Project

General

Profile

Actions

action #88792

closed

[sle][TW][security][backlog][FIPS] Implement & Integrate samba test case into openQA

Added by bchou about 3 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Low
Assignee:
Category:
New test
Target version:
-
Start date:
2021-02-19
Due date:
% Done:

0%

Estimated time:
40.00 h
Difficulty:

Description

Jira ID:
SLE-15098: QA: Update samba to 4.12+ for FIPS compliance and increased performance

Plan to import the samba related case into FIPS mode

  • samba_adcli
  • sssd_samba

yast2_samba is still with blocked issues.
Blocked by poo#61780: [functional][y][epic] test update for yast-samba re 389-ds
Blocked by poo#70639: [functional][y] test fails in yast2_samba - Unable to find the Domain Master Browser name QA-WORKGROUP for the workgroup QA-WORKGROUP.

https://openqa.opensuse.org/tests/1587572#step/yast2_samba/68.
Bugs bs#1177302 and bsc#1172084 have not been updated yet.

Actions #1

Updated by bchou about 3 years ago

Rodion mentioned:
yast module has blocking issues, I do not expect them to get self resolved and we didn't get updates in the bug reports samba itself should be functional. For this case, I would suggest not introducing extra dependency on YaST module. Our customers seem to use native tools to configure it

yast2 samba is just a UI to configure smb, people normally use config files directly

Actions #2

Updated by bchou almost 3 years ago

  • Priority changed from Normal to Low
Actions #3

Updated by bchou almost 3 years ago

  • Subject changed from [sle][security][sle15sp3][FIPS] Implement & Integrate samba test case into openQA to [sle][security][sle15sp4][FIPS] Implement & Integrate samba test case into openQA

Move this ticket to SLE15 SP4 as SLE15 SP3 is GM.

Actions #4

Updated by llzhao almost 2 years ago

  • Subject changed from [sle][security][sle15sp4][FIPS] Implement & Integrate samba test case into openQA to [sle][security][backlog][FIPS] Implement & Integrate samba test case into openQA
Actions #5

Updated by bchou almost 2 years ago

We can integrate samba_adcli into our FIPS test scope.
Functional group is running the test on SP4 b151.1
https://openqa.suse.de/tests/8752515#step/samba_adcli/97
This test content is more complete.

./tests/network/samba/samba_adcli.pm
Actions #6

Updated by bchou almost 2 years ago

  • Subject changed from [sle][security][backlog][FIPS] Implement & Integrate samba test case into openQA to [sle][TW][security][backlog][FIPS] Implement & Integrate samba test case into openQA
  • Assignee changed from bchou to StarryWang

Hi Starry.
I think this case is worth pulling into TW for regular testing.

Thank you.

Actions #7

Updated by StarryWang almost 2 years ago

  • Status changed from New to In Progress

I'll try to add samba_adcli into extra_tests_textmode on TW.

Actions #8

Updated by StarryWang almost 2 years ago

  • File Screenshot from 2022-06-21 10-29-40.png added

The test samba_adcli failed on O3:
https://openqa.opensuse.org/tests/2426291#step/samba_adcli/46

I found that dig srv _kerberos._tcp.geeko.com and dig _ldap._tcp.geeko.com
did not found the IP address of these domains:
https://openqa.opensuse.org/tests/2426291#step/samba_adcli/40
https://openqa.opensuse.org/tests/2426291#step/samba_adcli/43

On OSD, the IP address of these domains are internal access.

Actions #9

Updated by StarryWang almost 2 years ago

  • File deleted (Screenshot from 2022-06-21 10-29-40.png)
Actions #10

Updated by bchou almost 2 years ago

Thanks Starry for the investigation,

I think this case is not able to migrate into TW directly since the domain server is different.

BTW, talk to Starry offline, it seems there is no samba related test case in TW now.

Actions #11

Updated by StarryWang almost 2 years ago

  • Assignee changed from StarryWang to bchou

Assign back to Ben :-)

Actions #12

Updated by bchou over 1 year ago

  • Status changed from In Progress to Closed

Close this one as no priority.

Actions

Also available in: Atom PDF