Project

General

Profile

action #88792

[sle][TW][security][backlog][FIPS] Implement & Integrate samba test case into openQA

Added by bchou over 1 year ago. Updated about 2 months ago.

Status:
In Progress
Priority:
Low
Assignee:
Category:
New test
Target version:
-
Start date:
2021-02-19
Due date:
% Done:

0%

Estimated time:
40.00 h
Difficulty:

Description

Jira ID:
SLE-15098: QA: Update samba to 4.12+ for FIPS compliance and increased performance

Plan to import the samba related case into FIPS mode

  • samba_adcli
  • sssd_samba

yast2_samba is still with blocked issues.
Blocked by poo#61780: [functional][y][epic] test update for yast-samba re 389-ds
Blocked by poo#70639: [functional][y] test fails in yast2_samba - Unable to find the Domain Master Browser name QA-WORKGROUP for the workgroup QA-WORKGROUP.

https://openqa.opensuse.org/tests/1587572#step/yast2_samba/68.
Bugs bs#1177302 and bsc#1172084 have not been updated yet.

History

#1 Updated by bchou over 1 year ago

Rodion mentioned:
yast module has blocking issues, I do not expect them to get self resolved and we didn't get updates in the bug reports samba itself should be functional. For this case, I would suggest not introducing extra dependency on YaST module. Our customers seem to use native tools to configure it

yast2 samba is just a UI to configure smb, people normally use config files directly

#2 Updated by bchou about 1 year ago

  • Priority changed from Normal to Low

#3 Updated by bchou about 1 year ago

  • Subject changed from [sle][security][sle15sp3][FIPS] Implement & Integrate samba test case into openQA to [sle][security][sle15sp4][FIPS] Implement & Integrate samba test case into openQA

Move this ticket to SLE15 SP4 as SLE15 SP3 is GM.

#4 Updated by llzhao 3 months ago

  • Subject changed from [sle][security][sle15sp4][FIPS] Implement & Integrate samba test case into openQA to [sle][security][backlog][FIPS] Implement & Integrate samba test case into openQA

#5 Updated by bchou 2 months ago

We can integrate samba_adcli into our FIPS test scope.
Functional group is running the test on SP4 b151.1
https://openqa.suse.de/tests/8752515#step/samba_adcli/97
This test content is more complete.

./tests/network/samba/samba_adcli.pm

#6 Updated by bchou about 2 months ago

  • Subject changed from [sle][security][backlog][FIPS] Implement & Integrate samba test case into openQA to [sle][TW][security][backlog][FIPS] Implement & Integrate samba test case into openQA
  • Assignee changed from bchou to StarryWang

Hi Starry.
I think this case is worth pulling into TW for regular testing.

Thank you.

#7 Updated by StarryWang about 2 months ago

  • Status changed from New to In Progress

I'll try to add samba_adcli into extra_tests_textmode on TW.

#8 Updated by StarryWang about 2 months ago

  • File Screenshot from 2022-06-21 10-29-40.png added

The test samba_adcli failed on O3:
https://openqa.opensuse.org/tests/2426291#step/samba_adcli/46

I found that dig srv _kerberos._tcp.geeko.com and dig _ldap._tcp.geeko.com
did not found the IP address of these domains:
https://openqa.opensuse.org/tests/2426291#step/samba_adcli/40
https://openqa.opensuse.org/tests/2426291#step/samba_adcli/43

On OSD, the IP address of these domains are internal access.

#9 Updated by StarryWang about 2 months ago

  • File deleted (Screenshot from 2022-06-21 10-29-40.png)

#10 Updated by bchou about 2 months ago

Thanks Starry for the investigation,

I think this case is not able to migrate into TW directly since the domain server is different.

BTW, talk to Starry offline, it seems there is no samba related test case in TW now.

#11 Updated by StarryWang about 2 months ago

  • Assignee changed from StarryWang to bchou

Assign back to Ben :-)

Also available in: Atom PDF