freeipa.git/ipatests, branch cakeysfix

Correct PyPI package dependencies

2017-04-26T10:31:11+00:00

* Remove unused install requires from ipapython
* Add missing requirements to ipaserver
* Correct dependencies for yubico otptoken
* Add explicit dependency on cffi for csrgen
* Python 2 uses python-ldap, Python 3 pyldap

https://pagure.io/freeipa/issue/6875

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Basti

Update get_attr_filter in LDAPSearch to handle nsaccountlock user searches

2017-04-26T10:20:42+00:00

- Update get_attr_filter in LDAPSearch to handle nsaccountlock by setting the default value for
  nsaccountlock to false as well as update the filter to check for the default value
- Remove pytest xfail for test_find_enabled_user

https://pagure.io/freeipa/issue/6896

Reviewed-By: Jan Cholasta

- added krb5kdc.log to pytest logging

2017-04-12T15:34:32+00:00

KRB5KDC_LOG = '/var/log/krb5kdc.log' added to paths
host.collect_log(paths.KRB5KDC_LOG) added to tasks.py

Signed-off-by: Michal Reznik 
Reviewed-By: Martin Basti 
Reviewed-By: Simo Sorce

tox testing support for client wheel packages

2017-04-12T14:53:22+00:00

Add tox infrastructure to test client wheel packages workflow:

* build client packages
* install client packages
* ipa-run-tests --ipaclient-unittests under Python 2 and 3
* pylint of client packages under Python 2 and 3
* placeholder packages work as expected

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Basti

Fix PKCS11 helper

2017-04-12T07:54:10+00:00

Slots in HSM are not assigned statically, we have to chose proper
slot from token label.

Softhsm i2.2.0 changed this behavior and now slots can change over
time (it is allowed by pkcs11 standard).

Changelog:
* created method get_slot() that returns slot number from
  used label
* replaces usage of slot in __init__ method of P11_Helper
  with label
* slot is dynamically detected from token label before
  session is opened
* pkcs11-util --init-token now uses '--free' instead '--slot'
  which uses first free slot (we don't care about slot numbers
  anymore)

https://pagure.io/freeipa/issue/6692

Reviewed-By: Stanislav Laznicka

tests: add non-reg for idrange-add

2017-04-07T10:45:32+00:00

Add non regression test for issue 6404: when idrange-add is called with
empty dom-name, the command returns
ipa: ERROR: an internal error has occurred

https://pagure.io/freeipa/issue/6404

Reviewed-By: Martin Babinsky

collect audit.log for easier selinux investigation

2017-04-06T08:08:54+00:00

Audit log contains useful information about selinux issues

Reviewed-By: Milan Kubik

csrgen: Change to pure openssl config format (no script)

2017-04-03T07:46:30+00:00

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

csrgen: Remove helper abstraction

2017-04-03T07:46:30+00:00

All requests now use the OpenSSL formatter. However, we keep Formatter
a separate class so that it can be changed out for tests.

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

Skip test_session_storage in ipaclient unittest mode

2017-03-31T11:48:47+00:00

The test class depends on a working Kerberos configuration and session.

Signed-off-by: Christian Heimes 
Reviewed-By: Stanislav Laznicka