From Fedora Project Wiki

m (Add category)
(Drop direct Test Days category membership)
 
(57 intermediate revisions by 11 users not shown)
Line 11: Line 11:
Today's installment of Fedora Test Day will focus on:
Today's installment of Fedora Test Day will focus on:


* [[Features/SSSD|SSSD]]
* [[Features/SSSD|System Security Services Daemon (SSSD)]]


If you come to this page after the test day, your testing of SSSD is still valuable, and you can use the information on this page to test SSSD in your setup and provide feedback. The provided LDAP server may no longer be available, so the steps to test against a private LDAP server should be followed in this case.
If you come to this page after the test day, your testing of SSSD is still valuable, and you can use the information on this page to test SSSD in your setup and provide feedback. The provided LDAP server may no longer be available, so the steps to test against a private LDAP server should be followed in this case.
Line 18: Line 18:
The following cast of characters will be available for testing, workarounds, bug fixes, and general discussion ...
The following cast of characters will be available for testing, workarounds, bug fixes, and general discussion ...


==== SSSD ====
* Development - [[User:sgallagh|Stephen Gallagher]], [[User:simo|Simo Sorce]]
* Development - [[User:sgallagh|Stephen Gallagher]], [[User:simo|Simo Sorce]]
* Quality Assurance - [[User:zmraz]], [[User:mmalik]]
* Quality Assurance - [[User:zmraz]], [[User:mmalik]]
Line 31: Line 30:


Optionally, you may download a non-destructive rawhide live image for your architecture. Tips on using a live image are available at [[FedoraLiveCD]].
Optionally, you may download a non-destructive rawhide live image for your architecture. Tips on using a live image are available at [[FedoraLiveCD]].
{|border="1"
 
|Architecture || MD5SUM
{|
! Architecture !! MD5SUM  
|-
|-
|i386 ||
| [http://jlaska.fedorapeople.org/live/livecd-fedora-livecd-testday-20090430-i386.iso i386] || 022137eeb466410221a3339519a867c7
|-
|-
|x86_64 ||
| [http://jlaska.fedorapeople.org/live/livecd-fedora-livecd-testday-20090430-x86_64.iso x86_64] || 68db3894c1d47dba2ae73330fbd5e409
|-
|-
|}
|}
Line 44: Line 44:


== How to test? ==
== How to test? ==
=== SSSD ===
 
Before proceeding to the test cases themselves, you need to install and configure sssd. The necessary steps are outlined on the [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/Installation Installation page].
Before proceeding to the test cases themselves, you need to install and configure sssd. The necessary steps are outlined on the [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/Installation Installation page]. If you are using the Test Day live image, the installation steps will be completed for you.
 
When done, please follow each of these test cases:
When done, please follow each of these test cases:
==== NSS (User identity) ====
 
=== NSS (User identity) ===
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Local_Native Local identity native to SSSD]
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Local_Native Local identity native to SSSD]
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Local_Legacy Legacy local identity provided by traditional files]
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Local_Legacy Legacy local identity provided by traditional files]
Line 53: Line 55:
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Private_LDAP_Legacy Remote identity provided by private legacy LDAP (optional)]
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Private_LDAP_Legacy Remote identity provided by private legacy LDAP (optional)]


==== PAM (User authentication) ====
=== PAM (User authentication) ===
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Local_Native Authentication of native local users]
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Local_Native Authentication of native local users]
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Local_Legacy Authentication of legacy local users through SSSD]
* [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Local_Legacy Authentication of legacy local users through SSSD]
Line 62: Line 64:


== Report your Results ==
== Report your Results ==
=== SSSD ===
If you have problems with any of the tests, report a bug to [https://fedorahosted.org/sssd/report Trac]. If you
are unsure about exactly how to file the report, just ask on IRC and we
will help you. Once you have completed the tests, add your results to the
Results table below, following the example results from Stephen Gallagher
as a template. The first column should be your name with a link to your
User page in the Wiki if you have one. For each test case, if your system
worked correctly, simply enter the word PASS. If you had trouble, enter
the word FAIL, as a link to the bug report for the failure. If you could
not perform one test (for example, you cannot perform the more advanced
tests because the basic one fails, or you cannot perform the private LDAP
test as you do not have access to an LDAP server), enter the word N/A. In
the comments column, you can enter any short, additional information about
your testing environment.


