summaryrefslogtreecommitdiffstats
path: root/ipatests/test_integration/tasks.py
Commit message (Collapse)AuthorAgeFilesLines
* Tests: External trustLenka Doudova2016-07-191-5/+6
| | | | | | | | | | | | | | | | | Provides basic coverage for external trust feature. Test cases: 1. verify an external trust with AD subdomain can be established - verify only one trustdomain is listed - verify subdomain users are resolvable - verify trust can be deleted 2. verify non-external trust with AD subdomain cannot be established 3. verify an external trust with AD forest root domain can be established - verify that even if AD subdomain is specified, it is not associated with the trust - verify trust can be deleted https://fedorahosted.org/freeipa/ticket/6093 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* CI: DNS locationsMartin Basti2016-07-181-0/+7
| | | | | | | | This test is testing default IPA system records in locations, if priority and weight were properly set per service, per server, per location. Reviewed-By: Petr Spacek <pspacek@redhat.com>
* Tests: Remove DNS configuration from trust testsLenka Doudova2016-06-301-40/+4
| | | | | | | Since DNS configuration is no longer needed for running trust tests, this method's contents are removed. Method is left empty as reference for others, should they have issues with DNS configuration. Reviewed-By: Petr Spacek <pspacek@redhat.com> Reviewed-By: Oleg Fayans <ofayans@redhat.com>
* CI test suite for `server-del`Martin Babinsky2016-06-171-7/+35
| | | | | | | | | | | | | these tests cover various scenarios such as: * trying to remove master that would disconnect topology in one of the suffixes * forcing master removal regardless of topology state before/after removal * trying to remove last CA/DNS server/DNSSec key master * forcing removal of the last DNSSec key master https://fedorahosted.org/freeipa/ticket/5588 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Use root_logger for verify_host_resolvable()Petr Spacek2016-05-301-1/+1
| | | | | | | | | | After discussion with Martin Basti we decided to standardize on root_logger with hope that one day we will use root_logger.getLogger('module') to make logging prettier and tunable per module. https://fedorahosted.org/freeipa/ticket/5710 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Fixed a failure in legacy_client testsOleg Fayans2016-04-131-1/+1
| | | | | | https://fedorahosted.org/freeipa/ticket/5800 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Added a kdestroy call to clean ccache at master/client uninstallationOleg Fayans2016-04-061-0/+2
| | | | | | | https://fedorahosted.org/freeipa/ticket/5741 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>
* Fixed a bug with prepare_host failing upon existing ipatests folderOleg Fayans2016-03-231-1/+5
| | | | | | https://fedorahosted.org/freeipa/ticket/5748 Reviewed-By: Martin Basti <mbasti@redhat.com>
* rewrite a misprocessed teardown_method method as a custom decoratorOleg Fayans2016-03-231-0/+22
| | | | | | | | | | | | | teardown_method is a standard pytest method used to put any code to be executed after each test method is executed. While treated correctly by our integration tests, this method is misinterpreted by in-tree tests in the following way: in-tree tests try to execute it even if all the test methods are skipped due to test resources being not configured. This causes the tests, that otherwise would have been skipped, to fail https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Use platform path constant for SSSD log dirMartin Basti2016-03-161-1/+1
| | | | | | | The path to SSSD log directory is platform specific and should be in ipaplatform module. Reviewed-By: David Kupka <dkupka@redhat.com>
* Made apply_common_fixes call at replica installation independent on domain_levelOleg Fayans2016-03-111-2/+2
| | | | | | | | | Besides added obligatory domain/realm-specific commandline options to replica installation https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Enabled setting domain level explicitly in test classOleg Fayans2016-03-111-6/+11
| | | | | | | | Needed for replica promotion tests https://fedorahosted.org/freeipa/ticket/5723 Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI: allow customized DS install test to work with domain levelsMartin Basti2016-03-031-2/+7
| | | | | | | | | Test will use tasks methods instead of custom commands to be able work with domain levels. https://fedorahosted.org/freeipa/ticket/5606 Reviewed-By: Milan Kubik <mkubik@redhat.com>
* Removed messing around with resolv.confOleg Fayans2016-03-021-42/+2
| | | | Reviewed-By: Milan Kubik <mkubik@redhat.com>
* CI tests: use old schema when testing hostmask-based sudo rulesMartin Babinsky2016-02-251-0/+43
| | | | | | | | | | | | Newer versions of sssd use native IPA schema to process sudo rules. However, this schema currently has no support for hostmask-based rules and causes some sudo CI tests to fail. We have to temporarily set sssd.conf to use ou=sudoers,$SUFFIX as a sudo rule search base when executing them. https://fedorahosted.org/freeipa/ticket/5625 Reviewed-By: Tomas Babej <tbabej@redhat.com>
