(→Prerequisite for Test Day: update realmd and selinux-policy) |
m (internal link cleaning) |
||
(120 intermediate revisions by 26 users not shown) | |||
Line 5: | Line 5: | ||
| date = 2013-04-18 | | date = 2013-04-18 | ||
| time = all day | | time = all day | ||
| website = [http://www.freeipa.org/ FreeIPA project], [ | | website = [http://www.freeipa.org/ FreeIPA project], [[Features/IPAv3TrustImprovements|Feature page]] | ||
| irc = [irc://irc.freenode.net/#freeipa #freeipa] ([http://webchat.freenode.net/?channels=freeipa webirc], [irc://irc.freenode.net/#fedora-test-day #fedora-test-day] ([http://webchat.freenode.net/?channels=fedora-test-day webirc])) | | irc = [irc://irc.freenode.net/#freeipa #freeipa] ([http://webchat.freenode.net/?channels=freeipa webirc], [irc://irc.freenode.net/#fedora-test-day #fedora-test-day] ([http://webchat.freenode.net/?channels=fedora-test-day webirc])) | ||
}} | }} | ||
{{admon/note | Can't make the date? | If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find, and add your results to the results section.}} | {{admon/note | Can't make the date? | If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find, and add your results to the results section.}} | ||
Line 17: | Line 15: | ||
== Who's available == | == Who's available == | ||
* Development: [[User:mkosek|Martin Košek]] (mkosek), [[User:abbra|Alexander Bokovoy]] (ab),[[User:rcritten|Rob Crittenden]] (rcrit) | * Development: [[User:mkosek|Martin Košek]] (mkosek), [[User:abbra|Alexander Bokovoy]] (ab), [[User:rcritten|Rob Crittenden]] (rcrit) | ||
* Quality Assurance: Scott Poore (spoore), Kaleem Siddiqui (kaleem) | * Quality Assurance: Scott Poore (spoore), Kaleem Siddiqui (kaleem) | ||
Line 32: | Line 30: | ||
! Architecture !! SHA256SUM | ! Architecture !! SHA256SUM | ||
|- | |- | ||
| [http://fedorapeople.org/groups/qa/testday-20130418-x86_64.iso x86_64] || | | [http://fedorapeople.org/groups/qa/testday-20130418-x86_64.iso x86_64] || 149a7ef93d50d3c40bc26e7f21037add9ac7968c074937ebb72b031cb527db93 | ||
|- | |- | ||
| [http://fedorapeople.org/groups/qa/testday-20130418-i686.iso i686] || | | [http://fedorapeople.org/groups/qa/testday-20130418-i686.iso i686] || 8bc3536fbc982a80f4b74baf7530427113e5b2fca24cb098d3565da2d920423c | ||
|} | |} | ||
{{admon/note | Memory | Please make sure that the LiveCD has enough memory to operate. We recommend: | {{admon/note | Memory | Please make sure that the LiveCD has enough memory to operate. We recommend: | ||
Line 40: | Line 38: | ||
* At minimum 3 GB memory for graphical (GNOME) run | * At minimum 3 GB memory for graphical (GNOME) run | ||
}} | }} | ||
* Test day notes: | |||
** Please install 'java-atk-wrapper' package in addition to 'freeipa-server' if you are planning to use integrated Dogtag CA. There is a missing dependency on Dogtag side right now. | |||
* Or an installed [http://dl.fedoraproject.org/pub/alt/stage/ Fedora 19 pre-release] with latest updates | * Or an installed [http://dl.fedoraproject.org/pub/alt/stage/ Fedora 19 pre-release] with latest updates | ||
** Please use latest packages from updates-testing repository, i.e. do <code>yum update --enablerepo=updates-testing</code> | ** Please use latest packages from updates-testing repository, i.e. do <code>yum update --enablerepo=updates-testing</code> | ||
** If the following essential packages | ** If the following essential packages have not hit the ''updates-testing'' repo yet, they can be also downloaded from koji: | ||
*** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412163 freeipa-server-3.2.0-0.2.beta1.fc19] | *** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412163 freeipa-server-3.2.0-0.2.beta1.fc19] | ||
*** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412535 krb5-1.11.2-2.fc19] | |||
*** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412502 