Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[QA] 0.15.3 Testplan #638

Closed
jnweiger opened this issue Jun 14, 2021 · 4 comments
Closed

[QA] 0.15.3 Testplan #638

jnweiger opened this issue Jun 14, 2021 · 4 comments

Comments

@jnweiger
Copy link
Contributor

jnweiger commented Jun 14, 2021 •
edited
Loading

'User_Ldap' Test Plan

TBD: move template to https://github.com/owncloud/QA/tree/master/Server

Setup

Setup details (click to view)

Required ownCloud apps:

  • windows_network_drive
  • SFTP

OpenLDAP:

Prepare two LDAP backends for testing:

  1. big server -> https://jw-open-ldap-20200630.owncloud.works/phpldapadmin/

    • 1200 users, 50 groups via releases/oc10/apps/ldap/genusers.py
    • three base DNs (we initially configure only one to owncloud)
    • nested groups

  2. small ldap server -> http://95.217.210.161/phpldapadmin/

  • less than 1000 users, less than 40 groups
  • two base DNs (we initially configure only one to owncloud)

(outdated: https://github.com/owncloud/docker-servers/tree/owncloud-openldap)

Testing functionality

ldap:test-config

  • Run occ command ldap:test-config with a valid configID
    • Access fine, The configuration is valid and the connection could be established!
  • Run occ command ldap:test-config with a wrong host
    • (the host changed from a valid configuration) | Lost connection to LDAP server
  • Run occ command ldap:test-config with empty password
    • The configuration is invalid. Please have a look at the logs for further details
  • Run occ command ldap:test-config with invalid configID
    • ERROR: Invalid configID

ldap:show-config

  • Run occ command ldap:show-config with no parameters
  • Run occ command ldap:show-config with valid configID
    • Show only the specified configuration
  • Run occ command ldap:show-config with invalid configID
    • ERROR: Invalid configID
  • Run occ command ldap:show-config with show-password flag
    • ldapAgentPassword shows the password in the result
  • Run occ command ldap:show-config without show-password flag
    • ldapAgentPassword hides the password in the result (uses “****”)

ldap:set-config

  • Run occ command ldap:set-config with invalid configID
    • ERROR: Invalid configID
  • Run occ command ldap:set-config with valid configID
    • The config is set

ldap:search

ldap:check-user

  • Run occ command ldap:check-user with a good oC user id (the lengthy guuid string)
    • Show success message
  • Run occ command ldap:check-user with a wrong oC user id
    • ERROR: ldap user not recognized
  • Run occ command ldap:check-user with a good oC user id + disabled "Configuration Active" in Advanced->Connection settings
    • ERROR: Cannot check user existence, because disabled LDAP configurations are present.
  • Run occ command ldap:check-user Good oc user id + 1 disabled configuration (another one active) + force option
    • uccess message
  • Run occ command ldap:check-user Good oc user id + all disabled configuration + force option; then enable the configuration and recheck
    • Success message

ldap:create-empty-config

  • Run occ command ldap:create-empty-config
    • Creates an empty LDAP configuration

ldap:delete-config

  • Run occ command ldap:delete-config
    • Deletes an existing LDAP configuration

user:sync

  • Run occ command sudo -u www-data ./occ user:sync "OCA\User_LDAP\User_Proxy"
    • This command syncs users stored in LDAP external backend service

ldap:update-group

  • Run occ command ldap:update-group XXX Command no longer exists. obsoleted by user:sync
    • Update the specified group membership information stored locally

LDAP quota

If both LDAP quota field and default LDAP quota are set

  • The user has a value for the LDAP quota attribute
    • Use that value as quota
  • The user doesn't have a value for the LDAP quota attribute or the value can't be parsed correctly,
    • use the default LDAP quota
  • the user doesn't have a value for the LDAP quota attribute or the value can't be parsed correctly, and the default LDAP quota can't be parsed correctly
    • use the ownCloud's default quota.

The LDAP quota field is empty and the default LDAP quota is set

If the LDAP quota field isn't empty and the LDAP default quota isn't set

  • The user has a value for the attribute
    • Use that value as quota
  • The user hasn't a value for the attribute
    • ownCloud's default quota will be used. If the user's quota has a previous value, that value will be kept

If neither the LDAP quota field nor the default LDAP quota is set

  • If neither the LDAP quota field nor the default LDAP quota is set
    • Keep the current quota.

