URL: https://github.com/freeipa/freeipa/pull/1904
Author: felipevolpone
 Title: #1904: [temp PR] f28 Patches and all tests f28
Action: opened

PR body:
"""
Applying patches from PR #1871  and nightly tests
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1904/head:pr1904
git checkout pr1904
From 5f367231c290119cb35f7a0a7ee76c9eb7dc8479 Mon Sep 17 00:00:00 2001
From: Christian Heimes <chei...@redhat.com>
Date: Fri, 27 Apr 2018 18:28:44 +0200
Subject: [PATCH 1/4] Run PR-CI with Fedora 28

Signed-off-by: Christian Heimes <chei...@redhat.com>
---
 .freeipa-pr-ci.yaml | 132 ++++++++++++++++++++++++++--------------------------
 1 file changed, 66 insertions(+), 66 deletions(-)

diff --git a/.freeipa-pr-ci.yaml b/.freeipa-pr-ci.yaml
index a16b388695..7f8cc4605a 100644
--- a/.freeipa-pr-ci.yaml
+++ b/.freeipa-pr-ci.yaml
@@ -13,7 +13,7 @@ topologies:
     memory: 6700
 
 jobs:
-  fedora-27/build:
+  fedora-28/build:
     requires: []
     priority: 100
     job:
@@ -21,189 +21,189 @@ jobs:
       args:
         git_repo: '{git_repo}'
         git_refspec: '{git_refspec}'
-        template: &ci-master-f27
-          name: freeipa/ci-master-f27
-          version: 1.0.3
+        template: &ci-master-f28
+          name: freeipa/ci-master-f28
+          version: 0.1.5
         timeout: 1800
         topology: *build
 
-  fedora-27/simple_replication:
-    requires: [fedora-27/build]
+  fedora-28/simple_replication:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_simple_replication.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/caless:
-    requires: [fedora-27/build]
+  fedora-28/caless:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/external_ca:
-    requires: [fedora-27/build]
+  fedora-28/external_ca:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_external_ca.py
-        template: *ci-master-f27
-        timeout: 3600
+        template: *ci-master-f28
+        timeout: 4500
         topology: *master_1repl
 
-  fedora-27/test_topologies:
-    requires: [fedora-27/build]
+  fedora-28/test_topologies:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_topologies.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_sudo:
-    requires: [fedora-27/build]
+  fedora-28/test_sudo:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_sudo.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 
-  fedora-27/test_ipa_cli:
-    requires: [fedora-27/build]
+  fedora-28/test_ipa_cli:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_ipa_cli.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_kerberos_flags:
-    requires: [fedora-27/build]
+  fedora-28/test_kerberos_flags:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_kerberos_flags.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 
-  fedora-27/test_http_kdc_proxy:
-    requires: [fedora-27/build]
+  fedora-28/test_http_kdc_proxy:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_http_kdc_proxy.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 
-  fedora-27/test_forced_client_enrolment:
-    requires: [fedora-27/build]
+  fedora-28/test_forced_client_enrolment:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_forced_client_reenrollment.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 
-  fedora-27/test_advise:
-    requires: [fedora-27/build]
+  fedora-28/test_advise:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_advise.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_testconfig:
-    requires: [fedora-27/build]
+  fedora-28/test_testconfig:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_testconfig.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_service_permissions:
-    requires: [fedora-27/build]
+  fedora-28/test_service_permissions:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_service_permissions.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_netgroup:
-    requires: [fedora-27/build]
+  fedora-28/test_netgroup:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_netgroup.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_vault:
-    requires: [fedora-27/build]
+  fedora-28/test_vault:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_vault.py
-        template: *ci-master-f27
-        timeout: 3600
+        template: *ci-master-f28
+        timeout: 4500
         topology: *master_1repl
 
-  fedora-27/test_authconfig:
-    requires: [fedora-27/build]
+  fedora-28/test_authconfig:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_authselect.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 