sssd-1.10.0-2.fc19.alpha1] | *** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412502 sssd-1.10.0-2.fc19.alpha1] | ||
*** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412515 realmd-0.13.3-2] | *** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412515 realmd-0.13.3-2] | ||
*** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412505 selinux-policy-3.12.1-32] | *** [http://koji.fedoraproject.org/koji/buildinfo?buildID=412505 selinux-policy-3.12.1-32] | ||
** For easier downloading from koji, install koji package: | |||
yum install koji createrepo | |||
mkdir /opt/repo | |||
cd /opt/repo | |||
for pkg in krb5-1.11.2-2.fc19 sssd-1.10.0-2.fc19.alpha1 realmd-0.13.3-2.fc19 selinux-policy-3.12.1-32.fc19 ; do | |||
koji download-build $pkg | |||
done | |||
createrepo /opt/repo | |||
** Add local repo file to use with yum, /etc/yum.repos.d/local.repo: | |||
[local-repo] | |||
name=Fedora $releasever - $basearch - Local Updates | |||
failovermethod=priority | |||
baseurl=file:///opt/repo | |||
enabled=1 | |||
gpgcheck=0 | |||
[local-repo-debuginfo] | |||
name=Fedora $releasever - $basearch - Local Updates Debug | |||
failovermethod=priority | |||
baseurl=file:///opt/repo | |||
enabled=0 | |||
gpgcheck=0 | |||
[local-repo-source] | |||
name=Fedora $releasever - $basearch - Local Updates Source | |||
failovermethod=priority | |||
baseurl=file:///opt/repo | |||
enabled=0 | |||
gpgcheck=0 | |||
** Now you can run yum update | |||
** We recommend multiple installed instances for replica or client tests | ** We recommend multiple installed instances for replica or client tests | ||
* For AD integration test cases, installed Microsoft Active Directory of version 2008 R2 or newer | * For AD integration test cases, installed Microsoft Active Directory of version 2008 R2 or newer | ||
Line 58: | Line 90: | ||
* 3. [[QA:Testcase_freeipav3_client_reenrollment|Test re-enrolling FreeIPA client]] | * 3. [[QA:Testcase_freeipav3_client_reenrollment|Test re-enrolling FreeIPA client]] | ||
Realmd Tests: | Realmd Tests ([[Features/RealmdFreeIpaSupport|feature]]): | ||
* 4. [[QA:Testcase_FreeIPA_realmd_join|Join FreeIPA domain with realmd]] | * 4. [[QA:Testcase_FreeIPA_realmd_join|Join FreeIPA domain with realmd]] | ||
* 5. [[QA:Testcase_FreeIPA_realmd_leave|Leave FreeIPA domain with realmd]] | * 5. [[QA:Testcase_FreeIPA_realmd_leave|Leave FreeIPA domain with realmd]] | ||
* 6. [[QA:Testcase_FreeIPA_realmd_login|Make sure that realmd respects FreeIPA's HBAC rules]] | * 6. [[QA:Testcase_FreeIPA_realmd_login|Make sure that realmd respects FreeIPA's HBAC rules]] | ||
* 7. [[QA:Testcase_FreeIPA_realmd_ssh|Verify FreeIPA's SSH public key management using realmd to join the current machine to a FreeIPA domain. ]] | |||
* 8. realmd + sudo is [[QA:Testcase_FreeIPA_realmd_sudo|not]] yet ready for testing. | |||
* 9. [[QA:Testcase_FreeIPA_control_center|Use GNOME Control Center with FreeIPA accounts]] | |||
Trust Tests: | Trust Tests: | ||
* | * 10. [[QA:Testcase_freeipav3_ad_realmdomains|Configure domains controlled by FreeIPA]] | ||
* | * 11. [[QA:Testcase_freeipav3_ad_trust|AD Trust configuration]] | ||
* | * 12. [[QA:Testcase_freeipav3_ad_realmdomains_windows|Check UPN suffixes associated with FreeIPA at AD side]] | ||
* | * 13. [[QA:Testcase_freeipav3_ad_multimaster_trust|AD Multimaster trust test]] | ||
* | * 14. [[QA:Testcase_freeipav3_ad_hbac|Configure HBAC policy for AD users and test it with HBAC test]] | ||
Other New Features: | Other New Features: | ||
* | * 15. [[QA:Testcase_freeipav3_kerberos_flag_control|Configure chosen Kerberos flags with FreeIPA CLI]] | ||
* | * 16. [[QA:Testcase_freeipav3_cert_find|Browse certificates published by FreeIPA CA]] | ||
* | * 17. [[QA:Testcase_freeipav3_backup_and_restore|Test backup&restore of FreeIPA server]] | ||
