date:20211129

[SSSD] [sssd PR#5895][synchronized] Only test no merge

2021-11-29 Thread aborah-sudo

   URL: https://github.com/SSSD/sssd/pull/5895
Author: aborah-sudo
 Title: #5895: Only test no merge
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5895/head:pr5895
git checkout pr5895
From 7953151fddf4414065a5c46464158394862693bb Mon Sep 17 00:00:00 2001
From: Anuj Borah 
Date: Mon, 29 Nov 2021 21:28:06 +0530
Subject: [PATCH] Only test no merge

---
 src/tests/multihost/ipa/conftest.py  | 3 ++-
 src/tests/multihost/ipa/test_subid_ranges.py | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/tests/multihost/ipa/conftest.py b/src/tests/multihost/ipa/conftest.py
index 4bf9061c58..bf36473d50 100644
--- a/src/tests/multihost/ipa/conftest.py
+++ b/src/tests/multihost/ipa/conftest.py
@@ -22,7 +22,7 @@
 def pytest_configure():
 """ Namespace hook to add below dict in the pytest namespace """
 pytest.num_masters = 1
-pytest.num_ad = 1
+pytest.num_ad = 0
 pytest.num_atomic = 0
 pytest.num_replicas = 0
 pytest.num_clients = 1
@@ -176,6 +176,7 @@ def environment_setup(session_multihost, request):
"--enablerepo=rhel-CRB install"
" -y shadow-utils*")
 client.run_command("yum install -y gcc")
+client.run_command("yum install -y sssd*")
 with pytest.raises(subprocess.CalledProcessError):
 client.run_command(f"grep subid /etc/nsswitch.conf")
 file_location = "/src/tests/multihost/ipa/data/list_subid_ranges.c"
diff --git a/src/tests/multihost/ipa/test_subid_ranges.py b/src/tests/multihost/ipa/test_subid_ranges.py
index b3df9b3d60..44f4f7dcf3 100644
--- a/src/tests/multihost/ipa/test_subid_ranges.py
+++ b/src/tests/multihost/ipa/test_subid_ranges.py
@@ -60,6 +60,7 @@ def test_subid_feature(self, multihost):
 1. Should succeed
 2. Should succeed
 """
+time.sleep(10)
 ipa_subid_find(multihost)
 ssh1 = SSHClient(multihost.client[0].ip,
  username=user, password=test_password)
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5892][synchronized] Tests: Add a test for BZ2004406

2021-11-29 Thread jakub-vavra-cz

   URL: https://github.com/SSSD/sssd/pull/5892
Author: jakub-vavra-cz
 Title: #5892: Tests: Add a test for BZ2004406
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5892/head:pr5892
git checkout pr5892
From ea3a30f612dd2112e29b6599461e71af3a9a1014 Mon Sep 17 00:00:00 2001
From: Jakub Vavra 
Date: Fri, 26 Nov 2021 07:24:15 +0100
Subject: [PATCH] Tests: Add a test for BZ2004406

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2004406
Verifies: MR#5791
---
 src/tests/multihost/ipa/test_adtrust.py | 55 +
 1 file changed, 55 insertions(+)

diff --git a/src/tests/multihost/ipa/test_adtrust.py b/src/tests/multihost/ipa/test_adtrust.py
index 3f2fc66c1b..6eb5435b09 100644
--- a/src/tests/multihost/ipa/test_adtrust.py
+++ b/src/tests/multihost/ipa/test_adtrust.py
@@ -6,6 +6,7 @@
 :upstream: yes
 """
 
+import random
 import re
 import time
 import pytest
@@ -379,3 +380,57 @@ def test_nss_get_by_name_with_private_group(self, multihost):
 assert cmd_adm.returncode == 0, 'Something wrong with setup!'
 assert cmd_usr.returncode == 0, \
 f"pysss_nss_idmap.getsidbyname for {username} failed"
+
+@staticmethod
+def test_idview_override_group(multihost, create_aduser_group):
+"""
+:title: IPA clients fail to resolve override group names
+:id: 7a0dc871-fdad-4c07-9d07-a092baa83178
+:bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2004406
+:description: Overriding both user and group names and ids in
+  an idview for user and group from AD results in error in sssd
+  when running id command.
+:steps:
+ 1. ID views to override AD groupname and gid .
+ 2. ID view to override AD username, uid and gid.
+ 3. Run an "id" command for the override user on IPA
+ client
+:expectedresults:
+  1. View with an override is created.
+  2. User override is added to the view.
+  3. Id command succeeds, group override is visible.
+"""
+(aduser, adgroup) = create_aduser_group
+domain = multihost.ad[0].domainname
+ipa_client = sssdTools(multihost.client[0])
+ipa_client.clear_sssd_cache()
+ad_user_fqdn = '%s@%s' % (aduser, domain)
+view = f'prygl_trust_view_{random.randint(, 99)}'
+create_view = f'ipa idview-add {view}'
+multihost.master[0].run_command(create_view, raiseonerr=False)
+
+create_grp_override = f'ipa idoverridegroup-add {view} ' \
+  f'{adgroup}@{domain} --group-name "borci" ' \
+  f'--gid=987654'
+multihost.master[0].run_command(create_grp_override, raiseonerr=False)
+
+create_user_override = f'ipa idoverrideuser-add {view} ' \
+   f'{ad_user_fqdn} --login ferko ' \
+   f'--uid=50001 --gidnumber=5'
+multihost.master[0].run_command(create_user_override, raiseonerr=False)
+# apply the view on client
+apply_view = f"ipa idview-apply {view} " \
+ f"--hosts={multihost.client[0].sys_hostname}"
+multihost.master[0].run_command(apply_view, raiseonerr=False)
+
+ipa_client.clear_sssd_cache()
+time.sleep(5)
+
+id_cmd = f'id ferko@{domain}'
+cmd = multihost.client[0].run_command(id_cmd, raiseonerr=False)
+delete_id_view = f'ipa idview-del {view}'
+multihost.master[0].run_command(delete_id_view)
+ipa_client.clear_sssd_cache()
+assert cmd.returncode == 0, f"User {aduser} was not found."
+assert "borci" in cmd.stdout_text, "Group name was not overridden."
+assert "987654" in cmd.stdout_text, "Group id was not overridden."
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5895][synchronized] Only test no merge