From 11d41fdd3d22b8a04905bb1c787e8ac6065090ed Mon Sep 17 00:00:00 2001
From: Christian Heimes <chei...@redhat.com>
Date: Mon, 30 Apr 2018 14:18:07 +0200
Subject: [PATCH 2/4] Dogtag fix #3005, 3007, 3008 for external CA

Signed-off-by: Christian Heimes <chei...@redhat.com>
---
 freeipa.spec.in | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/freeipa.spec.in b/freeipa.spec.in
index 22ca6007db..43ebbe0b6c 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -96,7 +96,8 @@
 %endif
 
 # Require Dogtag PKI 10.6.0 with Python 3 and SQL NSSDB fixes
-%global pki_version 10.6.0-1
+# https://bugzilla.redhat.com/show_bug.cgi?id=1573094
+%global pki_version 10.6.0-1.20180502110456
 
 %define krb5_base_version %(LC_ALL=C rpm -q --qf '%%{VERSION}' krb5-devel | grep -Eo '^[^.]+\.[^.]+')
 

From 8917bf1e2e3ea8e6c605735422ea940b3959807a Mon Sep 17 00:00:00 2001
From: Christian Heimes <chei...@redhat.com>
Date: Mon, 30 Apr 2018 08:25:23 +0200
Subject: [PATCH 3/4] Require nss with fix for nickname bug

nss 3.36.1-1.1 addresses a bug in the shared SQL database layer. A nicknames
of certificates are no longer changed when a certificate is imported
multiple times under different name.

Partly revert commit ad2eb3d09b8336008d7f04c3d134c707530d9eb6 with fix
for https://pagure.io/freeipa/issue/7498. The root cause for the bug has
been addressed by the NSS release.

See: https://pagure.io/freeipa/issue/7516
See: https://pagure.io/freeipa/issue/7498
See: https://bugzilla.redhat.com/show_bug.cgi?id=1568271
Signed-off-by: Christian Heimes <chei...@redhat.com>
---
 freeipa.spec.in                       | 12 ++++++++----
 ipaserver/install/custodiainstance.py | 17 +++--------------
 2 files changed, 11 insertions(+), 18 deletions(-)

diff --git a/freeipa.spec.in b/freeipa.spec.in
index 43ebbe0b6c..ad3fa8734e 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -99,6 +99,10 @@
 # https://bugzilla.redhat.com/show_bug.cgi?id=1573094
 %global pki_version 10.6.0-1.20180502110456
 
+# NSS release with fix for CKA_LABEL import bug in shared SQL database.
+# https://bugzilla.redhat.com/show_bug.cgi?id=1568271
+%global nss_version 3.36.1-1.1
+
 %define krb5_base_version %(LC_ALL=C rpm -q --qf '%%{VERSION}' krb5-devel | grep -Eo '^[^.]+\.[^.]+')
 
 %global plugin_dir %{_libdir}/dirsrv/plugins
@@ -158,7 +162,7 @@ BuildRequires:  systemd
 # systemd-tmpfiles which is executed from make install requires apache user
 BuildRequires:  httpd
 BuildRequires:  nspr-devel
-BuildRequires:  nss-devel
+BuildRequires:  nss-devel >= %{nss_version}
 BuildRequires:  openssl-devel
 BuildRequires:  libini_config-devel
 BuildRequires:  cyrus-sasl-devel
@@ -340,8 +344,8 @@ Requires: python2-ldap >= %{python2_ldap_version}
 %endif
 Requires: 389-ds-base >= %{ds_version}
 Requires: openldap-clients > 2.4.35-4
-Requires: nss >= 3.14.3-12.0
-Requires: nss-tools >= 3.14.3-12.0
+Requires: nss >= %{nss_version}
+Requires: nss-tools >= %{nss_version}
 Requires(post): krb5-server >= %{krb5_version}
 Requires(post): krb5-server >= %{krb5_base_version}, krb5-server < %{krb5_base_version}.100
 Requires: krb5-pkinit-openssl >= %{krb5_version}
@@ -606,7 +610,7 @@ Requires: libcurl >= 7.21.7-2
 Requires: xmlrpc-c >= 1.27.4
 Requires: sssd >= 1.14.0
 Requires: certmonger >= 0.79.5-1
-Requires: nss-tools
+Requires: nss-tools >= %{nss_version}
 Requires: bind-utils
 Requires: oddjob-mkhomedir
 Requires: libsss_autofs
diff --git a/ipaserver/install/custodiainstance.py b/ipaserver/install/custodiainstance.py
index 3820eec766..67bfc9d224 100644
--- a/ipaserver/install/custodiainstance.py
+++ b/ipaserver/install/custodiainstance.py
@@ -5,15 +5,13 @@
 import enum
 import logging
 
