public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,496 Commits 9 Branches 0 Tags
7bc17bb8528f3dbeaf70822ee952e67bd7cf08f5
Commit Graph
321 Commits
Author SHA1 Message Date
Martin Basti 94743a3f26 DNS test: allow '.' as zone name 
https://fedorahosted.org/freeipa/ticket/4149

Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2014-09-25 16:38:02 +02:00
Petr Viktorin f3b1471af9 test_permission_plugin: Check legacy permissions 
Currently a number of v2 permissions are in $SUFFIX, which the original
test did not anticipate.

Properly check that legacy permissions are found.

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-09-25 13:21:28 +02:00
Petr Vobornik dafdd68a6e webui-ci: case-insensitive record check 
Indirect association are no longer lower cased, which caused a issue in CI.

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
 2014-09-25 10:27:31 +02:00
Petr Viktorin ccb91f5970 Add test for backup/delete system users/restore 
Regression test for: https://fedorahosted.org/freeipa/ticket/3866

Reviewed-By: Tomas Babej <tbabej@redhat.com>
 2014-09-24 13:53:07 +02:00
Petr Viktorin f1ab2f7aa4 Add basic test for backup & restore 
https://fedorahosted.org/freeipa/ticket/3893

Reviewed-By: Tomas Babej <tbabej@redhat.com>
 2014-09-24 13:53:07 +02:00
Tomas Babej 1f8f762b84 ipalib: host_del: Extend LDAPDelete's takes_options instead of overriding 
The host-del command did not accept --continue option, since the
takes_options was overriden and did not take the options from LDAPDelete.

Fix the behaviour.

https://fedorahosted.org/freeipa/ticket/4473

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2014-09-17 09:36:27 +02:00
Petr Viktorin 6ce44c4f05 permission plugin: Auto-add operational atttributes to read permissions 
The attributes entryusn, createtimestamp, and modifytimestamp
should be readable whenever thir entry is, i.e. when we allow reading
the objectclass.
Automatically add them to every read permission that includes objectclass.

https://fedorahosted.org/freeipa/ticket/4534

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-09-12 18:22:17 +02:00
Martin Basti 028b3d1009 Tests: DNS wildcard records 
Ticket: https://fedorahosted.org/freeipa/ticket/4488
Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2014-09-05 12:29:29 +02:00
Martin Basti 7e76bba512 Fix DNS record rename test 
bind-dyndb-ldap's bug caused test failure
https://fedorahosted.org/bind-dyndb-ldap/ticket/123

Owners with NS record works with the bug

Reviewed-By: Petr Spacek <pspacek@redhat.com>
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-09-05 12:11:39 +02:00
Martin Basti 2b3be21b25 Test: DNS NS validation 
Reviewed-By: Petr Spacek <pspacek@redhat.com>
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-09-05 12:11:39 +02:00
Martin Basti 155126b524 Tests: DNS dsrecord validation 
Part of: https://fedorahosted.org/freeipa/ticket/3801

Reviewed-By: Petr Spacek <pspacek@redhat.com>
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-09-05 12:11:39 +02:00
Martin Basti 62a2559493 Fix dnsrecord-mod raise error if last record attr is removed 
Removing last record attribute causes output type validation error

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2014-09-05 10:34:11 +02:00
Petr Viktorin a8ba6b3b8c service: Normalize service principal in get_dn 
This will make any lookup go through the normalization.

