(Fix testday app-generated results to use {{result}} template for bug references) |
|||
(17 intermediate revisions by 7 users not shown) | |||
Line 111: | Line 111: | ||
| {{result|pass}} | | {{result|pass}} | ||
| {{result|pass}} | | {{result|pass}} | ||
| {{result| | | {{result|pass}} <ref> Test pass with nss_ldap on RHEL5</ref> | ||
| {{result| | | {{result|pass}} <ref> Test pass with nss-pam-ldapd on RHEL6 </ref> | ||
| {{result|none}} | | {{result|none}} | ||
| AD 2008 R2 | | AD 2008 R2 | ||
Line 136: | Line 136: | ||
| {{result|warn}} <ref>(IPA native users don't auth)</ref> | | {{result|warn}} <ref>(IPA native users don't auth)</ref> | ||
| {{result|warn}} <ref>(IPA native users don't auth)</ref> | | {{result|warn}} <ref>(IPA native users don't auth)</ref> | ||
| AD 2012 | |||
| <references/> | |||
|- | |||
| [[User:steeve|Steeve Goveas]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} <ref>https://fedorahosted.org/sssd/ticket/2030</ref> | |||
| {{result|pass}} | |||
| {{result|warn}} <ref>(IPA native users don't auth)</ref> | |||
| {{result|none}} | |||
| {{result|warn}} <ref>(IPA native users don't auth)</ref> | |||
| AD 2008r2 | |||
| <references/> | |||
|- | |||
| [[User:spoore|Scott Poore]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|warn||988520}} | |||
| {{result|warn}} <ref>rhel4 fails</ref><ref>rhel5 works</ref> | |||
| {{result|warn}} <ref>ad users work, ipa doesn't</ref> | |||
| {{result|warn}} <ref>ad users work, ipa doesn't</ref> | |||
| AD 2012 | |||
| <references/> | |||
|- | |||
| [[User:Sgallagh|Stephen Gallagher]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|none}} | |||
| {{result|none}} | |||
| {{result|none}} | |||
| AD 2012 | | AD 2012 | ||
| <references/> | | <references/> | ||
|} | |} | ||
[[Category:Test Days]] | [[Category:Test Days]] [[Category:Fedora 19 Test Days]] |
Revision as of 05:38, 26 December 2014
Fedora Test Days | |
---|---|
![]() | |
Provide users from trusted Active directory domain to legacy clients | |
Date | 2013-07-25 |
Time | all day |
Website | QA/Fedora_19_test_days |
IRC | #fedora-test-day (webirc) |
Mailing list | test |
What to test?
Today's instalment of Fedora Test Day will focus on making the support for users coming from a trusted Active Directory domain available to legacy (non-SSSD) clients as well as providing support for using POSIX attributes from AD.
Who's available
- Development: Alexander Bokovoy (ab), Jakub Hrozek (jhrozek), Martin Kosek (mkosek), Tomas Babej (tbabej)
- Quality Assurance - Scott Poore (spoore), Steeve Goveas (steeve)
Feedback
We need your feedback!
- Talk to us on #freeipa on Freenode
- Send as an e-mail.
- Log issues and enhancements in FreeIPA Trac or Bugzilla.
Prerequisite for Test Day
- An instance of Microsoft Active Directory 2008 R2 or newer
- An up-to-date Fedora 19 instance along with a custom repository containing the required packages
- Grab the repofile from http://repos.fedorapeople.org/repos/jhrozek/freeipa-test-day/fedora-freeipa-test-day.repo and download it to your
/etc/yum.repos.d/
- Grab the repofile from http://repos.fedorapeople.org/repos/jhrozek/freeipa-test-day/fedora-freeipa-test-day.repo and download it to your
# wget http://repos.fedorapeople.org/repos/jhrozek/freeipa-test-day/fedora-freeipa-test-day.repo \ -O /etc/yum.repos.d/fedora-freeipa-test-day.repo
How to test?
This test day focuses on making users and groups from a trusted AD domain available to a wide range of clients. Even if your flavor of Linux or UNIX client is not described in the steps below, you are still welcome to join the test day! In general, the testing would include:
- Establish a trust between an IPA server and an Active Directory instance following the steps below
- Install/Setup test cases 1 and 2, Serving legacy clients for trusts test case 1.
- Set up the LDAP client software (such as nss_ldap or pam_ldap) on your client to point to the IPA server
- Retrieve identity information about users coming from the trusted AD domain
- Authenticate as a user coming from the trusted AD domain
Please report any issues you find using the channels described above or simply start a thread on the freeipa-users mailing list.
You can also use our public Etherpad http://openetherpad.org/p/Fedora-19-IPA-33-Test-Day to share bugs, workarounds or any other useful info.
Test Cases
Install/Setup Tests
- 1. IPA server and client installation.
- After finishing this test case, you would have a working IPA server and a client
- 2. Preparation of IPA server for the Active Directory trust.
- This testcase ensures that you have properly configured Active Directory and FreeIPA server for the trust setup
Using POSIX attributes defined in AD
- 1. Configure FreeIPA to use POSIX attributes defined in Active Direcotory
- When this test case is completed, you will have Active Directory server with Services for Unix (SFU) extension. You will be able to use POSIX attributes defined in Active Directory in FreeIPA.
Serving legacy clients for trusts
- 1. Establish trust with an AD server.
- When this test case is completed, the trust relationship between an IPA server and an AD server would be established
- 2. Configure a generic legacy client for accessing trusted resources
- Instructions for setting up a generic LDAP client are described here
- 3. Use nss-pam-ldapd to give access to trusted domain users
- This is actual test for old clients using nss-pam-ldapd (http://arthurdejong.org/git/nss-pam-ldapd). We are interested in test on RHEL 4/5, FreeBSD, and Solaris/AIX
- 4. Use legacy SSSD to give access to trusted domain users
- This is actual test for old clients using SSSD, but without native support for subdomain users. This includes all SSSD versions up to 1.9
Test Results
If you have problems with any of the tests, report a bug to Trac or Bugzilla usually for the component freeipa
Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the result template to enter your result, as shown in the example result line.
User | IPA Installation | Trust preparation | POSIX in AD | Trust creation | Generic legacy client | Legacy clients with nss-pam-ldapd | Legacy client with SSSD | Active Directory version | References |
---|---|---|---|---|---|---|---|---|---|
Sample User | ![]() |
![]() |
![]() |
![]() |
AD 2012 | ||||
mrniranjan | ![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
AD 2008 R2 | ||
Tomas Babej | ![]() |
![]() |
![]() |
![]() |
AD 2012 | ||||
Jakub Hrozek | ![]() |
![]() |
![]() |
![]() |
![]() |
AD 2012 | |||
Steeve Goveas | ![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
AD 2008r2 |
| |
Scott Poore | ![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
AD 2012 | ||
Stephen Gallagher | ![]() |
![]() |
![]() |
![]() |
AD 2012 |