2021-11-29 Thread aborah-sudo

   URL: https://github.com/SSSD/sssd/pull/5895
Author: aborah-sudo
 Title: #5895: Only test no merge
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5895/head:pr5895
git checkout pr5895
From 9d45c3157c32635dbfed3f7968eef2ae629e6770 Mon Sep 17 00:00:00 2001
From: Anuj Borah 
Date: Mon, 29 Nov 2021 21:28:06 +0530
Subject: [PATCH] Only test no merge

---
 src/tests/multihost/ipa/conftest.py  | 3 ++-
 src/tests/multihost/ipa/test_subid_ranges.py | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/tests/multihost/ipa/conftest.py b/src/tests/multihost/ipa/conftest.py
index 4bf9061c58..bf36473d50 100644
--- a/src/tests/multihost/ipa/conftest.py
+++ b/src/tests/multihost/ipa/conftest.py
@@ -22,7 +22,7 @@
 def pytest_configure():
 """ Namespace hook to add below dict in the pytest namespace """
 pytest.num_masters = 1
-pytest.num_ad = 1
+pytest.num_ad = 0
 pytest.num_atomic = 0
 pytest.num_replicas = 0
 pytest.num_clients = 1
@@ -176,6 +176,7 @@ def environment_setup(session_multihost, request):
"--enablerepo=rhel-CRB install"
" -y shadow-utils*")
 client.run_command("yum install -y gcc")
+client.run_command("yum install -y sssd*")
 with pytest.raises(subprocess.CalledProcessError):
 client.run_command(f"grep subid /etc/nsswitch.conf")
 file_location = "/src/tests/multihost/ipa/data/list_subid_ranges.c"
diff --git a/src/tests/multihost/ipa/test_subid_ranges.py b/src/tests/multihost/ipa/test_subid_ranges.py
index b3df9b3d60..6353d88ddc 100644
--- a/src/tests/multihost/ipa/test_subid_ranges.py
+++ b/src/tests/multihost/ipa/test_subid_ranges.py
@@ -60,6 +60,7 @@ def test_subid_feature(self, multihost):
 1. Should succeed
 2. Should succeed
 """
+breakpoint()
 ipa_subid_find(multihost)
 ssh1 = SSHClient(multihost.client[0].ip,
  username=user, password=test_password)
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5895][synchronized] Only test no merge

2021-11-29 Thread aborah-sudo

   URL: https://github.com/SSSD/sssd/pull/5895
Author: aborah-sudo
 Title: #5895: Only test no merge
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5895/head:pr5895
git checkout pr5895
From 08b4f48419bae5ff066834bab8087daaff1d0985 Mon Sep 17 00:00:00 2001
From: Anuj Borah 
Date: Mon, 29 Nov 2021 21:28:06 +0530
Subject: [PATCH] Only test no merge

---
 src/tests/multihost/ipa/conftest.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/tests/multihost/ipa/conftest.py b/src/tests/multihost/ipa/conftest.py
index 4bf9061c58..bf36473d50 100644
--- a/src/tests/multihost/ipa/conftest.py
+++ b/src/tests/multihost/ipa/conftest.py
@@ -22,7 +22,7 @@
 def pytest_configure():
 """ Namespace hook to add below dict in the pytest namespace """
 pytest.num_masters = 1
-pytest.num_ad = 1
+pytest.num_ad = 0
 pytest.num_atomic = 0
 pytest.num_replicas = 0
 pytest.num_clients = 1
@@ -176,6 +176,7 @@ def environment_setup(session_multihost, request):
"--enablerepo=rhel-CRB install"
" -y shadow-utils*")
 client.run_command("yum install -y gcc")
+client.run_command("yum install -y sssd*")
 with pytest.raises(subprocess.CalledProcessError):
 client.run_command(f"grep subid /etc/nsswitch.conf")
 file_location = "/src/tests/multihost/ipa/data/list_subid_ranges.c"
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5892][synchronized] Tests: Add a test for BZ2004406

2021-11-29 Thread jakub-vavra-cz

   URL: https://github.com/SSSD/sssd/pull/5892
Author: jakub-vavra-cz
 Title: #5892: Tests: Add a test for BZ2004406
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5892/head:pr5892
git checkout pr5892
From f347a53248d24745f237bb68faa1b6020de3f814 Mon Sep 17 00:00:00 2001
From: Jakub Vavra 
Date: Fri, 26 Nov 2021 07:24:15 +0100
Subject: [PATCH] Tests: Add a test for BZ2004406

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2004406
Verifies: MR#5791
---
 src/tests/multihost/ipa/test_adtrust.py | 53 +
 1 file changed, 53 insertions(+)

diff --git a/src/tests/multihost/ipa/test_adtrust.py b/src/tests/multihost/ipa/test_adtrust.py
index 3f2fc66c1b..dc3f5da71a 100644
--- a/src/tests/multihost/ipa/test_adtrust.py
+++ b/src/tests/multihost/ipa/test_adtrust.py
@@ -6,6 +6,7 @@
 :upstream: yes
 """
 
