From Fedora Project Wiki

(create test case to enforce "domain user authentication" beta criterion)
 
(add to AD test case category)
 
(2 intermediate revisions by the same user not shown)
Line 2: Line 2:


{{QA/Test_Case
{{QA/Test_Case
|description=This test case checks that a system enrolled in a FreeIPA domain can authenticate users correctly.
|description=This test case checks that a system enrolled in a domain can authenticate users correctly.
|setup=
|setup=
# Ensure a correctly-configured FreeIPA domain controller is accessible from the test system (you can follow [[QA:Testcase_Server_role_deploy]] with the ''Domain Controller'' role to deploy a FreeIPA domain controller)
{{Domain server setup}}
# Ensure at least one user account is configured in FreeIPA and authorized to log in to the test system in the access control configuration
{{Domain client setup}}
# Enrol the test system in the FreeIPA domain (several of the other [[:Category:Server Acceptance Test Cases]] cover different mechanisms for doing this, you can follow any of those)
# Ensure at least one user account is configured in the domain and authorized to log in to the test system in the access control configuration
|actions=
|actions=
# Attempt to log in to the test system using a valid domain user account with permission to log into the test system
# Attempt to log in to the test system using a valid domain user account with permission to log into the test system
Line 13: Line 13:
# The login attempt must succeed.
# The login attempt must succeed.
}}
}}
[[Category:FreeIPA Test Cases]] [[Category:Server Acceptance Test Cases]]
[[Category:FreeIPA Test Cases]] [[Category:Server Acceptance Test Cases]] [[Category:Active_Directory_Test_Cases]]

Latest revision as of 01:52, 25 November 2014

Note.png
Associated release criterion
This test case is associated with the Fedora_40_Beta_Release_Criteria#domain-user-authentication release criterion. If you are doing release validation testing, a failure of this test case may be a breach of that release criterion. If so, please file a bug and nominate it as blocking the appropriate milestone, using the blocker bug nomination page.


Description

This test case checks that a system enrolled in a domain can authenticate users correctly.

Setup

  1. Deploy a correctly-configured FreeIPA or Active Directory domain controller. You can follow:
    QA:Testcase_Server_role_deploy with the Domain Controller role to deploy a FreeIPA domain controller on Fedora 28 or earlier
    QA:Testcase_freeipa_trust_server_installation to deploy a FreeIPA domain controller on Fedora 29 or later
    QA:Testcase_Active_Directory_Setup to deploy an Active Directory domain controller
  2. Enrol a test system in the domain. There are various ways to do this. You will find several test cases you can follow in the Server release validation test cases, FreeIPA test cases, and Realmd test cases
  3. Ensure at least one user account is configured in the domain and authorized to log in to the test system in the access control configuration

How to test

  1. Attempt to log in to the test system using a valid domain user account with permission to log into the test system
Note.png
Domain name
You may need to enter the username as username@domain, not just username, depending on how you enrolled the test system in the domain.

Expected Results

  1. The login attempt must succeed.