Several LDAP servers

  • Setup and configure 2 LDAP servers correctly
    • Users from both servers are visible and can login
  • Setup and configure 2 LDAP servers correctly, shutdown / disconnect one of them
    • Users from one server (the one that is up) are visible and can login
  • Setup and configure 2 LDAP servers correctly, making sure that at least one user is “shared” in both servers (uid and display name are the same, with different password)
    • Both users can login in their respective accounts
  • Setup and configure 2 LDAP servers correctly, making sure that at least one user is “shared” in both servers (uid and display name are the same, with different password), and change in the LDAP wizard Expert tab the internal username to “uid” (to force a collision)
    • Only the password of the first user works.
  • Setup a Backup (Replica) Host, a Backup (Replica) Port and Disable/Shutdown the Main Server
    • The replica should be used instead of the main server

Test LDAP properties

  • email Set a field as mail in advanced tab
    • check that the mails are set with the right backend information in personal page for LDAP users
  • avatar Login with a user with an avatar field set in LDAP backend
    • The avatar is shown instead of the username
  • nested group In advanced tab , check nested groups checkbox
    • In users page the nested group should appear with all the users of the subgroup
  • internalUserAttribute In expert tab , set an attribute as Internal Username
    • The attribute is now used as internal Username

LDAP Scenarios integrated with external Storage

  • External Storage General Mount an external storage using login credentials save in session
    • The mount is configured properly and we can access it
  • External Storage Personal Mount an external storage using login credentials save in session
    • The mount is configured properly and we can access it
  • WND Mount Point General Mount a WND mountpoint using a user from an Active Directory
    • The mount is configured properly and we can access it
  • WND Mount Point Personal Mount a WND mountpoint using a user from an Active Directory
    • The mount is configured properly and we can access it

User account table integration

  • Run occ user:sync -l
    • list all known backend classes
  • Run occ user:sync "OCA\User_LDAP\User_Proxy"
    • synchronize LDAP users from a given backend to the accounts table
  • Make changes in oC backend and ReRun occ user:sync "OCA\User_LDAP\User_Proxy" choosing disabling accounts option
    • Synchronize LDAP users from a given backend updated to the accounts table and disable the previous accounts
  • Make changes in oC backend and ReRun occ user:sync "OCA\User_LDAP\User_Proxy" choosing deleting accounts option
    • Synchronize LDAP users from a given backend updated to the accounts table and delete the previous accounts

Wizard General

  • default configuration: host + port + admin + pass+ base DN + default filters
    • configuration ok, users are loaded, groups might be empty
  • configuration: port with string (rest as defaults)
    • ERROR: Configuration incomplete
  • configuration: wrong credentials
    • ERROR: Configuration incorrect
  • configuration: from valid config, change to a wrong url and change back to the good ones
    • configuration is shown as ok
  • user filter: choose one of the “only those object” select
    • Filter is correctly applied in the users page
  • user filter: choose one of the “only those object” select
    • user count below is correctly updated
  • user filter: edit raw filter (tested with (|(&(objectclass=inetOrgPerson)(sn=a*))))
    • Filter is correctly applied in the users page
  • user filter: edit raw filter (tested with (|(&(objectclass=inetOrgPerson)(sn=a*))))
    • user count below is correctly updated
  • login filter: checked with LDAP username (uid)
    • users can login with uid
  • login filter: checked with LDAP username (uid) and raw filter based on the user filter (tested with (|(&(objectclass=inetOrgPerson)(givenname=Th*))))
    • occ user:sync "OCA\User_LDAP\User_Proxy" -m disable -r updates enabled/disabled users
    • only some users can login (based on the filter)
  • login filter: checked with LDAP username (uid) and with LDAP email
    • users can login with both uid and email fields