-from ipalib import api
-from ipalib.install.certstore import get_ca_certs_nss
 from ipaserver.secrets.kem import IPAKEMKeys, KEMLdap
 from ipaserver.secrets.client import CustodiaClient
 from ipaplatform.paths import paths
 from ipaplatform.constants import constants
 from ipaserver.install.service import SimpleServiceInstance
 from ipapython import ipautil
-from ipapython.certdb import NSSDatabase, get_ca_nickname
+from ipapython.certdb import NSSDatabase
 from ipaserver.install import installutils
 from ipaserver.install import ldapupdate
 from ipaserver.install import sysupgrade
@@ -277,17 +275,8 @@ def _get_keys(self, ca_host, cacerts_file, cacerts_pwd, data):
                     '-w', pk12pwfile
                 ])
 
-            # Add CA certificates, but don't import the main CA cert. It's
-            # already present as 'caSigningCert cert-pki-ca'. With SQL db
-            # format, a second import would rename the certificate. See
-            # https://pagure.io/freeipa/issue/7498 for more details.
-            conn = api.Backend.ldap2
-            suffix = ipautil.realm_to_suffix(self.realm)
-            ca_certs = get_ca_certs_nss(conn, suffix, self.realm, True)
-            for cert, nickname, trust_flags in ca_certs:
-                if nickname == get_ca_nickname(self.realm):
-                    continue
-                tmpdb.add_cert(cert, nickname, trust_flags)
+            # Add CA certificates
+            self.export_ca_certs_nssdb(tmpdb, True)
 
             # Now that we gathered all certs, re-export
             ipautil.run([

From 11e4e774d20ba024e1f6b16a184b4066a177e6ad Mon Sep 17 00:00:00 2001
From: Felipe Barreto <fbarr...@redhat.com>
Date: Thu, 3 May 2018 14:19:45 -0300
Subject: [PATCH 4/4] Running all tests

---
 .freeipa-pr-ci.yaml | 565 +++++++++++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 516 insertions(+), 49 deletions(-)

diff --git a/.freeipa-pr-ci.yaml b/.freeipa-pr-ci.yaml
index 7f8cc4605a..5fd2d43734 100644
--- a/.freeipa-pr-ci.yaml
+++ b/.freeipa-pr-ci.yaml
@@ -11,6 +11,18 @@ topologies:
     name: master_1repl_1client
     cpu: 4
     memory: 6700
+  ipaserver: &ipaserver
+    name: ipaserver
+    cpu: 1
+    memory: 2400
+  master_2repl_1client: &master_2repl_1client
+    name: master_2repl_1client
+    cpu: 5
+    memory: 9100
+  master_3repl_1client: &master_3repl_1client
+    name: master_3repl_1client
+    cpu: 6
+    memory: 11500
 
 jobs:
   fedora-28/build:
@@ -27,19 +39,235 @@ jobs:
         timeout: 1800
         topology: *build
 
