From b3d7a70ee00bb5e8a0f1781a378dc169ee455624 Mon Sep 17 00:00:00 2001 From: Mohammad Rizwan Date: Wed, 19 Aug 2020 12:38:41 +0530 Subject: [PATCH] ipatests: Add PTR record for IP SAN If PTR record is missing for an IP address then cert request with SAN option throws an error. This fix is to add the PTR record so that cert request doesn't throw an error. Signed-off-by: Mohammad Rizwan Reviewed-By: Kaleemullah Siddiqui --- ipatests/test_integration/test_cert.py | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/ipatests/test_integration/test_cert.py b/ipatests/test_integration/test_cert.py index f4e4d9fc6..2ac32a72f 100644 --- a/ipatests/test_integration/test_cert.py +++ b/ipatests/test_integration/test_cert.py @@ -99,6 +99,17 @@ class TestInstallMasterClient(IntegrationTest): certfile = '/etc/pki/tls/certs/test2.pem' tasks.kinit_admin(self.master) + + zone = tasks.prepare_reverse_zone(self.master, self.clients[0].ip)[0] + + # add PTR dns record for cert request with SAN extention + rec = str(self.clients[0].ip).split('.')[3] + result = self.master.run_command( + ['ipa', 'dnsrecord-add', zone, rec, '--ptr-rec', hostname] + ) + assert 'Record name: {}'.format(rec) in result.stdout_text + assert 'PTR record: {}'.format(hostname) in result.stdout_text + name, zone = hostname.split('.', 1) self.master.run_command(['ipa', 'dnsrecord-show', zone, name]) tasks.kdestroy_all(self.master)