* CI: Make double circle topology python3 compatibleDavid Kupka2016-02-241-1/+1
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI: Add double circle topology.David Kupka2016-02-231-0/+52
| | | | | | | Every site consist of at least two replicas and is connected to two other sites. Reviewed-By: Milan Kubik <mkubik@redhat.com>
* CI: Fix pep8 errors in 2-connected topology generatorDavid Kupka2016-02-231-5/+6
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI: Add '2-connected' topology generator.David Kupka2016-02-121-0/+57
| | | | | | | | | | | If number of servers (master+replicas) is equal to 4 + SUM(1, n, 2^n*5) for any n >= 0: * every server has replication agreement with 2 - 4 other servers. * at least two agreements must fail in order to disconnect the topology. Otherwise there can be server(s) with single agreement on the edge of the topology. Reviewed-By: Milan Kubik <mkubik@redhat.com>
* Removed --ip-address option from replica installationOleg Fayans2016-02-041-7/+30
| | | | | | | | | | Explicitly specifying ip-address of the replica messes up with the current bind-dyndb-ldap logic, causing reverse zone not to be created. Enabled reverse-zone creation for the clients residing in different subnet from master Reviewed-By: Petr Spacek <pspacek@redhat.com>
* Updated connect/disconnect replica to work with both domainlevelsOleg Fayans2016-02-011-6/+23
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* Enabled recreation of test directory in apply_common_fixes functionOleg Fayans2016-01-291-1/+1
| | | | | | | | | | | Without it any test comprized of more than one cycle of installing-uninstalling of ipa would fail due to the fact that test folder on the remote machine gets deleted during ipa uninstallation. Also removed duplicate call of apply_common fixes and added unapply_fixes to uninstall_replica Reviewed-By: Martin Basti <mbasti@redhat.com>
* fixed an issue with master installation not creating reverse zoneOleg Fayans2016-01-191-3/+4
| | | | | | | | | When resolv.conf is set to point to the master's ip before installation, the ipa-server-install does not create a reverse zone for it's ip even despite --auto-reverse option provided. The fix is not to mess around with resolv.conf before master installation. Reviewed-By: Petr Spacek <pspacek@redhat.com>
* CI test: fix regression in task.install_kraMartin Basti2016-01-141-1/+1
| | | | | | | | ipa-kra-install needs directory manager password Regression caused by c4b9b295d8184694c50c0d56051e0273445c98ec Reviewed-By: Martin Basti <mbasti@redhat.com>
* ipatests: Make the A record for hosts in topology conditionalMilan Kubík2016-01-131-2/+9
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* Fixed install_ca and install_kra under domain level 0Oleg Fayans2016-01-071-4/+24
| | | | | | Also added ipa_backup, ipa_restore and replica_uninstall functions Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI tests: Added domain realm as a parameter to master installation in ↵Oleg Fayans2015-12-211-1/+2
| | | | | | | | | | integration tests Without realm provided explicitly, installation calculates it automatically from the current hostname which may be inconsistent with the configured domain name. Which, in turn, causes failures in integration tests in the lab. Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI tests: Enabled automatic creation of reverse zone during master installationOleg Fayans2015-12-211-1/+2
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI tests: remove '-p' option from ipa-dns-install callsMartin Babinsky2015-12-141-2/+1
| | | | | | | | | fix for https://fedorahosted.org/freeipa/ticket/4933 made ipa-dns-install to use LDAPI and deprecated -p option for directory manager password. This patche remove the option from calls to ipa-dns-install in CI tests so that deprecation warning does not clutter the logs. Reviewed-By: Milan Kubik <mkubik@redhat.com>
* CI tests: ignore disconnected domain level 1 topology on IPA master teardownMartin Babinsky2015-12-091-5/+10
| | | | Reviewed-By: Oleg Fayans <ofayans@redhat.com>
* CI: fix function that prepare the hosts file before CI runMartin Basti2015-12-081-2/+4
| | | | | | Without this fix function removed 2 lines from hosts file. Reviewed-By: Oleg Fayans <ofayans@redhat.com>
* CI: installation testsMartin Basti2015-12-081-0/+32
| | | | Reviewed-By: Oleg Fayans <ofayans@redhat.com>
* rename topology suffixes to "domain" and "ca"Petr Vobornik2015-12-041-2/+3
| | | | | | | https://www.redhat.com/archives/freeipa-devel/2015-November/msg00485.html Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* CI test: Fix installation of KRA on a replicaMartin Basti2015-11-181-1/+2
| | | | | | | | With domain level 1 installation of KRA has been changed on replica. https://fedorahosted.org/freeipa/ticket/5379 Reviewed-By: Ales 'alich' Marecek <amarecek@redhat.com>