* | * 18. [[QA:Testcase_freeipav3_ca_less_installation|Install FreeIPA server without a CA]] | ||
== Test Results == | == Test Results == | ||
Line 83: | Line 118: | ||
Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the [[Template:result|result template]] to enter your result, as shown in the example result line. | Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the [[Template:result|result template]] to enter your result, as shown in the example result line. | ||
To provide extended commands, bugs, etc, or if you don't have a FAS account but want to provide results, please use our public [http://openetherpad.org/Fedora-19-IPA-Test-Day Etherpad] | |||
'''Installation/Setup Results''' | '''Installation/Setup Results''' | ||
Line 96: | Line 133: | ||
| {{result|warn}} <ref>Test pass, {{bz|54321}}</ref> | | {{result|warn}} <ref>Test pass, {{bz|54321}}</ref> | ||
| {{result|fail}} <ref>{{bz|12345}}</ref> | | {{result|fail}} <ref>{{bz|12345}}</ref> | ||
| <references/> | |||
|- | |||
| [[User:Shanks|Shanks]] | |||
| {{result|fail}} <ref> Nothing apart from the ones already filed </ref> | |||
| {{result|}} | |||
| {{result|warn}} <ref> Improvement: [https://fedorahosted.org/freeipa/ticket/3573 #3573]</ref> | |||
| <references/> | |||
|- | |||
| [[User:mrniranjan|mrniranjan]] | |||
| {{result|fail||953413|953432|953485}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:mvarun|mvarun]] | |||
| {{result|fail||953464|953432}} | |||
| {{result|pass||953541}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mkosek|mkosek]] | |||
| {{result|warn||953464}}<ref>[https://fedorahosted.org/freeipa/ticket/3570 #3570]</ref> | |||
| {{result|}} | |||
| {{result|pass}} <ref>Improvement: [https://fedorahosted.org/freeipa/ticket/3572 #3572]</ref> | |||
| <references/> | |||
|- | |||
| [[User:pkis|pkis]] | |||
| {{result|fail||953464}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:dspurek|dspurek]] | |||
| {{result|fail||953413|953485}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:jscotka|Jan Scotka]] | |||
| {{result|fail||953413|953488}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:Akrivoka|Ana Krivokapic]] | |||
| {{result|warn||953413}}<ref>Improvement: [https://fedorahosted.org/freeipa/ticket/3576 #3576]</ref> | |||
| {{result|warn||953653}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:tbabej|Tomas Babej]] | |||
| {{result|fail||953413|953432}} | |||
| {{result|}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:todoleza|Tomas Dolezal]] | |||
| {{result|fail}} <ref>encountered {{bz|953413}}</ref> <ref>enhanced info for {{bz|953488}}</ref> | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:abbra|Alexander Bokovoy]] | |||
| {{result|warn}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:pviktori|Petr Viktorin]] | |||
| {{result|warn||953413}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:rcrit|Rob Crittenden]] | |||
| {{result|fail||953413|853485}} | |||
| {{result|}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:kaleem|kaleem]] | |||
| {{result|fail||953413|953432|953485}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:spoore|spoore]] | |||
| {{result|warn||953413}}<ref>{{bz|953432}}</ref><ref>{{bz|953485}}</ref><ref>{{bz|953617}}</ref> | |||
| {{result|warn||953653}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:xdong|xdong]] | |||
| {{result|warn||953413}}<ref>{{bz|953432}}</ref><ref>{{bz|953617}}</ref> | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:yelley|Yassir Elley]] | |||
| {{result|fail||953432|953488|953464}}<ref>I was able to work around the first two bugs, but not around 953464</ref> | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | | <references/> | ||
|- | |- | ||
Line 103: | Line 242: | ||
{| style="width: 100%" | {| style="width: 100%" | ||
! style="width: 10%" | User | ! style="width: 10%" | User | ||
