From Fedora Project Wiki

(Created page with "{{QA/Test_Case |description=IDP Installation testing. |setup= <ol> <li>For testing purposes, a machine (or VM) with 1GB of RAM and 4 GB of free disk space for binaries, data a...")
 
No edit summary
Line 17: Line 17:


  # ipsilon-server-install --ipa=yes --form=yes
  # ipsilon-server-install --ipa=yes --form=yes
The ipsilon server installer doesn't yet have support for the Apache SSL plugin mod_nss. It always configures for mod_ssl instead. IPA uses mod_nss, so we need to make a minor tweak to the IDP Apache configuration.
Edit /etc/httpd/conf.d/ipsilon-idp.conf
Replace
  SSLRequireSSL
With
  NSSRequireSSL
Restart Apache
# systemctl restart httpd


==== Verify the basics ====
==== Verify the basics ====

Revision as of 20:39, 5 March 2015

Description

IDP Installation testing.

Setup

  1. For testing purposes, a machine (or VM) with 1GB of RAM and 4 GB of free disk space for binaries, data and logs should be plenty to set up and run an IPA master.
  2. It is assumed that the IDP is installed on the same server/VM as the IPA master

How to test

Installation

First, install the Ipsilon server packages:

# yum install ipsilon ipsilon-tools ipsilon-authkrb ipsilon-infosssd ipsilon-tools-ipa ipsilon-saml2 ipsilon-authfas ipsilon-authldap ipsilon-authform

Install the server to use IPA.

# ipsilon-server-install --ipa=yes --form=yes

The ipsilon server installer doesn't yet have support for the Apache SSL plugin mod_nss. It always configures for mod_ssl instead. IPA uses mod_nss, so we need to make a minor tweak to the IDP Apache configuration.

Edit /etc/httpd/conf.d/ipsilon-idp.conf

Replace

  SSLRequireSSL

With

  NSSRequireSSL

Restart Apache

# systemctl restart httpd

Verify the basics

Firefox should be launched from a machine that is enrolled to the IPA server.

Start firefox

Visit http://ipa.example.com/idp

Authenticate as admin using the IPA admin password

Expected Results

All the test steps should end with the specified results.