Wizard Configuration Server

  • 1. Have the host and port configured correctly
    2. Click “Detect Base DN”
    • 1. If possible (anonymous bind allowed, domain provided, domain resembles LDAP structure)
      2. Base DN is found and appears in the corresponding text area
  • 1. Have the host, port, user dn and password configured correctly
    2. Click “Detect Base DN”
    • 1. If possible ((domain given and domain resembles LDAP structure) or full user dn provided)
      2. Base DN is found and appears in the corresponding text area
  • 1. Have a valid Base DN (and Host, Port, User, Password)
    2. Click “Test Base DN”
    • 1. If base DN is entered, “Click Test DN” is enabled
      2. Message “More then 1.000 directory entries available.” is shown. If total entries are less than 1k, the actual amount is shown
  • 1. Have Basic tab completed correctly
    2. “Manually enter LDAP filters” is disabled
    3. Move to Users tab
    • 1. Detection for Obect Classes and Groups is running
      2. If the server does not support memberof, the group field is disabled and a message appears.
      If it does and with more than 40 groups available, a different group selection tool is presented
      3. A filter is created and shown next to “LDAP Filter:” (read only)
  • 1. Have Basic tab completed correctly
    2. “Manually enter LDAP filters” is enabled
    3. Move to Users tab
    • 1. A raw input field for the LDAP filter is presented.
      2. The multi select box elements are disabled
      3. i.e. Neither object classes nor groups are being detected

Wizard Configuration Users

  • 1. “Manually enter LDAP filters” is enabled
    2. The input field for manually writing LDAP filter is shown
    (“raw mode”)
    3. Click on “Edit LDAP Query”
    • 1. A Configuration Dialog is shown
      2. Subsqeuent action is coherent with button click (either switch or stay)
  • 1a. “Manually enter LDAP filters” is enabled and assisted mode is active
    1b. or “Manually enter LDAP filters” is disabled
    3. Click on “Edit LDAP Query”
    • 1. Mode is toggled directly
      2. If assisted mode is activated for the first time, object class and groups detection is run once
  • 1. In Assisted Mode, click the “edit LDAP query” having selected an object class
    2. Click again in the “edit LDAP query”
    3. Select another object class keeping the old class
    • Both object classes are taken into account
  • 1. Be in Assisted Mode
    2. Open object class multiselect
    3. Change values up to your choice and close it
    • 1. After closing, the LDAP filter is being updated (shown next to “LDAP Filter:”)
      2. The filter contains exactly all selected object classes
  • 1. Be in Assisted Mode, LDAP server supports memberof,Less than 40 groups available
    2. Open group multiselect
    3. Change values up to your choice and close it
    • 1. After closing, the LDAP filter is being updated (shown next to “LDAP Filter:”)
      2. The filter contains exactly all selected groups. If primary groups are supported (AD only) for every group there is also a primaryGroupID= part
  • 1. Be in Assisted Mode, LDAP server supports memberof, At least 40 groups available
    • 1. A different group selector is visible, consisting of a search text input, two lists with available and selected groups And two buttons to move groups
  • 1. Have the extended group selector
    2. Perform search with the search input field
    • 1. According to the value entered groups are filtered correspondingly in both fields
  • 1. Have the extended group selector
    2. Select one or more groups in the “available groups” list
    3. Click the “>” button
    • 1. The selected groups are added to the selected groups list
      2. The selected groups are removed from the available groups list
  • 1. Have the extended group selector
    2. Select one or more groups in the “available groups” list
    3. Click the “<” button
    • 1. The selected groups are removed from the selected groups list
      2. The selected groups are added to the available groups list
  • 1. Have a properly set up filter
    2. Click on “Verify settings and count users”
    • 1. A count is done, indicated by a spinner next to the button
      2. When done, a label appears saying “xx users found”, if more then 1000 users are available “> 1000 users found“ is shown
  • 1. Have a filter set up that does not return users
    2. Click on “Verify settings and count users”
    • 1. A count is done, indicated by a spinner next to the button
      2. When done, a label appears saying “0 users found”

