:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: Setup SSSD Client :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: Duration: 57s :: [ LOG ] :: Assertions: 0 good, 0 bad :: [ PASS ] :: RESULT: Setup SSSD Client :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_01: bz 1002592 1001318 1033096 969882 Lookup users and groups :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'id user1_dom1-13341@sssdad.com | grep group1_dom1-13341' (Expected 0, got 1) :: [ FAIL ] :: Command 'id user1_dom2-13341@sssdad_tree.com | grep group1_dom2-13341' (Expected 0, got 1) :: [ FAIL ] :: Command 'id user1_dom3-13341@child1.sssdad.com | grep group1_dom3-13341' (Expected 0, got 1) :: [ PASS ] :: Command 'getent passwd user1_dom1-13341@sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd user1_dom2-13341@sssdad_tree.com' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd user1_dom3-13341@child1.sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group group1_dom1-13341@sssdad.com | grep user1_dom1-13341' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group group1_dom2-13341@sssdad_tree.com | grep user1_dom2-13341' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group group1_dom3-13341@child1.sssdad.com | grep user1_dom3-13341' (Expected 0, got 0) :: [ LOG ] :: Duration: 3m 2s :: [ LOG ] :: Assertions: 6 good, 3 bad :: [ FAIL ] :: RESULT: ad_forest_01: bz 1002592 1001318 1033096 969882 Lookup users and groups :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_02: BZ1059423 1028057 1002597 User and group memberships from different domains :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'getent group group2_dom2-13341@sssdad_tree.com | grep user1_dom2-13341 | grep user2_dom1-13341 | grep user2_dom3-13341' (Expected 0, got 0) :: [ FAIL ] :: Command 'id user3_dom3-13341@child1.sssdad.com | grep group3_dom3-13341 | grep group3_dom2-13341 | grep group3_dom1-13341' (Expected 0, got 1) :: [ LOG ] :: Duration: 2m 1s :: [ LOG ] :: Assertions: 1 good, 1 bad :: [ FAIL ] :: RESULT: ad_forest_02: BZ1059423 1028057 1002597 User and group memberships from different domains :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_03: bz 1009614 1028039 Enumerate users and groups :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'cat /var/log/sssd/sssd_$AD_DOMAIN1.log| grep -B 500 dap_search_user_process | grep -i "found sid"' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd | grep user1_dom1-13341' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group | grep group1_dom1-13341' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd | grep user1_dom3-13341' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group | grep group1_dom3-13341' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd | grep user1_dom2-13341' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group | grep group1_dom2-13341' (Expected 0, got 0) :: [ LOG ] :: Duration: 21s :: [ LOG ] :: Assertions: 7 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_03: bz 1009614 1028039 Enumerate users and groups :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_04: bz 969882 Use flatname in the fully qualified format :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'getent passwd $AD_SERVER1_SHORT_REALM\\user1_dom1-${JOBID}' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd $AD_SERVER2_SHORT_REALM\\user1_dom2-${JOBID}' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd $AD_SERVER3_SHORT_REALM\\user1_dom3-${JOBID}' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group $AD_SERVER1_SHORT_REALM\\group1_dom1-${JOBID} | grep user1_dom1-${JOBID}' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group $AD_SERVER2_SHORT_REALM\\group1_dom2-${JOBID} | grep user1_dom2-${JOBID}' (Expected 0, got 0) :: [ PASS ] :: Command 'getent group $AD_SERVER3_SHORT_REALM\\group1_dom3-${JOBID} | grep user1_dom3-${JOBID}' (Expected 0, got 0) :: [ LOG ] :: Duration: 4s :: [ LOG ] :: Assertions: 6 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_04: bz 969882 Use flatname in the fully qualified format :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_05: bz 1053106 subdomain do not inherit fallbacks and overrides settings :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'getent passwd user1_dom1-13341@sssdad.com | awk -F: '{print $6}' | grep '/home/sssdad.com/user1_dom1-13341'' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd user1_dom2-13341@sssdad_tree.com | awk -F: '{print $6}' | grep '/home/sssdad_tree.com/user1_dom2-13341'' (Expected 0, got 0) :: [ PASS ] :: Command 'getent passwd user1_dom3-13341@child1.sssdad.com | awk -F: '{print $6}' | grep '/home/child1.sssdad.com/user1_dom3-13341'' (Expected 0, got 0) :: [ LOG ] :: Duration: 2s :: [ LOG ] :: Assertions: 3 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_05: bz 1053106 subdomain do not inherit fallbacks and overrides settings :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_06: bz 1030483 individual group search returned multiple results in GC lookups :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'id administrator@sssdad.com' (Expected 0, got 0) :: [ PASS ] :: File '/var/log/sssd/sssd_sssdad.com.log' should not contain '\[sdap_get_groups_process\] (0x0080): Individual group search returned multiple results' :: [ LOG ] :: Duration: 1m 0s :: [ LOG ] :: Assertions: 2 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_06: bz 1030483 individual group search returned multiple results in GC lookups :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_07: bz 1033081 detect if posix attributes have been replicated to the global catalog :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'id puser1_dom1-13341@sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Command 'getent -s sss passwd puser1_dom1-13341@sssdad.com' (Expected 0, got 0) :: [ PASS ] :: checking getent data for puser1_dom1-13341@sssdad.com (Assert: 'puser1_dom1-13341@sssdad.com:*:1113341:1113341:puser1_dom1-13341:/home2/sssdad.com/puser1_dom1-13341:/bin/ksh' should equal 'puser1_dom1-13341@sssdad.com:*:1113341:1113341:puser1_dom1-13341:/home2/sssdad.com/puser1_dom1-13341:/bin/ksh') :: [ PASS ] :: Command 'id