From 2032a619bb0a618b0d39fee0f61fbbc0a71ad77c Mon Sep 17 00:00:00 2001 From: François Cami Date: Jun 08 2020 20:58:37 +0000 Subject: ipatests: add KRB5_TRACE to kinit in test_adtrust_install.py The test test_adtrust_install.py::TestIpaAdTrustInstall::test_add_agent_not_allowed sometimes fails at kinit in create_active_user: ``` kinit: Password has expired while getting initial credentials ``` Use krb5_trace to catch the required debug information. Related-to: https://pagure.io/freeipa/issue/8353 Related-to: https://pagure.io/freeipa/issue/8271 Signed-off-by: François Cami Reviewed-By: Michal Polovka Reviewed-By: Robbie Harwood --- diff --git a/ipatests/test_integration/test_adtrust_install.py b/ipatests/test_integration/test_adtrust_install.py index d2eeed2..317ba10 100644 --- a/ipatests/test_integration/test_adtrust_install.py +++ b/ipatests/test_integration/test_adtrust_install.py @@ -58,10 +58,14 @@ class TestIpaAdTrustInstall(IntegrationTest): data_fmt = '{{"method":"trust_enable_agent","params":[["{}"],{{}}]}}' try: - # Create a nonadmin user that will be used by curl - tasks.create_active_user(self.master, user, passwd, - first=user, last=user) - tasks.kinit_as_user(self.master, user, passwd) + # Create a nonadmin user that will be used by curl. + # krb5_trace set to True: https://pagure.io/freeipa/issue/8353 + tasks.create_active_user( + self.master, user, passwd, first=user, last=user, + krb5_trace=True + ) + tasks.kinit_as_user(self.master, user, passwd, krb5_trace=True) + # curl --negotiate -u : is using GSS-API i.e. nonadmin user cmd_args = [ paths.BIN_CURL,