Skip to content

useradd change from passwd to chpasswd for STIG - #291

Merged
spoore1 merged 1 commit into
SSSD:masterfrom
spoore1:test_kcm_stig_fix
Oct 26, 2026
Merged

spoore1 merged 1 commit into
SSSD:masterfrom
spoore1:test_kcm_stig_fix

Conversation

@spoore1

@spoore1 spoore1 commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

The STIG tests fail using the passwd command with stdin. chpasswd
should work in these tests so changing to make the user password setting
more widely compatible.

@spoore1

spoore1 commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Current system test failures are due to Fedora 45 not yet having SSSD build with the changes the failing tests cover:

FAILED tests/test_ipa.py::test_ipa__password_expiration_warning_does_not_overwrite_errors (ipa) - AssertionError: SSH was successful but should have failed!
assert 0 != 0
 +  where 0 = <pytest_mh.conn.ssh.SSHProcessResult object at 0x7f6e93173b50>.rc
FAILED tests/test_ldap.py::test_ldap__password_expiration_warning_does_not_overwrite_errors (ldap) - AssertionError: Missing 'Your password has expired.' in error output!
assert 'Your password has expired.' in "Warning: Permanently added 'localhost' (ED25519) to the list of known hosts.\r"
 +  where "Warning: Permanently added 'localhost' (ED25519) to the list of known hosts.\r" = <pytest_mh.conn.ssh.SSHProcessResult object at 0x7f6e92ca43d0>.stderr

The STIG tests fail using the passwd command with stdin.   chpasswd
should work in these tests so changing to make the user password setting
more widely compatible.

@danlavu danlavu left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LG2M,

@spoore1

spoore1 commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Latest failures not related:

FAILED tests/test_ldap.py::test_ldap__password_expiration_warning_does_not_overwrite_errors (ldap) 
ERROR tests/test_ipa_trusts.py::test_ipa_trusts__add_and_remove_external_group_membership[false] (ipa-trust-samba) ERROR tests/test_ipa_trusts.py::test_ipa_trusts__aduser_membership_after_HBAC (ipa-trust-samba)

2 Failures are due to containers build
2 Errors are teardown/setup issues with the trust tests that may be DNS related:

SRV query failed [12]: Timeout while contacting DNS servers

@spoore1
spoore1 merged commit 4ece7ab into SSSD:master Oct 26, 2026
6 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants