#8413 Nightly test failure in test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions::test_sssd_config_allows_ipaapi_access_to_ifp
Closed: fixed 3 years ago by frenaud. Opened 3 years ago by mpolovka.

Issue

Issue

The nightly test test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions::test_sssd_config_allows_ipaapi_access_to_ifp is failing since mergin of PR #4914 replica: Add tests to ensure the ipaapi user is allowed access to ifp on replicas

Logs:

self = <ipatests.test_integration.test_replica_promotion.TestUnprivilegedUserPermissions object at 0x7fd0be4d8f50>

    def test_sssd_config_allows_ipaapi_access_to_ifp(self):
        self.master.run_command(['ipa', 'group-add-member', 'admins',
>                                '--users=%s' % self.username])

test_integration/test_replica_promotion.py:201: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

self = <ipatests.pytest_ipa.integration.host.Host master.ipa.test (master)>
argv = ['ipa', 'group-add-member', 'admins', '--users=testuser'], set_env = True
stdin_text = None, log_stdout = True, raiseonerr = True, cwd = None, bg = False
encoding = 'utf-8', ok_returncode = 0

    def run_command(self, argv, set_env=True, stdin_text=None,
                    log_stdout=True, raiseonerr=True,
                    cwd=None, bg=False, encoding='utf-8', ok_returncode=0):
        """Wrapper around run_command to log stderr on raiseonerr=True

        :param ok_returncode: return code considered to be correct,
                              you can pass an integer or sequence of integers
        """
        result = super().run_command(
            argv, set_env=set_env, stdin_text=stdin_text,
            log_stdout=log_stdout, raiseonerr=False, cwd=cwd, bg=bg,
            encoding=encoding
        )
        # in FIPS mode SSH may print noise to stderr, remove the string
        # "FIPS mode initialized" + optional newline.
        result.stderr_bytes = FIPS_NOISE_RE.sub(b'', result.stderr_bytes)
        try:
            result_ok = result.returncode in ok_returncode
        except TypeError:
            result_ok = result.returncode == ok_returncode
        if not result_ok and raiseonerr:
            result.log.error('stderr: %s', result.stderr_text)
            raise subprocess.CalledProcessError(
                result.returncode, argv,
>               result.stdout_text, result.stderr_text
            )
E           subprocess.CalledProcessError: Command '['ipa', 'group-add-member', 'admins', '--users=testuser']' returned non-zero exit status 1.

pytest_ipa/integration/host.py:202: CalledProcessError
 ------------------------------Captured stderr call------------------------------ 

[ipatests.pytest_ipa.integration.host.Host.master.cmd67]   Member users: admin, testuser
[ipatests.pytest_ipa.integration.host.Host.master.cmd67]   Failed members: 
[ipatests.pytest_ipa.integration.host.Host.master.cmd67]     member user: testuser: This entry is already a member
[ipatests.pytest_ipa.integration.host.Host.master.cmd67]     member group: 
[ipatests.pytest_ipa.integration.host.Host.master.cmd67]     member service: 
[ipatests.pytest_ipa.integration.host.Host.master.cmd67]     member User ID override: 
[ipatests.pytest_ipa.integration.host.Host.master.cmd67] -------------------------
[ipatests.pytest_ipa.integration.host.Host.master.cmd67] Number of members added 0
[ipatests.pytest_ipa.integration.host.Host.master.cmd67] -------------------------
[ipatests.pytest_ipa.integration.host.Host.master.cmd67] Exit code: 1
ipa: ERROR: stderr: 

 -------------------------------Captured log call-------------------------------- 
INFO     ipatests.pytest_ipa.integration.host.Host.master.IPAOpenSSHTransport:transport.py:391 RUN ['ipa', 'group-add-member', 'admins', '--users=testuser']
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:513 RUN ['ipa', 'group-add-member', 'admins', '--users=testuser']
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558   Group name: admins
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558   Description: Account administrators group
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558   GID: 1425600000
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558   Member users: admin, testuser
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558   Failed members: 
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558     member user: testuser: This entry is already a member
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558     member group: 
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558     member service: 
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558     member User ID override: 
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558 -------------------------
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558 Number of members added 0
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:558 -------------------------
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd67:transport.py:217 Exit code: 1
ERROR    ipatests.pytest_ipa.integration.host.Host.master.cmd67:host.py:199 stderr:

Metadata Update from @frenaud:
- Issue assigned to frenaud

3 years ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4926

3 years ago

master:

  • 1fc1947 ipatests: fix TestUnprivilegedUserPermissions
  • 062e18c ipatests: Fix TestReplicaPromotionLevel1

ipa-4-8:

  • 819bcac ipatests: fix TestUnprivilegedUserPermissions
  • 3c53c70 ipatests: Fix TestReplicaPromotionLevel1

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata