Test: uniqueness of certificate renewal master

https://fedorahosted.org/freeipa/ticket/6504

Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

1 files changed, 42 insertions, 0 deletions

diff --git a/ipatests/test_integration/test_replica_promotion.py b/ipatests/test_integration/test_replica_promotion.py
index 0e93356c7..e75f4fcea 100644
--- a/ipatests/test_integration/test_replica_promotion.py
+++ b/ipatests/test_integration/test_replica_promotion.py
@@ -441,3 +441,45 @@ class TestWrongClientDomain(IntegrationTest):
                                      raiseonerr=False)
         assert(result1.returncode == 0), (
             'Failed to promote the client installed with the upcase domain name')
+
+
+class TestRenewalMaster(IntegrationTest):
+
+    topology = 'star'
+    num_replicas = 1
+
+    @classmethod
+    def uninstall(cls, mh):
+        super(TestRenewalMaster, cls).uninstall(mh)
+
+    def test_replica_not_marked_as_renewal_master(self):
+        """
+        https://fedorahosted.org/freeipa/ticket/5902
+        """
+        master = self.master
+        replica = self.replicas[0]
+        result = master.run_command(["ipa", "config-show"]).stdout_text
+        assert("IPA CA renewal master: %s" % master.hostname in result), (
+            "Master hostname not found among CA renewal masters"
+        )
+        assert("IPA CA renewal master: %s" % replica.hostname not in result), (
+            "Replica hostname found among CA renewal masters"
+        )
+
+    def test_manual_renewal_master_transfer(self):
+        replica = self.replicas[0]
+        replica.run_command(['ipa', 'config-mod',
+                             '--ca-renewal-master-server', replica.hostname])
+        result = self.master.run_command(["ipa", "config-show"]).stdout_text
+        assert("IPA CA renewal master: %s" % replica.hostname in result), (
+            "Replica hostname not found among CA renewal masters"
+        )
+
+    def test_automatic_renewal_master_transfer_ondelete(self):
+        # Test that after master uninstallation, replica overtakes the cert
+        # renewal master role
+        tasks.uninstall_master(self.replicas[0])
+        result = self.master.run_command(['ipa', 'config-show']).stdout_text
+        assert("IPA CA renewal master: %s" % self.master.hostname in result), (
+            "Master hostname not found among CA renewal masters"
+        )