Test Day:2015-03-12 Ipsilon

Fedora Test Days
Ipsilon
Date	2015-03-12
Time	all day
Website	Fedora Calendar
IRC	#fedora-test-day (webirc)
Mailing list	test

Can't make the date?
If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find at Bugzilla, and add your results to the results section. If this page is more than a month old when you arrive here, please check the current schedule and see if a similar but more recent Test Day is planned or has already happened.

What to test?

Today's installment of Fedora Test Day will focus on Ipsilon. Ipsilon is a server and a toolkit to configure Apache-based Service Providers. The server is a plugable self-contained mod_wsgi application that provides federated SSO to web applications. User authentication is always performed against a separate Identity Management system (for example a FreeIPA server), and communication with applications is done using a federation protocol like SAML, OpenID, etc..

Who's available

The following cast of characters will be available testing, workarounds, bug fixes, and general discussion ...

• Development - rcritten:Rob Crittenden (rcrit), puiterwijk:Patrick Uiterwijk (puiterwijk), simo:Simo Sorces (simo), nkinder:Nathan Kinder (nkinder)
• QA - Mike Ruckman (roshi)

Prerequisite for Test Day

At least three virtual (or physical) machines will be required to test.

Recommendation is 1GB RAM and 4GB free disk post-install per-VM.

Working DNS is required. It can be configured during the test.

You'll also need Fedora 22 alpha

How to test?

Ipsilon has a number of different components. Multiple virtual machines (or physical machines if you'd prefer) will be necessary to test.

Testing will involve:

• Installing an identity source (IPA)
• Installing an Identity Provider (IDP)
• Installing one or more Service Providers (SP)
• Testing login and logout between those service providers using a browser.

In an effort to reduce the number of VM's required IPA and the IDP will be installed on the same server.

Each SP will be enrolled as an IPA client.

See below for specific details.

Update your machine

If you're running Fedora 22, make sure you have all the current updates for it installed, using the update manager.

Permissive SELinux

There are some known issues with SELinux at the moment. Please put each VM into permissive mode before proceeding with testing:

# setenforce permissive

At the completion of testing it would be great to get the output of:

# ausearch -m AVC -ts recent

for each VM.

Test Cases

Install/Setup Tests (initially SAML):

1. Install IPA server
2. Install IDP
3. Install first SP
4. Install an SP on another VM using the same instructions as above

SAML SP testing:

• Test login/logout to SP

Info plugin testing:

• Test retrieving additional attribute

Attribute mapping and filtering:

• Map and filter attributes

Test Results

Construct a table or list to allow testers to post results. Each column should be a test case or configuration, and each row should consist of test results. Include some instructions on how to report bugs, and any special instructions. Here's an example, from a Palimpsest test day:

If you have problems with any of the tests, report a bug to Bugzilla usually for the component udisks, or gnome-disk-utility for bugs in the Palimpsest graphical front end itself. If you are unsure about exactly how to file the report or what other information to include, just ask on IRC and we will help you. Once you have completed the tests, add your results to the Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one. For each test case, use the result template to enter your result, as shown in the example result line.

User	Sample test 1	Sample test 2	Sample test 3	Sample test 4	References
Sample User	none	pass	warn	fail