From Fedora Project Wiki

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 2: Line 2:
| name = Fedora Test Days
| name = Fedora Test Days
| image = [[File:Echo-testing-48px.png|link=QA/Fedora_19_test_days]]
| image = [[File:Echo-testing-48px.png|link=QA/Fedora_19_test_days]]
| caption = Provide users from trusted Active directory domain to legacy clients
| caption = [[FIXME|FIXME]]
| date = 2013-07-25
| date = <<FIXME>>
| time = all day
| time = all day
| website = [[QA/Fedora_19_test_days]]
| website = [[QA/Fedora_19_test_days]]
Line 14: Line 14:
== What to test? ==
== What to test? ==


Today's instalment of Fedora Test Day will focus on making the support for users coming from a trusted Active Directory domain available to legacy (non-SSSD) clients as well as providing support for using POSIX attributes from AD.
Today's instalment of Fedora Test Day will focus on '''<<FIXME>>'''


== Who's available ==
== Who's available ==
* Development: [[User:abbra|Alexander Bokovoy]] (ab), [[User:jhrozek|Jakub Hrozek]] (jhrozek), [[User:mkosek|Martin Kosek]] (mkosek), [[User:tbabej|Tomas Babej]] (tbabej)
* Quality Assurance - [[User:spoore|Scott Poore]] (spoore), [[User:steeve|Steeve Goveas ]] (steeve)


== Feedback ==
The following cast of characters will be available testing, workarounds, bug fixes, and general discussion ...
We need your feedback!
* Development - [[User:Developer1|Developer1]] (irc_nick1), [[User:Developer2|Developer2]] (irc_nick2)
* Talk to us on [irc://irc.freenode.net/#freeipa #freeipa] on Freenode
* Quality Assurance - [[User:Tester1|Tester1]] (irc_nick3), [[User:Tester2|Tester2]] (irc_nick4), [[User:Tester3|Tester3]] (irc_nick5)
* Send as an [mailto:freeipa-users@redhat.com e-mail].
* Log issues and enhancements in [https://fedorahosted.org/freeipa FreeIPA Trac] or [https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&component=freeipa&version=19 Bugzilla].


== Prerequisite for Test Day ==  
== Prerequisite for Test Day ==  


* An instance of Microsoft Active Directory 2008 R2 or newer
List any prerequisite needs for the test event.  A fresh system, virtualized guest, a blank DVD ... a desire to break software?
** [http://www.freeipa.org/page/Setting_up_Active_Directory_domain_for_testing_purposes steps how to obtain your AD test instance]


* An up-to-date Fedora 19 instance along with a custom repository containing the required packages
* Usb key
** Grab the repofile from http://repos.fedorapeople.org/repos/jhrozek/freeipa-test-day/fedora-freeipa-test-day.repo and download it to your <code>/etc/yum.repos.d/</code>
* Usb externally connected HD IDE/SATA
# wget http://repos.fedorapeople.org/repos/jhrozek/freeipa-test-day/fedora-freeipa-test-day.repo \
* Empty HD IDE/SATA/SCSI
        -O /etc/yum.repos.d/fedora-freeipa-test-day.repo
* Free space on HD
 
Here's a chunk which is commonly used for most Test Days. Replace XX with whatever Fedora release is pending:
 
* An updated [http://fedoraproject.org/get-prerelease Fedora XX pre-release], [[Releases/Rawhide|Rawhide]] (tips on installing Rawhide below), or a [http://alt.fedoraproject.org/pub/alt/nightly-composes/desktop/ nightly live image]


== How to test? ==
== How to test? ==


This test day focuses on making users and groups from a trusted AD domain available to a wide range of clients. Even if your flavor of Linux or UNIX client is not described in the steps below, you are still
High level details on how a contributor can get involved. This can include (but not limited to):
welcome to join the test day! In general, the testing would include:


* Establish a trust between an IPA server and an Active Directory instance following the steps below
* Areas to target with exploratory testing
** '''Install/Setup''' test cases 1 and 2, '''Serving legacy clients for trusts''' test case 1.
* A list of pre-defined test cases to execute
* Set up the LDAP client software (such as nss_ldap or pam_ldap) on your client to point to the IPA server
* How to report back results
* Retrieve identity information about users coming from the trusted AD domain
* Authenticate as a user coming from the trusted AD domain


