tests: migrate KCM to system tests

[krishnavema]

tests: Migrate the legacy bash/beakerlib KCM suite (bash/krb_provider/kcm, 27 cases) to pytest system tests in test_kcm.py

Co-authored-by: Cursor cursoragent@cursor.com
Model used: Claude Opus 4.8

[alexey-tikhonov]

@krishnavema,

1. is this migration from bash or multihost tests?
2. is it LLM-assisted? In this case please mention this in the commit message.

[alexey-tikhonov]

Please set backport-to-* labels as needed.

[krishnavema]

@krishnavema,

1. is this migration from bash or multihost tests?
2. is it LLM-assisted? In this case please mention this in the commit message.

It's migrated from the bash suite

[krishnavema]

Please set backport-to-* labels as needed.

done

[madhuriupadhye]

Thanks for the migration work. I compared this against the legacy bash suite in
sssd-qe/client/krb_provider/kcm/kcm (27 Beaker cases) for IDM-7741.

Requesting changes before merge:

1. Once System CI is green, please cross verify with IDM-CI also
2. Add a bash→pytest mapping table in the MR (all 27 cases: ported / partial / missing / deferred).
3. Add LLM disclosure to the commit message (not just PR body), per Alexey’s comment.
4. Several legacy cases are missing or only partially ported — see inline comments.

[madhuriupadhye]

Looks good to me. Before merging, please check with IDMCI as well. Also, please create a downstream MR to delete it or at least remove it from qualification so the job doesn't run in any pipeline.

[sssd-bot]

The pull request was accepted by @justin-stephenson with the following PR CI status:

---

🟢 CodeQL (success)
🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 rpm-build:fedora-43-x86_64:upstream (success)
🟢 rpm-build:fedora-44-x86_64:upstream (success)
🟢 rpm-build:fedora-45-x86_64:upstream (success)
🟢 rpm-build:fedora-rawhide-x86_64:upstream (success)
🟢 testing-farm:centos-stream-10-x86_64:upstream (success)
🟢 testing-farm:fedora-43-x86_64:upstream (success)
🔴 testing-farm:fedora-44-x86_64:upstream (failure)
🔴 testing-farm:fedora-45-x86_64:upstream (failure)
🔴 testing-farm:fedora-rawhide-x86_64:upstream (failure)
🟢 ci / intgcheck (centos-10) (success)
🟢 ci / intgcheck (fedora-43) (success)
🟢 ci / intgcheck (fedora-44) (success)
🟢 ci / intgcheck (fedora-45) (success)
🟢 ci / intgcheck (fedora-46) (success)
🟢 ci / prepare (success)
🟢 ci / system (centos-10) (success)
🟢 ci / system (fedora-43) (success)
🟢 ci / system (fedora-44) (success)
🟢 ci / system (fedora-45) (success)
🟢 ci / system (fedora-46) (success)
➖ Coverity scan / coverity (skipped)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / files-changed (success)
🟢 Static code analysis / pre-commit (success)
🟢 Static code analysis / python-system-tests (success)

---

There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

[justin-stephenson]

Looks good to me. Before merging, please check with IDMCI as well. Also, please create a downstream MR to delete it or at least remove it from qualification so the job doesn't run in any pipeline.

@krishnavema Please check this then merge once done.