URL: https://github.com/freeipa/freeipa/pull/1577 Author: tiran Title: #1577: [Backport][ipa-4-6] Test to check if userroot.ldif have proper ownership Action: opened
PR body: """ This PR was opened automatically because PR #1497 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1577/head:pr1577 git checkout pr1577
From 278c98649c42410500a26a3256ad789b268358ab Mon Sep 17 00:00:00 2001 From: Mohammad Rizwan Yusuf <myu...@redhat.com> Date: Thu, 25 Jan 2018 15:42:07 +0530 Subject: [PATCH] Before the fix, when ipa-backup was called for the first time, the LDAP database exported to /var/lib/dirsrv/slapd-<instance>/ldif/<instance>-userRoot.ldif. db2ldif is called for this and it runs under root, hence files were owned by root. When ipa-backup called the next time, the db2ldif fails, because the tool does not have permissions to write to the ldif file which was owned by root (instead of dirsrv) This test check if files are owned by dirsrv and db2ldif doesn't fails related ticket: https://pagure.io/freeipa/issue/7010 Signed-off-by: Mohammad Rizwan Yusuf <myu...@redhat.com> --- .../test_integration/test_backup_and_restore.py | 52 ++++++++++++++++++++++ 1 file changed, 52 insertions(+) diff --git a/ipatests/test_integration/test_backup_and_restore.py b/ipatests/test_integration/test_backup_and_restore.py index ba24c366b4..266c36e3fd 100644 --- a/ipatests/test_integration/test_backup_and_restore.py +++ b/ipatests/test_integration/test_backup_and_restore.py @@ -478,3 +478,55 @@ def test_full_backup_and_restore_with_replica(self): tasks.install_replica(self.master, replica) check_replication(self.master, replica, "testuser1") + + +class TestUserrootFilesOwnership(IntegrationTest): + """Test to check if userroot.ldif have proper ownership. + + Before the fix, when ipa-backup was called for the first time, + the LDAP database exported to + /var/lib/dirsrv/slapd-<instance>/ldif/<instance>-userRoot.ldif. + db2ldif is called for this and it runs under root, hence files + were owned by root. + + When ipa-backup called the next time, the db2ldif fails, + because the tool does not have permissions to write to the ldif + file which was owned by root (instead of dirsrv). + + This test check if files are owned by dirsrv and db2ldif doesn't + fail + + related ticket: https://pagure.io/freeipa/issue/7010 + """ + + def test_userroot_ldif_files_ownership(self): + """backup, uninstall, restore, backup""" + tasks.install_master(self.master) + backup_path = backup(self.master) + + self.master.run_command(['ipa-server-install', + '--uninstall', + '-U']) + + dirman_password = self.master.config.dirman_password + self.master.run_command(['ipa-restore', backup_path], + stdin_text=dirman_password + '\nyes') + + # check if files have proper owner and group. + dashed_domain = self.master.domain.realm.replace(".", '-') + arg = ['stat', + '-c', '%U%G', + '/var/lib/dirsrv/slapd-' + dashed_domain + '/ldif'] + cmd = self.master.run_command(arg) + assert 'dirsrvdirsrv' in cmd.stdout_text + + arg = ['stat', + '-c', '%U%G', + '/var/lib/dirsrv/slapd-' + dashed_domain + '/ldif/'] + cmd = self.master.run_command(arg) + assert 'dirsrvdirsrv' in cmd.stdout_text + + cmd = self.master.run_command(['ipa-backup', '-d']) + unexp_str = "CRITICAL: db2ldif failed:" + assert cmd.returncode == 0 + assert unexp_str not in cmd.stdout_text
_______________________________________________ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