-  fedora-28/simple_replication:
+  fedora-28/test_server_del:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_simple_replication.py
+        test_suite: test_integration/test_server_del.py
         template: *ci-master-f28
-        timeout: 3600
+        timeout: 8000
+        topology: *master_2repl_1client
+
+  fedora-28/test_installation_TestInstallWithCA1:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallWithCA1
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  fedora-28/test_installation_TestInstallWithCA2:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallWithCA2
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  fedora-28/test_installation_TestInstallWithCA_KRA1:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  fedora-28/test_installation_TestInstallWithCA_KRA2:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  fedora-28/test_installation_TestInstallWithCA_DNS1:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  fedora-28/test_installation_TestInstallWithCA_DNS2:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  fedora-28/test_installation_TestInstallWithCA_KRA_DNS1:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  fedora-28/test_installation_TestInstallWithCA_KRA_DNS2:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  fedora-28/test_installation_TestInstallMaster:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallMaster
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_1repl
+
+  fedora-28/test_installation_TestInstallMasterKRA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallMasterKRA
+        template: *ci-master-f28
+        timeout: 10800
         topology: *master_1repl
 
-  fedora-28/caless:
+  fedora-28/test_installation_TestInstallMasterDNS:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallMasterDNS
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_1repl
+
+  fedora-28/test_installation_TestInstallMasterReservedIPasForwarder:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder
+        template: *ci-master-f28
+        timeout: 10800
+        topology: *master_1repl
+
+  fedora-28/test_caless_TestServerInstall:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_caless.py::TestServerInstall
+        template: *ci-master-f28
+        timeout: 12000
+        topology: *master_1repl
+
+  fedora-28/test_caless_TestReplicaInstall:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_caless.py::TestReplicaInstall
+        template: *ci-master-f28
+        timeout: 5400
+        topology: *master_1repl
+
+  fedora-28/test_caless_TestClientInstall:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_caless.py::TestClientInstall
+        template: *ci-master-f28
+        timeout: 5400
+        topology: *master_1repl
+
+  fedora-28/test_caless_TestIPACommands:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_caless.py::TestIPACommands
+        template: *ci-master-f28
+        timeout: 5400
+        topology: *master_1repl
+
+  fedora-28/test_caless_TestCertInstall:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_caless.py::TestCertInstall
+        template: *ci-master-f28
+        timeout: 5400
+        topology: *master_1repl
+
+  fedora-28/test_caless_TestPKINIT:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_caless.py::TestPKINIT
+        template: *ci-master-f28
+        timeout: 5400
+        topology: *master_1repl
+
+  fedora-28/test_caless_TestServerReplicaCALessToCAFull:
     requires: [fedora-28/build]
     priority: 50
     job:
@@ -48,162 +276,401 @@ jobs:
         build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull
         template: *ci-master-f28
-        timeout: 3600
+        timeout: 5400
+        topology: *master_1repl
+
+  fedora-28/test_backup_and_restore_TestUserrootFilesOwnership:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_backup_and_restore.py::TestUserrootFilesOwnership
+        template: *ci-master-f28
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/external_ca:
+  fedora-28/test_backup_and_restore_TestBackupAndRestore:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_external_ca.py
+        test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore
         template: *ci-master-f28
-        timeout: 4500
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/test_topologies:
+  fedora-28/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_topologies.py
+        test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC
         template: *ci-master-f28
-        timeout: 3600
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/test_sudo:
+  fedora-28/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_sudo.py
+        test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC
         template: *ci-master-f28
-        timeout: 3600
-        topology: *master_1repl_1client
+        timeout: 7200
+        topology: *master_1repl
+
+  fedora-28/test_backup_and_restore_TestBackupAndRestoreWithDNS:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_1repl
+
+  fedora-28/test_backup_and_restore_TestBackupReinstallRestoreWithDNS:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_1repl
+
+  fedora-28/test_backup_and_restore_TestBackupAndRestoreWithKRA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_1repl
+
+  fedora-28/test_backup_and_restore_TestBackupReinstallRestoreWithKRA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_1repl
+
+  fedora-28/test_dnssec:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_dnssec.py
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_2repl_1client
+
+  fedora-28/test_replica_promotion_TestReplicaPromotionLevel0:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel0
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_1repl
+
+  fedora-28/test_replica_promotion_TestKRAInstall:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replica_promotion.py::TestKRAInstall
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_1repl
+
+  fedora-28/test_replica_promotion_TestCAInstall:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replica_promotion.py::TestCAInstall
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_1repl
+
+  fedora-28/test_replica_promotion_TestReplicaPromotionLevel1:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_1repl
 