Please report any issues you find using the channels described above or simply start a thread on the [https://www.redhat.com/mailman/listinfo/freeipa-users freeipa-users] mailing list.
Here's another common chunk (again, replace XX as above):


You can also use our public Etherpad http://openetherpad.org/p/Fedora-19-IPA-33-Test-Day to share bugs, workarounds or any other useful info.
=== '''Update your machine''' ===


== Test Cases ==
If you're running Fedora XX, make sure you have all the current updates for it installed, using the update manager. If you want to try Rawhide, see the instructions on the [[Releases/Rawhide|Rawhide]] page on the various ways in which you can install or update to Rawhide. Or:


=== Install/Setup Tests ===
=== '''Live image''' ===
* 1.  [[QA:Testcase_freeipa_trust_server_installation|IPA server and client installation]].
** After finishing this test case, you would have a working IPA server and a client
* 2.  [[QA:Testcase_freeipa_prepare_server_for_trusts|Preparation of IPA server for the Active Directory trust]].
** This testcase ensures that you have properly configured Active Directory and FreeIPA server for the trust setup


=== Using POSIX attributes defined in AD ===
Optionally, you may download a non-destructive Rawhide live image for your architecture. Tips on using a live image are available at [[FedoraLiveCD]]. Live images can be found [http://alt.fedoraproject.org/pub/alt/nightly-composes/desktop/ here].
* 1. [[QA:Testcase_freeipa_using_posix_attributes_in_ad|Configure FreeIPA to use POSIX attributes defined in Active Direcotory]]
** When this test case is completed, you will have Active Directory server with Services for Unix (SFU) extension. You will be able to use POSIX attributes defined in Active Directory in FreeIPA.


=== Serving legacy clients for trusts ===
== Test Cases ==
* 1.  [[QA:Testcase_freeipa_trust_establish|Establish trust with an AD server]].
** When this test case is completed, the trust relationship between an IPA server and an AD server would be established
* 2.  [[QA:Testcase_freeipa_generic_trust_client_config|Configure a generic legacy client for accessing trusted resources]]
** Instructions for setting up a generic LDAP client are described here
* 3.  [[QA:Testcase_freeipa_use_nss_pam_ldapd_to_give_access_to_trusted_domain_users|Use nss-pam-ldapd to give access to trusted domain users]]
** This is actual test for old clients using nss-pam-ldapd (http://arthurdejong.org/git/nss-pam-ldapd). We are interested in test on RHEL 4/5, FreeBSD, and Solaris/AIX
* 4.  [[QA:Testcase_freeipa_use_legacy_sssd_to_give_access_to_trusted_domain_users|Use legacy SSSD to give access to trusted domain users]]
** This is actual test for old clients using SSSD, but without native support for subdomain users. This includes all SSSD versions up to 1.9
== Test Results ==


If you have problems with any of the tests, report a bug to [https://fedorahosted.org/freeipa/ Trac] or [https://bugzilla.redhat.com Bugzilla] usually for the component [https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&version=19&component=freeipa freeipa]
Provide a list of test areas or test cases that you'd like contributors to execute.  For other examples, see [[:Category:Test_Cases]].


{{admon/note | Filing a bug | If you are unsure about exactly how to file the report or what other information to include, just ask us on IRC and we will help you. }}
== Test Results ==


Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the [[Template:result|result template]] to enter your result, as shown in the example result line.
Construct a table or list to allow testers to post results. Each column should be a test case or configuration, and each row should consist of test results. Include some instructions on how to report bugs, and any special instructions. Here's an example, from a Palimpsest test day:


{{admon/note | Active Directory version | Even with sucessful tests, please report the version of Active Directory you worked with. }}
If you have problems with any of the tests, report a bug to [https://bugzilla.redhat.com Bugzilla] usually for the component [https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&version=13&component=udisks udisks], or [https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&version=13&component=gnome-disk-utility gnome-disk-utility] for bugs in the Palimpsest graphical front end itself. If you are unsure about exactly how to file the report or what other information to include, just ask on IRC and we will help you. Once you have completed the tests, add your results to the Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the [[Template:result|result template]] to enter your result, as shown in the example result line.


