The testplan is updated according to your second note. The WebUI part
I'll test once Pavel's patch is merged.
On 06/27/2016 10:28 AM, Sumit Bose wrote:
> On Mon, Jun 27, 2016 at 10:06:23AM +0200, Oleg Fayans wrote:
>> Hi Sumit,
>> I've updated the testplan. (Thank you for the link to Fraser's blogpost,
>> it was really very useful!). All the operations described were
>> performed manually and succeed. Could you please review it again in case
>> I forgot something?
> Thank you, the tests are looking good.
> I have two comments. First, for your information, I#m not sure if WebUI
> is in the scope of this tests, Pavel already send '0058 WebUI:
> certificate widget on ID override user page' to the freeipa-devel list,
> so adding certificates to idoverrides with the WebUI should work soon as
> Second, the LDAP attribute used to store the certificates is a
> multi-value attribute. Adding a test where a second certificate is added
> to the override and removed (without deleting the other certificate)
> might be useful here.
>> On 06/09/2016 05:06 PM, Sumit Bose wrote:
>>> On Thu, Jun 09, 2016 at 04:48:57PM +0200, Oleg Fayans wrote:
>>>> Hi guys,
>>>> Here is the first somewhat skeletal and pretty short version of the
>>>> testplan. Could you please review it anyone?
>>> Hi Oleg,
>>> 'Make sure the id view is applied to ipa master host' the IPA
>>> masters/servers will always and only have the 'Default Trust View'. But
>>> it is ok to use the 'Default Trust View' for testing the certificates in
>>> the ID override.
>>> The 'openssl req ...' call will only generate a certificate request and
>>> not the certificate itself. The request must still be signed by e.g. the
>>> IPA CA. Please see the blog posts of Fraser
>>> and Nathan (https://blog-nkinder.rhcloud.com/?p=184) for details.
>>> Since you want to test certificates in overrides you should use
>>> idoverrideuser-add-cert and idoverrideuser-remove-cert instead of
>>> user-add-cert and user-remove-cert.
>>>> Oleg Fayans
>>>> Quality Engineer
>>>> FreeIPA team
>>>> Manage your subscription for the Freeipa-devel mailing list:
>>>> Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
>> Oleg Fayans
>> Quality Engineer
>> FreeIPA team
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code