diff options
author | Tako Marks <me@github.tako.mx> | 2022-09-06 15:11:53 +0200 |
---|---|---|
committer | Tako Marks <me@github.tako.mx> | 2022-09-12 20:25:04 +0200 |
commit | fb3f7d70b438a729f4f10d2e31f546d24bfeb6b2 (patch) | |
tree | dbbfc852305721c8507c459e7ebb28d728199321 /nixos | |
parent | 3df41451e3f5179e1d02cf8366f1646ff3eb94ae (diff) |
nixos/kanidm: Add unixd test
Test makes sure unixd is able to run and is able to query the server.
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/tests/kanidm.nix | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/nixos/tests/kanidm.nix b/nixos/tests/kanidm.nix index 852dc53e75d3f..7f8a4e501777e 100644 --- a/nixos/tests/kanidm.nix +++ b/nixos/tests/kanidm.nix @@ -44,6 +44,12 @@ import ./make-test-python.nix ({ pkgs, ... }: enableClient = true; clientSettings = { uri = "https://${serverDomain}"; + verify_ca = true; + verify_hostnames = true; + }; + enablePam = true; + unixSettings = { + pam_allowed_login_groups = [ "shell" ]; }; }; @@ -67,9 +73,11 @@ import ./make-test-python.nix ({ pkgs, ... }: start_all() server.wait_for_unit("kanidm.service") server.wait_until_succeeds("curl -sf https://${serverDomain} | grep Kanidm") - server.wait_until_succeeds("ldapsearch -H ldap://[::1]:636 -b '${ldapBaseDN}' -x '(name=test)'") - client.wait_until_succeeds("kanidm login -D anonymous && kanidm self whoami | grep anonymous@${serverDomain}") + server.succeed("ldapsearch -H ldap://[::1]:636 -b '${ldapBaseDN}' -x '(name=test)'") + client.succeed("kanidm login -D anonymous && kanidm self whoami | grep anonymous@${serverDomain}") rv, result = server.execute("kanidmd recover_account -c ${serverConfigFile} idm_admin 2>&1 | rg -o '[A-Za-z0-9]{48}'") assert rv == 0 + client.wait_for_unit("kanidm-unixd.service") + client.succeed("kanidm_unixd_status | grep working!") ''; }) |