From bcfd18f336d752483dffc048e1d9c0edac1628fd Mon Sep 17 00:00:00 2001
From: Florence Blanc-Renaud <flo@redhat.com>
Date: Sep 06 2018 09:49:53 +0000
Subject: Tests: test successful PKINIT install on replica


Add a test checking that ipa-replica-install successfully configures
PKINIT on the replica

Related to https://pagure.io/freeipa/issue/7566

Reviewed-By: Christian Heimes <cheimes@redhat.com>

---

diff --git a/ipatests/test_integration/test_replica_promotion.py b/ipatests/test_integration/test_replica_promotion.py
index fa94927..a20af59 100644
--- a/ipatests/test_integration/test_replica_promotion.py
+++ b/ipatests/test_integration/test_replica_promotion.py
@@ -208,6 +208,9 @@ class TestReplicaPromotionLevel1(ReplicaPromotionBase):
                                      '-r', self.master.domain.realm,
                                      '--server', self.master.hostname,
                                      '-U'])
+        # Ensure that pkinit is properly configured, test for 7566
+        result = self.replicas[0].run_command(['ipa-pkinit-manage', 'status'])
+        assert "PKINIT is enabled" in result.stdout_text
 
 
 @pytest.mark.skip(reason="Domain level 0 is not supported anymore")