From Fedora Project Wiki

mNo edit summary
mNo edit summary
 
(6 intermediate revisions by 2 users not shown)
Line 5: Line 5:
=How to test=
=How to test=


=== 1. Prerequisites ===
=== 1. Prerequisite ===
First get and install testing packages [http://koji.fedoraproject.org/koji/taskinfo?taskID=3896745 system-config-printer-1.3.9-2.firewalld.fc17]
system-config-printer >= 1.3.12-1.fc18
 
Then you need to have firewalld running, see [[QA:Testcase_firewalld_active|Test case 1]].
 
Also the network interface should be in a zone.
Either run NetworkManager (see [[QA:Testcase_firewalld_and_NetworkManager|Test case 3]]),
which adds the interface into zone or add it yourself with
 
  firewall-cmd --add --interface em1


=== 2. Run system-config-printer ===
=== 2. Run system-config-printer ===
Line 24: Line 16:
Whether you see the dialog and what items the dialog contains depends on what zone the interface is in.
Whether you see the dialog and what items the dialog contains depends on what zone the interface is in.
For example:
For example:
In 'trusted' zone you won't see the dialog at all because all trafic is trusted.
In 'trusted' zone you won't see the dialog at all because all traffic is trusted.
In 'work' zone it will ask you for allowing of 'mDNS traffic'.
In 'home' and 'work' zones you won't see it either because all needed services are already allowed.
In 'public' (the default) it will ask you also for allowing of 'IPP Browse packets'.
In 'public' (the default) it will ask you for allowing of 'incoming IPP Browse packets'.
Press 'Adjust Firewall'.
Press 'Adjust Firewall'.


=== 3. Check ===
=== 3. Check ===
After this the needed services should be allowed for 60 seconds, see
After this the needed services should be allowed, see


   firewall-cmd --list=all
   firewall-cmd --list-all


and check that you see ipp-client, mdns and ipp services.
and check that you see ipp-client, mdns and ipp services.


In the output of system-config-printer --debug you should see something similar to:
In the output of system-config-printer --debug you should see something similar to:
   Using FirewallD, active zone: public
 
   Using /org/fedoraproject/FirewallD1
   Examining firewall
   Examining firewall
  Firewall data obtained
  Using cached firewall data
   Asking for permission to adjust firewall:
   Asking for permission to adjust firewall:
   The firewall may need adjusting in order to detect network printers.  Adjust the firewall now?
   The firewall may need adjusting in order to detect network printers.  Adjust the firewall now?
   - Allow all incoming IPP Browse packets
   - Allow all incoming IPP Browse packets
  - Allow all incoming mDNS traffic
   Fetching devices after firewall dialog response
   Fetching devices after firewall dialog response
Now quit system-config-printer, do 'service firewalld restart' and try again to test whether the changes previously done to firewall are permanent, i.e. system-config-printer shouldn't ask again to allow once allowed service.

Latest revision as of 09:44, 11 October 2012

Description

This is the test case to check if it's possible for other applications (system-config-printer in this case) to modify the firewall.

How to test

1. Prerequisite

system-config-printer >= 1.3.12-1.fc18

2. Run system-config-printer

 system-config-printer --debug

Click the blue 'plus' button. After entering your password you should see a dialog asking you if you want to adjust firewall. Whether you see the dialog and what items the dialog contains depends on what zone the interface is in. For example: In 'trusted' zone you won't see the dialog at all because all traffic is trusted. In 'home' and 'work' zones you won't see it either because all needed services are already allowed. In 'public' (the default) it will ask you for allowing of 'incoming IPP Browse packets'. Press 'Adjust Firewall'.

3. Check

After this the needed services should be allowed, see

 firewall-cmd --list-all

and check that you see ipp-client, mdns and ipp services.

In the output of system-config-printer --debug you should see something similar to:

 Using /org/fedoraproject/FirewallD1
 Examining firewall
 Firewall data obtained
 Using cached firewall data
 Asking for permission to adjust firewall:
 The firewall may need adjusting in order to detect network printers.  Adjust the firewall now?
 - Allow all incoming IPP Browse packets
 Fetching devices after firewall dialog response

Now quit system-config-printer, do 'service firewalld restart' and try again to test whether the changes previously done to firewall are permanent, i.e. system-config-printer shouldn't ask again to allow once allowed service.