dfa0842 ipatests: See if nologin supports -c before asserting message

1 file Authored by rcritten 3 years ago, Committed by frenaud 3 years ago,
    ipatests: See if nologin supports -c before asserting message
    
    Per the ssh_config(5) man page under ProxyCommand:
    
    "The command string extends to the end of the line, and is
    executed using the user's shell ‘exec’ directive to avoid a
    lingering shell process."
    
    <shell> -c <proxy command>
    
    Some older versions of nologin (RHEL/CentOS) do not support
    the -c option so will still fail but since nologin doesn't
    actually execute properly it doesn't include the output
    'This account is currently not available' so don't assert
    in that case. The returncode of 1 is sufficient to know
    that the login is denied.
    
    https://pagure.io/freeipa/issue/7676
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>