clean and not to disrupt development
environment.

Fix the pwpolicy_find post_callback

2012-05-28T14:03:28+00:00

Always call convert_time_for_output so time gets reported correctly.
That method has its own checks for whether the attributes are present;
an additional check is unnecessary.

Use a key function for sorting; cmp is deprecated, slower and
more complicated.

Add a test

https://fedorahosted.org/freeipa/ticket/2726

Check for empty/single value parameters before calling callbacks

2012-05-15T08:02:26+00:00

https://fedorahosted.org/freeipa/ticket/2701

Implement permission/aci find by subtree

2012-05-15T06:54:22+00:00

https://fedorahosted.org/freeipa/ticket/2321

Do not use extra command options in ACI, permission, selfservice

2012-05-14T08:38:07+00:00

Allowing Commands to be called with ignored unknown options opens the
door to problems, for example with misspelled option names.
Before we start rejecting them, we need to make sure IPA itself does
not use them when it calls commands internally.

This patch does that for ACI-related plugins.

Part of the work for https://fedorahosted.org/freeipa/ticket/2509

Fix overlapping cn param/option issue, pass cn as aciname in find

2012-05-14T08:07:41+00:00

permission-find --name wasn't working for two reasons. The first
was that the cn to search on in options ended up overlapping the
primary key name causing the request to fail.

The second reason was aci uses aciname, not cn, as its name field.
So searching on --name matched everything because it was as if you
were searching on nothing.

https://fedorahosted.org/freeipa/ticket/2320

Validate externalhost (when added by --addattr/--setattr)

2012-05-11T06:14:20+00:00

Change the externalhost attribute of hbacrule, netgroup
and sudorule into a full-fledged Parameter, and attach
a validator to it.
The validator is relaxed to allow underscores, so that
some hosts with nonstandard names can be added.

Tests included.

https://fedorahosted.org/freeipa/ticket/2649