+import random
 import re
 import time
 import pytest
@@ -379,3 +380,55 @@ def test_nss_get_by_name_with_private_group(self, multihost):
 assert cmd_adm.returncode == 0, 'Something wrong with setup!'
 assert cmd_usr.returncode == 0, \
 f"pysss_nss_idmap.getsidbyname for {username} failed"
+
+@staticmethod
+def test_idview_override_group(multihost, create_aduser_group):
+"""
+:title: IPA clients fail to resolve override group names
+:id: 7a0dc871-fdad-4c07-9d07-a092baa83178
+:bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2004406
+:description:
+:steps:
+ 1. ID views to override AD groupname and gid .
+ 2. ID view to override AD username, uid and gid.
+ 3. Run an "id" command for the override user on IPA
+ client
+:expectedresults:
+  1. View with an override is created.
+  2. User override is added to the view.
+  3. Id command succeeds, group override is visible.
+"""
+(aduser, adgroup) = create_aduser_group
+domain = multihost.ad[0].domainname
+ipa_client = sssdTools(multihost.client[0])
+ipa_client.clear_sssd_cache()
+ad_user_fqdn = '%s@%s' % (aduser, domain)
+view = f'prygl_trust_view_{random.randint(, 99)}'
+create_view = f'ipa idview-add {view}'
+multihost.master[0].run_command(create_view, raiseonerr=False)
+
+create_grp_override = f'ipa idoverridegroup-add {view} ' \
+  f'{adgroup}@{domain} --group-name "borci" ' \
+  f'--gid=987654'
+multihost.master[0].run_command(create_grp_override, raiseonerr=False)
+
+create_user_override = f'ipa idoverrideuser-add {view} ' \
+   f'{ad_user_fqdn} --login ferko ' \
+   f'--uid=50001 --gidnumber=5'
+multihost.master[0].run_command(create_user_override, raiseonerr=False)
+# apply the view on client
+apply_view = f"ipa idview-apply {view} " \
+ f"--hosts={multihost.client[0].sys_hostname}"
+multihost.master[0].run_command(apply_view, raiseonerr=False)
+
+ipa_client.clear_sssd_cache()
+time.sleep(5)
+
+id_cmd = f'id ferko@{domain}'
+cmd = multihost.client[0].run_command(id_cmd, raiseonerr=False)
+delete_id_view = f'ipa idview-del {view}'
+multihost.master[0].run_command(delete_id_view)
+ipa_client.clear_sssd_cache()
+assert cmd.returncode == 0, f"User {aduser} was not found."
+assert "borci" in cmd.stdout_text, "Group name was not overridden."
+assert "987654" in cmd.stdout_text, "Group id was not overridden."
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5892][synchronized] Tests: Add a test for BZ2004406

2021-11-29 Thread jakub-vavra-cz

   URL: https://github.com/SSSD/sssd/pull/5892
Author: jakub-vavra-cz
 Title: #5892: Tests: Add a test for BZ2004406
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5892/head:pr5892
git checkout pr5892
From 290049c88c2da4c0cb30e6db1396264d2bd36996 Mon Sep 17 00:00:00 2001
From: Jakub Vavra 
Date: Fri, 26 Nov 2021 07:24:15 +0100
Subject: [PATCH] Tests: Add a test for BZ2004406

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2004406
Verifies: MR#5791
---
 src/tests/multihost/ipa/test_adtrust.py | 53 +
 1 file changed, 53 insertions(+)

diff --git a/src/tests/multihost/ipa/test_adtrust.py b/src/tests/multihost/ipa/test_adtrust.py
index 3f2fc66c1b..dc3f5da71a 100644
--- a/src/tests/multihost/ipa/test_adtrust.py
+++ b/src/tests/multihost/ipa/test_adtrust.py
@@ -6,6 +6,7 @@
 :upstream: yes
 """
 
+import random
 import re
 import time
 import pytest
@@ -379,3 +380,55 @@ def test_nss_get_by_name_with_private_group(self, multihost):
 assert cmd_adm.returncode == 0, 'Something wrong with setup!'
 assert cmd_usr.returncode == 0, \
 f"pysss_nss_idmap.getsidbyname for {username} failed"
+
+@staticmethod
+def test_idview_override_group(multihost, create_aduser_group):
+"""
+:title: IPA clients fail to resolve override group names
+:id: 7a0dc871-fdad-4c07-9d07-a092baa83178
+:bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2004406
+:description:
+:steps:
+ 1. ID views to override AD groupname and gid .
+ 2. ID view to override AD username, uid and gid.
+ 3. Run an "id" command for the override user on IPA
+ client
+:expectedresults:
+  1. View with an override is created.
+  2. User override is added to the view.
+  3. Id command succeeds, group override is visible.
+"""
+(aduser, adgroup) = create_aduser_group
+domain = multihost.ad[0].domainname
+ipa_client = sssdTools(multihost.client[0])
+ipa_client.clear_sssd_cache()
+ad_user_fqdn = '%s@%s' % (aduser, domain)
+view = f'prygl_trust_view_{random.randint(, 99)}'
+create_view = f'ipa idview-add {view}'
+multihost.master[0].run_command(create_view, raiseonerr=False)
+
+create_grp_override = f'ipa idoverridegroup-add {view} ' \
+  f'{adgroup}@{domain} --group-name "borci" ' \
+  f'--gid=987654'
+multihost.master[0].run_command(create_grp_override, raiseonerr=False)
+
+create_user_override = f'ipa idoverrideuser-add {view} ' \
+   f'{ad_user_fqdn} --login ferko ' \
+   f'--uid=50001 --gidnumber=5'
+multihost.master[0].run_command(create_user_override, raiseonerr=False)
+# apply the view on client
+apply_view = f"ipa idview-apply {view} " \
+ f"--hosts={multihost.client[0].sys_hostname}"
+multihost.master[0].run_command(apply_view, raiseonerr=False)
+
+ipa_client.clear_sssd_cache()
+time.sleep(5)
+
+id_cmd = f'id ferko@{domain}'
+cmd = multihost.client[0].run_command(id_cmd, raiseonerr=False)
+delete_id_view = f'ipa idview-del {view}'
+multihost.master[0].run_command(delete_id_view)
+ipa_client.clear_sssd_cache()
+assert cmd.returncode == 0, f"User {aduser} was not found."
+assert "borci" in cmd.stdout_text, "Group name was not overridden."
+assert "987654" in cmd.stdout_text, "Group id was not overridden."
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5869][synchronized] Translations update from Weblate

2021-11-29 Thread weblate

   URL: https://github.com/SSSD/sssd/pull/5869
Author: weblate
 Title: #5869: Translations update from Weblate
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5869/head:pr5869
git checkout pr5869
From 5d48017462d0a3b932e6454ea79e8c35425e9176 Mon Sep 17 00:00:00 2001
From: Weblate 
Date: Mon, 22 Nov 2021 17:16:01 +0100
Subject: [PATCH] po: update translations

