summaryrefslogtreecommitdiffstats
path: root/ipatests/test_integration
Commit message (Collapse)AuthorAgeFilesLines
* Tests: Remove DNS configuration from trust testsLenka Doudova2016-06-301-40/+4
| | | | | | | Since DNS configuration is no longer needed for running trust tests, this method's contents are removed. Method is left empty as reference for others, should they have issues with DNS configuration. Reviewed-By: Petr Spacek <pspacek@redhat.com> Reviewed-By: Oleg Fayans <ofayans@redhat.com>
* CI test suite for `server-del`Martin Babinsky2016-06-173-16/+339
| | | | | | | | | | | | | these tests cover various scenarios such as: * trying to remove master that would disconnect topology in one of the suffixes * forcing master removal regardless of topology state before/after removal * trying to remove last CA/DNS server/DNSSec key master * forcing removal of the last DNSSec key master https://fedorahosted.org/freeipa/ticket/5588 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Use root_logger for verify_host_resolvable()Petr Spacek2016-05-301-1/+1
| | | | | | | | | | After discussion with Martin Basti we decided to standardize on root_logger with hope that one day we will use root_logger.getLogger('module') to make logging prettier and tunable per module. https://fedorahosted.org/freeipa/ticket/5710 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Added necessary A record for the replica to root zoneOleg Fayans2016-05-111-0/+5
| | | | | | | | | A master can only be delegated a zone authority, if this zone contains A records of the master and ALL replicas https://fedorahosted.org/freeipa/ticket/5848 Reviewed-By: Martin Basti <mbasti@redhat.com>
* A workaround for ticket N 5348Oleg Fayans2016-05-111-7/+90
| | | | | | | | | | A freshly created dnssec-enabled zone does not always display the signature until you restart named-pkcs11. Added restarting of this service after each dnssec-enabled zone. https://fedorahosted.org/freeipa/ticket/5348 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Bugfixes in managed topology testsOleg Fayans2016-04-201-3/+6
| | | | | | | Fixed a false negative related to replication taking some time: added wait_for_replication call before checking for new object in replicas. Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Improve reporting of failed tests in topology test suiteOleg Fayans2016-04-201-18/+21
| | | | | | https://fedorahosted.org/freeipa/ticket/5772 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Add test if replica is working after domain upgradeOleg Fayans2016-04-151-0/+26
| | | | | | | | | | Corresponds to the testcase described in http://www.freeipa.org/page/V4/Replica_Promotion/Test_plan#Test_case: _Replica_created_using_old_workflow_is_functional_after_domain_upgrade https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Fixed a failure in legacy_client testsOleg Fayans2016-04-131-1/+1
| | | | | | https://fedorahosted.org/freeipa/ticket/5800 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Added 5 more tests to Replica Promotion testsuiteOleg Fayans2016-04-061-1/+131
| | | | | | | | | | | | | | The following testcases were automated: 1. Test one command replica installation 2. Test csreplica-manage-(del, connect, disconnect) are disabled in domain level 1 3. Client enrollment and replica promotion by an unprivileged user are prohibited 4. Replica uninstallation is prohibited if it disconnects a part of existing topology (is possible only with --ignore-topology-disconnect option) https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Added a kdestroy call to clean ccache at master/client uninstallationOleg Fayans2016-04-061-0/+2
| | | | | | | https://fedorahosted.org/freeipa/ticket/5741 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>
* Fixed a bug with prepare_host failing upon existing ipatests folderOleg Fayans2016-03-231-1/+5
| | | | | | https://fedorahosted.org/freeipa/ticket/5748 Reviewed-By: Martin Basti <mbasti@redhat.com>
* rewrite a misprocessed teardown_method method as a custom decoratorOleg Fayans2016-03-232-13/+26
| | | | | | | | | | | | | teardown_method is a standard pytest method used to put any code to be executed after each test method is executed. While treated correctly by our integration tests, this method is misinterpreted by in-tree tests in the following way: in-tree tests try to execute it even if all the test methods are skipped due to test resources being not configured. This causes the tests, that otherwise would have been skipped, to fail https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Added copyright info to replica promotion testsOleg Fayans2016-03-221-0/+4
