summaryrefslogtreecommitdiffstats
path: root/ipatests
Commit message (Collapse)AuthorAgeFilesLines
...
* tests: Fixed code styling in caless tests to make pep8 happyOleg Fayans2016-09-221-7/+7
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Reverted erroneous asserts in 4 testsOleg Fayans2016-09-221-10/+4
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: fixed certinstall methodOleg Fayans2016-09-221-3/+1
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: fixed super method invocationOleg Fayans2016-09-221-1/+1
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: added verbose assert to test_service_disable_doesnt_revokeOleg Fayans2016-09-221-2/+5
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Standardized replica_preparation in test_no_certsOleg Fayans2016-09-221-4/+2
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Implemented check for domainlevel before installation verificationOleg Fayans2016-09-221-43/+18
| | | | | | | We only need to verify installation of replica under domain level 1, otherwise replica is not installed but only a gpg file is prepared Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Fixed Usage of improper certs in ca-less testsOleg Fayans2016-09-221-15/+12
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: fixed expects of incorrect error messagesOleg Fayans2016-09-221-32/+24
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Replaced unused setUp method with installOleg Fayans2016-09-221-7/+7
| | | | | | | setUp method does not get executed in recent versions of pytest Replaced with the install method derived from the parent IntegrationTest class Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Replaced hardcoded certutil with imported from pathsOleg Fayans2016-09-221-1/+1
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Enabled negative testing for cleaning replication agreementsOleg Fayans2016-09-221-5/+6
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Made unapply_fixes call optional at master uninstallationOleg Fayans2016-09-221-2/+3
| | | | | | | | | Unapply fixes removes the temporary testing folder at ~/ipatests, which contains some artifacts like root.pem that need to be persistent between tests in the test_caless testsuite. There has to be the way to skip the deletion of this testfolder Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Updated master and replica installation methods to enable negative ↵Oleg Fayans2016-09-221-40/+54
| | | | | | | | | | testing Negative testing was enabled by introducing an optional raiseonerr parameter with True by default to both master and replica installation methods Also the methods were updated to support intractive installation Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Added necessary xfailsOleg Fayans2016-09-221-0/+13
| | | | | | A number of tests fail due to known issues. Added xfails to acknowledge them Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Added necessary getkeytabs calls to fixturesOleg Fayans2016-09-221-0/+7
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Removed outdated command options testOleg Fayans2016-09-221-19/+0
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Applied correct teardown methodsOleg Fayans2016-09-221-15/+56
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Fixed incorrect assert in verify_installationOleg Fayans2016-09-221-3/+1
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Adapted installation methods to utilize methods from tasksOleg Fayans2016-09-221-93/+57
| | | | | | | Master and replica installation methods were made to utilize corresponding methods from tasks.py for the sake of DRY Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Removed call for install method from parent classOleg Fayans2016-09-221-1/+0
| | | | | | | | The IntegrationTest.install method installs the full topology while in ca-less tests we need to check server installation, thus the nodes should not have server or replica installed Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Added teardown methods for server and replica installationOleg Fayans2016-09-221-0/+35
| | | | Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Create a method that cleans all ipa certsOleg Fayans2016-09-221-0/+11
| | | | | | | | | | Upon uninstallation IPA does not remove certs from the system, see https://fedorahosted.org/freeipa/ticket/4639 for details. This causes installation failures in several tests. The workaround is to manually remove certs from all certificate databases used by IPA after each server uninstallation Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Updated ipa server installation stdin textOleg Fayans2016-09-221-4/+0