! style="width: | ! style="width: 12%" | [[QA:Testcase_FreeIPA_realmd_join|4. realmd: join]] | ||
! style="width: | ! style="width: 12%" | [[QA:Testcase_FreeIPA_realmd_leave|5. realmd: leave]] | ||
! style="width: | ! style="width: 12%" | [[QA:Testcase_FreeIPA_realmd_login|6. realmd: login]] | ||
! style="width: 12%" | [[QA:Testcase_FreeIPA_realmd_ssh|7. realmd: ssh]] | |||
! style="width: 12%" | [[QA:Testcase_FreeIPA_control_center|9. realmd: gnome]] | |||
! style="width: 30%" | References | ! style="width: 30%" | References | ||
|- | |- | ||
Line 112: | Line 253: | ||
| {{result|warn}} <ref>Test pass, {{bz|54321}}</ref> | | {{result|warn}} <ref>Test pass, {{bz|54321}}</ref> | ||
| {{result|fail}} <ref>{{bz|12345}}</ref> | | {{result|fail}} <ref>{{bz|12345}}</ref> | ||
| {{result|none}} | |||
| {{result|none}} | |||
| <references/> | |||
|- | |||
| [[User:Stefw|Stefw]] | |||
| {{result|warn}} <ref>{{bz|953486}} {{bz|953528}}</ref> | |||
| {{result|pass}} | |||
| {{result|warn||953116}} | |||
| {{result|none}} | |||
| {{result|fail}} <ref group="long">{{bz|953453}} {{bz|953477}} {{bz|953445}} {{bz|953174}} [https://bugzilla.gnome.org/show_bug.cgi?id=698263 gnomebz:698263] [https://bugzilla.gnome.org/show_bug.cgi?id=698262 gnomebz:698262] [https://bugzilla.gnome.org/show_bug.cgi?id=698276 gnomebz:698276] [https://bugs.freedesktop.org/show_bug.cgi?id=61858 xdgbz:61858]</ref> | |||
| <references/> | |||
|- | |||
| [[User:pkis|pkis]] | |||
| {{result|fail}} <ref>{{bz|881112}}{{bz|953286}}</ref> | |||
| {{result|fail||953286}} | |||
| {{result|pass}} | |||
| {{result|fail||953617}} | |||
| {{result|fail}} <ref>{{bz|953825}}{{bz|953829}}{{bz|953851}}{{bz|953852}}</ref> | |||
| <references/> | |||
|- | |||
| [[User:dspurek|dspurek]] | |||
| {{result|fail||953286}} | |||
| {{result|warn||953286}} | |||
| {{result|pass}} | |||
| {{result|fail||953825}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:jjaburek|jjaburek]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|warn||953825}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:mvarun|mvarun]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:pviktori|Petr Viktorin]] | |||
| {{result|warn}} <ref>[https://fedorahosted.org/freeipa/ticket/3551 #3551]</ref> | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|}} | |||
| {{result|fail}} | |||
| <references/> | |||
|- | |||
| [[User:bnater|bnater]] | |||
| {{result|fail||955501}} | |||
| {{result|fail||955501}} | |||
| {{result|pass}} | |||
| {{result|fail||955499}} | |||
| {{result|fail||955691}} | |||
| <references/> | |||
|- | |||
| [[User:yelley|Yassir Elley]] | |||
| {{result|pass}} <ref> working in enforcing mode (after downloading 3.12.1-34) </ref> | |||
| {{result|pass}} <ref> working in enforcing mode (after downloading 3.12.1-34) </ref> | |||
| {{result|pass}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
| [[User:todoleza|Tomas Dolezal]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|warn}} <ref>sshd integration</ref> | |||
| {{result|fail||953905}} | |||
| <references/> | |||
|- | |||
| [[User:tbabej|Tomas Babej]] | |||
| {{result|warn}} <ref>[https://bugzilla.redhat.com/show_bug.cgi?id=953936] BZ 953936</ref> | |||
| {{result|fail}} <ref>[https://bugzilla.redhat.com/show_bug.cgi?id=953936] BZ 953936</ref> | |||
| {{result|}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | | <references/> | ||
|- | |- | ||
Line 119: | Line 342: | ||
{| style="width: 100%" | {| style="width: 100%" | ||
! style="width: 10%" | User | ! style="width: 10%" | User | ||
! style="width: | ! style="width: 12%" | [[QA:Testcase_freeipav3_ad_realmdomains|10. Config Domains]] | ||
! style="width: | ! style="width: 12%" | [[QA:Testcase_freeipav3_ad_trust|11. Configure trust]] | ||
! style="width: | ! style="width: 12%" | [[QA:Testcase_freeipav3_ad_realmdomains_windows|12. UPN suffixes]] | ||
