Latest revision as of 23:22, 17 July 2018

Associated release criterion
This test case is associated with the Fedora_42_Final_Release_Criteria#domain-password-change release criterion. If you are doing release validation testing, a failure of this test case may be a breach of that release criterion. If so, please file a bug and nominate it as blocking the appropriate milestone, using the blocker bug nomination page.

Description

Test user password changes with FreeIPA web interface and command line.

Deploy a correctly-configured FreeIPA domain controller. You can follow:
QA:Testcase_Server_role_deploy with the Domain Controller role to deploy a FreeIPA domain controller on Fedora 28 or earlier

QA:Testcase_freeipa_trust_server_installation to deploy a FreeIPA domain controller on Fedora 29 or later
Enrol a test system in the domain. There are various ways to do this. You will find several test cases you can follow in the Server release validation test cases, FreeIPA test cases, and Realmd test cases
Log in to the FreeIPA web UI (use the IPA server's hostname as the URL) as 'admin', go to 'Policy' and then 'Password Policies', open 'global_policy' and set the 'Min lifetime (hours)' to 0

Log in to the FreeIPA web UI (use the IPA server's hostname as the URL) as any domain user
Browse to the user's page (if you log in as a non-admin user, this will be the first page you see)
Click 'Actions' then 'Reset Password' and change the password
Log out of the web UI
Open a console
Run kinit (user), where (user) is the name of the user account whose password you just changed
Enter the new password
Run ipa user-mod (user) --password, again substituting the user name for (user), and change the password again
Attempt to run kinit again, log in to the web UI again, or log in to the system using the new password

Revision as of 21:07, 26 April 2016 (view source) Adamwill (talk \| contribs) (add a setup step to change the minimum password lifetime, and note location of 'reset password') ← Older edit		Latest revision as of 23:22, 17 July 2018 (view source) Adamwill (talk \| contribs) (update to associated release criteria (server roles are gone))
Line 1:		Line 1:
	{{Template:~~Associated_server_role_requirements~~\|~~Domain controller~~}}		{{Template:Associated_release_criterion\|Final\|domain-password-change}}

	{{QA/Test_Case		{{QA/Test_Case