summaryrefslogtreecommitdiffstats
path: root/ipatests/test_integration
Commit message (Collapse)AuthorAgeFilesLines
* Test: DNS nsupdate from dns-update-system-recordsMartin Basti2017-02-151-0/+25
| | | | | | | | | | Get nsupdate data from dns-update-system-records, remove system records and run nsupdate to verify that all system records were updated https://fedorahosted.org/freeipa/ticket/6585 Reviewed-By: Tomas Krizek <tkrizek@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* Configure HTTPD to work via Gss-ProxySimo Sorce2017-02-153-5/+5
| | | | | | | | https://fedorahosted.org/freeipa/ticket/4189 https://fedorahosted.org/freeipa/ticket/5959 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* Tests: fix wait_for_replication taskMartin Basti2017-02-081-2/+9
| | | | | | | | | | DS changed a format of replication status attribute. Now it is with prefix "Error (x)" where x is the error code. Both formats were kept to allow tests run on older and new versions of DS. Reviewed-By: Milan Kubik <mkubik@redhat.com>
* ipatests: nested netgroups (intg)Petr Čech2017-02-071-0/+169
| | | | | | | | | | | Adds a test case for issue in SSSD that manifested in an inability to resolve nested membership in netgroups The test case tests for direct and indirect membership. https://fedorahosted.org/freeipa/ticket/6439 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Add tree root domain role in legacy client testsGanna Kaihorodova2017-01-181-3/+3
| | | | | | | | | Legacy client tests inherits test cases from trust tests, that have role for tree root domain. That role was missing in legacy client tests. https://fedorahosted.org/freeipa/ticket/6600 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Remove named-pkcs11 workarounds from DNSSEC tests.Petr Spacek2016-12-191-82/+0
| | | | | | | | | | As far as I can tell the tests are passing for some time in Jenkins so maybe a bug in some underlying component was fixed. Let's remove workarounds to make tests actually test real setups. https://fedorahosted.org/freeipa/ticket/5348 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Test: uniqueness of certificate renewal masterOleg Fayans2016-12-081-0/+42
| | | | | | | https://fedorahosted.org/freeipa/ticket/6504 Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Test: basic kerberos over http functionalityOleg Fayans2016-11-301-0/+58
| | | | | | https://fedorahosted.org/freeipa/ticket/6446 Reviewed-By: Milan Kubik <mkubik@redhat.com>
* Test: made kinit_admin a returning functionOleg Fayans2016-11-301-2/+2
| | | | | | | In some cases we need to check the result of kinit and print out the error message. Therefore we need it to return the result. Reviewed-By: Milan Kubik <mkubik@redhat.com>
* Fix Python 3 bugs discovered by pylintChristian Heimes2016-11-253-4/+5
| | | | | | | | | | | | In Python 3 exception instances no longer have a message attribute. For most exceptions, str(e) or string formatting give the same result. Fix some renamed modules, module members and functions. https://fedorahosted.org/freeipa/ticket/4985 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Martin Basti <mbasti@redhat.com>
* tests: Mark 389-ds acceptance testsDavid Kupka2016-11-221-0/+3
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* tests: Mark Dogtag acceptance testsDavid Kupka2016-11-221-0/+1
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Providing trust tests with tree root domainLenka Doudova2016-11-151-14/+96
| | | | | | https://fedorahosted.org/freeipa/ticket/6347 Reviewed-By: Ganna Kaihorodova <gkaihoro@redhat.com>
* Test for installing rules with service principalsOleg Fayans2016-11-141-0/+82
| | | | | | https://fedorahosted.org/freeipa/ticket/6481 Reviewed-By: Lenka Doudova <ldoudova@redhat.com>
* Test: integration tests for certs in idoverrides featureOleg Fayans2016-11-141-0/+156
| | | | | | https://fedorahosted.org/freeipa/ticket/6005 Reviewed-By: Lenka Doudova <ldoudova@redhat.com>
* Added interface to certutilOleg Fayans2016-11-141-0/+7
| | | | | | Added generic method to run certutil with arbitrary set of paramenters Reviewed-By: Lenka Doudova <ldoudova@redhat.com>
* Tests: Provide AD cleanup for legacy client testsLenka Doudova2016-11-141-0/+4
| | | | | | | | Providing cleanup of trust information from AD machines for legacy client tests. https://fedorahosted.org/freeipa/ticket/6396 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Tests: Provide AD cleanup for trust testsLenka Doudova2016-11-142-0/+14