! style="width: | ! style="width: 12%" | [[QA:Testcase_freeipav3_ad_multimaster_trust|13. Trust multi-master]] | ||
! style="width: 12%" | [[QA:Testcase_freeipav3_ad_hbac|14. AD HBAC]] | |||
! style="width: 30%" | References | ! style="width: 30%" | References | ||
|- | |- | ||
Line 130: | Line 354: | ||
| {{result|fail}} <ref>{{bz|12345}}</ref> | | {{result|fail}} <ref>{{bz|12345}}</ref> | ||
| {{result|pass}} | | {{result|pass}} | ||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:abbra|Alexander Bokovoy]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:akrivoka|Ana Krivokapic]] | |||
| {{result|pass}} | |||
| {{result|}} | |||
| {{result|}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | |||
|- | |||
|[[User:xdong|xdong]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
|[[User:spoore|spoore]] | |||
| {{result|pass}} | |||
| {{result|pass}}<ref>ipactl restart</ref> | |||
| {{result|pass}}<ref>no klist get on w2k8</ref> | |||
| {{result|pass}} | |||
| {{result|pass}}<ref>test pass with fix from {{bz|953944}}</ref> | |||
| <references/> | |||
|- | |||
| [[User:jjaburek|jjaburek]] | |||
| {{result|pass}} | |||
| {{result|}} | |||
| {{result|}} | |||
| {{result|}} | |||
| {{result|}} | |||
| <references/> | | <references/> | ||
|- | |- | ||
Line 137: | Line 402: | ||
{| style="width: 100%" | {| style="width: 100%" | ||
! style="width: 10%" | User | ! style="width: 10%" | User | ||
! style="width: 15%" | [[QA:Testcase_freeipav3_kerberos_flag_control| | ! style="width: 15%" | [[QA:Testcase_freeipav3_kerberos_flag_control|15. Krb flags]] | ||
! style="width: 15%" | [[QA:Testcase_freeipav3_cert_find| | ! style="width: 15%" | [[QA:Testcase_freeipav3_cert_find|16. Cert-find]] | ||
! style="width: 15%" | [[QA:Testcase_freeipav3_backup_and_restore| | ! style="width: 15%" | [[QA:Testcase_freeipav3_backup_and_restore|17. Backup]] | ||
! style="width: 15%" | [[QA:Testcase_freeipav3_ca_less_installation| | ! style="width: 15%" | [[QA:Testcase_freeipav3_ca_less_installation|18. CA-less]] | ||
! style="width: 30%" | References | ! style="width: 30%" | References | ||
|- | |- | ||
Line 148: | Line 413: | ||
| {{result|fail}} <ref>{{bz|12345}}</ref> | | {{result|fail}} <ref>{{bz|12345}}</ref> | ||
| {{result|none}} | | {{result|none}} | ||
| <references/> | |||
|- | |||
| [[User:mkosek|mkosek]] | |||
| {{result|pass}} | |||
| | |||
| | |||
| | |||
| <references/> | |||
|- | |||
| [[User:pviktori|Petr Viktorin]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| | |||
| | |||
| <references/> | |||
|- | |||
| [[User:kaleem|kaleem]] | |||
| {{result|none}} | |||
| {{result|none}} | |||
| {{result|none}} | |||
| {{result|pass}} | |||
| <references/> | |||
|- | |||
| [[User:mvarun|mvarun]] | |||
| {{result|none}} | |||
| {{result|pass}} | |||
| {{result|none}} | |||
| {{result|none}} | |||
| <references/> | |||
|- | |||
| [[User:spoore|spoore]] | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| {{result|pass}} | |||
| <references/> | | <references/> | ||
|- | |- | ||
|} | |} | ||
== Long comments == | |||
<references group="long" /> | |||
[[Category:Fedora 19 Test Days]] |
Latest revision as of 15:37, 18 September 2016
Fedora 19 Test Days | |
---|---|
Test FreeIPA 3.2.0 in Fedora 19 | |
Date | 2013-04-18 |
Time | all day |
Website | FreeIPA project, Feature page |
IRC | #freeipa (webirc, #fedora-test-day (webirc)) |
What to test?[edit]
Today's Test Day will be focused on new features in FreeIPA 3.2.0 - primarily Active Directory (AD) integration, Backup and Restore and CA-less installation
Who's available[edit]
- Development: Martin Košek (mkosek), Alexander Bokovoy (ab), Rob Crittenden (rcrit)
- Quality Assurance: Scott Poore (spoore), Kaleem Siddiqui (kaleem)
Feedback[edit]
We need your feedback!
- Talk to us on #freeipa on freenode
- Send as an e-mail.
