2025-12-02 FreeIPA-WebUI Test Day

FreeIPA WebUI Test Day


Date	2025-12-02 and 2025-12-03
Time	03:30 to 19:00 UTC both days

Website	QA/Test Days
Matrix	#test-day:fedoraproject.org^{(other clients\|?)}
Mailing list	test

Can't make the date?
If you come to this page after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find, and add your results to the results section. If this page is more than a month old when you arrive here, please check the current schedule and see if a similar but more recent Test Day is planned or has already happened.

What to test?[edit]

This Test Day will focus on FreeIPA Modern WebUI.

Who's available[edit]

The following cast of characters will be available testing, workarounds, bug fixes, and general discussion:

Development:
- [EMEA]: Erik Belko (ebelko), Carla Martinez (carlmart), David Hanina (dhanina), Veronika Miticka (vmiticka)
- [NA/LATAM]: Rafael Jeffman (rjeffman)
- [APAC]: Sudhir Menon (sumenon)
Quality - Lukáš Růžička (lruzicka), Kamil Paral (kparal), Adam Williamson (adamw), Petr Sklenar (psklenar)

You can chat with us on Matrix. See the infobox on top of the page to learn where to join.

If you are Red Hatter and prefer Slack, you can also join and ask us in #fedora-test-day-freeipa-webui channel.

Prerequisite for Test Day[edit]

A virtual machine of your choice (we recommend Boxes) or a bare metal machine
An installation of Fedora 43 (any Edition or Spin). Make sure to fully update your system.
- If installing a fresh system, please grab your copy from: https://www.fedoraproject.org. The workstation edition is good enough.
- Make sure you have no important data on that system. Things might go wrong -- don't do this on your production machine!

Install[edit]

Install procedure for Fedora 43

Enable the COPR repository for FreeIPA nightly builds. (This will automatically use the Fedora 43 repository when run on Fedora 43)

sudo dnf copr enable -y @freeipa/freeipa-master-nightly

Optionally, enable the dependencies repository (recommended if you encounter missing dependencies)

sudo dnf copr enable -y @freeipa/freeipa-master

Install FreeIPA server rpms with DNS support

sudo dnf install -y freeipa-server freeipa-server-dns

Run the FreeIPA server installation (this will automatically deploy FreeIPA with the Modern WebUI), we recommend reading through and testing the WebUI with various deployments:

sudo ipa-server-install

For the most simple installation you can simply run:

hostnamectl set-hostname "server.ipa.demo"
sudo ipa-server-install -U -n dom-server.ipa.demo -r DOM-IPA.DEMO -p Secret123 -a Secret123 --auto-forwarders --setup-dns --setup-kra

After installation completes, you can access the FreeIPA Modern WebUI by navigating to:
https://localhost/ipa/modern-ui

In case you want to connect from your host machine into the VM , you need to obtain the ip address (ip a) of the VM and add an entry into your /etc/hosts file:

${IP_ADDRESS}    hostname

In our example:

${IP_ADDRESS}    dom-server.ipa.demo

This will also change the url to:
https://dom-server.ipa.demo/ipa/modern-ui

The default admin credentials are as follows:
username: admin
password: Secret123

The FreeIPA Modern WebUI will be automatically available for you to explore.

Note: This uses the master-nightly builds which are unofficial and provided as-is. They can break at any time, so use at your own risk.

Alternative option: Pre-deployed Instances[edit]

While we recommend following the installation instructions above to deploy FreeIPA on your own machine for the best learning experience, pre-configured instances are available for convenience:

Red Hat internal[edit]

Please feel free to reach out on the Slack channel if you’d like access to one of the machines.

How to test?[edit]

Visit the results page and click on the column title links to see the tests that need to be run: most column titles are links to a specific test case. Follow the instructions there, then enter your results by clicking the Enter result button for the test.

Please also try to experiment and explore and perform tasks not mentioned in any of the pre-defined test cases.

Reporting bugs[edit]

Please do not report issues with the current FreeIPA web UI (accessible through /ipa/ui path). The current FreeIPA web UI is in maintenance mode. The bugs reported this way will be closed down. Please help us testing the new ('modern') web UI.

