From ae70afc781098b628b40894f9e0e841d3ba5b585 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Tue, 6 Aug 2019 16:45:46 -0400
Subject: [PATCH 6/8] Force the KRA to be off during NSS db trust tests

This avoids the side-effect of something else enabling the KRA and that
bleeding into the test.
---
 tests/test_ipa_nssdb.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tests/test_ipa_nssdb.py b/tests/test_ipa_nssdb.py
index 7d5664e..590401c 100644
--- a/tests/test_ipa_nssdb.py
+++ b/tests/test_ipa_nssdb.py
@@ -2,7 +2,7 @@
 # Copyright (C) 2019 FreeIPA Contributors see COPYING for license
 #
 
-from util import capture_results, CAInstance
+from util import capture_results, CAInstance, KRAInstance
 from base import BaseTest
 from ipahealthcheck.core import config, constants
 from ipahealthcheck.ipa.plugin import registry
@@ -30,6 +30,8 @@ class TestNSSDBTrust(BaseTest):
     patches = {
         'ipaserver.install.cainstance.CAInstance':
         Mock(return_value=CAInstance()),
+        'ipaserver.install.krainstance.KRAInstance':
+        Mock(return_value=KRAInstance(False)),
         'ipapython.certdb.unparse_trust_flags':
         Mock(side_effect=my_unparse_trust_flags),
     }
-- 
2.20.1