{|
{|
! User
! User
! [[QA:Testcase_freeipa_trust_server_installation|IPA Installation]]
! [[QA:Testcase_sample_1|Sample test 1]]
! [[QA:Testcase_freeipa_prepare_server_for_trusts|Trust preparation]]
! [[QA:Testcase_sample_2|Sample test 2]]
! [[QA:Testcase_freeipa_using_posix_attributes_in_ad|POSIX in AD]]
! [[QA:Testcase_sample_3|Sample test 3]]
! [[QA:Testcase_freeipa_trust_establish|Trust creation]]
! [[QA:Testcase_sample_4|Sample test 4]]
! [[QA:Testcase_freeipa_generic_trust_client_config|Generic legacy client]]
! [[QA:Testcase_freeipa_use_nss_pam_ldapd_to_give_access_to_trusted_domain_users|Legacy clients with nss-pam-ldapd]]
! [[QA:Testcase_freeipa_use_legacy_sssd_to_give_access_to_trusted_domain_users|Legacy client with SSSD]]
! Active Directory version
! References
! References
|-
|-
Line 97: Line 74:
| {{result|none}}  
| {{result|none}}  
| {{result|pass}}
| {{result|pass}}
| {{result|none}}
| {{result|none}}
| {{result|warn}} <ref>Test pass, but also encountered {{bz|54321}}</ref>
| {{result|warn}} <ref>Test pass, but also encountered {{bz|54321}}</ref>
| {{result|fail}} <ref>{{bz|12345}}</ref>
| {{result|fail}} <ref>{{bz|12345}}</ref>
| {{result|pass}}
| AD 2012
| <references/>
|-
|-
| [[User:mrniranjan|mrniranjan]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}} <ref> Test pass with nss_ldap on RHEL5</ref>
| {{result|pass}} <ref> Test pass with nss-pam-ldapd on RHEL6 </ref>
| {{result|none}}
| AD 2008 R2
| <references/>
|-
| [[User:tbabej|Tomas Babej]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}} <ref> https://fedorahosted.org/freeipa/ticket/3814 </ref>
| {{result|pass}} <ref> https://fedorahosted.org/freeipa/ticket/3816 </ref>
| {{result|none}}
| {{result|none}}
| {{result|none}}
| AD 2012
| <references/>
|-
| [[User:jhrozek|Jakub Hrozek]]
| {{result|pass}}
| {{result|pass}}
| {{result|none}}
| {{result|pass}}
| {{result|none}}
| {{result|warn}} <ref>(IPA native users don't auth)</ref>
| {{result|warn}} <ref>(IPA native users don't auth)</ref>
| AD 2012
| <references/>
|-
| [[User:steeve|Steeve Goveas]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}} <ref>https://fedorahosted.org/sssd/ticket/2030</ref>
| {{result|pass}}
| {{result|warn}} <ref>(IPA native users don't auth)</ref>
| {{result|none}}
| {{result|warn}} <ref>(IPA native users don't auth)</ref>
| AD 2008r2
| <references/>
| <references/>
|-
|-
| [[User:spoore|Scott Poore]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|warn||988520}}
| {{result|warn}} <ref>rhel4 fails</ref><ref>rhel5 works</ref>
| {{result|warn}} <ref>ad users work, ipa doesn't</ref>
| {{result|warn}} <ref>ad users work, ipa doesn't</ref>
| AD 2012
| <references/>
|-
| [[User:Sgallagh|Stephen Gallagher]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| AD 2012
| <references/>
|}
|}


[[Category:Fedora 19 Test Days]]
[[Category:Test Days]]
[[Category:QA Templates]]
Please note that all contributions to Fedora Project Wiki are considered to be released under the Attribution-Share Alike 4.0 International (see Fedora Project Wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To edit this page, please solve the following task below and enter the answer in the box (more info):

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "https://fedoraproject.org/wiki/Test_Day:2013-07-25_AD_trusts_with_POSIX_attributes_in_AD_and_support_for_old_clients"