* Fixed A record creation bugOleg Fayans2015-11-031-4/+3
| | | | | | | | | When creating an A record we used to provide full hostname as a record name, while we should have provided only the first part of the hostname https://fedorahosted.org/freeipa/ticket/5419 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Updated the tests according to the new replica installation workflowOleg Fayans2015-11-031-8/+35
| | | | | | | | | | | As of 4.3 the replica installation is performed without preparing a gpg file on master, but rather enrolling a future replica as a client with subsequent promotion of the client. This required the corresponding change in the integration tests https://fedorahosted.org/freeipa/ticket/5379 Reviewed-By: Martin Basti <mbasti@redhat.com>
* CI: installation with customized DS configMartin Basti2015-10-151-5/+11
| | | | | | | | | | Test covers: https://fedorahosted.org/freeipa/ticket/4949 https://fedorahosted.org/freeipa/ticket/4048 https://fedorahosted.org/freeipa/ticket/1930 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* CI Test: add setup_kra options into install scriptsMartin Basti2015-10-121-4/+26
| | | | | | https://fedorahosted.org/freeipa/ticket/5302 Reviewed-By: Milan Kubik <mkubik@redhat.com>
* Use six.Stringio instead of StringIO.StringIOPetr Viktorin2015-10-071-3/+3
| | | | | | | | | The StringIO class was moved to the io module. (In Python 2, io.StringIO is available, but is Unicode-only.) Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: Martin Basti <mbasti@redhat.com>
* ipatests: configure Network Manager not to manage resolv.confMilan Kubík2015-10-021-0/+36
| | | | | | | | | For the duration of the test, makes resolv.conf unmanaged. If NetworkManager is not running, nothing is changed. https://fedorahosted.org/freeipa/ticket/5331 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Added a proper workaround for dnssec test failures in Beaker environmentOleg Fayans2015-10-011-3/+9
| | | | | | | | | | | | | | In beaker lab the situation when master and replica have ip addresses from different subnets is quite frequent. When a replica has ip from different subnet than master's, ipa-replica-prepare looks up a proper reverse zone to add a pointer record, and if it does not find it, it asks a user for permission to create it automatically. It breaks the tests adding the unexpected input. The workaround is to always create a reverse zone for a new replica. Corresponding ticket is https://fedorahosted.org/freeipa/ticket/5306 Reviewed-By: Petr Spacek <pspacek@redhat.com> Reviewed-By: Martin Basti <mbasti@redhat.com>
* backup CI: test DNS/DNSSEC after backup and restoreMartin Basti2015-09-161-0/+23
| | | | Reviewed-By: Milan Kubík <mkubik@redhat.com>
* Integration tests for topology pluginOleg Fayans2015-08-281-15/+83
| | | | | Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Tomas Babej <tbabej@redhat.com>
* Temporary fix for ticket 5240Oleg Fayans2015-08-241-2/+2
| | | | Reviewed-By: Martin Basti <mbasti@redhat.com>
* do not install CA on replica during integration test if setup_ca=FalseMartin Babinsky2015-04-151-1/+0
| | | | | | | | | The patch fixes bug in the construction of ipa-replica-install arguments in test_integration/tasks.install_replica. Due to this bug the replica installation during certain integration tests involved CA setup even when setup_ca was set to False. Reviewed-By: Milan Kubik <mkubik@redhat.com>
* DNSSEC CI testsMartin Basti2015-04-141-8/+20
| | | | | | | | | | | | | | | Tests: * install master, replica, then instal DNSSEC on master * test if zone is signed (added on master) * test if zone is signed (added on replica) * install master with DNSSEC, then install replica * test if root zone is signed * add zone, verify signatures using our root zone https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Milan Kubik <mkubik@redhat.com>
* test_integration: Use python-pytest-multihostPetr Viktorin2014-12-111-1/+1
| | | | | | | | | | | | The core integration testing functionality was split into a separate project. Use this project, and configure it for FreeIPA. The "mh" (multihost) fixture is made available for integration tests. Configuration based on environment variables is moved into a separate module, to ease eventual deprecation. Reviewed-By: Tomas Babej <tbabej@redhat.com>
* Fix CI tests: install_adtrustMartin Basti2014-11-041-1/+9
| | | | | | | IPA uses both named and named-pkcs11 service. If named is masked use named-pkcs11, instead of raising exception Reviewed-By: Petr Viktorin <pviktori@redhat.com>
* ipatests: tasks: Fix dns configuration for trustsTomas Babej2014-07-151-14/+3
| | | | | | | | | Properly configure forwarders to the AD zone with respect to newly created ipa dnsforwardzone commands. https://fedorahosted.org/freeipa/ticket/4401 Reviewed-By: Petr Spacek <pspacek@redhat.com>
* ipaplatform: Fix misspelled path constantTomas Babej2014-06-251-1/+1
| | | | Reviewed-By: Petr Viktorin <pviktori@redhat.com>
generated by cgit (git 2.34.1) at 2025-08-30 22:36:26 +0000