From 1f0d1a82097b454dfc79ce43e834e6247f38096a Mon Sep 17 00:00:00 2001 From: Dan Lavu Date: Mon, 5 Aug 2024 15:26:35 -0400 Subject: [PATCH] tests: updating gpo test case to test all auto_private_group values --- src/tests/system/tests/test_gpo.py | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/src/tests/system/tests/test_gpo.py b/src/tests/system/tests/test_gpo.py index e97d667d93e..ca68607e2d6 100644 --- a/src/tests/system/tests/test_gpo.py +++ b/src/tests/system/tests/test_gpo.py @@ -982,17 +982,20 @@ def test_gpo__finds_all_groups_when_auto_private_groups_is_set_true(client: Clie @pytest.mark.importance("critical") @pytest.mark.parametrize("method", ["ssh", "su"]) +@pytest.mark.parametrize("auto_private_groups", ["true", "false", "hybrid"]) @pytest.mark.topology(KnownTopology.AD) @pytest.mark.ticket(gh=7452) -def test_gpo__works_when_auto_private_group_is_true_using_posix_accounts(client: Client, ad: AD, method: str): +def test_gpo__works_when_auto_private_group_is_used_with_posix_accounts( + client: Client, ad: AD, method: str, auto_private_groups: str +): """ - :title: GPO evaluation fails when auto_private_groups is set to true and ldap_id_mapping is disabled + :title: GPO evaluation fails when auto_private_groups used with posix accounts :setup: 1. Create the following user 'user1' and 'deny_user1' with uids and gids 2. Create and link the GPO 'site policy' and add 'user1' and 'Domain Admins' to SeInteractiveLogonRight key. Add 'deny_user1 to SeDenyInteractiveLogonRight key' - 3. Configure sssd.conf with 'ad_gpo_access_control = enforcing', 'auto_private_groups = true' and - 'ldap_id_mapping = false' + 3. Configure sssd.conf with 'ad_gpo_access_control = enforcing', + 'auto_private_groups = parameter' and 'ldap_id_mapping = false' 4. Start SSSD :steps: 1. Authenticate as 'user1' @@ -1013,7 +1016,7 @@ def test_gpo__works_when_auto_private_group_is_true_using_posix_accounts(client: ).link() client.sssd.domain["ad_gpo_access_control"] = "enforcing" - client.sssd.domain["auto_private_groups"] = "true" + client.sssd.domain["auto_private_groups"] = auto_private_groups client.sssd.domain["ldap_id_mapping"] = "false" client.sssd.start()