From ff1a026ef48b76449800b10d211e337535a152b3 Mon Sep 17 00:00:00 2001 From: Rafael Guterres Jeffman Date: Mon, 20 Oct 2025 16:02:57 -0300 Subject: [PATCH] tests: Add fact for passkey support When testing passkey attributes some version of IPA do not support it, se we need a fact that states that the support is available for proper testing. Signed-off-by: Rafael Guterres Jeffman --- tests/env_freeipa_facts.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/tests/env_freeipa_facts.yml b/tests/env_freeipa_facts.yml index bb8fb674..67ec415b 100644 --- a/tests/env_freeipa_facts.yml +++ b/tests/env_freeipa_facts.yml @@ -38,12 +38,24 @@ krb5ccname: "__check_ipa_host_is_client_or_server__" register: check_ad_support +- name: Verify if passkey tests are possible + ansible.builtin.shell: + cmd: | + echo SomeADMINpassword | kinit -c {{ krb5ccname }} admin > /dev/null + RESULT=$(KRB5CCNAME={{ krb5ccname }} ipa command-find passkey | grep "Number of entries returned") + kdestroy -A -c {{ krb5ccname }} > /dev/null + echo $RESULT + vars: + krb5ccname: "__check_ipa_host_is_client_or_server__" + register: check_passkey_support + - name: Set FreeIPA facts. ansible.builtin.set_fact: ipa_version: "{{ ipa_cmd_version.stdout_lines[0] }}" ipa_api_version: "{{ ipa_cmd_version.stdout_lines[1] }}" ipa_host_is_client: "{{ (check_client.stdout_lines[-1] == 'CLIENT') | bool }}" trust_test_is_supported: "{{ 'AD trust agent' in check_ad_support.stdout }}" + passkey_is_supported: "{{ 'Number of entries returned 0' not in check_passkey_support.stdout }}" - name: Ensure ipaserver_domain is set when: ipaserver_domain is not defined