(Korean) currently translated at 13.8% (362 of 2615 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/

po: update translations

(Spanish) currently translated at 96.9% (600 of 619 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/es/

po: update translations

(Korean) currently translated at 13.3% (349 of 2615 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/

po: update translations

(Ukrainian) currently translated at 100.0% (619 of 619 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/uk/

po: update translations

(Polish) currently translated at 100.0% (619 of 619 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pl/

Update translation files

Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/

po: update translations

(Korean) currently translated at 13.0% (341 of 2615 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/

po: update translations

(Korean) currently translated at 30.7% (190 of 617 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
---
 po/es.po | 53 ++
 po/ko.po |  1 +
 po/pl.po | 10 +---
 po/uk.po | 10 +---
 src/man/po/ko.po | 66 ++--
 5 files changed, 82 insertions(+), 58 deletions(-)

diff --git a/po/es.po b/po/es.po
index 0e9a0547ee..0211195ad5 100644
--- a/po/es.po
+++ b/po/es.po
@@ -19,7 +19,7 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
 "POT-Creation-Date: 2021-11-09 16:03+0100\n"
-"PO-Revision-Date: 2021-10-27 15:05+\n"
+"PO-Revision-Date: 2021-11-18 11:16+\n"
 "Last-Translator: Emilio Herrera \n"
 "Language-Team: Spanish \n"
@@ -28,7 +28,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 4.8\n"
+"X-Generator: Weblate 4.9\n"
 
 #: src/config/SSSDConfig/sssdoptions.py:20
 #: src/config/SSSDConfig/sssdoptions.py:21
@@ -1214,7 +1214,7 @@ msgstr "Permite los principios de la empresa"
 
 #: src/config/SSSDConfig/sssdoptions.py:331
 msgid "Enables using of subdomains realms for authentication"
-msgstr ""
+msgstr "Habilita el uso de reinos de subdominios para autenticación"
 
 #: src/config/SSSDConfig/sssdoptions.py:332
 msgid "A mapping from user names to Kerberos principal names"
@@ -1318,7 +1318,7 @@ msgstr "Especificar los SSF mínimos para autorizaciones sasl de LDAP"
 
 #: src/config/SSSDConfig/sssdoptions.py:361
 msgid "Specify the maximal SSF for LDAP sasl authorization"
-msgstr ""
+msgstr "Especifica el SSF máximo para autorización sasl LDAP"
 
 #: src/config/SSSDConfig/sssdoptions.py:362
 msgid "Kerberos service keytab"
@@ -1366,6 +1366,8 @@ msgid ""
 "Allows to retain local users as members of an LDAP group for servers that "
 "use the RFC2307 schema."
 msgstr ""
+"Permite retener los usuarios locales como miembros de un grupo LDAP para "
+"servidores que usan el esquema RFC2307."
 
 #: src/config/SSSDConfig/sssdoptions.py:375
 msgid "entryUSN attribute"
@@ -1628,11 +1630,11 @@ msgstr "Máximo nivel de anidamiento que seguirá SSSD"
 
 #: src/config/SSSDConfig/sssdoptions.py:445
 msgid "Filter for group lookups"
-msgstr ""
+msgstr "Filtro para búsquedas de grupos"
 
 #: src/config/SSSDConfig/sssdoptions.py:446
 msgid "Scope of group lookups"
-msgstr ""
+msgstr "Alcance de la búsqueda de grupos"
 
 #: src/config/SSSDConfig/sssdoptions.py:448
 msgid "Base DN for netgroup lookups"
@@ -1729,7 +1731,7 @@ msgstr "Máximas entradas a recuperar durante una solicitud de comodín"
 
 #: src/config/SSSDConfig/sssdoptions.py:474
 msgid "Set libldap debug level"
-msgstr ""
+msgstr "Fija el nivel de depuración de libldap"
 
 #: src/config/SSSDConfig/sssdoptions.py:477
 msgid "Policy to evaluate the password expiration"
@@ -1783,7 +1785,7 @@ msgstr "Período de refresco inteligente automático"
 
 #: src

[SSSD] [sssd PR#5891][+Tests] Tests: Podman supports subid ranges managed by FreeIPA

2021-11-29 Thread aborah-sudo

  URL: https://github.com/SSSD/sssd/pull/5891
Title: #5891: Tests: Podman supports subid ranges managed by FreeIPA

Label: +Tests
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5895][synchronized] Only test no merge

2021-11-29 Thread aborah-sudo

   URL: https://github.com/SSSD/sssd/pull/5895
Author: aborah-sudo
 Title: #5895: Only test no merge
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5895/head:pr5895
git checkout pr5895
From 0036296b4f0393b6586a8a789d4699d6904b0950 Mon Sep 17 00:00:00 2001
From: Anuj Borah 
Date: Mon, 29 Nov 2021 21:28:06 +0530
Subject: [PATCH] Only test no merge

---
 src/tests/multihost/ipa/conftest.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/tests/multihost/ipa/conftest.py b/src/tests/multihost/ipa/conftest.py
index 4bf9061c58..ad8ed8c400 100644
--- a/src/tests/multihost/ipa/conftest.py
+++ b/src/tests/multihost/ipa/conftest.py
@@ -22,7 +22,7 @@
 def pytest_configure():
 """ Namespace hook to add below dict in the pytest namespace """
 pytest.num_masters = 1
-pytest.num_ad = 1
+pytest.num_ad = 0
 pytest.num_atomic = 0
 pytest.num_replicas = 0
 pytest.num_clients = 1
@@ -176,6 +176,7 @@ def environment_setup(session_multihost, request):
"--enablerepo=rhel-CRB install"
" -y shadow-utils*")
 client.run_command("yum install -y gcc")
+client.run_command("yum install -y sssd")
 with pytest.raises(subprocess.CalledProcessError):
 client.run_command(f"grep subid /etc/nsswitch.conf")
 file_location = "/src/tests/multihost/ipa/data/list_subid_ranges.c"
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5895][opened] Only test no merge

2021-11-29 Thread aborah-sudo

   URL: https://github.com/SSSD/sssd/pull/5895
Author: aborah-sudo
 Title: #5895: Only test no merge
Action: opened