-  fedora-28/test_ipa_cli:
+  fedora-28/test_replica_promotion_TestReplicaManageCommands:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_ipa_cli.py
+        test_suite: test_integration/test_replica_promotion.py::TestReplicaManageCommands
         template: *ci-master-f28
-        timeout: 3600
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/test_kerberos_flags:
+  fedora-28/test_replica_promotion_TestUnprivilegedUserPermissions:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_kerberos_flags.py
+        test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions
         template: *ci-master-f28
-        timeout: 3600
-        topology: *master_1repl_1client
+        timeout: 7200
+        topology: *master_1repl
 
-  fedora-28/test_http_kdc_proxy:
+  fedora-28/test_replica_promotion_TestProhibitReplicaUninstallation:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_http_kdc_proxy.py
+        test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation
         template: *ci-master-f28
-        timeout: 3600
-        topology: *master_1repl_1client
+        timeout: 7200
+        topology: *master_1repl
 
-  fedora-28/test_forced_client_enrolment:
+  fedora-28/test_replica_promotion_TestOldReplicaWorksAfterDomainUpgrade:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_forced_client_reenrollment.py
+        test_suite: test_integration/test_replica_promotion.py::TestOldReplicaWorksAfterDomainUpgrade
         template: *ci-master-f28
-        timeout: 3600
-        topology: *master_1repl_1client
+        timeout: 7200
+        topology: *master_1repl
 
-  fedora-28/test_advise:
+  fedora-28/test_replica_promotion_TestWrongClientDomain:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_advise.py
+        test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain
         template: *ci-master-f28
-        timeout: 3600
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/test_testconfig:
+  fedora-28/test_replica_promotion_TestRenewalMaster:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_testconfig.py
+        test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster
         template: *ci-master-f28
-        timeout: 3600
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/test_service_permissions:
+  fedora-28/test_replica_promotion_TestReplicaInstallWithExistingEntry:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_service_permissions.py
+        test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry
         template: *ci-master-f28
-        timeout: 3600
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/test_netgroup:
+  fedora-28/test_replica_promotion_TestSubCAkeyReplication:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_netgroup.py
+        test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication
         template: *ci-master-f28
-        timeout: 3600
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/test_vault:
+  fedora-28/test_upgrade:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_vault.py
+        test_suite: test_integration/test_upgrade.py
         template: *ci-master-f28
-        timeout: 4500
+        timeout: 7200
         topology: *master_1repl
 
-  fedora-28/test_authconfig:
+  fedora-28/test_topology:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_topology.py
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_replication_layouts_TestLineTopologyWithoutCA:
     requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
         build_url: '{fedora-28/build_url}'
-        test_suite: test_integration/test_authselect.py
+        test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA
         template: *ci-master-f28
-        timeout: 3600
-        topology: *master_1repl_1client
+        timeout: 7200
+        topology: *master_3repl_1client
 
+  fedora-28/test_replication_layouts_TestLineTopologyWithCA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_replication_layouts_TestLineTopologyWithCAKRA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_replication_layouts.py_TestStarTopologyWithoutCA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_replication_layouts_TestStarTopologyWithCA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_replication_layouts_TestStarTopologyWithCAKRA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_replication_layouts_TestCompleteTopologyWithoutCA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_replication_layouts_TestCompleteTopologyWithCA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_replication_layouts_TestCompleteTopologyWithCAKRA:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *master_3repl_1client
+
+  fedora-28/test_webui:
+    requires: [fedora-28/build]
+    priority: 50
+    job:
+      class: RunWebuiTests
+      args:
+        build_url: '{fedora-28/build_url}'
+        test_suite: test_webui/
+        template: *ci-master-f28
+        timeout: 7200
+        topology: *ipaserver
_______________________________________________
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org

Reply via email to