- Log issues and enhancements in trac or Bugzilla.
Prerequisite for Test Day[edit]
- A live image. Tips on using a live image are available at FedoraLiveCD.
Architecture | SHA256SUM |
---|---|
x86_64 | 149a7ef93d50d3c40bc26e7f21037add9ac7968c074937ebb72b031cb527db93 |
i686 | 8bc3536fbc982a80f4b74baf7530427113e5b2fca24cb098d3565da2d920423c |
- Test day notes:
- Please install 'java-atk-wrapper' package in addition to 'freeipa-server' if you are planning to use integrated Dogtag CA. There is a missing dependency on Dogtag side right now.
- Or an installed Fedora 19 pre-release with latest updates
- Please use latest packages from updates-testing repository, i.e. do
yum update --enablerepo=updates-testing
- If the following essential packages have not hit the updates-testing repo yet, they can be also downloaded from koji:
- For easier downloading from koji, install koji package:
- Please use latest packages from updates-testing repository, i.e. do
yum install koji createrepo mkdir /opt/repo cd /opt/repo for pkg in krb5-1.11.2-2.fc19 sssd-1.10.0-2.fc19.alpha1 realmd-0.13.3-2.fc19 selinux-policy-3.12.1-32.fc19 ; do koji download-build $pkg done createrepo /opt/repo
- Add local repo file to use with yum, /etc/yum.repos.d/local.repo:
[local-repo] name=Fedora $releasever - $basearch - Local Updates failovermethod=priority baseurl=file:///opt/repo enabled=1 gpgcheck=0 [local-repo-debuginfo] name=Fedora $releasever - $basearch - Local Updates Debug failovermethod=priority baseurl=file:///opt/repo enabled=0 gpgcheck=0 [local-repo-source] name=Fedora $releasever - $basearch - Local Updates Source failovermethod=priority baseurl=file:///opt/repo enabled=0 gpgcheck=0
- Now you can run yum update
- We recommend multiple installed instances for replica or client tests
- For AD integration test cases, installed Microsoft Active Directory of version 2008 R2 or newer
Test Cases and Instructions[edit]
Install/Setup Tests:
- 1. Basic installation tests
- 2. Install primary and replica, add couple clients
- 3. Test re-enrolling FreeIPA client
Realmd Tests (feature):
- 4. Join FreeIPA domain with realmd
- 5. Leave FreeIPA domain with realmd
- 6. Make sure that realmd respects FreeIPA's HBAC rules
- 7. Verify FreeIPA's SSH public key management using realmd to join the current machine to a FreeIPA domain.
- 8. realmd + sudo is not yet ready for testing.
- 9. Use GNOME Control Center with FreeIPA accounts
Trust Tests:
- 10. Configure domains controlled by FreeIPA
- 11. AD Trust configuration
- 12. Check UPN suffixes associated with FreeIPA at AD side
- 13. AD Multimaster trust test
- 14. Configure HBAC policy for AD users and test it with HBAC test
Other New Features:
- 15. Configure chosen Kerberos flags with FreeIPA CLI
- 16. Browse certificates published by FreeIPA CA
- 17. Test backup&restore of FreeIPA server
- 18. Install FreeIPA server without a CA
Test Results[edit]
If you have problems with any of the tests, report a bug to Trac or Bugzilla usually for the component freeipa
Once you have completed the tests, add your results to the appropriate Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the result template to enter your result, as shown in the example result line.
To provide extended commands, bugs, etc, or if you don't have a FAS account but want to provide results, please use our public Etherpad
Installation/Setup Results
Realmd Results
Trust Results
User | 10. Config Domains | 11. Configure trust | 12. UPN suffixes | 13. Trust multi-master | 14. AD HBAC | References |
---|---|---|---|---|---|---|
Sample User | ||||||
Alexander Bokovoy | ||||||
Ana Krivokapic | ||||||
xdong | ||||||
spoore | ||||||
jjaburek |
Other New Features Results
User | 15. Krb flags | 16. Cert-find | 17. Backup | 18. CA-less | References |
---|---|---|---|---|---|
Sample User | |||||
mkosek | |||||
Petr Viktorin | |||||
kaleem | |||||
mvarun | |||||
spoore |
Long comments[edit]
- ↑ RHBZ #953453 RHBZ #953477 RHBZ #953445 RHBZ #953174 gnomebz:698263 gnomebz:698262 gnomebz:698276 xdgbz:61858