From Fedora Project Wiki
Fedora 19 Test Days | |
---|---|
Enterprise accounts | |
Date | 2013-05-09 |
Time | all day |
Website | realmd SSSD project, Feature page |
IRC | #sssd (webirc, #fedora-test-day (webirc)) |
What to test?
Today's Test Day will be focused on new features related to using enterprise accounts (coming from either Active Directory or FreeIPA), in particular realmd and adcli to join a machine to a domain and sssd to handle authentication and other related tasks.
Who's available
- Development: Stef Walter (stefw, realmd/adcli dev), Jakub Hrozek (jhrozek, sssd dev)
- Quality Assurance: Patrik Kis (pkis), Davis Spurek (dspurek), Kaushik Banerjee (kaushik)
Prerequisite for Test Day
- LiveCD
- LiveCD tbd when sssd-1.10beta1 is out
- If you don't want to use the LiveCD, you can use an updated Fedora 19 pre-release
- A server to test against. Most test cases require an Active Directory domain, other tests require a FreeIPA server. Don't worry if you don't have both, any involvement in the test day is much appreciated!
- If you are on Red Hat internal network you can test against our internal Test Bad: Test Day:2013-05-09 Red Hat Test Bed
- Domain user account or administrator account on the given Active Directory domain. See table below for which test cases require which privileges.
How to test
At a high level the following are being tested:
- realmd used together with Active Directory or FreeIPA
- adcli used together with Active Directory or FreeIPA
- latest Kerberos improvements
- sssd used together with Active Directory or FreeIPA
You can explore these, and their documentation. Or you can follow the test cases below.
Test Cases - adcli
Testcase | Description | Privileges | Approx. time required |
---|---|---|---|
adcli setup | Set up the environment in order to perform the adcli tests | Any | 5 minutes |
adcli info | This test case retrieves basic information about a domain. | Any | 5 minutes |
adcli info badsite | This test case verifies that adcli info correctly identifies that a domain controller not in its local site may not be completely usable. | Any | 5 minutes |
adcli info forest | This test case verifies that adcli info correctly reads the domain forest. | Any | 5 minutes |
adcli info readonly | This test case verifies that adcli info correctly identifies domain controllers it cannot use. | Any | 5 minutes |
adcli info server | This test case retrieves basic information about a domain controller and the domain it is a part of. | Any | 5 minutes |
adcli info site | This test case verifies that adcli info works even when the domain topology is complex. | Any | 5 minutes |
Test Cases
Testcase | Description | Privileges | Approx. time required |
---|---|---|---|
adcli info | Retrieve basic information about a domain | Any | 5 minutes |
Test Cases - FreeIPA
Testcase | Description | Privileges | Approx. time required |
---|---|---|---|
FreeIPA join | Join a client machine to a domain | admin | 10 minutes |
FreeIPA login | Log in using FreeIPA credentials, both online and offline | admin | 15 minutes |
FreeIPA sudo | Test FreeIPA's sudo management capabilities | admin | 10 minutes |
FreeIPA SSH | Verify FreeIPA's SSH public key management | admin | 20 minutes |
FreeIPA automount | Test FreeIPA's automounter maps management | admin | 20 minutes |
FreeIPA control center | Setup an FreeIPA domain account login via the GNOME Control Center. | admin | 10 minutes |
FreeIPA leave | Leave a FreeIPA domain by deconfiguring it locally. | Any | 5 minutes |
Test Results - FreeIPA
Log issues and enhancements in one of these places:
User | FreeIPA join | FreeIPA login | FreeIPA sudo | FreeIPA SSH | FreeIPA automount | FreeIPA control center | FreeIPA leave | References |
---|---|---|---|---|---|---|---|---|
Sample User |