freeipa

#9769 Test failure on f42 in test_integration/test_idp.py::TestIDPKeycloak::test_auth_sudo_idp
Closed: fixed by sumenon. Opened by frenaud.

Closed: fixed
Reopen Issue

The test test_integration/test_idp.py::TestIDPKeycloak::test_auth_sudo_idp is failing on fedora 42, see for instance this run.

Test scenario:
configure IPA with an external IDP provider
configure a sudo rule allowing keycloak user to run the "yum" command
run 'su -c "sudo yum list yum" keycloakuser'

The test is failing in the last step, but the failure happens because "yum list yum" does not find any package, not because of a sudorule issue:

INFO     ipatests.pytest_ipa.integration.host.Host.replica0.IPAOpenSSHTransport:transport.py:391 RUN su -c "sudo yum list yum" keycloakuser
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd133:transport.py:513 RUN su -c "sudo yum list yum" keycloakuser
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd133:transport.py:557 Updating and loading repositories:
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd133:transport.py:557 Repositories loaded.
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd133:transport.py:557 No matching packages to list
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd133:transport.py:217 Exit code: 1
ERROR    ipatests.pytest_ipa.integration.host.Host.replica0.cmd133:host.py:201 stderr: Updating and loading repositories:
Repositories loaded.
No matching packages to list

This happens because there is no yum package on fedora 42.

The test should be fixed by calling "yum list" with a different package, for instance sssd-client as this package is mandatory on IPA nodes.

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7749

master:

  • f5084adb6dde67fa7eb8dc58cc3dfa5a0a9bdaa3 PRCI: switch testing from f40 and f41 to f41 and f42
  • e964b7de94e1616558ca5c2471667c10ab2db5ec ipatests: fix test_idp

Metadata Update from @sumenon:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-12:

  • d8c7c322d28e8f1dd99fc39c3108ac630e8416ea PRCI: switch testing from f41 to f42
  • 3aa35fe16bb730cc3899312bedc8e335da4e145f ipatests: fix test_idp
Edited by frenaud
Metadata

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.