freeipa

#9755 ipatests: Add test for user ssh authentication is working when hbacrule is enabled.
Opened by amore. Modified

Open
Close Issue

Add test with following steps:

Install ipa-server
Configure ipa-client client1.ipa.test
Configure ipa-client client2.ipa.test

Add ipa user "ipauser1"
Add ipa user "ipauser2"
ipa hbacrule-add admin_allow_all --hostcat=all --servicecat=all
ipa hbacrule-add-user admin_allow_all --groups=admins
ipa hbacrule-disable allow_all
ipa hbacrule-add rule1
ipa hbacrule-add-user rule1 --users=ipauser1
ipa hbacrule-add-host rule1 --hosts=client1.ipa.test
ipa hbacrule-add-service rule1 --hbacsvcs=sshd
ipa hbacrule-show rule1 --all
getent -s sss passwd

Verify that:
ssh of ipauser1 on client1.ipa.test should be successful
ssh of ipauser1 on client2.ipa.test should fail
ssh of ipauser2 on client1.ipa.test should fail

@amore could you later on add more details into this ticket?, mainly why do we need to add this test?
Metadata
None

devconf_pune

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.