PR body:
"""
None
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5895/head:pr5895
git checkout pr5895
From 022e4b1edefad61f9216d2d72e97f0da26166a91 Mon Sep 17 00:00:00 2001
From: Anuj Borah 
Date: Mon, 29 Nov 2021 21:28:06 +0530
Subject: [PATCH] Only test no merge

---
 src/tests/multihost/ipa/conftest.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/tests/multihost/ipa/conftest.py b/src/tests/multihost/ipa/conftest.py
index 4bf9061c58..6b9c1e36f7 100644
--- a/src/tests/multihost/ipa/conftest.py
+++ b/src/tests/multihost/ipa/conftest.py
@@ -22,7 +22,7 @@
 def pytest_configure():
 """ Namespace hook to add below dict in the pytest namespace """
 pytest.num_masters = 1
-pytest.num_ad = 1
+pytest.num_ad = 0
 pytest.num_atomic = 0
 pytest.num_replicas = 0
 pytest.num_clients = 1
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5894][+Waiting for review] contrib: sssd krb5 configuration snippet

2021-11-29 Thread ikerexxe

  URL: https://github.com/SSSD/sssd/pull/5894
Title: #5894: contrib: sssd krb5 configuration snippet

Label: +Waiting for review
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5894][+Bugzilla] contrib: sssd krb5 configuration snippet

2021-11-29 Thread ikerexxe

  URL: https://github.com/SSSD/sssd/pull/5894
Title: #5894: contrib: sssd krb5 configuration snippet

Label: +Bugzilla
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5894][comment] contrib: sssd krb5 configuration snippet

2021-11-29 Thread ikerexxe

  URL: https://github.com/SSSD/sssd/pull/5894
Title: #5894: contrib: sssd krb5 configuration snippet

ikerexxe commented:
"""
@pbrezina this is based on https://github.com/SSSD/sssd/pull/5762 so you may 
want to have a look at it.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5894#issuecomment-981740415
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5894][opened] contrib: sssd krb5 configuration snippet

2021-11-29 Thread ikerexxe

   URL: https://github.com/SSSD/sssd/pull/5894
Author: ikerexxe
 Title: #5894: contrib: sssd krb5 configuration snippet
Action: opened

PR body:
"""
Add a configuration snippet for krb5 that points to the folder where the
sssd configuration for this service is located.

Resolves: https://github.com/SSSD/sssd/issues/5893
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5894/head:pr5894
git checkout pr5894
From 913e87df4577bd9afca9ffc84871a445f629e766 Mon Sep 17 00:00:00 2001
From: Iker Pedrosa 
Date: Mon, 29 Nov 2021 16:16:36 +0100
Subject: [PATCH] contrib: sssd krb5 configuration snippet

Add a configuration snippet for krb5 that points to the folder where the
sssd configuration for this service is located.

Resolves: https://github.com/SSSD/sssd/issues/5893

Signed-off-by: Iker Pedrosa 
---
 Makefile.am   | 3 +++
 contrib/sssd.spec.in  | 7 +++
 contrib/sssd_krb5_snippet | 5 +
 3 files changed, 15 insertions(+)
 create mode 100644 contrib/sssd_krb5_snippet

diff --git a/Makefile.am b/Makefile.am
index f6bc9414d0..5298f39687 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -57,6 +57,7 @@ sssdconfdir = $(sysconfdir)/sssd
 sssddatadir = $(datadir)/sssd
 sssdapiplugindir = $(sssddatadir)/sssd.api.d
 sssdtapscriptdir = $(sssddatadir)/systemtap
+krb5snippetsdir = $(sssddatadir)/krb5-snippets
 dbuspolicydir = $(sysconfdir)/dbus-1/system.d
 dbusservicedir = $(datadir)/dbus-1/system-services
 sss_statedir = $(localstatedir)/lib/sss
@@ -4694,6 +4695,8 @@ sssd_krb5_localauth_plugin_la_LDFLAGS = \
 -module
 endif
 
+dist_krb5snippets_DATA = contrib/sssd_krb5_snippet
+
 sssd_pac_plugin_la_SOURCES = \
 src/sss_client/sssd_pac.c \
 src/sss_client/common.c \
diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in
index 7f75b1b5a3..c3ac2b00f9 100644
--- a/contrib/sssd.spec.in
+++ b/contrib/sssd.spec.in
@@ -566,6 +566,10 @@ mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d
 cp $RPM_BUILD_ROOT/%{_datadir}/sssd-kcm/kcm_default_ccache \
$RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d/kcm_default_ccache
 
+# krb5 configuration snippet
+cp $RPM_BUILD_ROOT/%{_datadir}/sssd/krb5-snippets/sssd_krb5_snippet \
+   $RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d/sssd_krb5_snippet
+
 # Create directory for cifs-idmap alternative
 # Otherwise this directory could not be owned by sssd-client
 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/cifs-utils
@@ -792,6 +796,9 @@ done
 %license COPYING
 %{_libdir}/%{name}/libsss_krb5.so
 %{_mandir}/man5/sssd-krb5.5*
+%config(noreplace) %{_sysconfdir}/krb5.conf.d/sssd_krb5_snippet
+%dir %{_datadir}/sssd/krb5-snippets
+%{_datadir}/sssd/krb5-snippets/sssd_krb5_snippet
 
 %files common-pac
 %license COPYING
diff --git a/contrib/sssd_krb5_snippet b/contrib/sssd_krb5_snippet
new file mode 100644
index 00..4da4736e90
--- /dev/null
+++ b/contrib/sssd_krb5_snippet
@@ -0,0 +1,5 @@
+# This file should normally be installed by your distribution into a
+# directory that is included from the Kerberos configuration file (/etc/krb5.conf)
+# On Fedora/RHEL/CentOS, this is /etc/krb5.conf.d/
+
+includedir /var/lib/sss/pubconf/krb5.include.d/
\ No newline at end of file
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5867][+Waiting for review] usertools: force local user for sssd process user

2021-11-29 Thread ikerexxe

  URL: https://github.com/SSSD/sssd/pull/5867
Title: #5867: usertools: force local user for sssd process user

