From 94e47c5ce9b06b0ce8e527607c3e1e221e823841 Mon Sep 17 00:00:00 2001
From: Madhuri Upadhye <mupadhye@redhat.com>
Date: Fri, 20 Sep 2024 16:42:29 +0530
Subject: [PATCH] Test: Passkey test cases with diffferent auth_methods
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Added following test cases
1. Check authentication of user with IPA server when
no pin set for the Passkey.
2. Check authentication of user with updated prompting
options
3. Check password authentication of user with IPA server
when sssd fall back to password authentication

Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>

Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
---
 .../passkey-mapping.ipa                       |   1 +
 .../umockdev.script.ipa                       |  30 ++++
 .../passkey-mapping.ipa                       |   1 +
 .../umockdev.script.ipa                       |  29 ++++
 .../passkey-mapping.ipa                       |   1 +
 .../umockdev.script.ipa                       |  18 +++
 src/tests/system/tests/test_passkey.py        | 147 ++++++++++++++++++
 7 files changed, 227 insertions(+)
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__prompt_options/passkey-mapping.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__prompt_options/umockdev.script.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/passkey-mapping.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/umockdev.script.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/passkey-mapping.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/umockdev.script.ipa

diff --git a/src/tests/system/data/test_passkey/test_passkey__prompt_options/passkey-mapping.ipa b/src/tests/system/data/test_passkey/test_passkey__prompt_options/passkey-mapping.ipa
new file mode 100644
index 00000000000..a89bee8a504
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__prompt_options/passkey-mapping.ipa
@@ -0,0 +1 @@
+passkey:bjxRHsB/AXOOfZSeofVLuJZymEVMlNIica/jDaBQ2Ku+tFgaRnmk1q6c0t8OeX4ykiWs0J39SjySi142Kuw8tA==,MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2dKjseUv7dBMVB1+kGrkuFkMM9pblYf6wyo5V4Ue2HN49oRD9/mDx8WDZP4nl8yRuKVEJMoMRwCy2GPEcW+YjQ==
diff --git a/src/tests/system/data/test_passkey/test_passkey__prompt_options/umockdev.script.ipa b/src/tests/system/data/test_passkey/test_passkey__prompt_options/umockdev.script.ipa
new file mode 100644
index 00000000000..0e88c0f935e
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__prompt_options/umockdev.script.ipa
@@ -0,0 +1,30 @@
+d 0 /dev/hidraw1
+
+w 2 ^@�����^@^H^A^A^A^A^A^A^A^A^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 �����^@^Q^A^A^A^A^A^A^A^A�ˏ-^B^E^D^C^E^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@�ˏ-�^@^A^D^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 2 �ˏ-�^@�^@�^A�fU2F_V2hFIDO_2_0lFIDO_2_1_PRE^B�kcredProtectkhmac-secr�ˏ-^@et^CP/�W��^SG�^V�Z�� *^D�brk�bup�dplat�iclientPin�ucredentialM�ˏ-^AgmtPreview�^E^Y^D�^F�^B^A^G^H^H^X�^I�cnfccusb^J��calg&dtypejpublic-key��ˏ-^Bcalg'dtypejpublic-key^M^D^N^Z^@^E^D^C^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 2 ^@�ˏ-�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@n<^@�ˏ-^@Q^^�^As�}����K��r�EL��"q��^M�Pث��X^ZFy�֮���^Ny~2�%�Н�J<��^`6*^@�ˏ-^A�<�dtypejpublic-key^E�bup�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 83 �ˏ-�^@�^@�^A�bidX@n<Q^^�^As�}����K��r�EL��"q��^M�Pث��X^ZFy�֮���^Ny~2�ˏ-^@�%�Н�J<��^`6*�<�dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/o�ˏ-^AC���}.�[^@^@^@^@^J^CXG0E^B ^_��8H�i�h�^T�^^^U^Uٜ=^N׊^E�^S�u�^^��^B!