Wizard Configuration login

  • 1. Have Basic and Users tab completed correctly
    2. “Manually enter LDAP filters” is disabled
    3. Move to Login Attributes tab
    • 1. Detection for Attributes is running
      2. A filter is created and shown next to “LDAP Filter:” (read only)
  • 1. Have Basic and Users tab completed correctly
    2. “Manually enter LDAP filters” is enabled
    3. Move to Login Attributes tab
    • 1. A raw input field for the LDAP filter is presented.
      2. The multi select box element for attribute is disabled
      3. i.e. Attributes are not detected
  • 1. “Manually enter LDAP filters” is enabled
    2. The input field for manually writing LDAP filter is shown (“raw mode”)
    3. Click on “Edit LDAP Query”
    • 1. A Configuration Dialog is shown
      2. Subsqeuent action is coherent with button click (either switch or stay)
  • 1a. “Manually enter LDAP filters” is enabled and assisted mode is active
    1b. or “Manually enter LDAP filters” is disabled
    3. Click on “Edit LDAP Query”
    • 1. Mode is toggled directly
      2. If assisted mode is activated for the first time, object class and groups detection is run once
  • 1. In Assisted Mode, click the “edit LDAP query” having selected an attribute
    2. Click again in the “edit LDAP query”
    3. Select another attribute keeping the old attribute
    • Both attributes are taken into account
  • 1. Be in Assisted Mode
    2. Open other attributes multiselect
    3. Change values up to your choice and close it
    • 1. After closing, the LDAP filter is being updated (shown next to “LDAP Filter:”)
      2. The filter contains all selected attributes (and maybe more if checkboxes above are selected)
  • 1. Be in Assisted Mode
    2. (Un)check LDAP / AD Username
    • 1. The LDAP filter is updated accordingly and contains uid or samaccountname attributes (depends on LDAP server)
  • 1. Be in Assisted Mode
    2. (Un)check LDAP / AD Email address
    • 1. The LDAP filter is updated accordingly and contains mailPrimaryAddress and mail attributes
  • 1. Have a properly set up filter
    2. Enter a valid “Test Loginname”
    3. Click on “Verify settings”
    • 1. A spinner indicates the verification is going on
      2. A message shows the positive result: “User found and settings verified.”
  • 1. Have a properly set up filter
    2. Enter an invalid “Test Loginname”
    3. Click on “Verify settings”
    • 1. A spinner indicates the verification is going on
      2. A failure message is shown containing the effective filter for manual testing: “User not found. Please check your login attributes and username. Effective filter (to copy-and-paste for command line validation): $FILTER“

Wizard Configuration groups

  • 1. Have other tabs completed correctly
    2. “Manually enter LDAP filters” is disabled
    3. Move to Groups tab
    • 1. Detection for Obect Classes and Groups is running
      2.If more than 40 groups available, a different group selection tool is presented (not the known multiselect)
      3. No filter is created initially, no text next to “LDAP Filter:”
  • 1. Have other tabs completed correctly
    2. “Manually enter LDAP filters” is enabled
    3. Move to Groups tab
    • 1. A raw input field for the LDAP filter is presented.
      2. The multi select box elements are disabled
      3. i.e. Neither object classes nor groups are being detected
  • 1. “Manually enter LDAP filters” is enabled
    2. The input field for manually writing LDAP filter is shown
    (“raw mode”)
    3. Click on “Edit LDAP Query”
    • 1. A Configuration Dialog is shown
      2. Subsequent action is coherent with button click (either switch or stay)
  • 1a. “Manually enter LDAP filters” is enabled and assisted mode is active
    1b. or “Manually enter LDAP filters” is disabled
    3. Click on “Edit LDAP Query”
    • 1. Mode is toggled directly
      2. If assisted mode is activated for the first time, object class and groups detection is run once
  • 1. Be in Assisted Mode
    2. Open object class multiselect
    3. Change values up to your choice and close it
    • 1. After closing, the LDAP filter is being updated (shown next to “LDAP Filter:”)
      2. The filter contains exactly all selected object classes
  • 1. Be in Assisted Mode, Less than 40 groups available
    2. Open group multiselect
    3. Change values up to your choice and close it
    • 1. After closing, the LDAP filter is being updated (shown next to “LDAP Filter:”)
      2. The filter contains exactly all selected groups.
  • 1. Be in Assisted Mode, at least 40 groups available.
    • 1. A different group selector is visible, consisting of a search text input, two lists with available and selected groups and two buttons to move groups
  • 1. Have the extended group selector.
    2. Perform search with the search input field
    • 1. According to the value entered groups are filtered correspondingly in both fields
  • 1. Have the extended group selector 2. Select one or more groups in the “available groups” list 3. Click the “>” button
    • 1. The selected groups are added to the selected groups list 2. The selected groups are removed from the available groups list
  • 1. Have the extended group selector
    2. Select one or more groups in the “selected groups” list
    3. Click the “<” button
    • 1. The selected groups are removed from the selected groups list 2. The selected groups are added to the available groups list
  • 1. Have a properly set up filter
    2. Click on “Verify settings and count groups”
    • 1. A count is done, indicated by a spinner next to the button
      2. When done, a label appears saying “xx groups found”, if more then 1000 groups are available “> 1000 groups found“ is shown
  • 1. Have a filter set up that does not return groups
    2. Click on “Verify settings and count groups”
    • 1. A count is done, indicated by a spinner next to the button
      2. When done, a label appears saying “0 groups found”

