freeipa

#9977 Nightly test failure in nightly-latest and latest-selinux/test_trust_functional
Opened by mpolovka. Modified

Open
Close Issue

The nightly tests:

- Error     test_integration/test_trust_functional.py::TestTrustFunctionalHttp::test_ipa_trust_func_http_krb_ipauser::setup 00:06:25    
- Error     test_integration/test_trust_functional.py::TestTrustFunctionalHttp::test_ipa_trust_func_http_krb_aduser::setup  0 ms    
- Error     test_integration/test_trust_functional.py::TestTrustFunctionalHttp::test_ipa_trust_func_http_krb_nouser::setup  0 ms    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalHbac::test_ipa_trust_func_hbac_0011   01:10:13    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalSudo::test_ipa_trust_func_sudo_setup  00:09:48    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalSudo::test_ipa_trust_func_sudo_0001   00:01:54    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalSudo::test_ipa_trust_func_sudo_0002   00:02:51    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalSudo::test_ipa_trust_func_sudo_0004   00:02:06    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalSudo::test_ipa_trust_func_sudo_0005   00:03:42    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalSudo::test_ipa_trust_func_sudo_0007   00:01:60    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalSudo::test_ipa_trust_func_sudo_0009   00:01:55    
- Failed    test_integration/test_trust_functional.py::TestTrustFunctionalSudo::test_ipa_trust_func_sudo_0010

are failing in Nightly-latest-selinux and Nightly-latest starting Apr 13, 2026.
report

The errors are caused by 

---------------------------- Captured stderr setup -----------------------------
ipa: ERROR: stderr: ipa: ERROR: No valid Negotiate header in server response

and trigger the subsequent failures.

There has been recent changes to the test suite, details at https://pagure.io/freeipa/issue/9845

Link to the RD run: https://release-dashboard.engineering.redhat.com/p/freeipa_upstream_nightly/qualification/master/Nightly-latest-selinux/run/32513/job/1134336

Hi, thank you for the report, bunch of the
TestTrustFunctionalHttp were introduced in the: https://github.com/freeipa/freeipa/pull/8216 by @amore
TestTrustFunctionalSudo were introduced in: https://github.com/freeipa/freeipa/pull/8220 by @amore, all of these are failing due to failing setup step.
TestTrustFunctionalHbac were added in: https://github.com/freeipa/freeipa/pull/7915 by @amore

The test failures feel seemingly unrelated?

Might be connected: https://pagure.io/freeipa/issue/9864

The tests were run with the changes from https://github.com/freeipa/freeipa/commit/d50d5df07f444c828ff38873427316535f5e0450 which require specific AD users. When run downstream, the users are added through an idmci playbook, and @amore is currently working on a MR adding the missing users/groups.

Metadata Update from @dhanina:
- Issue assigned to amore

Bunch of tests were also added in this commit https://github.com/freeipa/freeipa/commit/5fec74abb99848e3caa628a094e896c796a955b1, can you please look into that as well? Seeing related failures. @amore, @pthube

Metadata

test-failure tests

None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.