tests: su integration test.

tests/ansible/integration/become/all.yml

@@ -1,4 +1,5 @@
 
+- import_playbook: su_password.yml
 - import_playbook: sudo_flags_failure.yml
 - import_playbook: sudo_nonexistent.yml
 - import_playbook: sudo_nopassword.yml

tests/ansible/integration/become/su_password.yml

@@ -0,0 +1,58 @@
+# Verify passwordful su behaviour
+  # Ansible can't handle this on OS X. I don't care why.
+
+- name: integration/become/su_password.yml
+  hosts: test-targets
+  become_method: su
+  any_errors_fatal: true
+  tasks:
+
+    - name: Ensure su password absent but required.
+      shell: whoami
+      become: true
+      become_user: mitogen__user1
+      register: out
+      ignore_errors: true
+      when: is_mitogen
+
+    - assert:
+        that:
+        - out.failed
+        - (
+            ('password is required' in out.msg) or
+            ('password is required' in out.module_stderr)
+          )
+      when: is_mitogen
+
+
+    - name: Ensure password su incorrect.
+      shell: whoami
+      become: true
+      become_user: mitogen__user1
+      register: out
+      vars:
+        ansible_become_pass: nopes
+      ignore_errors: true
+      when: is_mitogen
+
+    - assert:
+        that: |
+          out.failed and (
+            ('Incorrect su password' in out.msg) or
+            ('su password is incorrect' in out.msg)
+          )
+      when: is_mitogen
+
+    - name: Ensure password su succeeds.
+      shell: whoami
+      become: true
+      become_user: mitogen__user1
+      register: out
+      vars:
+        ansible_become_pass: user1_password
+      when: is_mitogen
+
+    - assert:
+        that:
+          - out.stdout == 'mitogen__user1'
+      when: is_mitogen