Label: +Waiting for review
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5867][-Changes requested] usertools: force local user for sssd process user

2021-11-29 Thread ikerexxe

  URL: https://github.com/SSSD/sssd/pull/5867
Title: #5867: usertools: force local user for sssd process user

Label: -Changes requested
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5886][comment] install python files conditionally

2021-11-29 Thread SoapGentoo

  URL: https://github.com/SSSD/sssd/pull/5886
Title: #5886: install python files conditionally

SoapGentoo commented:
"""
@pbrezina thanks for the closure :+1: 
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5886#issuecomment-981521555
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5867][synchronized] usertools: force local user for sssd process user

2021-11-29 Thread ikerexxe

   URL: https://github.com/SSSD/sssd/pull/5867
Author: ikerexxe
 Title: #5867: usertools: force local user for sssd process user
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5867/head:pr5867
git checkout pr5867
From bf6b2409da7857f079cf0a9250df10f1bc71ed23 Mon Sep 17 00:00:00 2001
From: Iker Pedrosa 
Date: Mon, 23 Aug 2021 12:04:42 +0200
Subject: [PATCH 1/2] usertools: force local user for sssd process user

System hardening by forcing the sssd user to be loaded from a local
database (/etc/passwd) instead of using any remote user. This could
happen in very special conditions and might change the owner of the sssd
databases and generate a denial of service.

Signed-off-by: Iker Pedrosa 
---
 Makefile.am   |   3 +
 src/tests/cwrap/Makefile.am   |   8 +-
 src/tests/cwrap/common_mock_nss_dl_load.c | 115 ++
 src/tests/cwrap/common_mock_nss_dl_load.h |  30 ++
 src/tests/cwrap/test_responder_common.c   |   7 ++
 src/tests/cwrap/test_usertools.c  |   6 ++
 src/util/usertools.c  |  28 --
 src/util/usertools_extra.c|  50 ++
 src/util/util.h   |   3 +
 9 files changed, 241 insertions(+), 9 deletions(-)
 create mode 100644 src/tests/cwrap/common_mock_nss_dl_load.c
 create mode 100644 src/tests/cwrap/common_mock_nss_dl_load.h
 create mode 100644 src/util/usertools_extra.c

diff --git a/Makefile.am b/Makefile.am
index f6bc9414d0..301f6b5800 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -884,6 +884,7 @@ dist_noinst_HEADERS = \
 src/tests/cmocka/test_expire_common.h \
 src/tests/cmocka/test_sdap_access.h \
 src/tests/cmocka/data_provider/mock_dp.h \
+src/tests/cwrap/common_mock_nss_dl_load.h \
 src/sss_client/pam_message.h \
 src/sss_client/ssh/sss_ssh_client.h \
 src/sss_client/sudo/sss_sudo.h \
@@ -1237,6 +1238,7 @@ libsss_util_la_SOURCES = \
 src/util/server.c \
 src/util/signal.c \
 src/util/usertools.c \
+src/util/usertools_extra.c \
 src/util/backup_file.c \
 src/util/strtonum.c \
 src/util/check_and_open.c \
@@ -1265,6 +1267,7 @@ libsss_util_la_SOURCES = \
 src/util/selinux.c \
 src/util/sss_regexp.c \
 src/util/sss_chain_id.c \
+src/util/nss_dl_load.c \
 $(NULL)
 libsss_util_la_CFLAGS = \
 $(AM_CFLAGS) \
diff --git a/src/tests/cwrap/Makefile.am b/src/tests/cwrap/Makefile.am
index 6d3dc45e57..24e6c4a7c1 100644
--- a/src/tests/cwrap/Makefile.am
+++ b/src/tests/cwrap/Makefile.am
@@ -141,15 +141,18 @@ endif
 
 usertools_tests_SOURCES = \
 test_usertools.c \
+common_mock_nss_dl_load.c \
+../../../src/util/usertools.c \
+../../../src/util/nss_dl_load.c \
 $(NULL)
 usertools_tests_CFLAGS = \
 $(AM_CFLAGS) \
 $(NULL)
 usertools_tests_LDADD = \
+$(LIBADD_DL) \
 $(CMOCKA_LIBS) \
 $(POPT_LIBS) \
 $(TALLOC_LIBS) \
-$(abs_top_builddir)/libsss_util.la \
 $(abs_top_builddir)/libsss_debug.la \
 $(abs_top_builddir)/libsss_test_common.la \
 $(NULL)
@@ -159,9 +162,11 @@ endif
 
 responder_common_tests_SOURCES =\
 test_responder_common.c \
+common_mock_nss_dl_load.c \
 $(SSSD_RESPONDER_IFACE_OBJ) \
 ../../../src/responder/common/negcache_files.c \
 ../../../src/util/nss_dl_load.c \
+../../../src/util/usertools.c \
 ../../../src/responder/common/negcache.c \
 ../../../src/responder/common/responder_common.c \
 ../../../src/responder/common/responder_packet.c \
@@ -179,7 +184,6 @@ responder_common_tests_LDADD = \
 $(SSSD_LIBS) \
 $(SELINUX_LIBS) \
 $(SYSTEMD_DAEMON_LIBS) \
-$(abs_top_builddir)/libsss_util.la \
 $(abs_top_builddir)/libsss_debug.la \
 $(abs_top_builddir)/libsss_test_common.la \
 $(abs_top_builddir)/libsss_iface.la \
diff --git a/src/tests/cwrap/common_mock_nss_dl_load.c b/src/tests/cwrap/common_mock_nss_dl_load.c
new file mode 100644
index 00..ebe006b591
--- /dev/null
+++ b/src/tests/cwrap/common_mock_nss_dl_load.c
@@ -0,0 +1,115 @@
+/*
+Authors:
+Iker Pedrosa 
+
+Copyright (C) 2021 Red Hat
+
+SSSD tests: Fake nss dl load
+
+This program is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see .
+*/
+
+#include 
+#include 
+#include 
+#include 
+
+#include "common_mock_nss_dl_load.h"
+
+#define

