Jump to: navigation, search

V4/External trust to AD/Test Plan

Name: V4/External trust to AD/Test Plan
Target version: 4.4.0
Design: V4/External_trust_to_AD
Reviewer: Incomplete.png missing
Last updated: 2016-05-26 by Lryznaro

Overview

Test Plan

Test case: Establish non-external trust with AD domain that is not a root forest domain

Autotest

{{{autotest}}}

Setup

TBD

Actions

Try to establish trust without '--external=true' or with '--external=false'

Expected results

Should fail.

Test case: Establish external trust with AD domain that is not a root forest domain

Autotest

{{{autotest}}}

Setup

TBD

Actions

  1. Try to establish trust with '--external=true'.
  2. Run 'ipa trust-show' command.
  3. Run 'ipa trustdomain-find' command.

Expected results

  1. Trust should be established.
  2. 'external' type of trust should be shown.
  3. Only domain with which the trust was established should be returned.

Test case: Verify users from trusted domain can be resolved

Autotest

{{{autotest}}}

Setup

External trust is established.

Actions

  1. Run 'getent' command for user
  2. Run 'id' command for user

Expected results

Both should resolve properly.

Test case: Verify users from other domain cannot be resolved

Autotest

{{{autotest}}}

Setup

External trust is established.

Actions

  1. Run 'getent' command for user
  2. Run 'id' command for user

Expected results

Both should fail to resolve.

Test case: Verify users from trusted domain have access to IPA resources

Autotest

{{{autotest}}}

Setup

External trust is established.

Actions

  1. 'kinit' as user belonging to the trusted domain
  2. Run 'kvno' on IPA service to verify that access to IPA resources is allowed

Expected results

'kvno' should return positive response

Test case: Verify users from other domain do not have access to IPA resources

Autotest

{{{autotest}}}

Setup

External trust is established.

Actions

  1. 'kinit' as user belonging to untrusted domain
  2. Run 'kvno' on IPA service to verify that access to IPA resources is refused

Expected results

'kvno' should return negative response


Test case: Establish external trust with AD root forest domain

Autotest

{{{autotest}}}

Setup

none

Actions

  1. Try to establish trust with '--external=true'.
  2. Run 'ipa trust-show' command.
  3. Run 'ipa trustdomain-find' command.

Expected results

  1. Trust should be established.
  2. 'external' type of trust should be shown.
  3. Only domain with which the trust was established should be returned.

Repeat test cases 3-6 for this trust.