| | | | | | | The installator has changed the question sequence so the stdin used for interactive server installation has to be changed accordingly Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Added generation of missing certsOleg Fayans2016-09-221-0/+3
| | | | | | | test_ca_server_cert and test_unknown_ca required 2 more certs that were not pre-generated Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Added basic constraints extension to the CA certsOleg Fayans2016-09-221-1/+4
| | | | | | | The IPA installer refuses to accept certs signed with a CA-signature that does not have basic constraints enabled (Described in RFC 5280) Reviewed-By: David Kupka <dkupka@redhat.com>
* tests: Fixed method failures during second call for the methodOleg Fayans2016-09-221-1/+2
| | | | | | | | | | | | | When the same host is used for numerous server/replica installations/uninstallations at some point the /etc/openldap/ldap.conf file gets corruped which results in ldapsearch unaware of the default ldap_uri to connect. The workaround would be to provide ldap hostname for each ldapsearch. Attention: please unapply this fix once the original issue is resolved. https://fedorahosted.org/freeipa/ticket/5880 Reviewed-By: David Kupka <dkupka@redhat.com>
* Remove update_from_dict() methodStanislav Laznicka2016-09-221-95/+0
| | | | | | | | | update_from_dict() method is not used anywhere in the project, it only makes the tests fail. Removed it and its tests. https://fedorahosted.org/freeipa/ticket/6311 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Tests: Remove usage of krb5 ccache from test_ipaserver/test_ldapLenka Doudova2016-09-211-5/+1
| | | | | | | | | | | | In test_ipaserver/test_ldap::test_ldap::test_GSSAPI a krb5 ccache is used to connect to ldap. The test tries to locate this cache in /tmp/krb5cc_$UID file, which is not there due to default settings in krb5.conf, and hence the whole test is skipped. Fix the test to use keyring to connect instead of ccache in /tmp. https://fedorahosted.org/freeipa/ticket/6323 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Fix host attributes in ipa-join host testLenka Doudova2016-09-211-0/+6
| | | | | | | | | Fixing discrepancies between returned and checked attributes in ipa-join host test, that arose after recent changes in behavior. https://fedorahosted.org/freeipa/ticket/6326 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Update host test with ipa-joinLenka Doudova2016-09-211-4/+9
| | | | | | | | | Updating path to ipa-join command to allow execution of test_xmlrpc/test_host::TestHostFalsePwdChange::test_join_host. https://fedorahosted.org/freeipa/ticket/6326 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Add krb5kdc.service restart to integration trust testsLenka Doudova2016-09-212-3/+2
| | | | | | | | | krb5kdc.service restart is necessary for proper running of integration trust related tests. https://fedorahosted.org/freeipa/ticket/6322 Reviewed-By: Martin Basti <mbasti@redhat.com>
* test_plugable: update the rest of test_initJan Cholasta2016-09-211-4/+5
| | | | | | | | | | | In commit ed4c2d9252a995d01dc098e5b761ded8cd9373d8, changes to the Plugin class were made, but the test was updated only partially. Update the rest to fix the failing test. https://fedorahosted.org/freeipa/ticket/6313 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Remove unnecessary attributes from base trackerLenka Doudova2016-09-211-2/+0
| | | | | | https://fedorahosted.org/freeipa/ticket/6128 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Remove --force options from tracker base classLenka Doudova2016-09-2114-18/+32
| | | | | | | | | | Removing --force option from tracker base class so it would not be required to be implemented in every specific tracker, even though it's not necessary. Modifying existing trackers to reflect this change. https://fedorahosted.org/freeipa/ticket/6124 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Remove SSSD restart from integration testsLenka Doudova2016-09-211-1/+0
| | | | | | | | | | | SSSD restart has been mistakenly added to integration tests (test_integration/tasks.py::uninstall_master). When system setup is correct, this restart has no significance, moreover it makes tests fail, hence its removal is necessary. https://fedorahosted.org/freeipa/ticket/6338 Reviewed-By: Oleg Fayans <ofayans@redhat.com>
* Xfailed a test that fails due to 6250Oleg Fayans2016-09-151-0/+24
| | | | | | | | | Also created a decorator that removes the segment that the next test does not expect. https://fedorahosted.org/freeipa/ticket/6250 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Fixed segment naming in topology testsOleg Fayans2016-09-151-11/+22