^@�����ˏ-^B:�H��^`�e^O�������(�!��ja��H^T^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 3 ^@�ˏ-�^@^F^F�^A^B^B^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 �ˏ-�^@Q^@�^A�^A^B^C8^X ^A!X ���^E�����h^Ql�e$��^\��^E^H�4'I�?O��"X ^` �^C1�^I^L�ˏ-^@l��L��1�i��5�I��cRk^J�Z�s^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 3 ^@�ˏ-�^@x^F�^A^B^B^E^C�^A^B^C8^X ^A!X 3�B�1�ˠ^S�^\^Ev�,�^P<Rij��,Q�\���b"X [�^M^J^@�ˏ-^@�G8��������5��Q\^\^U��^E�Q!^FX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A��(�:^L�n*‹^@�ˏ-^A�ƈ�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 79 �ˏ-�^@5^@�^BX0U5�^H*��\�c�OY��K�H�j��hv����դ\��z���T>F^A'0��΂^@^@^@^@
+w 1 ^@�ˏ-�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@n<^@�ˏ-^@Q^^�^As�}����K��r�EL��"q��^M�Pث��X^ZFy�֮���^Ny~2�%�Н�J<��^`6*^@�ˏ-^A�<�dtypejpublic-key^E�bup�^FX �d�S�m^O��6�^_��^I��{g{^Qc�Г@M�^G^@�ˏ-^B^H^G^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 227 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 198 �ˏ-�^@�^@�^A�bidX@n<Q^^�^As�}����K��r�EL��"q��^M�Pث��X^ZFy�֮���^Ny~2�ˏ-^@�%�Н�J<��^`6*�<�dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/o�ˏ-^AC���}.�[^E^@^@^@^N^CXH0F^B!^@�Z�^@�^`��O�� �e�^M��Ż�D^K�ڽ�^Vy��*^B!^@�^E.�ˏ-^Bp��^O-�އ4����Pڵ@RuڒS^U�9\���^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
\ No newline at end of file
diff --git a/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/passkey-mapping.ipa b/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/passkey-mapping.ipa
new file mode 100644
index 00000000000..0c0a4ff341e
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/passkey-mapping.ipa
@@ -0,0 +1 @@
+passkey:SSgOUcGCN5WWyIfxAKkFN2HJ+Ko98UVT+O+P0cFgP0YYAKY2zhbFnjT5ZYOwh6Z1h4/7gZIPVEjF4TY6vmPbHg==,MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEHoY7OmDGaK3Q5EVB2LdtP1Gyko6Fz5j5KhLSKy0jKJ47QngRYc6nfzfhnQ2LQpCxbbQcnxnhkNDZugkx9VC1gQ==
diff --git a/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/umockdev.script.ipa b/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/umockdev.script.ipa
new file mode 100644
index 00000000000..c8e82d860e1
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/umockdev.script.ipa
@@ -0,0 +1,29 @@
+d 0 /dev/hidraw1
+
+w 3 ^@�����^@^H^A^A^A^A^A^A^A^A^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 2 �����^@^Q^A^A^A^A^A^A^A^ArE�^B^E^D^C^E^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@rE�^@^A^D^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 rE�^@�^@�^A�fU2F_V2hFIDO_2_0lFIDO_2_1_PRE^B�kcredProtectkhmac-secrrE�^@et^CP/�W��^SG�^V�Z�� *^D�brk�bup�dplat�iclientPin�ucredentialMrE�^AgmtPreview�^E^Y^D�^F�^B^A^G^H^H^X�^I�cnfccusb^J��calg&dtypejpublic-key�rE�^Bcalg'dtypejpublic-key^M^D^N^Z^@^E^D^C^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@rE�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@I(^@rE�^@^NQ��7��ȇ�^@�^E7a���=�ES����`?F^X^@�6�^VŞ4�e����u�����^OTH��6:�^@rE�^Ac�^^dtypejpublic-key^E�bup�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 83 rE�^@�^@�^A�bidX@I(^NQ��7��ȇ�^@�^E7a���=�ES����`?F^X^@�6�^VŞ4�e����urE�^@�����^OTH��6:�c�^^dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/orE�^AC���}.�[^@^@^@^@^I^CXF0D^B hm�i�e^UЯ�Z^Hb^\Mu�&����^N��6���ν�^B ,r�^SOrE�^B�-0G]���^W��ִ����"u!��^DU�]�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 4 ^@rE�^@^F^F�^A^B^B^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 2 rE�^@Q^@�^A�^A^B^C8^X ^A!X d^O�^HPûw��7^H-}_��h���X��W8�R^U�h0"X W�Z�1^Z�RrE�^@w8^R.#�=m[4�v�^U<�l�m�9�ġ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 5 ^@rE�^@x^F�^A^B^B^E^C�^A^B^C8^X ^A!X 3�B�1�ˠ^S�^\^Ev�,�^P<Rij��,Q�\���b"X [�^M^J^@rE�^@�G8��������5��Q\^\^U��^E�Q!^FX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A��m(�_"v^XE��^@rE�^A^^�o�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 79 rE�^@5^@�^BX0-s�P�^Q43^Rp�Q�����q�E�m�^Db��[S�k�^M�^K�݌�s�^]��N^@^@^@^@