[SSSD] [sssd PR#5891][synchronized] Tests: Podman supports subid ranges managed by FreeIPA

2021-11-29 Thread aborah-sudo

   URL: https://github.com/SSSD/sssd/pull/5891
Author: aborah-sudo
 Title: #5891: Tests: Podman supports subid ranges managed by FreeIPA
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5891/head:pr5891
git checkout pr5891
From 04c771c079fc7d2fbd4bf8f4ca82ec4a48587637 Mon Sep 17 00:00:00 2001
From: Anuj Borah 
Date: Mon, 29 Nov 2021 14:28:36 +0530
Subject: [PATCH] Tests: Podman supports subid ranges managed by FreeIPA

Podman supports subid ranges managed by FreeIPA
---
 src/tests/multihost/ipa/conftest.py  |  1 +
 src/tests/multihost/ipa/test_subid_ranges.py | 35 
 2 files changed, 36 insertions(+)

diff --git a/src/tests/multihost/ipa/conftest.py b/src/tests/multihost/ipa/conftest.py
index 4bf9061c58..ab8d85dd93 100644
--- a/src/tests/multihost/ipa/conftest.py
+++ b/src/tests/multihost/ipa/conftest.py
@@ -176,6 +176,7 @@ def environment_setup(session_multihost, request):
"--enablerepo=rhel-CRB install"
" -y shadow-utils*")
 client.run_command("yum install -y gcc")
+client.run_command("yum install -y podman")
 with pytest.raises(subprocess.CalledProcessError):
 client.run_command(f"grep subid /etc/nsswitch.conf")
 file_location = "/src/tests/multihost/ipa/data/list_subid_ranges.c"
diff --git a/src/tests/multihost/ipa/test_subid_ranges.py b/src/tests/multihost/ipa/test_subid_ranges.py
index b3df9b3d60..169a7506b6 100644
--- a/src/tests/multihost/ipa/test_subid_ranges.py
+++ b/src/tests/multihost/ipa/test_subid_ranges.py
@@ -47,6 +47,41 @@ class TestSubid(object):
 """
 This is for ipa bugs automation
 """
+def test_podmanmap_feature(self, multihost):
+"""
+:Title: Podman supports subid ranges managed by FreeIPA
+:id: 0e86df9c-50f1-11ec-82f3-845cf3eff344
+:customerscenario: true
+:bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1803943
+:steps:
+1. Test podman finds proper uid_map
+2. Test podman finds proper gid_map
+:expectedresults:
+1. Should succeed
+2. Should succeed
+"""
+ipa_subid_find(multihost)
+ssh1 = SSHClient(multihost.client[0].ip,
+ username=user,
+ password=test_password)
+map1 = "/proc/self/uid_map"
+(results1, results2, results3) = ssh1.exec_command(f"podman "
+   f"unshare "
+   f"cat "
+   f"{map1}")
+actual_result = results2.readlines()
+assert str(uid_start) == actual_result[1].split()[1]
+assert str(uid_range) == actual_result[1].split()[2]
+map2 = "/proc/self/gid_map"
+(results1, results2, results3) = ssh1.exec_command(f"podman "
+   f"unshare "
+   f"cat "
+   f"{map2}")
+actual_result = results2.readlines()
+assert str(gid_start) == actual_result[1].split()[1]
+assert str(gid_range) == actual_result[1].split()[2]
+ssh1.close()
+
 def test_subid_feature(self, multihost):
 """
 :Title: support subid ranges managed by FreeIPA
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5891][synchronized] Tests: Podman supports subid ranges managed by FreeIPA

2021-11-29 Thread aborah-sudo

   URL: https://github.com/SSSD/sssd/pull/5891
Author: aborah-sudo
 Title: #5891: Tests: Podman supports subid ranges managed by FreeIPA
Action: synchronized

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5891/head:pr5891
git checkout pr5891
From f11aa3a7ed6b2666988ece7035272757639ad573 Mon Sep 17 00:00:00 2001
From: Anuj Borah 
Date: Mon, 29 Nov 2021 14:28:36 +0530
Subject: [PATCH] Tests: Podman supports subid ranges managed by FreeIPA

Podman supports subid ranges managed by FreeIPA
---
 src/tests/multihost/ipa/conftest.py  |  1 +
 src/tests/multihost/ipa/test_subid_ranges.py | 35 
 2 files changed, 36 insertions(+)

diff --git a/src/tests/multihost/ipa/conftest.py b/src/tests/multihost/ipa/conftest.py
index 4bf9061c58..ab8d85dd93 100644
--- a/src/tests/multihost/ipa/conftest.py
+++ b/src/tests/multihost/ipa/conftest.py
@@ -176,6 +176,7 @@ def environment_setup(session_multihost, request):
"--enablerepo=rhel-CRB install"
" -y shadow-utils*")
 client.run_command("yum install -y gcc")
+client.run_command("yum install -y podman")
 with pytest.raises(subprocess.CalledProcessError):
 client.run_command(f"grep subid /etc/nsswitch.conf")
 file_location = "/src/tests/multihost/ipa/data/list_subid_ranges.c"
diff --git a/src/tests/multihost/ipa/test_subid_ranges.py b/src/tests/multihost/ipa/test_subid_ranges.py
index b3df9b3d60..d07527fed9 100644
--- a/src/tests/multihost/ipa/test_subid_ranges.py
+++ b/src/tests/multihost/ipa/test_subid_ranges.py
@@ -47,6 +47,41 @@ class TestSubid(object):
 """
 This is for ipa bugs automation
 """
+def test_podmanmap_feature(self, multihost):
+"""
+:Title: Podman supports subid ranges managed by FreeIPA
+:id: 0e86df9c-50f1-11ec-82f3-845cf3eff344
+:customerscenario: true
+:bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1803943
+:steps:
+1. Test podman finds proper uid_map
+2. Test podman finds proper gid_map
+:expectedresults:
+1. Should succeed
+2. Should succeed
+"""
+ipa_subid_find(multihost)
+ssh1 = SSHClient(multihost.client[0].ip,
+ username=user,
+ password=test_password)
+map1 = "/proc/self/uid_map"
+(results1, results2, results3) = ssh1.exec_command(f"podman "
+   "unshare "
+   "cat "
+   f"{map1}")
+actual_result = results2.readlines()
+assert str(uid_start) == actual_result[1].split()[1]
+assert str(uid_range) == actual_result[1].split()[2]
+map2 = "/proc/self/gid_map"
+(results1, results2, results3) = ssh1.exec_command(f"podman "
+   "unshare "
+   "cat "
+   f"{map2}")
+actual_result = results2.readlines()
+assert str(gid_start) == actual_result[1].split()[1]
+assert str(gid_range) == actual_result[1].split()[2]
+ssh1.close()
+
 def test_subid_feature(self, multihost):
 """
 :Title: support subid ranges managed by FreeIPA
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5891][opened] Tests: Podman supports subid ranges managed by FreeIPA