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-08-21 14:07:01 +02:00
Petr Viktorin 8fabd6dde1 Support delegating RBAC roles to service principals 
https://fedorahosted.org/freeipa/ticket/3164

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-08-21 14:07:01 +02:00
Petr Vobornik a3c51e2383 webui-ci: fix table widget add 
add_table_record call used old selector for add button which
caused 3 fails in CI:
- ERROR: Test automember rebuild membership feature for hosts
- ERROR: Test automember rebuild membership feature for users
- ERROR: Basic CRUD: dns

related to:
https://fedorahosted.org/freeipa/ticket/4258

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
 2014-08-20 10:42:57 +02:00
Martin Basti 4b5a488249 Tests: host tests with dns 
Test for: https://fedorahosted.org/freeipa/ticket/4164

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-08-11 16:01:38 +02:00
Martin Basti ca001814ab Allow to add host if AAAA record exists 
http://fedorahosted.org/freeipa/ticket/4164

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-08-11 16:01:38 +02:00
Tomas Babej 6bb4eea348 ipatests: test_trust: Add test to cover lookup of trusdomains 
Adds an integration tests that checks that all trustdomains are
able to be found by trustdomain-find command right after the
trust has been established.

Also moves some code to allow easier adding common test cases for
both POSIX and non-POSIX test classes.

https://fedorahosted.org/freeipa/ticket/4208

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-08-07 12:49:47 +02:00
Jan Cholasta 34de95545d Add test for baseldap.entry_to_dict. 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-08-04 11:21:32 +02:00
Petr Vobornik 80733bff15 webui-ci: fix reset password check 
After login, CI checks if password needs a reset by checking if
reset password fields are displayed. This check failed since
login facet was removed from DOM after successful auth. Weakening
the selector fixes it.

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-07-31 12:02:58 +02:00
Petr Viktorin 410da23aec test_ipagetkeytab: Fix assertion in negative test 
The ipagetkeytab command recently changed its failure output
to accomodate pre-4.0 servers.
Update the test to reflect this.

Related: https://fedorahosted.org/freeipa/ticket/4446
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-07-30 11:02:23 +02:00
David Kupka f7e00b9ad6 test group: remove group from protected group. 
Related to https://fedorahosted.org/freeipa/ticket/4448

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-07-29 17:07:11 +02:00
Petr Vobornik 3966417779 webui: replace action_buttons with action_widget 
Simplify code base by reuse of 'disable' feature of button_widget. All
occurrences of action-button which were disabled/enabled were replaced
by button-widget.

https://fedorahosted.org/freeipa/ticket/4258

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
 2014-07-28 10:24:21 +02:00
Petr Vobornik b68f819de7 webui: improve usability of attributes widget 
Attributes widget layour was changed from tiny table which allowed
to display only few options to a checkbox list with multiple
columns (depends on container).

Check all attributes option was removed to force the user
to read through the attributes which he selects.

Initial version authored by: Adam Misnyovszki

https://fedorahosted.org/freeipa/ticket/4253

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
 2014-07-21 10:47:06 +02:00
Petr Viktorin cd4fd60c0e test_xmlrpc: Update tests 
- The number of permissions in $SUFFIX changed.
- A new ACI was added to realmdomains

Update the tests.

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-07-18 15:03:12 +02:00
Tomas Babej 4254423f83 ipatests: tasks: Fix dns configuration for trusts 
Properly configure forwarders to the AD zone with respect to
newly created ipa dnsforwardzone commands.

https://fedorahosted.org/freeipa/ticket/4401

Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2014-07-15 09:53:27 +02:00
Martin Basti 80cb95da36 Test DNS: add zone with consecutive dash characters 
Test for ticket: https://fedorahosted.org/freeipa/ticket/4268

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-07-04 18:45:01 +02:00
Martin Basti 2203abfca8 Test DNS: TLSA record 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-07-04 18:45:01 +02:00
Martin Basti c48cee99a2 Test DNS: test zone normalization 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-07-04 18:45:00 +02:00
Petr Vobornik 0b0e77cf99 webui: new navigation structure 
https://fedorahosted.org/freeipa/ticket/4418

Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2014-07-04 16:31:38 +02:00
Martin Basti 2637116eab Allow to add managed permission for reverse zones 
Ticket: https://fedorahosted.org/freeipa/ticket/4422
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2014-07-04 16:10:33 +02:00
Martin Basti 52bcf5345c Fix tests dns_realmdomains_integration 
Added warning message about forwarders

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-07-04 10:22:30 +02:00
Petr Viktorin 6f2451ce9e test_ipaserver: Add OTP token test data to ipatests package 
The missing files caused test failures when running tests out of tree.

