#8944 TestIpaAdTrustInstall::test_ipa_user_s4u2self_pac failed at create_active_user
Closed: fixed 2 years ago by fcami. Opened 2 years ago by fcami.

logs

    def test_ipa_user_s4u2self_pac(self):
        """Test that a service can request S4U2Self ticket with PAC"""
        user = 'tests4u2selfuser'
        user_princ = '@'.join([user, self.master.domain.realm])
        passwd = 'Secret123'
        # Create a user with a password
>       tasks.create_active_user(self.master, user, passwd, extra_args=[
            '--homedir', '/home/{}'.format(user)])
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:513 RUN ['ipa', 'user-add', 'tests4u2selfuser', '--first', 'test', '--last', 'user', '--password', '--homedir', '/home/tests4u2selfuser']
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557 -----------------------------
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557 Added user "tests4u2selfuser"
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557 -----------------------------
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   User login: tests4u2selfuser
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   First name: test
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Last name: user
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Full name: test user
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Display name: test user
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Initials: tu
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Home directory: /home/tests4u2selfuser
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   GECOS: test user
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Login shell: /bin/sh
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Principal name: tests4u2selfuser@IPA.TEST
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Principal alias: tests4u2selfuser@IPA.TEST
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   User password expiration: 20210805024249Z
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Email address: tests4u2selfuser@ipa.test
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   UID: 1897800005
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   GID: 1897800005
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Password: True
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Member of groups: ipausers
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:557   Kerberos keys available: True
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd143:transport.py:217 Exit code: 0
INFO     ipatests.pytest_ipa.integration.host.Host.master.IPAOpenSSHTransport:transport.py:391 RUN ['kinit', 'tests4u2selfuser']
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd144:transport.py:513 RUN ['kinit', 'tests4u2selfuser']
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd144:transport.py:557 Password for tests4u2selfuser@IPA.TEST: 
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd144:transport.py:557 Password expired.  You must change it now.
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd144:transport.py:557 Enter new password: 
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd144:transport.py:557 Enter it again: 
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd144:transport.py:557 kinit: Password has expired while getting initial credentials
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd144:transport.py:217 Exit code: 1
ERROR    ipatests.pytest_ipa.integration.host.Host.master.cmd144:host.py:201 stderr: kinit: Password has expired while getting initial credentials

This is due to this test (and the one above, too) creating users when a replica is present.
PR incoming.


Metadata Update from @fcami:
- Custom field changelog adjusted to ipatests: TestIpaAdTrustInstall: Call create_active_user with krb5_trace=True
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5953

2 years ago

master:

  • e914a59 ipatests: use krb5_trace in TestIpaAdTrustInstall

ipa-4-9:

  • 9ae23e1 ipatests: use krb5_trace in TestIpaAdTrustInstall

Metadata Update from @fcami:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata