2013-04-18 FreeIPA

Fedora 19 Test Days

Test FreeIPA 3.2.0 in Fedora 19

Date	2013-04-18
Time	all day

Website	FreeIPA project, Feature page
IRC	#freeipa (webirc, #fedora-test-day (webirc))

Can't make the date?
If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find, and add your results to the results section.

What to test?[edit]

Today's Test Day will be focused on new features in FreeIPA 3.2.0 - primarily Active Directory (AD) integration, Backup and Restore and CA-less installation

Who's available[edit]

Development: Martin Košek (mkosek), Alexander Bokovoy (ab), Rob Crittenden (rcrit)
Quality Assurance: Scott Poore (spoore), Kaleem Siddiqui (kaleem)

Feedback[edit]

We need your feedback!

Talk to us on #freeipa on freenode
Send as an e-mail.
Log issues and enhancements in trac or Bugzilla.

Prerequisite for Test Day[edit]

A live image. Tips on using a live image are available at FedoraLiveCD.

Architecture	SHA256SUM
x86_64	149a7ef93d50d3c40bc26e7f21037add9ac7968c074937ebb72b031cb527db93
i686	8bc3536fbc982a80f4b74baf7530427113e5b2fca24cb098d3565da2d920423c

Memory
Please make sure that the LiveCD has enough memory to operate. We recommend:

At minimum 2.5 GB of memory for non-graphical run
At minimum 3 GB memory for graphical (GNOME) run

Test day notes:
- Please install 'java-atk-wrapper' package in addition to 'freeipa-server' if you are planning to use integrated Dogtag CA. There is a missing dependency on Dogtag side right now.

Or an installed Fedora 19 pre-release with latest updates
- Please use latest packages from updates-testing repository, i.e. do yum update --enablerepo=updates-testing
- If the following essential packages have not hit the updates-testing repo yet, they can be also downloaded from koji:
- For easier downloading from koji, install koji package:

  yum install koji createrepo
  mkdir /opt/repo
  cd /opt/repo
  for pkg in krb5-1.11.2-2.fc19 sssd-1.10.0-2.fc19.alpha1 realmd-0.13.3-2.fc19 selinux-policy-3.12.1-32.fc19 ; do
     koji download-build $pkg
  done
  createrepo /opt/repo

- Add local repo file to use with yum, /etc/yum.repos.d/local.repo:

  [local-repo]
  name=Fedora $releasever - $basearch - Local Updates
  failovermethod=priority
  baseurl=file:///opt/repo
  enabled=1
  gpgcheck=0
  
  [local-repo-debuginfo]
  name=Fedora $releasever - $basearch - Local Updates Debug
  failovermethod=priority
  baseurl=file:///opt/repo
  enabled=0
  gpgcheck=0
  
  [local-repo-source]
  name=Fedora $releasever - $basearch - Local Updates Source
  failovermethod=priority
  baseurl=file:///opt/repo
  enabled=0
  gpgcheck=0

- Now you can run yum update
- We recommend multiple installed instances for replica or client tests
For AD integration test cases, installed Microsoft Active Directory of version 2008 R2 or newer
- steps how to obtain your AD test instance

Test Cases and Instructions[edit]

Install/Setup Tests:

Realmd Tests (feature):

4. Join FreeIPA domain with realmd
5. Leave FreeIPA domain with realmd
6. Make sure that realmd respects FreeIPA's HBAC rules
7. Verify FreeIPA's SSH public key management using realmd to join the current machine to a FreeIPA domain.
8. realmd + sudo is not yet ready for testing.
9. Use GNOME Control Center with FreeIPA accounts

Trust Tests:

Other New Features:

Test Results[edit]

If you have problems with any of the tests, report a bug to Trac or Bugzilla usually for the component freeipa

Filing a bug
If you are unsure about exactly how to file the report or what other information to include, just ask us on IRC and we will help you.

Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the result template to enter your result, as shown in the example result line.

To provide extended commands, bugs, etc, or if you don't have a FAS account but want to provide results, please use our public Etherpad

Installation/Setup Results

User	1. Install	2. Replication	3. Client Re-Enrollment	References
Sample User	pass	warn ^[1]	fail ^[2]	↑ Test pass, RHBZ #54321 ↑ RHBZ #12345
Shanks	fail ^[1]		warn ^[2]	↑ Nothing apart from the ones already filed ↑ Improvement: #3573
mrniranjan	fail ^[1] ^[2] ^[3]			↑ RHBZ #953413 ↑ RHBZ #953432 ↑ RHBZ #953485
mvarun	fail ^[1] ^[2]	pass ^[3]	pass	↑ RHBZ #953464 ↑ RHBZ #953432 ↑ RHBZ #953541
mkosek	warn ^[1] ^[2]		pass ^[3]	↑ RHBZ #953464 ↑ #3570 ↑ Improvement: #3572
pkis	fail ^[1]			↑ RHBZ #953464
dspurek	fail ^[1] ^[2]			↑ RHBZ #953413 ↑ RHBZ #953485
Jan Scotka	fail ^[1] ^[2]			↑ RHBZ #953413 ↑ RHBZ #953488
Ana Krivokapic	warn ^[1] ^[2]	warn ^[3]		↑ RHBZ #953413 ↑ Improvement: #3576 ↑ RHBZ #953653
Tomas Babej	fail ^[1] ^[2]		pass	↑ RHBZ #953413 ↑ RHBZ #953432
Tomas Dolezal	fail ^[1] ^[2]			↑ encountered RHBZ #953413 ↑ enhanced info for RHBZ #953488
Alexander Bokovoy	warn	pass	pass
Petr Viktorin	warn ^[1]			↑ RHBZ #953413
Rob Crittenden	fail ^[1] ^[2]		pass	↑ RHBZ #953413 ↑ RHBZ #853485
kaleem	fail ^[1] ^[2] ^[3]			↑ RHBZ #953413 ↑ RHBZ #953432 ↑ RHBZ #953485
spoore	warn ^[1] ^[2]^[3]^[4]	warn ^[5]	pass	↑ RHBZ #953413 ↑ RHBZ #953432 ↑ RHBZ #953485 ↑ RHBZ #953617 ↑ RHBZ #953653
xdong	warn ^[1] ^[2]^[3]			↑ RHBZ #953413 ↑ RHBZ #953432 ↑ RHBZ #953617
Yassir Elley	fail ^[1] ^[2] ^[3] ^[4]			↑ RHBZ #953432 ↑ RHBZ #953488 ↑ RHBZ #953464 ↑ I was able to work around the first two bugs, but not around 953464

