From Fedora Project Wiki

mNo edit summary
mNo edit summary
Line 1: Line 1:
{{QA/Test_Case
{{QA/Test_Case
|description=Installation testing.
|description=Installation testing.
|setup=<ol>
|setup=
<ol>
<li>Ensure the {{package|freeipa-server}} package is installed:</li>
<li>Ensure the {{package|freeipa-server}} package is installed:</li>
  # yum install --enablerepo=updates-testing freeipa-server
  # yum install --enablerepo=updates-testing freeipa-server
Line 9: Line 10:
</ol>
</ol>
|actions=
|actions=
=== '''Installation (without DNS)''' ===
=== Installation ===
 
==== Without DNS ====


<ol>
For a fully-interactive install run:
<li>For a fully-interactive install run:</li>


  # ipa-server-install
  # ipa-server-install
Line 20: Line 22:
  # ipa-server-install -a secret123 -p 123Secret --domain=freeipa.org --realm=FREEIPA.ORG -U
  # ipa-server-install -a secret123 -p 123Secret --domain=freeipa.org --realm=FREEIPA.ORG -U


</ol>
==== With DNS ====
 
=== '''Installation (with DNS)''' ===
 
<ol>
<li>To install with DNS run:</li>


  # ipa-server-install --setup-dns
  # ipa-server-install --setup-dns
Line 33: Line 30:
  # ipa-server-install -a secret123 -p 123Secret --domain=freeipa.org --realm=FREEIPA.ORG --setup-dns -U
  # ipa-server-install -a secret123 -p 123Secret --domain=freeipa.org --realm=FREEIPA.ORG --setup-dns -U


</ol>
==== Verify the basics ====
 
=== '''Uninstallation''' ===
 
<ol>
<li>FreeIPA provides a way to unininstall the configured services and it does its best to return the system to its previous state. To run the uninstaller execute:</li>
 
# ipa-server-install --uninstall -U
 
</ol>
 
|results=
=== '''Installation''' ===
 
<ol>
<li>Verify the basics:</li>


Ideally each of these installation steps will conclude with no errors and a running set of IPA services.
Ideally each of these installation steps will conclude with no errors and a running set of IPA services.
Line 65: Line 47:
  # getent passwd admin
  # getent passwd admin


<li>Verify Services:</li>
==== Verify Services ====


We install a number of SSL certificates that should be automatically managed by certmonger:
We install a number of SSL certificates that should be automatically managed by certmonger:
Line 82: Line 64:
There should be 2 services: ldap and HTTP for your FreeIPA server
There should be 2 services: ldap and HTTP for your FreeIPA server


<li>Verify DNS (if installed):</li>
==== Verify DNS ====


Verify these only if you installed with a DNS server.
Verify these only if you installed with a DNS server.
Line 106: Line 88:
   Managed by: server.freepia.org
   Managed by: server.freepia.org


</ol>
=== Uninstallation ===
 
FreeIPA provides a way to unininstall the configured services and it does its best to return the system to its previous state. To run the uninstaller execute:
 
# ipa-server-install --uninstall -U


=== '''Uninstallation''' ===
==== Verify uninstallation ====


<ol>
Un-installation is intended for developers. It is a best-as-we-can restoration of files primarily to prepare the server to be re-installed.
<li>Un-installation is intended for developers. It is a best-as-we-can restoration of files primarily to prepare the server to be re-installed.</li>


To verify that the server is in a state where it can be re-installed re-run ipa-server-install:
To verify that the server is in a state where it can be re-installed re-run ipa-server-install:
Line 119: Line 104:
If something failed in the un-installation you would get an error message that the server is already installed/configured.
If something failed in the un-installation you would get an error message that the server is already installed/configured.


</ol>
|results=
 
All the test steps should end with the specified results.
}}
}}

Revision as of 16:30, 14 February 2011

Description

Installation testing.

Setup

  1. Ensure the freeipa-server package is installed:
  2. # yum install --enablerepo=updates-testing freeipa-server
  3. (optional) To install with DNS, ensure the bind and bind-dyndb-ldap packages are installed.
  4. Make sure /etc/hosts is sane. This means that your host will be listed on a separate line with its IP address with the FQDN listed first, this is necessary to avoid chicken/egg issues when the DNS is installed as name resolution for the public host name is needed to start the DNS itself (to init krb credentials). In particular the hostname SHOULD not appear in either the IPv4 or IPv6 localhost lines.
  5. If you have an existing AD server in your network choose a unique name for the IPA server realm name. Clients that use DNS autodiscovery to find the KDC to use may get confused and try to authenticate to the AD KDC.

How to test

Installation

Without DNS

For a fully-interactive install run:

# ipa-server-install

You can optionally provide all options on the command-line:

# ipa-server-install -a secret123 -p 123Secret --domain=freeipa.org --realm=FREEIPA.ORG -U

With DNS

# ipa-server-install --setup-dns

Or with all options on the command-line:

# ipa-server-install -a secret123 -p 123Secret --domain=freeipa.org --realm=FREEIPA.ORG --setup-dns -U

Verify the basics

Ideally each of these installation steps will conclude with no errors and a running set of IPA services.

To briefly test the installation:

# kinit admin (the password is the admin password, or the password from -a)

Show our own user entry:

# ipa user-show admin

And make sure nss can see us too:

# id admin
# getent passwd admin

Verify Services

We install a number of SSL certificates that should be automatically managed by certmonger:

# ipa-getcert list

There should be 3 certificates, all in MONITORING. The certificates should be in the following NSS databases:

* /etc/pki/nssdb
* /etc/httpd/alias
* /etc/dirsrv/slapd-FREEIPA-ORG
# kinit admin
# ipa service-find

There should be 2 services: ldap and HTTP for your FreeIPA server

Verify DNS

Verify these only if you installed with a DNS server.

# dig server.freeipa.org. (yes, add a trailing dot)

Look for a line like this in the output:

server.freeipa.org.      86400   IN      A       192.168.0.1
# host server.freeipa.org
server.freeipa.org has address 192.168.0.1
# ipa dns-resolve server.freeipa.org
---------------------------
Found 'server.freeipa.org.'
---------------------------
# ipa host-show server.freeipa.org
  Host name: server.freeipa.org
  Principal name: host/server.freeipa.org@FREEIPA.ORG
  Keytab: True
  Managed by: server.freepia.org

Uninstallation

FreeIPA provides a way to unininstall the configured services and it does its best to return the system to its previous state. To run the uninstaller execute:

# ipa-server-install --uninstall -U

Verify uninstallation

Un-installation is intended for developers. It is a best-as-we-can restoration of files primarily to prepare the server to be re-installed.

To verify that the server is in a state where it can be re-installed re-run ipa-server-install:

# ipa-server-install

If something failed in the un-installation you would get an error message that the server is already installed/configured.

Expected Results

All the test steps should end with the specified results.