2021-11-29 Thread aborah-sudo

   URL: https://github.com/SSSD/sssd/pull/5891
Author: aborah-sudo
 Title: #5891: Tests: Podman supports subid ranges managed by FreeIPA
Action: opened

PR body:
"""
Podman supports subid ranges managed by FreeIPA
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5891/head:pr5891
git checkout pr5891
From ddbec65beddbb3919b78344b7baba4494337035c Mon Sep 17 00:00:00 2001
From: Anuj Borah 
Date: Mon, 29 Nov 2021 14:28:36 +0530
Subject: [PATCH] Tests: Podman supports subid ranges managed by FreeIPA

Podman supports subid ranges managed by FreeIPA
---
 src/tests/multihost/ipa/conftest.py  |  1 +
 src/tests/multihost/ipa/test_subid_ranges.py | 33 
 2 files changed, 34 insertions(+)

diff --git a/src/tests/multihost/ipa/conftest.py b/src/tests/multihost/ipa/conftest.py
index 4bf9061c58..ab8d85dd93 100644
--- a/src/tests/multihost/ipa/conftest.py
+++ b/src/tests/multihost/ipa/conftest.py
@@ -176,6 +176,7 @@ def environment_setup(session_multihost, request):
"--enablerepo=rhel-CRB install"
" -y shadow-utils*")
 client.run_command("yum install -y gcc")
+client.run_command("yum install -y podman")
 with pytest.raises(subprocess.CalledProcessError):
 client.run_command(f"grep subid /etc/nsswitch.conf")
 file_location = "/src/tests/multihost/ipa/data/list_subid_ranges.c"
diff --git a/src/tests/multihost/ipa/test_subid_ranges.py b/src/tests/multihost/ipa/test_subid_ranges.py
index b3df9b3d60..d98c6418bf 100644
--- a/src/tests/multihost/ipa/test_subid_ranges.py
+++ b/src/tests/multihost/ipa/test_subid_ranges.py
@@ -47,6 +47,39 @@ class TestSubid(object):
 """
 This is for ipa bugs automation
 """
+def test_podmanmap_feature(self, multihost):
+"""
+:Title: Podman supports subid ranges managed by FreeIPA
+:id: 0e86df9c-50f1-11ec-82f3-845cf3eff344
+:customerscenario: true
+:bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1803943
+:steps:
+1. Test podman finds proper uid_map
+2. Test podman finds proper gid_map
+:expectedresults:
+1. Should succeed
+2. Should succeed
+"""
+ipa_subid_find(multihost)
+ssh1 = SSHClient(multihost.client[0].ip,
+ username=user,
+ password=test_password)
+(results1, results2, results3) = ssh1.exec_command("podman "
+   "unshare "
+   "cat "
+   "/proc/self/uid_map")
+actual_result = results2.readlines()
+assert str(uid_start) == actual_result[1].split()[1]
+assert str(uid_range) == actual_result[1].split()[2]
+(results1, results2, results3) = ssh1.exec_command("podman "
+   "unshare "
+   "cat "
+   "/proc/self/gid_map")
+actual_result = results2.readlines()
+assert str(gid_start) == actual_result[1].split()[1]
+assert str(gid_range) == actual_result[1].split()[2]
+ssh1.close()
+
 def test_subid_feature(self, multihost):
 """
 :Title: support subid ranges managed by FreeIPA
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[SSSD] [sssd PR#5895][synchronized] Only test no merge

[SSSD] [sssd PR#5892][synchronized] Tests: Add a test for BZ2004406

[SSSD] [sssd PR#5895][synchronized] Only test no merge

[SSSD] [sssd PR#5895][synchronized] Only test no merge

[SSSD] [sssd PR#5892][synchronized] Tests: Add a test for BZ2004406

[SSSD] [sssd PR#5892][synchronized] Tests: Add a test for BZ2004406

[SSSD] [sssd PR#5869][synchronized] Translations update from Weblate

[SSSD] [sssd PR#5891][+Tests] Tests: Podman supports subid ranges managed by FreeIPA

[SSSD] [sssd PR#5895][synchronized] Only test no merge

[SSSD] [sssd PR#5895][opened] Only test no merge

[SSSD] [sssd PR#5894][+Waiting for review] contrib: sssd krb5 configuration snippet

[SSSD] [sssd PR#5894][+Bugzilla] contrib: sssd krb5 configuration snippet

[SSSD] [sssd PR#5894][comment] contrib: sssd krb5 configuration snippet

[SSSD] [sssd PR#5894][opened] contrib: sssd krb5 configuration snippet

[SSSD] [sssd PR#5867][+Waiting for review] usertools: force local user for sssd process user

[SSSD] [sssd PR#5867][-Changes requested] usertools: force local user for sssd process user

[SSSD] [sssd PR#5886][comment] install python files conditionally

[SSSD] [sssd PR#5867][synchronized] usertools: force local user for sssd process user

[SSSD] [sssd PR#5891][synchronized] Tests: Podman supports subid ranges managed by FreeIPA

[SSSD] [sssd PR#5891][synchronized] Tests: Podman supports subid ranges managed by FreeIPA

[SSSD] [sssd PR#5891][opened] Tests: Podman supports subid ranges managed by FreeIPA

21 matches

Site Navigation

Mail list logo

Footer information