==== Results for NSS test ====
If you have problems with any of the tests, report a bug to [https://fedorahosted.org/sssd/report Trac]. If you are unsure about exactly how to file the report, just ask on IRC and we will help you. Once you have completed the tests, add your results to the Results table below, following the example results from Stephen Gallagher as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, if your system worked correctly, simply enter the word PASS. If you had trouble, enter the word FAIL, as a link to the bug report for the failure. If you could not perform one test (for example, you cannot perform the more advanced tests because the basic one fails, or you cannot perform the private LDAP test as you do not have access to an LDAP server), enter the word N/A. In the comments column, you can enter any short, additional information about your testing environment.
{|border="1"
 
|-style="color: white; background-color: #3074c2; font-weight: bold"
==== NSS Tests ====
|User || Native Local || Legacy Local || Remote LDAP || Remote Private LDAP || Comments
{|
! User
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Local_Native Native Local]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Local_Legacy Legacy Local]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_LDAP_Legacy Remote LDAP]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Private_LDAP_Legacy Remote Private LDAP]
! Comments
|-
| [[User:sgallagh|Stephen Gallagher]]
| PASS
| PASS
| PASS
| PASS
| Tests performed on x86_64 LiveCD
|-
| [[User:mnowak|Michal Nowak]]
| PASS
| PASS
| PASS
| N/A
| [http://www.smolts.org/client/show/pub_2179dd43-43bb-4fba-88cf-dc453f10632e HW]
|-
| [[User:zmraz| Zbysek MRAZ]]
| PASS
| PASS
| PASS
| -
|
|-
| [[User:robertmwilliams| Robert M Williams]]
| PASS
| PASS
| PASS
| -
| LiveCD in VM
|-
| [[User:jlaska|James Laska]]
| PASS <ref>[[rhbug:498462|498462]] - Cryptic error message when creating a user account, where account name already exists</ref>
| PASS
| PASS
| INPROGRESS
| <references/>
|-
|-
| Stephen Gallagher || PASS || PASS || || || Private LDAP server provided by FreeIPA
| [[User:simo|Simo Sorce]]
| PASS  
| PASS
| PASS  
| -
| Tests performed on x86_64 LiveCD
|-
| [[User:Sbose|Sumit Bose]]
| PASS
| PASS
| PASS
| -
| Tests performed on i386 LiveCD
|-
! User
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Local_Native Native Local]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Local_Legacy Legacy Local]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_LDAP_Legacy Remote LDAP]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/NSS_Private_LDAP_Legacy Remote Private LDAP]
! Comments
|-
|-
|}
|}


==== Results for PAM test ====
==== PAM Tests ====


{|border="1"
{|
|-style="color: white; background-color: #3074c2; font-weight: bold"
! User
|User || Native Local || Legacy Local || Native LDAP || Legacy LDAP || Native Private LDAP || Legacy Private LDAP || Comments
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Local_Native Native Local]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Local_Legacy Legacy Local]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_LDAP_Native Native LDAP]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_LDAP_Legacy Legacy LDAP]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Private_LDAP_Native Native Private LDAP]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Private_LDAP_Legacy Legacy Private LDAP]
! Comments
|-
|-
| Stephen Gallagher || || || || || || || Private LDAP server provided by FreeIPA
| [[User:sgallagh|Stephen Gallagher]]
| PASS
| WARN <ref>LiveCD removed pam_cracklib.so from system-auth. Once re-added, the test PASS</ref>
| [https://fedorahosted.org/sssd/ticket/31 FAIL]
| PASS
| [https://fedorahosted.org/sssd/ticket/31 FAIL]
| PASS
| Tests performed on x86_64 LiveCD
<references/>
|-
| [[User:mnowak|Michal Nowak]]
| PASS
| PASS
| PASS
| PASS
| N/A
| N/A
| [http://www.smolts.org/client/show/pub_2179dd43-43bb-4fba-88cf-dc453f10632e HW]
|-
| [[User:simo|Simo Sorce]]
| PASS
| PASS <ref>See ref 1 from sgallagh</ref>
| WARN <ref>Need to set "TLS_REQCERT never" in /etc/openldap/ldap.conf</ref><ref>Fails offline auth, sssd_pam segfaults</ref>
| PASS<ref>Might be a bit slow to auth when OFFLINE, be patient</ref>
| N/A
| N/A
| Tests performed on x86_64 LiveCD
<references/>
|-
| [[User:jlaska|James Laska]]
| PASS
| WARN <ref group="long">[https://fedorahosted.org/sssd/ticket/35#preview ticket#35] - [sssd[nss]] [nss_cmd_getpwuid_callback] (0): No matching domain found for [4999], fail!</ref>
<ref>[https://fedorahosted.org/sssd/ticket/36#preview ticket#36] - service sssd stop - results in sssd dead but pid file exists</ref>
| PASS <ref>See ref#1 from [[User:sgallagh]]</ref>
| FAIL <ref>Unable to pass step#7 using Test Day live image</ref>
| -
| -
| <references/>
|-
| [[User:Sbose|Sumit Bose]]
| PASS
| WARN <ref>instead of adding pam_cracklib, you can remove the pam_unix option 'use_authtok' to make passwd work</ref>
| PASS <ref>add CA cert [https://fedorahosted.org/sssd/attachment/wiki/Fedora_11_Test_Day/cacert.asc] to /etc/openldap/cacerts</ref>
| -
| -
| -
| <references/>
|-
! User
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Local_Native Native Local]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Local_Legacy Legacy Local]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_LDAP_Native Native LDAP]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_LDAP_Legacy Legacy LDAP]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Private_LDAP_Native Native Private LDAP]
! [http://fedorahosted.org/sssd/wiki/Fedora_11_Test_Day/PAM_Private_LDAP_Legacy Legacy Private LDAP]
! Comments
|-
|-
|}
|}


[[Category:Test Days]]
== Long comments ==
<references group="long" />
 
[[Category:Fedora 11 Test Days]]

Latest revision as of 19:38, 26 June 2015

DATE TIME WHERE
Thu April 30, 2009 From 12:00 to 21:00 UTC (8am -> 5pm EDT) #fedora-qa)

What to test?[edit]

Today's installment of Fedora Test Day will focus on:

If you come to this page after the test day, your testing of SSSD is still valuable, and you can use the information on this page to test SSSD in your setup and provide feedback. The provided LDAP server may no longer be available, so the steps to test against a private LDAP server should be followed in this case.