Realmd Results

User	4. realmd: join	5. realmd: leave	6. realmd: login	7. realmd: ssh	9. realmd: gnome	References
Sample User	pass	warn ^[1]	fail ^[2]	none	none	↑ Test pass, RHBZ #54321 ↑ RHBZ #12345
Stefw	warn ^[1]	pass	warn ^[2]	none	fail ^{[long 1]}	↑ RHBZ #953486 RHBZ #953528 ↑ RHBZ #953116
pkis	fail ^[1]	fail ^[2]	pass	fail ^[3]	fail ^[4]	↑ RHBZ #881112RHBZ #953286 ↑ RHBZ #953286 ↑ RHBZ #953617 ↑ RHBZ #953825RHBZ #953829RHBZ #953851RHBZ #953852
dspurek	fail ^[1]	warn ^[1]	pass	fail ^[2]		↑ ^1.0 ^1.1 RHBZ #953286 ↑ RHBZ #953825
jjaburek	pass	pass	pass	warn ^[1]		↑ RHBZ #953825
mvarun	pass	pass	pass
Petr Viktorin	warn ^[1]	pass	pass		fail	↑ #3551
bnater	fail ^[1]	fail ^[1]	pass	fail ^[2]	fail ^[3]	↑ ^1.0 ^1.1 RHBZ #955501 ↑ RHBZ #955499 ↑ RHBZ #955691
Yassir Elley	pass ^[1]	pass ^[2]	pass			↑ working in enforcing mode (after downloading 3.12.1-34) ↑ working in enforcing mode (after downloading 3.12.1-34)
Tomas Dolezal	pass	pass	pass	warn ^[1]	fail ^[2]	↑ sshd integration ↑ RHBZ #953905
Tomas Babej	warn ^[1]	fail ^[2]				↑ [1] BZ 953936 ↑ [2] BZ 953936

Trust Results

User	10. Config Domains	11. Configure trust	12. UPN suffixes	13. Trust multi-master	14. AD HBAC	References
Sample User	pass	warn ^[1]	fail ^[2]	pass	pass	↑ Test pass, RHBZ #54321 ↑ RHBZ #12345
Alexander Bokovoy	pass	pass	pass	pass	pass
Ana Krivokapic	pass
xdong	pass	pass	pass	pass	pass
spoore	pass	pass ^[1]	pass ^[2]	pass	pass ^[3]	↑ ipactl restart ↑ no klist get on w2k8 ↑ test pass with fix from RHBZ #953944
jjaburek	pass

Other New Features Results

User	15. Krb flags	16. Cert-find	17. Backup	18. CA-less	References
Sample User	pass	warn ^[1]	fail ^[2]	none	↑ Test pass, RHBZ #54321 ↑ RHBZ #12345
mkosek	pass
Petr Viktorin	pass	pass
kaleem	none	none	none	pass
mvarun	none	pass	none	none
spoore	pass	pass	pass	pass

Long comments[edit]

↑ RHBZ #953453 RHBZ #953477 RHBZ #953445 RHBZ #953174 gnomebz:698263 gnomebz:698262 gnomebz:698276 xdgbz:61858

[1] Test pass, RHBZ #54321

[2] RHBZ #12345

[3] Nothing apart from the ones already filed

[4] Improvement: #3573

[bz953413-5] RHBZ #953413

[bz953432-6] RHBZ #953432

[bz953485-7] RHBZ #953485

[bz953464-8] RHBZ #953464

[bz953432-9] RHBZ #953432

[bz953541-10] RHBZ #953541

[bz953464-11] RHBZ #953464

[12] #3570

[13] Improvement: #3572

[bz953464-14] RHBZ #953464

[bz953413-15] RHBZ #953413

[bz953485-16] RHBZ #953485

[bz953413-17] RHBZ #953413

[bz953488-18] RHBZ #953488

[bz953413-19] RHBZ #953413

[20] Improvement: #3576

[bz953653-21] RHBZ #953653

[bz953413-22] RHBZ #953413

[bz953432-23] RHBZ #953432

[1]

[2]

[1]

[2]

[1]

[2]

[3]

[1]

[2]

[3]

[1]

[2]

[3]

[1]

[1]

[2]

[1]

[2]

[1]

[2]

[3]

[1]

[2]

[1]

[2]

[1]

[1]

[2]

[1]

[2]

[3]

[1]

[2]

[3]

[4]

[5]

[1]

[2]

[3]

[1]

[2]

[3]

[4]

[1]

[2]

[1]

[2]

[long 1]

[1]

[2]

[3]

[4]

[1]

[2]

[1]

[1]

[1]

[2]

[3]

[1]

[2]

[1]

[2]

[1]

[2]

[1]

[2]

[1]

[2]

[3]

[1]

[2]

Search

Test Day:2013-04-18 FreeIPA

Contents