| | | | | | https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Move user/group constants for PKI and DS into ipaplatformChristian Heimes2016-03-221-2/+3
| | | | | | | https://fedorahosted.org/freeipa/ticket/5619 Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
* Use platform path constant for SSSD log dirMartin Basti2016-03-161-1/+1
| | | | | | | The path to SSSD log directory is platform specific and should be in ipaplatform module. Reviewed-By: David Kupka <dkupka@redhat.com>
* Workaround for ticket 5627Oleg Fayans2016-03-111-0/+5
| | | | | | https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Made apply_common_fixes call at replica installation independent on domain_levelOleg Fayans2016-03-111-2/+2
| | | | | | | | | Besides added obligatory domain/realm-specific commandline options to replica installation https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Enabled setting domain level explicitly in test classOleg Fayans2016-03-112-7/+18
| | | | | | | | Needed for replica promotion tests https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Integration tests for replica promotion featureOleg Fayans2016-03-111-0/+223
| | | | | | | | http://www.freeipa.org/page/V4/Replica_Promotion/Test_plan https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI: allow customized DS install test to work with domain levelsMartin Basti2016-03-032-19/+13
| | | | | | | | | Test will use tasks methods instead of custom commands to be able work with domain levels. https://fedorahosted.org/freeipa/ticket/5606 Reviewed-By: Milan Kubik <mkubik@redhat.com>
* Removed messing around with resolv.confOleg Fayans2016-03-021-42/+2
| | | | Reviewed-By: Milan Kubik <mkubik@redhat.com>
* advise: configure TLS in redhat_nss_pam_ldapd and redhat_nss_ldap pluginsPetr Vobornik2016-03-011-3/+4
| | | | | | | | | | | authconfig in config_redhat_nss_ldap and config_redhat_nss_pam_ldapd got new option --enableldaptls It should have effect primarily on el5 systems. https://fedorahosted.org/freeipa/ticket/5654 Reviewed-By: Tomas Babej <tbabej@redhat.com>
* CI tests: use old schema when testing hostmask-based sudo rulesMartin Babinsky2016-02-252-1/+69
| | | | | | | | | | | | Newer versions of sssd use native IPA schema to process sudo rules. However, this schema currently has no support for hostmask-based rules and causes some sudo CI tests to fail. We have to temporarily set sssd.conf to use ou=sudoers,$SUFFIX as a sudo rule search base when executing them. https://fedorahosted.org/freeipa/ticket/5625 Reviewed-By: Tomas Babej <tbabej@redhat.com>
* Revert "test: Temporarily increase timeout in vault test."Martin Basti2016-02-241-1/+1
| | | | | | This reverts commit 8112ac69ccf56dd98c5eb6e77ea131b4665bd1cf. Reviewed-By: Martin Basti <mbasti@redhat.com>
* client: stop using /etc/pki/nssdbJan Cholasta2016-02-241-17/+0
| | | | | | | | | | Don't put any IPA certificates to /etc/pki/nssdb - IPA itself uses /etc/ipa/nssdb and IPA CA certificates are provided to the system using p11-kit. Remove leftovers on upgrade. https://fedorahosted.org/freeipa/ticket/5592 Reviewed-By: David Kupka <dkupka@redhat.com>
* CI: Make double circle topology python3 compatibleDavid Kupka2016-02-242-2/+2
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI: Add test for double-circle topology generator.David Kupka2016-02-231-0/+63
| | | | Reviewed-By: Milan Kubik <mkubik@redhat.com>
* CI: Add replication test utilizing double-circle topology.David Kupka2016-02-231-0/+18
| | | | Reviewed-By: Milan Kubik <mkubik@redhat.com>
* CI: Add double circle topology.David Kupka2016-02-231-0/+52
| | | | | | | Every site consist of at least two replicas and is connected to two other sites. Reviewed-By: Milan Kubik <mkubik@redhat.com>
* CI: add empty topology test for 2-connected topology generatorDavid Kupka2016-02-231-0/+1
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI: Fix pep8 errors in 2-connected topology generatorDavid Kupka2016-02-231-5/+6
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* tests: Use absolute importsPetr Viktorin2016-02-171-1/+2
| | | | | | https://fedorahosted.org/freeipa/ticket/5638 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* CI: Add test for 2-connected topology generator.David Kupka2016-02-121-0/+19
| | | | Reviewed-By: Milan Kubik <mkubik@redhat.com>
