FedFsTestPlan0.10

From Linux NFS

Contents 1 Project: fedfs-utils 2 Test Plan for fedfs-utils-0.10 2.1 New features in 0.10 2.1.1 "cn=NSDB Manager" administrator DN 2.1.2 NCE discovery mechanism 2.1.3 The fedfs-domainroot tool 2.1.4 The nsdb-jumpstart tool 2.1.5 RPCSEC GSS authentication of ADMIN protocol 2.2 Existing features 2.2.1 RFC 6641-compliant DNS SRV 2.2.2 TLS support in NSDB clients 2.2.3 fedfsd 2.2.4 nfsref

Project: fedfs-utils

[ Project Home | News | Downloads | Docs | Mailing Lists | Source Control | Issues ]

---

Test Plan for fedfs-utils-0.10

This article outlines a test plan for the upstream 0.10 release of fedfs-utils.

Details are not yet provided. However, there should be enough in each description to allow someone to install fedfs-utils 0.10 (when it is released) and perform functional testing, report problems, and update this document with further information (such as tests attempted and results).

New features in 0.10

The following sections describe features that are new in fedfs-utils 0.10.

"cn=NSDB Manager" administrator DN

1. Create, edit, and remove NSDB records using the new "cn=NSDB Manager" DN
2. Try to create, edit, or remove NSDB records using some other non-admin DN
3. Try to create, edit, or remove non-NSDB records using the new "cn=NSDB Manager" DN
4. Attempt to remove and re-create an NCE (LDAP server administrator access should be required)

NCE discovery mechanism

1. Try FSN resolution with a new fedfsNsdbContainerEntry object in place. Debugging should show that the NSDB client performs the new subtree search to find the NCE.
2. Try FSN resolution without a fedfsNsdbContainerEntry object. Debugging should show that the NSDB client tries the subtree search then queries the fedfsNceDN attribute.
3. FSN resolution should work when TLS is enabled on the NSDB
4. Try adding another NCE on the NSDB (should still fail since we still add the fedfsNceDN attribute to the root suffix)
5. Try removing the new NCE
6. Try adding an NCE to a non-NSDB root suffix

The fedfs-domainroot tool

1. Create and remove domain roots while an NFSD is running
2. Create and remove domain roots while NFSD is shut down
3. Ensure that clients follow the referrals, and behave reasonable when a domain root is removed

The nsdb-jumpstart tool

1. Try "nsdb-jumpstart install" on a blank system (openldap-servers and fedfs-utils-common installed)
2. Try "nsdb-jumpstart install" on a system with a running NSDB
3. Try "nsdb-jumpstart install" with TLS security; pass out certificate and attempt NSDB operations like FSN resolution
4. Try "nsdb-jumpstart backup" on a system with some NSDB data
5. Try "nsdb-jumpstart restore" on a system with backups and some NSDB data

RPCSEC GSS authentication of ADMIN protocol

1. Kinit and attempt ADMIN operations against a fedfsd with GSS support and a known good service principal
2. Do not kinit and attempt ADMIN operations against a fedfs with GSS support and a known good service principal
3. Kinit and attempt ADMIN operations against a fedfsd with no GSS support configured
4. Using 0.9 fedfsc, attempt ADMIN operations against a fedfsd with GSS support and a known good service principal

Existing features

The following sections describe features that existed in previous versions of fedfs-utils and should continue to work in fedfs-utils 0.10. These features may have been modified in 0.10 to enhance security or interoperability, or may have had bugs fixed.

RFC 6641-compliant DNS SRV

1. Create a domain with a single DNS SRV record; ensure clients can mount the domain's root directory
2. Create a domain with multiple DNS SRV records; ensure clients can mount the domain's root directory

TLS support in NSDB clients

1. nsdbparams support for adding NSDB with TLS security
2. fedfsd support for adding NSDB with TLS security
3. Use a certificate to resolve an FSN on an NSDB using no security
4. Try to resolve an FSN with no certificate against an NSDB with TLS security

fedfsd

1. Try all ADMIN junction operations on a FedFS-enabled server
2. Try all ADMIN NSDB operations on a FedFS-enabled server

nfsref

1. Create basic junctions and verify that clients follow them
2. Create fedfs junctions and verify that mountd resolves them correctly and that clients follow them
3. List basic and fedfs junctions
4. Remove junctions