Test Day:2012-10-18 Active Directory: Difference between revisions

Revision as of 13:41, 18 October 2012

Fedora Test Days

Active Directory

Date	2012-10-18
Time	all day

Website	QA/Fedora_18_test_days
IRC	#fedora-test-day (webirc)
Mailing list	sssd-devel

Can't make the date?
If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find at Bugzilla, and add your results to the results section. If this page is more than a month old when you arrive here, please check the current schedule and see if a similar but more recent Test Day is planned or has already happened.

What to test?

Today's installment of Fedora Test Day will focus on Active Directory, in particular using realmd to setup authentication using domain accounts, sssd to handle the active directory authentication, and other involved bits and pieces.

Who's available

The following cast of characters will be available testing, workarounds, bug fixes, and general discussion ...

Development - Stefw (stefw), jhrozek (jhrozek-SSSD devel)(irc_nick2)
Quality Assurance - ksrot (ksrot), omoris (omoris), mvadkert (mvadkert), jpospisi (jpospisi)

Prerequisite for Test Day

You need the following before joining in on the test day.

An updated Fedora 18 pre-release.
realmd 0.9 installed from updates-testing, or from git master
An Active Directory domain to test against.
Domain user account or administrator account on the given Active Directory domain. See below for which test cases require which privileges.

How to test?

At a high level the following are being tested:

realmd used together with Active Directory
sssd used together with Active Directory
control-center GNOME control center used with Enterprise Logins
gnome-online-accounts used with a Kerberos account
gvfs used for SMB access with a Kerberos ticket

You can explore these, and their documentation. Or you can follow the test cases below.

Test Cases

Testcase	Description	Privileges	Approx. time required
AD no krb5.conf	Using Active Directory without krb5.conf	Any	5 minutes
Discover AD	Using realmd to discover information about an Active Directory domain	Any	5 minutes
Join AD with sssd	Using realmd to join an Active Directory domain with sssd as the client.	Domain user	15 minutes
Leave AD	Using realmd to leave an Active Directory domain.	Domain user	15 minutes
Leave AD with remove	Using realmd to leave an Active Directory domain, removing the computer account.	Domain user	15 minutes
Join AD with winbind	Using realmd to join an Active Directory domain with winbind as the client.	Domain user	15 minutes
Login with AD account	Using realmd permit one domain login, and then log in using that account	Domain user	10 minutes
Deny login for AD account	Using realmd deny one domain login.	Domain user	10 minutes
Login with any AD account	Using realmd permit any domain login, and then log in using an account	Domain user	10 minutes
Deny login for any AD account	Using realmd deny any domain login.	Domain user	10 minutes
Join AD automatic	Using realmd to join an active directory domain automatically	Domain admin	20 minutes
Join AD with OTP	Using realmd to join an Active Directory domain with a one time password.	Domain admin	20 minutes
Control Center Enterprise Login	Using Control Center to add an Enterprise Login (ie: a domain account), and testing login with that account.	Domain user	20 minutes
GVfs access	Using gvfs to access SMB shares with active kerberos ticket.	Domain user	5 minutes

Test Results

Log issues and enhancements in one of these places:

User	AD no krb5.conf	AD discovery	SSSD join	Leave AD	Leave AD and remove account	winbind join	login	deny login	permit login	autojoin	OTP join	control center	gvfsd-smb	References
Sample User	none	pass	warn ^[1]	fail ^[2]	none	none	none	none	none	none	none	none	none	↑ Test pass, RHBZ #54321 ↑ RHBZ #12345
mvadkert	pass	pass	fail ^[1], ^[2], ^[3]	none	none	none	none	none	none	none	none	none	none	↑ RHBZ #867820 ↑ RHBZ #867767 - rpcbind issue ↑ RHBZ #867769 man page typo
Maxim Burgerhout	pass	pass	fail ^[1]	fail ^[2]	fail ^[3]	fail ^[4]	warn ^[5]	none	none	none	none	none	none	↑ RHBZ #867765; works without SELinux ↑ same ↑ same ↑ Join works, but samba-client and samba-winbind packages are not installed RHBZ #867873 ↑ Works, but primary group is not resolved RHBZ #867874
omoris	pass	pass	none	none	none	none	none	none	none	none	none	none	none
Stijn	pass	pass	fail ^[1]	fail ^[2]	fail ^[3]	none	none	none	none	none	none	none	none	↑ AVC denials (RHBZ #867765), incorrect DNS registration (RHBZ #867864) ↑ AVC denials (RHBZ #867765) ↑ AVC denials (RHBZ #867765)
stefw	pass	pass	fail ^[1]	warn ^[2]	warn ^[3]	none	none	none	none	none	none	none	none	none ↑ RHBZ #867767 ↑ with setenforce 0 ↑ with setenforce 0

[1] Test pass, RHBZ #54321

[2] RHBZ #12345

[3] RHBZ #867820

[4] RHBZ #867767 - rpcbind issue

[5] RHBZ #867769 man page typo

[6] RHBZ #867765; works without SELinux

[7] same

[8] same

[9] Join works, but samba-client and samba-winbind packages are not installed RHBZ #867873

[10] Works, but primary group is not resolved RHBZ #867874

[11] AVC denials (RHBZ #867765), incorrect DNS registration (RHBZ #867864)

[12] AVC denials (RHBZ #867765)

[13] AVC denials (RHBZ #867765)

[14] RHBZ #867767

[15] with setenforce 0

[16] with setenforce 0

[1]

[2]

[1]

[2]

[3]

[1]

[2]

[3]

[4]

[5]

[1]

[2]

[3]

[1]

[2]

[3]

@@ Line 217: / Line 217: @@
 | {{result|pass}}
 | {{result|pass}}
-| {{result|fail}} <ref>Tests pass, AVC denials ({{bz|867765}}), incorrect DNS registration ({{bz|867864}})</ref>
+| {{result|fail}} <ref>AVC denials ({{bz|867765}}), incorrect DNS registration ({{bz|867864}})</ref>
-| {{result|fail}} <ref>Tests pass, AVC denials ({{bz|867765}})</ref>
+| {{result|fail}} <ref>AVC denials ({{bz|867765}})</ref>
-| {{result|none}}
+| {{result|fail}} <ref>AVC denials ({{bz|867765}})</ref>
 | {{result|none}}
 | {{result|none}}

Search