+w 1 ^@rE�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@I(^@rE�^@^NQ��7��ȇ�^@�^E7a���=�ES����`?F^X^@�6�^VŞ4�e����u�����^OTH��6:�^@rE�^Ac�^^dtypejpublic-key^E�bup�^FX ^Z1bĪ��y��|^^\T��o�4�^M$�*X^Z?_�g�^@rE�^B�^G^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 213 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 126 rE�^@�^@�^A�bidX@I(^NQ��7��ȇ�^@�^E7a���=�ES����`?F^X^@�6�^VŞ4�e����urE�^@�����^OTH��6:�c�^^dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/orE�^AC���}.�[^E^@^@^@^J^CXH0F^B!^@�L^Z�K�^F^T�8G�1��[^JF�LF�������"^R��^B!^@�frE�^B���p^C��^J��AP���vP�5�/��^E�yv�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
\ No newline at end of file
diff --git a/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/passkey-mapping.ipa b/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/passkey-mapping.ipa
new file mode 100644
index 00000000000..a1cce5344d3
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/passkey-mapping.ipa
@@ -0,0 +1 @@
+passkey:us0eBiX3rqdGTYS3vKoYcazLJFX5raek9hYSTGmVBq2fkUkjElUiITXtJQofnIPwYAc4D4w5+Sn27EuD/bejoA==,MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAENx1bON3YvOlfpOp4UrObEwl4VoKqqahDIM033nBHkm9c7759s3ZbbxlOBRHicrzhIey5Z3THT6jtlMb9mv+Kyg==
diff --git a/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/umockdev.script.ipa b/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/umockdev.script.ipa
new file mode 100644
index 00000000000..a76e7072e1b
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/umockdev.script.ipa
@@ -0,0 +1,18 @@
+d 0 /dev/hidraw1
+
+w 3 ^@�����^@^H^A^A^A^A^A^A^A^A^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 �����^@^Q^A^A^A^A^A^A^A^A���c^B^E^D^C^E^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@���c�^@^A^D^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 ���c�^@�^@�^A�fU2F_V2hFIDO_2_0lFIDO_2_1_PRE^B�kcredProtectkhmac-secr���c^@et^CP/�W��^SG�^V�Z�� *^D�brk�bup�dplat�iclientPin�ucredentialM���c^AgmtPreview�^E^Y^D�^F�^B^A^G^H^H^X�^I�cnfccusb^J��calg&dtypejpublic-key����c^Bcalg'dtypejpublic-key^M^D^N^Z^@^E^D^C^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@���c�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@��^@���c^@^^^F%���FM����^Xq��$U�����^V^RLi�^F���I#^RU"!5�%^J^_���`^G8^O�9�)��K��^@���c^A���dtypejpublic-key^E�bup�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 83 ���c�^@�^@�^A�bidX@��^^^F%���FM����^Xq��$U�����^V^RLi�^F���I#^RU"!5�%^J^_����c^@`^G8^O�9�)��K�����dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/o���c^AC���}.�[^@^@^@^@^K^CXG0E^B!^@�€���^O?\�� ��^M�f�L���@^VP@M^C���B^B 0��Ɣ��c^B0^O�H\^CQ�"^E--�*��e��^P^T��!3^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@���c�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@��^@���c^@^^^F%���FM����^Xq��$U�����^V^RLi�^F���I#^RU"!5�%^J^_���`^G8^O�9�)��K��^@���c^A���dtypejpublic-key^E�bup�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 261 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 287 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 291 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 221 ���c�^@�^@�^A�bidX@��^^^F%���FM����^Xq��$U�����^V^RLi�^F���I#^RU"!5�%^J^_����c^@`^G8^O�9�)��K�����dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/o���c^AC���}.�[^A^@^@^@^M^CXF0D^B e�_�r^Y���b�#V�4�j-RF�㬑�^YLܱ}��^B Ag��^R���c^Bh�Q^J��c7�^^^V[xg�0^`������^Hӆ^D^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