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-07-04 09:03:49 +02:00
Petr Viktorin a7e400fa65 test_ipagetkeytab: Fix expected error message 
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-07-04 08:51:42 +02:00
Martin Basti 01b95805ab NSEC3PARAM tests 
Ticket: https://fedorahosted.org/freeipa/ticket/4413
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2014-07-02 14:54:42 +02:00
Martin Basti ff7b44e3b0 Remove NSEC3PARAM record 
Revert 5b95be802c

Ticket: https://fedorahosted.org/freeipa/ticket/4413
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2014-07-02 14:54:41 +02:00
Martin Basti 152c8f210b Check normalization only for IDNA domains 
Backward compability with older IPA versions which allow to use uppper
case. Only IDNA domains will be checked.

https://fedorahosted.org/freeipa/ticket/4382

Reviewed-By: Martin Kosek <mkosek@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2014-07-01 09:58:42 +02:00
Petr Viktorin fdef2e1bd8 permission plugin: Ignore unparseable ACIs 
When manipulating a permission for an entry that has an ACI
that the parser cannot process, skip this ACI instead of
failing.

Add a test that manipulates permission in cn=accounts,
where there are complex ipaAllowedOperation-based ACIs.

Workaround for: https://fedorahosted.org/freeipa/ticket/4376

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-07-01 09:35:38 +02:00
Rob Crittenden 54e4891fef Remove IPA Foreman Smart Proxy 
The code has been moved to its own, separate repository at
git://git.fedorahosted.org/git/freeipa-foreman-smartproxy.git

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-07-01 09:19:51 +02:00
Petr Vobornik 35d3f03843 webui: support unlock user command 
Call user-unlock command from Web UI.

It will unlock displayed user on current master.

https://fedorahosted.org/freeipa/ticket/4407

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
 2014-06-30 13:11:53 +02:00
Petr Vobornik 029649c05c webui-ci: fix action list action visibility and enablement assertion 
The new html structure was not addressed properly.

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
 2014-06-30 13:00:13 +02:00
Petr Vobornik c7c13965e3 webui-ci: dns forward zone tests 
Selenium CI sanity tests for DNS Forward Zones

https://fedorahosted.org/freeipa/ticket/4357

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
 2014-06-27 14:18:34 +02:00
Petr Vobornik 870db2f677 webui: rebase user password dialog on password dialog and add otp support 
https://fedorahosted.org/freeipa/ticket/4262

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
 2014-06-26 12:37:39 +02:00
Tomas Babej c8511d3b3b ipaplatform: Fix misspelled path constant 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-06-25 21:07:07 +02:00
Tomas Babej e7969f5af5 ipatests: test_sudo: Expect root listed out if no RunAsUser available 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-06-25 20:14:52 +02:00
Tomas Babej 701f1fc8ba ipatests: test_sudo: Do not expect enumeration of runasuser groups 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-06-25 20:14:52 +02:00
Tomas Babej e0fd2695ca ipatests: test_sudo: Fix assertions not assuming runasgroupcat set to ALL 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-06-25 20:14:52 +02:00
Tomas Babej ec2050b7df ipatests: test_sudo: Add coverage for category ALL validation 
Makes sure sudorules behave correctly both when adding new entries
with corresponding category set to ALL, and when setting the
category to all when corresponding entries exist.

The only exception of deny commands with cmdcategory ALL is
covered as well.

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-06-25 20:14:52 +02:00
Tomas Babej c50d190549 ipatests: test_sudo: Add coverage for external entries 
Covers functionality of external entries for:
* users
* runAsUsers
* groups of RunAsUsers
* runAsGroups

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-06-25 20:14:52 +02:00
Tomas Babej d537da8b8a ipatests: test_sudo: Add tests for allowing hosts via hostmasks 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2014-06-25 20:14:51 +02:00