| | | | | | | | Providing cleanup of trust information from AD machines for trusts tests. https://fedorahosted.org/freeipa/ticket/6396 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Refactor installer code requesting certificatesFlorence Blanc-Renaud2016-11-101-0/+1
| | | | | | | | | | | | | | | | | | | | - Temporary modify certmonger dogtag-ipa-ca-renew helper to request the IPA RA agent cert, using the temp cert created during pkispawn. The cert request is now processed through certmonger, and the helper arguments are restored once the agent cert is obtained. - Modify the installer code creating HTTP and LDAP certificates to use certmonger's IPA helper with temporary parameters (calling dogtag-submit instead of ipa-submit) - Clean-up for the integration tests: sometimes ipa renewal.lock is not released during ipa-server-uninstall. Make sure that the file is removed to allow future installations. https://fedorahosted.org/freeipa/ticket/6433 Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
* Automated ipa-replica-manage del testsOleg Fayans2016-11-101-0/+72
| | | | | Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Milan Kubik <mkubik@redhat.com>
* tests: Automated clean-ruv subcommand testsOleg Fayans2016-11-101-0/+71
| | | | | | | https://fedorahosted.org/freeipa/ticket/6451 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Milan Kubik <mkubik@redhat.com>
* Tests: Fix integration sudo testLenka Doudova2016-11-071-2/+2
| | | | | | | | | | | | | | Tests with sudorules using only RunAsGroups attributes with empty RunAsUsers attribute fail due to different expected value than is really returned. This is caused by improper behaviour of sudo in versions before 1.8.18 (see [1]), to which the tests were originally fitted. Changing the expected value to proper one. [1] - https://www.sudo.ws/pipermail/sudo-workers/2016-November/001025.html https://fedorahosted.org/freeipa/ticket/6378 Reviewed-By: Lukas Slebodnik <lslebodn@redhat.com>
* ipaldap: merge IPAdmin to LDAPClientTomas Krizek2016-11-071-2/+3
| | | | | | | | | | | | | | | | * move IPAdmin methods to LDAPClient * add extra arguments (cacert, sasl_nocanon) to LDAPClient.__init__() * add host, port, _protocol to LDAPClient (parsed from ldap_uri) * create get_ldap_uri() method to create ldap_uri from former IPAdmin.__init__() arguments * replace IPAdmin with LDAPClient + get_ldap_uri() * remove ununsed function argument hostname from enable_replication_version_checking() https://fedorahosted.org/freeipa/ticket/6461 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* ipaldap: merge simple_bind into LDAPClientTomas Krizek2016-11-071-1/+1
| | | | | | | | | | | | * Use LDAPClient.simple_bind instead of extra call to IPAdmin.do_simple_bind * Rename binddn to bind_dn * Rename bindpw to bind_password * Explicitly specify bind_dn in all calls https://fedorahosted.org/freeipa/ticket/6461 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* CI: Disable KRA install tests on DL0Martin Basti2016-10-261-0/+66
| | | | | | | | | When master is without KRA installed, on domain level0 we cannot install KRA replicas, thus this tests must be skipped on DL0 https://fedorahosted.org/freeipa/ticket/6088 Reviewed-By: Pavel Vomacka <pvomacka@redhat.com>
* CI: use --setup-kra with replica installationMartin Basti2016-10-261-11/+3
| | | | | | | | | | Currently tests were not testing one-step installation of KRA together with replica. Adding --setup-kra to replica installation instead of calling ipa-kra-install after. https://fedorahosted.org/freeipa/ticket/6088 Reviewed-By: Pavel Vomacka <pvomacka@redhat.com>
* CI: extend replication layouts tests with KRAMartin Basti2016-10-262-3/+63
| | | | | | | | | KRA should be tested with warious replication topologies as well, mainly in domain level 0 https://fedorahosted.org/freeipa/ticket/6088 Reviewed-By: Pavel Vomacka <pvomacka@redhat.com>
* Reverted the essertion for replica uninstall returncodeOleg Fayans2016-10-181-5/+1
| | | | | | | | | | As the issue with ipa installer always returning 0 returncode was addressed, the test needs to be made aware of this change. https://fedorahosted.org/freeipa/ticket/6401 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* CI: workaround: wait for dogtag before replica-prepareMartin Basti2016-10-131-0/+3
