Skip to content
Snippets Groups Projects
Select Git revision
  • 382ee6ffa070a9851cc8bcd1f19a5756e048f754
  • master default protected
  • v1.14.7
  • v1.14.6
  • v1.14.5
  • v1.14.4
  • v1.14.3
  • v1.14.2
  • v1.14.1
  • v1.14.0
  • v1.13.2
  • v1.13.1
  • v1.13.0
  • v1.12.1
  • v1.12.0
  • v1.11.1
  • v1.11.0
  • v1.10.0
  • v1.9.2
  • v1.9.1
  • v1.9.0
  • v1.8.4
22 results

test_automember.yml

Blame
    • Thomas Woerner's avatar
      382ee6ff
      automember: Verify condition keys · 382ee6ff
      Thomas Woerner authored
      The automember_add_condition and automember_remove_condition commands
      are not verifying condition keys in all cases. This is for example not
      done in the removal case if a condition is not part of the automember
      rule.
      
      For consistent behaviour this needs to be done in the automember module
      now. The condition keys are verified with the user and group aciattrs
      returned by the API command json_metadata now.
      
      Related: RHBZ#1976926
      382ee6ff
      History
      automember: Verify condition keys
      Thomas Woerner authored
      The automember_add_condition and automember_remove_condition commands
      are not verifying condition keys in all cases. This is for example not
      done in the removal case if a condition is not part of the automember
      rule.
      
      For consistent behaviour this needs to be done in the automember module
      now. The condition keys are verified with the user and group aciattrs
      returned by the API command json_metadata now.
      
      Related: RHBZ#1976926
    test_automember.yml 10.61 KiB
    ---
    - name: Test automember
      hosts: ipaserver
      become: true
    
      tasks:
    
      # CLEANUP TEST ITEMS
    
      - name: Ensure group testgroup is absent
        ipagroup:
          ipaadmin_password: SomeADMINpassword
          name: testgroup
          state: absent
    
      - name: Ensure hostgroup testhostgroup is absent
        ipahostgroup:
          ipaadmin_password: SomeADMINpassword
          name: testhostgroup
          state: absent
    
      - name: Ensure group automember rule testgroup is absent
        ipaautomember:
          ipaadmin_password: SomeADMINpassword
          name: testgroup
          state: absent
          automember_type: group
    
      - name: Ensure hostgroup automember rule testhostgroup is absent
        ipaautomember:
          ipaadmin_password: SomeADMINpassword
          name: testhostgroup
          state: absent
          automember_type: hostgroup
    
      # CREATE TEST ITEMS
    
      # TESTS
      - name: Ensure testgroup group is present
        ipagroup:
          ipaadmin_password: SomeADMINpassword
          name: testgroup
    
      - name: Ensure testhostgroup hostgroup is present
        ipahostgroup:
          ipaadmin_password: SomeADMINpassword
          name: testhostgroup
    
      - name: Ensure testgroup group automember rule is present
        ipaautomember:
          ipaadmin_password: SomeADMINpassword
          name: testgroup
          description: testgroup automember rule.
          automember_type: group
        register: result
        failed_when: not result.changed or result.failed
    
      - name: Ensure testgroup group automember rule is present again
        ipaautomember:
          ipaadmin_password: SomeADMINpassword
          name: testgroup
          description: testgroup automember rule.
          automember_type: group
        register: result
        failed_when: result.changed or result.failed
    
      - name: Change testgroup group automember rule description
        ipaautomember:
          ipaadmin_password: SomeADMINpassword
          name: testgroup