Test Day:2013-07-25 AD trusts with POSIX attributes in AD and support for old clients

From FedoraProject

(Difference between revisions)
Jump to: navigation, search
(Test Results)
(Test Results)
Line 83: Line 83:
! [[QA:Testcase_freeipa_using_posix_attributes_in_ad|POSIX in AD]]
! [[QA:Testcase_freeipa_using_posix_attributes_in_ad|POSIX in AD]]
! [[QA:Testcase_freeipa_trust_establish|Trust creation]]
! [[QA:Testcase_freeipa_trust_establish|Trust creation]]
! [[QA:Testcase_freeipa_use_nss_pam_ldapd_to_give_access_to_trusted_domain_users|Generic legacy client]]
! [[QA:Testcase_freeipa_generic_trust_client_config|Generic legacy client]]
! [[QA:Testcase_freeipa_use_nss_pam_ldapd_to_give_access_to_trusted_domain_users|Legacy clients with pam-nss-ldap]]
! [[QA:Testcase_freeipa_use_nss_pam_ldapd_to_give_access_to_trusted_domain_users|Legacy clients with pam-nss-ldap]]
! [[QA:Testcase_freeipa_use_legacy_sssd_to_give_access_to_trusted_domain_users|Legacy client with SSSD]]
! [[QA:Testcase_freeipa_use_legacy_sssd_to_give_access_to_trusted_domain_users|Legacy client with SSSD]]

Revision as of 23:26, 24 July 2013

Fedora Test Days
Provide users from trusted Active directory domain to legacy clients

Date 2013-07-25
Time all day

Website QA/Fedora_19_test_days
IRC #fedora-test-day (webirc)

Mailing list

Can't make the date?
If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find at Bugzilla, and add your results to the results section. If this page is more than a month old when you arrive here, please check the current schedule and see if a similar but more recent Test Day is planned or has already happened.


What to test?

Today's instalment of Fedora Test Day will focus on making the support for users coming from a trusted Active Directory domain available to legacy (non-SSSD) clients as well as providing support for using POSIX attributes from AD.

Who's available


We need your feedback!

Prerequisite for Test Day

# wget http://repos.fedorapeople.org/repos/jhrozek/freeipa-test-day/fedora-freeipa-test-day.repo \
       -O /etc/yum.repos.d/fedora-freeipa-test-day.repo

How to test?

This test day focuses on making users and groups from a trusted AD domain available to a wide range of clients. Even if your flavor of Linux or UNIX client is not described in the steps below, you are still welcome to join the test day! In general, the testing would include:

  • Establish a trust between an IPA server and an Active Directory instance following the steps below
  • Set up the LDAP client software (such as nss_ldap or pam_ldap) on your client to point to the IPA server
  • Retrieve identity information about users coming from the trusted AD domain
  • Authenticate as a user coming from the trusted AD domain

Please report any issues you find using the channels described above or simply start a thread on the freeipa-users mailing list.

Test Cases

Install/Setup Tests

Using POSIX attributes defined in AD

Serving legacy clients for trusts

Test Results

If you have problems with any of the tests, report a bug to Trac or Bugzilla usually for the component freeipa

Filing a bug
If you are unsure about exactly how to file the report or what other information to include, just ask us on IRC and we will help you.

Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the result template to enter your result, as shown in the example result line.

User IPA Installation Trust preparation POSIX in AD Trust creation Generic legacy client Legacy clients with pam-nss-ldap Legacy client with SSSD References
Sample User
Pass pass
Warning warn
Fail fail
Pass pass
  1. Test pass, but also encountered RHBZ #54321
  2. RHBZ #12345