Bug 1784761
| Summary: | Kerberos ticket policy reset does not reset per-indicator policies | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | anuja <amore> | ||||
| Component: | ipa | Assignee: | Thomas Woerner <twoerner> | ||||
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 8.2 | CC: | abokovoy, frenaud, ksiddiqu, pasik, pcech, rcritten, tscherf | ||||
| Target Milestone: | rc | Flags: | pm-rhel:
mirror+
|
||||
| Target Release: | 8.0 | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | ipa-4.8.4-3.el8 | Doc Type: | If docs needed, set a value | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2020-04-28 15:44:43 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
Upstream PR: https://github.com/freeipa/freeipa/pull/4057 Upstream:
master:
2ed5eca762e136a1db9d3c20ec068d562b215699 Reset per-indicator Kerberos policy
Fixed upstream ipa-4-8: https://pagure.io/freeipa/c/a8b52eaf3cf56c90e3d94fdef0b9e426052634ea Verified Using:
name: ipa-server
release: 6.module+el8.2.0+5773+68ace8c5
source: rpm
version: 4.8.4
================================================================================
Automated Test: upstream:test_krbtpolicy.py::test_krbtpolicy_reset
============================= test session starts ==============================
platform linux -- Python 3.6.8, pytest-3.4.2, py-1.5.3, pluggy-0.6.0 -- /usr/libexec/platform-python
cachedir: .pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-180.el8.x86_64-x86_64-with-redhat-8.2-Ootpa', 'Packages': {'pytest': '3.4.2', 'py': '1.5.3', 'pluggy': '0.6.0'}, 'Plugins': {'metadata': '1.8.0', 'html': '1.22.1', 'sourceorder': '0.5', 'multihost': '3.0'}}
rootdir: /home/cloud-user, inifile:
plugins: metadata-1.8.0, html-1.22.1, sourceorder-0.5, multihost-3.0
collecting ... collected 5 items
test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_default <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py PASSED [ 20%]
test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_hardended <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py PASSED [ 40%]
test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_password <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py PASSED [ 60%]
test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_otp <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py PASSED [ 80%]
test_krbtpolicy.py::TestPWPolicy::test_krbtpolicy_reset <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_krbtpolicy.py PASSED [100%]
---------------- generated xml file: /home/cloud-user/junit.xml ----------------
----------- generated html file: file:///home/cloud-user/report.html -----------
========================== 5 passed in 486.89 seconds ==========================
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2020:1640 |
Created attachment 1646061 [details] console logs Description of problem: 1: run ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400 2: also modify for all auth type [ OTP RADIUS PKINIT HARDENED ] 3: ipa krbtpolicy-reset test-otp 4: after reset observe output of ipa krbtpolicy-show test-otp Version-Release number of selected component (if applicable): ipa-server-4.8.4-2.module+el8.2.0+5265+c70de5c4.x86_64 Steps to Reproduce: 1: run ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400 test-user 2: also modify for OTP RADIUS PKINIT HARDENED 3: ipa krbtpolicy-reset test-user 4: after reset observe output of ipa krbtpolicy-show test-user Actual results: After reset the output of krbtpolicy-show is not consistent. Expected results: After reset the output of krbtpolicy-show should be consistent.