\ No newline at end of file
diff --git a/src/tests/system/tests/test_passkey.py b/src/tests/system/tests/test_passkey.py
index cacaf89db48..82099d02c07 100644
--- a/src/tests/system/tests/test_passkey.py
+++ b/src/tests/system/tests/test_passkey.py
@@ -75,6 +75,7 @@
 from sssd_test_framework.roles.generic import GenericProvider
 from sssd_test_framework.roles.ipa import IPA
 from sssd_test_framework.topology import KnownTopology, KnownTopologyGroup
+from sssd_test_framework.utils.authentication import PasskeyAuthenticationUseCases
 
 
 @mh_fixture()
@@ -740,3 +741,149 @@ def test_passkey__su_with_12_mappings(
         )
         in output
     ), "Get the console message about TGT"
+
+
+@pytest.mark.importance("critical")
+@pytest.mark.topology(KnownTopology.IPA)
+@pytest.mark.builtwith(client="passkey", ipa="passkey")
+@pytest.mark.ticket(gh=6931)
+def test_passkey__su_no_pin_set(
+    client: Client, ipa: IPA, moduledatadir: str, testdatadir: str, umockdev_ipaotpd_update
+):
+    """
+    :title: Check authentication of user with IPA server when no pin set for the Passkey
+    :setup:
+        1. Add a user with --user-auth-type=passkey in the IPA server
+        2. Modify Passkey configuration to set require user verification during authentication to false
+        3. Setup SSSD client with FIDO and umockdev, start SSSD service
+    :steps:
+         1. Check authentication of the user when no pin set for the Passkey
+         2. Check the TGT of user
+    :expectedresults:
+        1. User authenticates successfully
+        2. Get TGT after authentication of user
+    :customerscenario: False
+    """
+    with open(f"{testdatadir}/passkey-mapping.ipa") as f:
+        ipa.user("user1").add(user_auth_type="passkey").passkey_add(f.read().strip())
+
+    ipa.host.conn.run("ipa passkeyconfig-mod --require-user-verification=False", raise_on_error=False)
+    client.sssd.start(service_user="root")
+
+    rc, _, output, _ = client.auth.su.passkey_with_output(
+        username="user1",
+        device=f"{moduledatadir}/umockdev.device",
+        ioctl=f"{moduledatadir}/umockdev.ioctl",
+        script=f"{testdatadir}/umockdev.script.ipa",
+        command="klist",
+        auth_method=PasskeyAuthenticationUseCases.PASSKEY_NO_PIN_NO_PROMPTS,
+    )
+
+    assert rc == 0, "Authentication failed"
+    assert "Ticket cache" in output, "Failed to get the TGT"
+    assert not (
+        (
+            "No Kerberos TGT granted as the server does not support this method. "
+            "Your single-sign on(SSO) experience will be affected"
+        )
+        in output
+    ), "Got the console message about No Kerberos TGT granted"
+
+
+@pytest.mark.importance("medium")
+@pytest.mark.topology(KnownTopology.IPA)
+@pytest.mark.builtwith(client="passkey", ipa="passkey")
+@pytest.mark.ticket(gh=6931)
+def test_passkey__prompt_options(
+    client: Client, ipa: IPA, moduledatadir: str, testdatadir: str, umockdev_ipaotpd_update
+):
+    """
+    :title: Check authentication of user with updated prompting options
+    :setup:
+        1. Add a user in the server with passkey mappings
+        2. Add the prompting options to sssd.conf file
+        3. Setup SSSD client with FIDO and umockdev, start SSSD service
