74c5a96 ipatests: test sysaccount password change with a password policy applied

1 file Authored by abbra 4 years ago, Committed by rcritten 4 years ago,
    ipatests: test sysaccount password change with a password policy applied
    
    ipa-pwd-extop plugin had a bug which prevented a cn=Directory Manager
    to change a password to a value that is not allowed by an associated
    password policy. Password policy checks should not apply to any
    operations done as cn=Directory Manager.
    
    The test creates a system account with associated policy that prevents
    password reuse. It then goes to try to change a password three times:
     - as a user: must succeeed
     - as a cn=Directory Manager: must succeed even with a password re-use
     - as a user again: must fail due to password re-use
    
    Related: https://pagure.io/freeipa/issue/7181
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>