Wizard Configuration Advanced

  • 1. Have other tabs completed correctly
    2. Go to Advanced Tab
    3. Be in Connection Settings
    • 1. See that configuration is active
  • 1. Have other tabs completed correctly
    2. Go to Advanced Tab
    3. Open Directory Settings
    • 1. User Display Name field should be not displayName, but displayname (lowercase) or cn (due to auto-detection in the background)
      2. Group-Member-Associtation should be correct (depends on OpenLDAP, AD typically has “member (AD)”)
  • 1. Have other tabs completed correctly
    2. Go to Advanced Tab
    3. Open Special Attributes
    • 1. “Email field” should be filled in (given that at least one user has mail or mailPrimaryAddress set, So that auto-detection can do its job)
  • 1. Change anything in advanced tab
    • Click on background triggers autosave (show saving/saved)
    • Reload. The value is as changed. Auto-save works everywhere now.
  • 1. Click on “Test configuration”
    • 1. A message will appear with the result of the Test
  • 1. Click button to clear user mappings
    • 1. A success message should appear
      2. The database table ldap_user_mapping is emptied (needs to be filled before of course, e.g. by going to Users page)
  • 1. Click button to clear group mappings
    • 1. A success message should appear
      2. The database table ldap_group_mapping is emptied (needs to be filled before of course, e.g. by going to Users page)

Wizard Configuration Chooser

  • 1. Click on “+” Button
    • 1. A new, empty configuration was created
  • 1. Click on Clone Button
    • 1. A new configuration was created and pre-filled with the settings of the last active configuration
  • 1. Click on Delete Button
    • 1. A confirmation dialog appears
      2a) Click on No: deletion was cancelled
      2b) Click on Yes: configuration was deleted and switched to first configuration
  • 1. Select a different configuration from the drop down
    • 1. The selected configuration is loaded
      2. The status is updated accordingly
@jnweiger jnweiger mentioned this issue Jun 14, 2021
Closed
41 tasks
@jnweiger
Copy link
Contributor Author

jnweiger commented Jul 6, 2021 •
edited
Loading

Tests skipped

Skipped tests are marked with: main checkmark unchecked, indented checkmarks checked
Rationale:

Unclear instructions

  • "assisted mode is active" -- No such setting in UI or occ ldap:show-config

Setup issue

  • "LDAP server supports memberof" -- not yet implemented
  • choose one of the “only those object” select -- also depends on memberof support
  • Setup a Backup (Replica) Host -- not yet implemented
  • WND Mount Point Personal -- WND was not configured

@jnweiger
Copy link
Contributor Author

jnweiger commented Jul 7, 2021 •
edited
Loading

Tests Failure ignored

    1. Have other tabs completed correctly
  1. “Manually enter LDAP filters” is disabled
  2. Move to Groups tab
  3. Detection for Obect Classes and Groups is running
    2.If more than 40 groups available, a different group selection tool is presented (not the known multiselect)
  4. No filter is created initially, no text next to “LDAP Filter:”
    -> the normal multiselect is seen with 50 users -- the code probably changed.

@jnweiger
Copy link
Contributor Author

jnweiger commented Jul 7, 2021

Test passed with minor defects and skips due to incomplete setup and time constraints.
:shipit:

jnweiger added a commit to owncloud/QA that referenced this issue Jul 7, 2021
@jnweiger
Create Test_Plan_user_ldap.md
4b7ab55 
from owncloud/user_ldap#638
@jnweiger
Copy link
Contributor Author

jnweiger commented Jul 7, 2021

saved as a template to owncloud/QA@4b7ab55

@jnweiger jnweiger closed this as completed Jul 7, 2021
@jnweiger jnweiger mentioned this issue Nov 7, 2022
Closed
@jnweiger jnweiger mentioned this issue Feb 22, 2023
Closed
@jnweiger jnweiger mentioned this issue Dec 7, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jnweiger