| | | | | | | | | | | In domain level 0 ipa-replica-prepare fails because dogtag is not ready so soon after final restart during installation (tests are too fast). Wait 30 seconds before ipa-replica-prepare is executed, to make sure that dogtag is ready. Remove this workaround when ticket is fixed. https://fedorahosted.org/freeipa/ticket/6274 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Test: disabled wrong client domain tests for domlevel 0Oleg Fayans2016-10-121-0/+1
| | | | | | | | These tests are only relevant for domain level 1 https://fedorahosted.org/freeipa/ticket/6382 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Pylint: remove unused variables in testsMartin Basti2016-10-111-5/+1
| | | | Reviewed-By: Pavel Vomacka <pvomacka@redhat.com>
* Pylint: enable check for unused-variablesMartin Basti2016-09-271-0/+2
| | | | | | | | | | | | | | | Unused variables may: * make code less readable * create dead code * potentialy hide issues/errors Enabled check should prevent to leave unused variable in code Check is locally disabled for modules that fix is not clear or easy or have too many occurences of unused variables Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
* Remove unused variables in testsMartin Basti2016-09-273-5/+4
| | | | | | | | This commit removes or marks unused variables as "expected to be unused" by using '_' prefix. Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
* pylint: fix simplifiable-if-statement warningsJan Barta2016-09-221-10/+2
| | | | | | | fix inefficient if statements, enable pylint check Reviewed-By: Tomas Krizek <tkrizek@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
* tests: Fixed code styling in caless tests to make pep8 happyOleg Fayans2016-09-221-7/+7
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Reverted erroneous asserts in 4 testsOleg Fayans2016-09-221-10/+4
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: fixed certinstall methodOleg Fayans2016-09-221-3/+1
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: fixed super method invocationOleg Fayans2016-09-221-1/+1
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: added verbose assert to test_service_disable_doesnt_revokeOleg Fayans2016-09-221-2/+5
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Standardized replica_preparation in test_no_certsOleg Fayans2016-09-221-4/+2
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Implemented check for domainlevel before installation verificationOleg Fayans2016-09-221-43/+18
| | | | | | | We only need to verify installation of replica under domain level 1, otherwise replica is not installed but only a gpg file is prepared Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Fixed Usage of improper certs in ca-less testsOleg Fayans2016-09-221-15/+12
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: fixed expects of incorrect error messagesOleg Fayans2016-09-221-32/+24
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Replaced unused setUp method with installOleg Fayans2016-09-221-7/+7
| | | | | | | setUp method does not get executed in recent versions of pytest Replaced with the install method derived from the parent IntegrationTest class Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Replaced hardcoded certutil with imported from pathsOleg Fayans2016-09-221-1/+1
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Enabled negative testing for cleaning replication agreementsOleg Fayans2016-09-221-5/+6
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Made unapply_fixes call optional at master uninstallationOleg Fayans2016-09-221-2/+3
| | | | | | | | | Unapply fixes removes the temporary testing folder at ~/ipatests, which contains some artifacts like root.pem that need to be persistent between tests in the test_caless testsuite. There has to be the way to skip the deletion of this testfolder Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Updated master and replica installation methods to enable negative ↵Oleg Fayans2016-09-221-40/+54
| | | | | | | | | | testing Negative testing was enabled by introducing an optional raiseonerr parameter with True by default to both master and replica installation methods Also the methods were updated to support intractive installation Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Added necessary xfailsOleg Fayans2016-09-221-0/+13
| | | | | | A number of tests fail due to known issues. Added xfails to acknowledge them Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Added necessary getkeytabs calls to fixturesOleg Fayans2016-09-221-0/+7
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>