| | | | | | | | | As the segment name is a stochastic valu, which can have either of the two nodes as the left node, we need to adapt the tests to not expect some particular segment name but rather to calculate it dynamically based on node names and the output of topologysegment-find ipa call Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Fix integration sudo tests setup and checksLenka Doudova2016-09-141-2/+29
| | | | | | | | | | Adding 'defaults' sudorule to prevent requesting further user authentication. Adding checks that if a user should be rejected access, a proper error message is displayed. https://fedorahosted.org/freeipa/ticket/6262 Reviewed-By: Lukas Slebodnik <lslebodn@redhat.com>
* Xfailed the tests due to a known bug with replica preparationOleg Fayans2016-09-141-0/+6
| | | | | | https://fedorahosted.org/freeipa/ticket/6274 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Changed addressing to the client hosts to be replicasOleg Fayans2016-09-141-5/+5
| | | | | | https://fedorahosted.org/freeipa/ticket/6287 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Several fixes in replica_promotion testsOleg Fayans2016-09-141-3/+7
| | | | | | | | | | | | In test_one_command_installation the ipa-replica-install was missing '--server' and '-U' options which resulted in false negative result. In test_client_enrollment_by_unprivileged_user '--server' option was messing. test_replica_promotion_after_adding_to_admin_group lacked '-U' option. It leaded to 3 failed cases. https://fedorahosted.org/freeipa/ticket/6301 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Removed incorrect check for returncodeOleg Fayans2016-09-142-5/+7
| | | | | | | | | | | The server installation in most cases returns response code 0 no matter what happens except for really severe errors. In this case when we try to uninstall the middle replica of a line topology, it fails, notifies us that we should use '--ignore-topology-disconnect', but returns 0 https://fedorahosted.org/freeipa/ticket/6300 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Tests: Fix failing ldap.backend testLenka Doudova2016-09-131-1/+1
| | | | | | | | | Test ipatests/test_ipaserver/test_ldap::test_Backend fails claiming service cannot be found. Fixing this by not using api with in_tree parameter. https://fedorahosted.org/freeipa/ticket/6312 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Tests: Add cleanup to integration trust testsLenka Doudova2016-09-131-0/+5
| | | | | | | | | | Trust tests fail if they are executed after external trust tests. This is caused my missing cleanup. Providing cleanup that would enable correct execution of the tests regardless of their order. https://fedorahosted.org/freeipa/ticket/6306 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Tests: Fix regex errors in integration trust testsLenka Doudova2016-09-091-4/+5
| | | | | | | | | | | In integration trust tests some values are checked using regular expressions. Some of these expressions from recently added coverage have minor mistakes which causes the comparisons to fail. Providing fix for these regular expressions. https://fedorahosted.org/freeipa/ticket/6285 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Tests: extend DNS cmdline tests with lowercased record typeMartin Basti2016-09-081-0/+12
| | | | | | https://fedorahosted.org/freeipa/ticket/6203 Reviewed-By: Lenka Doudova <ldoudova@redhat.com>
* Allow broadcast ip addressesMartin Basti2016-09-071-1/+3
| | | | | | | | | | | | | | | | | Currently environments may use prefix /31 on point-to-point connections what makes IPA validators to fail. IPA should not care if IP address is broadcast or not. In some cases (when prefix is not specified) IPA cannot decide properly if broadcast address is really broadcast. This commit allows usage of broadcast addresses in: * host plugin * dns plugin * server-installer * client-installer https://fedorahosted.org/freeipa/ticket/5814 Reviewed-By: David Kupka <dkupka@redhat.com>
* Allow network ip addressesMartin Basti2016-09-071-2/+4
| | | | | | | | | | | | | | Currently cloud environments uses heavily prefix /32 (/128) what makes IPA validators to fail. IPA should not care if IP address is network or not. This commit allows usage of network addresses in: * host plugin * dns plugin * server-installer * client-installer https://fedorahosted.org/freeipa/ticket/5814 Reviewed-By: David Kupka <dkupka@redhat.com>
* Tests: Avoid skipping tests due to missing filesLenka Doudova2016-09-012-22/+30
| | | | | | | | | | | When running test_install/test_updates and test_pkcs10/test_pkcs10 as outoftree, these are skipped with reason 'Unable to find test update files'. For outoftree tests wrong paths are checked for these files. Changing file localization to provide proper test setup. https://fedorahosted.org/freeipa/ticket/6284 Reviewed-By: Martin Basti <mbasti@redhat.com>