+    :steps:
+        1. Check authentication of the user
+        2. Check the updated prompt options
+    :expectedresults:
+        1. User authenticates successfully
+        2. Got the updated prompt options
+    :customerscenario: False
+    """
+    with open(f"{testdatadir}/passkey-mapping.ipa") as f:
+        ipa.user("user1").add(user_auth_type="passkey").passkey_add(f.read().strip())
+
+    client.sssd.section("prompting/passkey")["interactive"] = "True"
+    client.sssd.section("prompting/passkey")["interactive_prompt"] = "Please, insert the passkey and press enter"
+    client.sssd.section("prompting/passkey")["touch"] = "True"
+    client.sssd.section("prompting/passkey")["touch_prompt"] = "Can you touch the passkey"
+    client.sssd.start(service_user="root")
+
+    rc, _, output, _ = client.auth.su.passkey_with_output(
+        username="user1",
+        device=f"{moduledatadir}/umockdev.device",
+        ioctl=f"{moduledatadir}/umockdev.ioctl",
+        script=f"{testdatadir}/umockdev.script.ipa",
+        pin=123456,
+        interactive_prompt="Please, insert the passkey and press enter",
+        touch_prompt="Can you touch the passkey",
+        command="klist",
+        auth_method=PasskeyAuthenticationUseCases.PASSKEY_PIN_AND_PROMPTS,
+    )
+
+    assert rc == 0, "Authentication failed"
+    assert "Ticket cache" in output, "Failed to get the TGT"
+    assert (
+        not (
+            "No Kerberos TGT granted as the server does not support this method."
+            "Your single-sign on(SSO) experience will be affected"
+        )
+        in output
+    ), "Got the console message about No Kerberos TGT granted"
+
+
+@pytest.mark.importance("critical")
+@pytest.mark.topology(KnownTopology.IPA)
+@pytest.mark.builtwith(client="passkey", ipa="passkey")
+@pytest.mark.ticket(gh=7143)
+def test_passkey__su_fallback_to_password(
+    client: Client, ipa: IPA, moduledatadir: str, testdatadir: str, umockdev_ipaotpd_update
+):
+    """
+    :title: Check password authentication of user with IPA server when sssd fall back to password authentication
+    :setup:
+        1. Add a user with --user-auth-type=passkey, password in the IPA server
+        2. Setup SSSD client with FIDO and umockdev, start SSSD service
+    :steps:
+        1. Check authentication of the user with password
+        2. Check the TGT of user
+    :expectedresults:
+        1. User authenticates successfully
+        2. Get TGT after authentication of user
+    :customerscenario: False
+    """
+    with open(f"{testdatadir}/passkey-mapping.ipa") as f:
+        ipa.user("user1").add(user_auth_type=["passkey", "password"]).passkey_add(f.read().strip())
+
+    client.sssd.start(service_user="root")
+
+    rc, _, output, _ = client.auth.su.passkey_with_output(
+        username="user1",
+        device=f"{moduledatadir}/umockdev.device",
+        ioctl=f"{moduledatadir}/umockdev.ioctl",
+        script=f"{testdatadir}/umockdev.script.ipa",
+        pin="\\n",
+        command="klist",
+        auth_method=PasskeyAuthenticationUseCases.PASSKEY_FALLBACK_TO_PASSWORD,
+    )
+
+    assert rc == 0, "Authentication failed"
+    assert "Ticket cache" in output, "Failed to get the TGT"
+    assert (
+        not (
+            "No Kerberos TGT granted as the server does not support this method."
+            " Your single-sign on(SSO) experience will be affected"
+        )
+        in output
+    ), "Got the console message about No Kerberos TGT granted"