From Fedora Project Wiki

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 17: Line 17:


== Who's available ==
== Who's available ==
* Development: [[User:abbra|Alexander Bokovoy]] (ab), [[User:jhrozek|Jakub Hrozek]] (jhrozek), [[User:mkosek|Martin Kosek]] (mkosek), [[User:tbabej|Tomas Babej]] (tbabej)
* Development: [[User:abbra|Alexander Bokovoy]] (ab), [[User:jhrozek|Jakub Hrozek]] (jhrozek), [[User:mkosek|Martin Kosek]] (mkosek)
* Quality Assurance - [[User:spoore|Scott Poore]] (spoore), [[User:steeve|Steeve Goveas ]] (steeve)
* Quality Assurance - [[User:spoore|Scott Poore]] (spoore), [[User:steeve|Steeve Goveas ]] (steeve)


Line 42: Line 42:


* Establish a trust between an IPA server and an Active Directory instance following the steps below
* Establish a trust between an IPA server and an Active Directory instance following the steps below
** '''Install/Setup''' test cases 1 and 2, '''Serving legacy clients for trusts''' test case 1.
* Set up the LDAP client software (such as nss_ldap or pam_ldap) on your client to point to the IPA server
* Set up the LDAP client software (such as nss_ldap or pam_ldap) on your client to point to the IPA server
* Retrieve identity information about users coming from the trusted AD domain
* Retrieve identity information about users coming from the trusted AD domain
Line 48: Line 47:


Please report any issues you find using the channels described above or simply start a thread on the [https://www.redhat.com/mailman/listinfo/freeipa-users freeipa-users] mailing list.
Please report any issues you find using the channels described above or simply start a thread on the [https://www.redhat.com/mailman/listinfo/freeipa-users freeipa-users] mailing list.
You can also use our public Etherpad http://openetherpad.org/p/Fedora-19-IPA-33-Test-Day to share bugs, workarounds or any other useful info.


== Test Cases ==
== Test Cases ==
Line 79: Line 76:


Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the [[Template:result|result template]] to enter your result, as shown in the example result line.
Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the [[Template:result|result template]] to enter your result, as shown in the example result line.
{{admon/note | Active Directory version | Even with sucessful tests, please report the version of Active Directory you worked with. }}


{|
{|
Line 88: Line 83:
! [[QA:Testcase_freeipa_using_posix_attributes_in_ad|POSIX in AD]]
! [[QA:Testcase_freeipa_using_posix_attributes_in_ad|POSIX in AD]]
! [[QA:Testcase_freeipa_trust_establish|Trust creation]]
! [[QA:Testcase_freeipa_trust_establish|Trust creation]]
! [[QA:Testcase_freeipa_generic_trust_client_config|Generic legacy client]]
! [[QA:Testcase_freeipa_use_nss_pam_ldapd_to_give_access_to_trusted_domain_users|Generic legacy client]]
! [[QA:Testcase_freeipa_use_nss_pam_ldapd_to_give_access_to_trusted_domain_users|Legacy clients with nss-pam-ldapd]]
! [[QA:Testcase_freeipa_use_nss_pam_ldapd_to_give_access_to_trusted_domain_users|Legacy clients with pam-nss-ldap]]
! [[QA:Testcase_freeipa_use_legacy_sssd_to_give_access_to_trusted_domain_users|Legacy client with SSSD]]
! [[QA:Testcase_freeipa_use_legacy_sssd_to_give_access_to_trusted_domain_users|Legacy client with SSSD]]
! Active Directory version
! References
! References
|-
|-
Line 102: Line 96:
| {{result|fail}} <ref>{{bz|12345}}</ref>
| {{result|fail}} <ref>{{bz|12345}}</ref>
| {{result|pass}}
| {{result|pass}}
| AD 2012
| <references/>
|-
|-
| [[User:mrniranjan|mrniranjan]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}} <ref> Test pass with nss_ldap on RHEL5</ref>
| {{result|pass}} <ref> Test pass with nss-pam-ldapd on RHEL6 </ref>
| {{result|none}}
| AD 2008 R2
| <references/>
| <references/>
|-
|-
| [[User:tbabej|Tomas Babej]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}} <ref> https://fedorahosted.org/freeipa/ticket/3814 </ref>
| {{result|pass}} <ref> https://fedorahosted.org/freeipa/ticket/3816 </ref>
| {{result|none}}
| {{result|none}}
| {{result|none}}
| AD 2012
| <references/>
|-
| [[User:jhrozek|Jakub Hrozek]]
| {{result|pass}}
| {{result|pass}}
| {{result|none}}
| {{result|pass}}
| {{result|none}}
| {{result|warn}} <ref>(IPA native users don't auth)</ref>
| {{result|warn}} <ref>(IPA native users don't auth)</ref>
| AD 2012
| <references/>
|-
| [[User:steeve|Steeve Goveas]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}} <ref>https://fedorahosted.org/sssd/ticket/2030</ref>
| {{result|pass}}
| {{result|warn}} <ref>(IPA native users don't auth)</ref>
| {{result|none}}
| {{result|warn}} <ref>(IPA native users don't auth)</ref>
| AD 2008r2
| <references/>
|-
| [[User:spoore|Scott Poore]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|warn||988520}}
| {{result|warn}} <ref>rhel4 fails</ref><ref>rhel5 works</ref>
| {{result|warn}} <ref>ad users work, ipa doesn't</ref>
| {{result|warn}} <ref>ad users work, ipa doesn't</ref>
| AD 2012
| <references/>
|-
| [[User:Sgallagh|Stephen Gallagher]]
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| AD 2012
| <references/>
|}
|}


[[Category:Fedora 19 Test Days]]
[[Category:Test Days]]
Please note that all contributions to Fedora Project Wiki are considered to be released under the Attribution-Share Alike 4.0 International (see Fedora Project Wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To edit this page, please solve the following task below and enter the answer in the box (more info):

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "https://fedoraproject.org/wiki/Test_Day:2013-07-25_AD_trusts_with_POSIX_attributes_in_AD_and_support_for_old_clients"