All new bugs should be reported into the upstream bug tracker.

We would love to hear your opinions about the UI and UX. We've set up GitHub discussions space specifically for you to share your UX feedback and new ideas.

We really need bug reports!
Please note that just mentioning your problem into the comments section on the results page is not very helpful. Very often those problems only happen in specific circumstances, or with specific steps taken. We need the logs and screenshots, and we need to be able to ask you followup questions. Please file bug reports, it's much more useful than a short comment. Thank you!

When filing the bug, it's very helpful to include:

exact steps you've performed (and whether you can reproduce it again)
screenshots or videos of the WebUI
your system description, FreeIPA deployment
browser information

If you are unsure about exactly how to file the report or what other information to include, just ask us.

Any bug report is better than no bug report, if you're wondering whether something is a bug or due to inexperience with the application, consider it a bug!

Please make sure to link to the bug when submitting your test result, thanks!

Exported Test Results[edit]

upstream reports[edit]

Majority of test case results were reported to upstream project page: freeipa-webui/issues

other reports[edit]

User	Profile	Login_page	User_management	Group_management	WebUI_Services	Password_management	References
Adrien D	Fedora Linux 43 (Server Edition) - KVM/QEMU Standard PC - 2vCPU - 4GB RAM	pass	pass ^[1]	pass ^[2]	warn ^[3]		↑ Create OK, Update OK, Password Reset OK, Disable OK, Delete OK ↑ All OK ↑ Looks OK with some tests in hosts, sudo, password policies, but trust view (https://fcipa.linuxtricks.lan/ipa/modern-ui/trusts?size=10) didn't load
Brandon Nielsen	Fedora 43 - Boxes VM - "Most simple installation"		warn ^[1]				↑ Adding, modifying, and deleting work. There does not appear to be a way to change a password, either as admin, or as the user.
Brandon Nielsen	Fedora 43 - Boxes VM - "Most simple installation"	pass
Derek Enz	AMD 5600G F43 KDE Boxes VM	pass	warn ^[1]	pass	warn ^[2]	fail ^[3]	↑ Could add/change info but could not see how to change the password ↑ Maybe I missed something but cannot find or see any certificates issued by freeipa. Enabed pki-tomcat and ran cert update. ↑ Could add/change some info but could not see how to change user password.
Florence Blanc-Renaud	Minimal profile, CA-less, DNS-less	pass
lruzicka	Libvirt based VM, Workstation Live ISO, simple IPA installation	pass ^[1]	warn ^[2]	pass	warn ^[3]	warn ^[4]	↑ It is important that admin has not obtained the Kerberos ticket before. ↑ * User can be created but the dialogue does not respond to Help buttons. Non-admin users can open user adition dialogues without any issues, walk through the process, and they only are informed about not having rights is when they click "Add" at the end of the dialogue. * Some attributes could be changed, with others I did not know what the correct values should be. * Disabling user works, however when user attempts to log in, he gets a message about incorrect password and not about being disabled. I do not know if this is a safety precautions, but it is definitely confusing. * Resetting password - there is no way to reset or change the user passwordwhen being admin, password could only be limited in validation. The drop-down menu only works for logging out, it does not respong to any other item in the drop-down menu. * Deleting a user account. Same as with user creation, anyone is allowed to attempt to delete any users. The action is stopped when "Delete" is clicked. ↑ I could revoke the HTTP certificate, but I could not verify what it really meant, because the WebUI behaved the same way as before. The test cases provided did not reveal any details about how to check that it really has been revoked. Also, I did not see any DNF records in the UI although I went through all the pages. ↑ * I could not reset the password for any users (active or locked). * If I set password expiration, the password does not expire after the set time. * Password policy seems to be set accordingly. *Password policy is not enforced when I try to add a user. Short passwords still work although I have set min_length to 10. However, the test cases do not show how to do it and what to observer, which means that only IPA experienced users can participate correctly.
Petr Sklenar	machine from AWS, x86_64, cloud image	pass	warn ^[1]		warn ^[2]		↑ https://github.com/freeipa/freeipa-webui/issues/987, https://github.com/freeipa/freeipa-webui/issues/982 ↑ https://github.com/freeipa/freeipa-webui/issues/994, https://github.com/freeipa/freeipa-webui/issues/1007, https://github.com/freeipa/freeipa-webui/issues/1009
samishaikh	Fedora 43 Workstation inside VirtualBox (x86_64)	fail ^[1]	pass ^[2]	warn ^[3]	pass ^[4] warn ^[5] pass ^[6] warn ^[7]	warn ^[8]	↑ After trying multiple wrong passwords it does not trough any error ↑ The system prevents duplicate entry of users ↑ One can create multiple groups with same name and same GID ↑ After Adding users the pagination works well ↑ In IPA Server the Trusts never stops loading ↑ The Groups and Users name are case independent when searched ↑ In users-> settings ,there are some Icons overlapping each other each affects the UI as person clicking on one icon or button result into unwanted icon clicked or the user cant be able to see the other icon ↑ There is no Minimum and Maximum range of digits set for a password

