mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-08 06:13:21 +00:00
1f25024396
The nonposix, posix and external parameters need to be mutually exclusive. external was missing in this list. Only one of the three parameters can be used. external can not be set to no/false. This results in an error now. if nonposix is used, posix is set as not nonposix. The nonposix parameter is not used within the code anymore.. New tests have been added to tests the addition of users with for nonposix and posix groups. The tests for the external group is not active due to the need of an AD. Fixes: #528 (Error creating nonposix group)
307 lines
8.6 KiB
YAML
307 lines
8.6 KiB
YAML
---
|
|
- name: Test group
|
|
hosts: ipaserver
|
|
become: yes
|
|
gather_facts: yes
|
|
|
|
tasks:
|
|
- name: Remove testing groups.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name:
|
|
- extgroup
|
|
- nonposixgroup
|
|
- posixgroup
|
|
state: absent
|
|
|
|
- name: Ensure test users testuser1, testuser2 and testuser3 are absent
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: testuser1,testuser2,testuser3
|
|
state: absent
|
|
|
|
- name: Ensure test users testuser1..testuser3 are present
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
users:
|
|
- name: testuser1
|
|
first: testuser1
|
|
last: Last
|
|
- name: testuser2
|
|
first: testuser2
|
|
last: Last
|
|
- name: testuser3
|
|
first: testuser3
|
|
last: Last
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Add nonposix group.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
nonposix: yes
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Add nonposix group, again.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
nonposix: yes
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
- name: Set group to be external
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
external: yes
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Set group to be external, again.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
external: yes
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
- name: Set external group to be non-external.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
external: no
|
|
register: result
|
|
failed_when: not result.failed or "group can not be non-external" not in result.msg
|
|
|
|
- name: Set external group to be posix.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
posix: yes
|
|
register: result
|
|
failed_when: not result.failed or "Cannot change `external` group" not in result.msg
|
|
|
|
- name: Add nonposix group.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
nonposix: yes
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Set group to be posix
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
posix: yes
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Set group to be posix, again.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
posix: yes
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
- name: Set posix group to be external.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
external: yes
|
|
register: result
|
|
failed_when: not result.failed or "Cannot change `posix` group" not in result.msg
|
|
|
|
- name: Set posix group to be non-posix.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
posix: no
|
|
register: result
|
|
failed_when: not result.failed or "Cannot change `posix` group" not in result.msg
|
|
|
|
- name: Set posix group to be non-posix.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
nonposix: yes
|
|
register: result
|
|
failed_when: not result.failed or "Cannot change `posix` group" not in result.msg
|
|
|
|
- name: Add nonposix group.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: nonposixgroup
|
|
posix: no
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Add nonposix group, again.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: nonposixgroup
|
|
nonposix: yes
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
|
|
# NONPOSIX MEMBER TEST
|
|
|
|
- name: Ensure users testuser1, testuser2 and testuser3 are present in group nonposixgroup
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: nonposixgroup
|
|
nonposix: yes
|
|
user:
|
|
- testuser1
|
|
- testuser2
|
|
- testuser3
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure users testuser1, testuser2 and testuser3 are present in group nonposixgroup again
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: nonposixgroup
|
|
nonposix: yes
|
|
user:
|
|
- testuser1
|
|
- testuser2
|
|
- testuser3
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
|
|
# POSIX MEMBER TEST
|
|
|
|
- name: Ensure users testuser1, testuser2 and testuser3 are present in group posixgroup
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
posix: yes
|
|
user:
|
|
- testuser1
|
|
- testuser2
|
|
- testuser3
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure users testuser1, testuser2 and testuser3 are present in group posixgroup again
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
posix: yes
|
|
user:
|
|
- testuser1
|
|
- testuser2
|
|
- testuser3
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
# EXTERNAL MEMBER TEST (REQUIRES AD)
|
|
|
|
- block:
|
|
|
|
- name: Ensure users testuser1, testuser2 and testuser3 are present in group externalgroup
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: externalgroup
|
|
external: yes
|
|
user:
|
|
- testuser1
|
|
- testuser2
|
|
- testuser3
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure users testuser1, testuser2 and testuser3 are present in group externalgroup again
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: externalgroup
|
|
external: yes
|
|
user:
|
|
- testuser1
|
|
- testuser2
|
|
- testuser3
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
when: trust_test_is_supported | default(false)
|
|
|
|
# CONVERT NONPOSIX TO POSIX GROUP WITH USERS
|
|
|
|
- name: Ensure nonposix group nonposixgroup as posix
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: nonposixgroup
|
|
posix: yes
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure nonposix group nonposixgroup as posix, again
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: nonposixgroup
|
|
posix: yes
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Ensure nonposix group nonposixgroup (now posix) has users still
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: nonposixgroup
|
|
posix: yes
|
|
user:
|
|
- testuser1
|
|
- testuser2
|
|
- testuser3
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
# FAIL ON COMBINATIONS OF NONPOSIX, POSIX AND EXTERNAL
|
|
|
|
- name: Fail to ensure group as nonposix and posix
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
nonposix: yes
|
|
posix: yes
|
|
register: result
|
|
failed_when: not result.failed or "parameters are mutually exclusive" not in result.msg
|
|
|
|
- name: Fail to ensure group as nonposix and external
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
nonposix: yes
|
|
external: yes
|
|
register: result
|
|
failed_when: not result.failed or "parameters are mutually exclusive" not in result.msg
|
|
|
|
- name: Fail to ensure group as posix and external
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: posixgroup
|
|
posix: yes
|
|
external: yes
|
|
register: result
|
|
failed_when: not result.failed or "parameters are mutually exclusive" not in result.msg
|
|
|
|
# CLEANUP
|
|
|
|
- name: Remove testing groups.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup,nonposixgroup,posixgroup
|
|
state: absent
|
|
|
|
- name: Ensure test users testuser1, testuser2 and testuser3 are absent
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: testuser1,testuser2,testuser3
|
|
state: absent
|