* CI: Add simple replication test in 2-connected topology.David Kupka2016-02-121-0/+18
| | | | Reviewed-By: Milan Kubik <mkubik@redhat.com>
* CI: Add '2-connected' topology generator.David Kupka2016-02-121-0/+57
| | | | | | | | | | | If number of servers (master+replicas) is equal to 4 + SUM(1, n, 2^n*5) for any n >= 0: * every server has replication agreement with 2 - 4 other servers. * at least two agreements must fail in order to disconnect the topology. Otherwise there can be server(s) with single agreement on the edge of the topology. Reviewed-By: Milan Kubik <mkubik@redhat.com>
* Removed --ip-address option from replica installationOleg Fayans2016-02-041-7/+30
| | | | | | | | | | Explicitly specifying ip-address of the replica messes up with the current bind-dyndb-ldap logic, causing reverse zone not to be created. Enabled reverse-zone creation for the clients residing in different subnet from master Reviewed-By: Petr Spacek <pspacek@redhat.com>
* Updated connect/disconnect replica to work with both domainlevelsOleg Fayans2016-02-011-6/+23
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* Enabled recreation of test directory in apply_common_fixes functionOleg Fayans2016-01-292-2/+1
| | | | | | | | | | | Without it any test comprized of more than one cycle of installing-uninstalling of ipa would fail due to the fact that test folder on the remote machine gets deleted during ipa uninstallation. Also removed duplicate call of apply_common fixes and added unapply_fixes to uninstall_replica Reviewed-By: Martin Basti <mbasti@redhat.com>
* DNSSEC CI: fix zone delegationsMartin Basti2016-01-291-1/+8
| | | | Reviewed-By: Petr Spacek <pspacek@redhat.com>
* ipatests: fix the install of external caMilan Kubík2016-01-271-1/+3
| | | | | | | | | Fixes the install invocation in the test to use domain and realm correctly. Also makes the test aware of domain levels. https://fedorahosted.org/freeipa/ticket/5605 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Fix DNSSEC test: add glue recordMartin Basti2016-01-251-1/+8
| | | | | | | Missing glue record causes test failure in cases when DNS zone was not managed by IPA DNS Reviewed-By: Petr Spacek <pspacek@redhat.com>
* Use explicit truncating divisionPetr Viktorin2016-01-201-1/+1
| | | | | | | | | | In Python 3, the truncating division operator, //, is needed to get C-style "int division". https://fedorahosted.org/freeipa/ticket/5623 Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: Martin Basti <mbasti@redhat.com>
* fixed an issue with master installation not creating reverse zoneOleg Fayans2016-01-191-3/+4
| | | | | | | | | When resolv.conf is set to point to the master's ip before installation, the ipa-server-install does not create a reverse zone for it's ip even despite --auto-reverse option provided. The fix is not to mess around with resolv.conf before master installation. Reviewed-By: Petr Spacek <pspacek@redhat.com>
* CI test: fix regression in task.install_kraMartin Basti2016-01-141-1/+1
| | | | | | | | ipa-kra-install needs directory manager password Regression caused by c4b9b295d8184694c50c0d56051e0273445c98ec Reviewed-By: Martin Basti <mbasti@redhat.com>
* ipatests: Make the A record for hosts in topology conditionalMilan Kubík2016-01-131-2/+9
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* DNSSEC test: fix adding zones with --skip-overlap-checkMartin Basti2016-01-121-5/+12
| | | | | | | In DNSSEC tests the root zone has to be created, this requires to use --skip-overlap-check to work properly. Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Fixed install_ca and install_kra under domain level 0Oleg Fayans2016-01-071-4/+24
| | | | | | Also added ipa_backup, ipa_restore and replica_uninstall functions Reviewed-By: Martin Basti <mbasti@redhat.com>
* Remove unused importsMartin Basti2015-12-231-2/+0
| | | | | | | This patch removes unused imports, alse pylint has been configured to check unused imports. Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* CI tests: Added domain realm as a parameter to master installation in ↵Oleg Fayans2015-12-211-1/+2
| | | | | | | | | | integration tests Without realm provided explicitly, installation calculates it automatically from the current hostname which may be inconsistent with the configured domain name. Which, in turn, causes failures in integration tests in the lab. Reviewed-By: Martin Basti <mbasti@redhat.com>
generated by cgit (git 2.34.1) at 2024-05-30 08:24:48 +0000