[1] Create OK, Update OK, Password Reset OK, Disable OK, Delete OK

[2] All OK

[3] Looks OK with some tests in hosts, sudo, password policies, but trust view (https://fcipa.linuxtricks.lan/ipa/modern-ui/trusts?size=10) didn't load

[4] Adding, modifying, and deleting work. There does not appear to be a way to change a password, either as admin, or as the user.

[5] Could add/change info but could not see how to change the password

[6] Maybe I missed something but cannot find or see any certificates issued by freeipa. Enabed pki-tomcat and ran cert update.

[7] Could add/change some info but could not see how to change user password.

[8] It is important that admin has not obtained the Kerberos ticket before.

[9] * User can be created but the dialogue does not respond to Help buttons. Non-admin users can open user adition dialogues without any issues, walk through the process, and they only are informed about not having rights is when they click "Add" at the end of the dialogue. * Some attributes could be changed, with others I did not know what the correct values should be. * Disabling user works, however when user attempts to log in, he gets a message about incorrect password and not about being disabled. I do not know if this is a safety precautions, but it is definitely confusing. * Resetting password - there is no way to reset or change the user passwordwhen being admin, password could only be limited in validation. The drop-down menu only works for logging out, it does not respong to any other item in the drop-down menu. * Deleting a user account. Same as with user creation, anyone is allowed to attempt to delete any users. The action is stopped when "Delete" is clicked.

[10] I could revoke the HTTP certificate, but I could not verify what it really meant, because the WebUI behaved the same way as before. The test cases provided did not reveal any details about how to check that it really has been revoked. Also, I did not see any DNF records in the UI although I went through all the pages.

[11] * I could not reset the password for any users (active or locked). * If I set password expiration, the password does not expire after the set time. * Password policy seems to be set accordingly. *Password policy is not enforced when I try to add a user. Short passwords still work although I have set min_length to 10. However, the test cases do not show how to do it and what to observer, which means that only IPA experienced users can participate correctly.

[12] ttps://github.com/freeipa/freeipa-webui/issues/987, https://github.com/freeipa/freeipa-webui/issues/982

[13] ttps://github.com/freeipa/freeipa-webui/issues/994, https://github.com/freeipa/freeipa-webui/issues/1007, https://github.com/freeipa/freeipa-webui/issues/1009

[14] After trying multiple wrong passwords it does not trough any error

[15] The system prevents duplicate entry of users

[16] One can create multiple groups with same name and same GID

[17] After Adding users the pagination works well

[18] In IPA Server the Trusts never stops loading

[19] The Groups and Users name are case independent when searched

[20] In users-> settings ,there are some Icons overlapping each other each affects the UI as person clicking on one icon or button result into unwanted icon clicked or the user cant be able to see the other icon

[21] There is no Minimum and Maximum range of digits set for a password

[1]

[2]

[3]

[1]

[1]

[2]

[3]

[1]

[2]

[3]

[4]

[1]

[2]

[1]

[2]

[3]

[4]

[5]

[6]

[7]

[8]

Search

Test Day:2025-12-02 FreeIPA-WebUI Test Day

Contents