Hide Forgot
Complete Authentication Indicator Kerberos ticket policy support by providing IPA CLI options. For the authentication indicators 'otp', 'radius', 'pkinit', and 'hardened', allow specifying maximum ticket life and maximum renewable age in Kerberos ticket policy. The policy extensions are now loaded when a Kerberos principal data is requested by the KDC and evaluated in AS_REQ KDC policy check. If one of the authentication indicators mentioned above is present in the AS_REQ, corresponding policy is applied to the ticket. Related: https://pagure.io/freeipa/issue/8001
Verified using upstream test : ipatests/test_integration/test_krbtpolicy.py Using : ipa-server-4.8.4-2.module+el8.2.0+5265+c70de5c4.x86_64 http://ci-vm-10-0-148-68.hosted.upshift.rdu2.redhat.com/trigger-test-suite/master/1113/trigger/report.html ============================= test session starts ============================== platform linux -- Python 3.6.8, pytest-3.4.2, py-1.5.3, pluggy-0.6.0 -- /usr/libexec/platform-python cachedir: .pytest_cache metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-169.el8.x86_64-x86_64-with-redhat-8.2-Ootpa', 'Packages': {'pytest': '3.4.2', 'py': '1.5.3', 'pluggy': '0.6.0'}, 'Plugins': {'metadata': '1.8.0', 'html': '1.22.1', 'sourceorder': '0.5', 'multihost': '3.0'}} rootdir: /home/cloud-user, inifile: plugins: metadata-1.8.0, html-1.22.1, sourceorder-0.5, multihost-3.0 collecting ... collected 4 items test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_default <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py PASSED [ 25%] test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_hardended <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py PASSED [ 50%] test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_password <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py PASSED [ 75%] test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_otp <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py FAILED [100%] ---------------- generated xml file: /home/cloud-user/junit.xml ---------------- ----------- generated html file: file:///home/cloud-user/report.html ----------- test_krbtpolicy_otp is failed for AttributeError: module 're' has no attribute 'Pattern' Test is passing manually. Based on this marking bz as verified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2020:1640
*** Bug 1375107 has been marked as a duplicate of this bug. ***