Who's available[edit]

The following cast of characters will be available for testing, workarounds, bug fixes, and general discussion ...

Prerequisites for Test Day[edit]

FIXME - subject to change when the LiveCD appears.

Update your machine[edit]

See the instructions on the Rawhide page on the various ways in which you can install or update to Rawhide. Or:

Live Image[edit]

Optionally, you may download a non-destructive rawhide live image for your architecture. Tips on using a live image are available at FedoraLiveCD.

Architecture MD5SUM
i386 022137eeb466410221a3339519a867c7
x86_64 68db3894c1d47dba2ae73330fbd5e409

Creating a LiveUSB of this rawhide image requires the latest version of syslinux, which is currently available in Rawhide and in the latest Windows liveusb-creator. Users of F10 and below can upgrade to the latest syslinux package using 

yum --enablerepo=rawhide update syslinux

How to test?[edit]

Before proceeding to the test cases themselves, you need to install and configure sssd. The necessary steps are outlined on the Installation page. If you are using the Test Day live image, the installation steps will be completed for you.

When done, please follow each of these test cases:

NSS (User identity)[edit]

PAM (User authentication)[edit]

Report your Results[edit]

If you have problems with any of the tests, report a bug to Trac. If you are unsure about exactly how to file the report, just ask on IRC and we will help you. Once you have completed the tests, add your results to the Results table below, following the example results from Stephen Gallagher as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, if your system worked correctly, simply enter the word PASS. If you had trouble, enter the word FAIL, as a link to the bug report for the failure. If you could not perform one test (for example, you cannot perform the more advanced tests because the basic one fails, or you cannot perform the private LDAP test as you do not have access to an LDAP server), enter the word N/A. In the comments column, you can enter any short, additional information about your testing environment.

NSS Tests[edit]

User Native Local Legacy Local Remote LDAP Remote Private LDAP Comments
Stephen Gallagher PASS PASS PASS PASS Tests performed on x86_64 LiveCD
Michal Nowak PASS PASS PASS N/A HW
Zbysek MRAZ PASS PASS PASS -
Robert M Williams PASS PASS PASS - LiveCD in VM
James Laska PASS [1] PASS PASS INPROGRESS
  1. ↑ 498462 - Cryptic error message when creating a user account, where account name already exists
Simo Sorce PASS PASS PASS - Tests performed on x86_64 LiveCD
Sumit Bose PASS PASS PASS - Tests performed on i386 LiveCD
User Native Local Legacy Local Remote LDAP Remote Private LDAP Comments

PAM Tests[edit]

User Native Local Legacy Local Native LDAP Legacy LDAP Native Private LDAP Legacy Private LDAP Comments
Stephen Gallagher PASS WARN [1] FAIL PASS FAIL PASS Tests performed on x86_64 LiveCD
  1. ↑ LiveCD removed pam_cracklib.so from system-auth. Once re-added, the test PASS
Michal Nowak PASS PASS PASS PASS N/A N/A HW
Simo Sorce PASS PASS [1] WARN [2][3] PASS[4] N/A N/A Tests performed on x86_64 LiveCD
  1. ↑ See ref 1 from sgallagh
  2. ↑ Need to set "TLS_REQCERT never" in /etc/openldap/ldap.conf
  3. ↑ Fails offline auth, sssd_pam segfaults
  4. ↑ Might be a bit slow to auth when OFFLINE, be patient
James Laska PASS WARN [long 1]

[1]

PASS [2] FAIL [3] - -
  1. ↑ ticket#36 - service sssd stop - results in sssd dead but pid file exists
  2. ↑ See ref#1 from User:sgallagh
  3. ↑ Unable to pass step#7 using Test Day live image
Sumit Bose PASS WARN [1] PASS [2] - - -
  1. ↑ instead of adding pam_cracklib, you can remove the pam_unix option 'use_authtok' to make passwd work
  2. ↑ add CA cert [1] to /etc/openldap/cacerts
User Native Local Legacy Local Native LDAP Legacy LDAP Native Private LDAP Legacy Private LDAP Comments

Long comments[edit]

  1. ↑ ticket#35 - [sssd[nss]] [nss_cmd_getpwuid_callback] (0): No matching domain found for [4999], fail!
Retrieved from "https://fedoraproject.org/w/index.php?title=Test_Day:2009-04-30_SSSD&oldid=416652"