puser1_dom2-13341@sssdad_tree.com' (Expected 0, got 0) :: [ PASS ] :: Command 'getent -s sss passwd puser1_dom2-13341@sssdad_tree.com' (Expected 0, got 0) :: [ PASS ] :: checking getent data for puser1_dom2-13341@sssdad_tree.com (Assert: 'puser1_dom2-13341@sssdad_tree.com:*:1213341:1213341:puser1_dom2-13341:/home2/sssdad_tree.com/puser1_dom2-13341:/bin/ksh' should equal 'puser1_dom2-13341@sssdad_tree.com:*:1213341:1213341:puser1_dom2-13341:/home2/sssdad_tree.com/puser1_dom2-13341:/bin/ksh') :: [ PASS ] :: Command 'id puser1_dom3-13341@child1.sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Command 'getent -s sss passwd puser1_dom3-13341@child1.sssdad.com' (Expected 0, got 0) :: [ PASS ] :: checking getent data for puser1_dom3-13341@child1.sssdad.com (Assert: 'puser1_dom3-13341@child1.sssdad.com:*:1313341:1313341:puser1_dom3-13341:/home2/child1.sssdad.com/puser1_dom3-13341:/bin/ksh' should equal 'puser1_dom3-13341@child1.sssdad.com:*:1313341:1313341:puser1_dom3-13341:/home2/child1.sssdad.com/puser1_dom3-13341:/bin/ksh') :: [ PASS ] :: File '/var/log/sssd/sssd_sssdad.com.log' should contain 'New LDAP connection to \[ldap://[[:alnum:]._-]*:3268/??base\]' :: [ PASS ] :: File '/var/log/sssd/sssd_sssdad.com.log' should contain 'ldap_search_ext with \[(|.*(uidNumber=\*).*(gidNumber=\*).*)\]' :: [ PASS ] :: File '/var/log/sssd/sssd_sssdad.com.log' should contain 'POSIX attributes were requested but are not present on the server side' :: [ LOG ] :: Duration: 3m 33s :: [ LOG ] :: Assertions: 12 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_07: bz 1033081 detect if posix attributes have been replicated to the global catalog :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_08: bz 1066096 not retrieving homedirs of AD users with posix attributes :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: checking homedir for puser1_dom1-13341@sssdad.com (Assert: '/home2/sssdad.com/puser1_dom1-13341' should equal '/home2/sssdad.com/puser1_dom1-13341') :: [ PASS ] :: checking shell for puser1_dom1-13341@sssdad.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ PASS ] :: checking homedir for puser1_dom2-13341@sssdad_tree.com (Assert: '/home2/sssdad_tree.com/puser1_dom2-13341' should equal '/home2/sssdad_tree.com/puser1_dom2-13341') :: [ PASS ] :: checking shell for puser1_dom2-13341@sssdad_tree.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ PASS ] :: checking homedir for puser1_dom3-13341@child1.sssdad.com (Assert: '/home2/child1.sssdad.com/puser1_dom3-13341' should equal '/home2/child1.sssdad.com/puser1_dom3-13341') :: [ PASS ] :: checking shell for puser1_dom3-13341@child1.sssdad.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ PASS ] :: checking homedir with fallback_homedir for puser1_dom1-13341@sssdad.com (Assert: '/home2/sssdad.com/puser1_dom1-13341' should equal '/home2/sssdad.com/puser1_dom1-13341') :: [ PASS ] :: checking shell with default_shell for puser1_dom1-13341@sssdad.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ PASS ] :: checking homedir with fallback_homedir for puser1_dom2-13341@sssdad_tree.com (Assert: '/home2/sssdad_tree.com/puser1_dom2-13341' should equal '/home2/sssdad_tree.com/puser1_dom2-13341') :: [ PASS ] :: checking shell with default_shell for puser1_dom2-13341@sssdad_tree.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ PASS ] :: checking homedir with fallback_homedir for puser1_dom3-13341@child1.sssdad.com (Assert: '/home2/child1.sssdad.com/puser1_dom3-13341' should equal '/home2/child1.sssdad.com/puser1_dom3-13341') :: [ PASS ] :: checking shell with default_shell for puser1_dom3-13341@child1.sssdad.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ LOG ] :: Duration: 6s :: [ LOG ] :: Assertions: 12 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_08: bz 1066096 not retrieving homedirs of AD users with posix attributes :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_09: bz 1072995 inconsistent results for id :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: user1_dom1-13341 is in domainlocalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ PASS ] :: user1_dom2-13341 is not in domainlocalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 0) :: [ PASS ] :: user1_dom3-13341 is not in domainlocalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 0) :: [ FAIL ] :: user1_dom1-13341 is in globalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in globalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in globalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in universalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in universalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in universalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup2_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup3_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup2_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup2_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup3_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in universalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in universalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in universalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup2_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup3_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup2_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup2_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup3_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in universalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in universalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in universalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup2_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup3_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup2_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup2_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup3_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in domainlocalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ PASS ] :: user1_dom2-13341 is not in domainlocalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 0) :: [ PASS ] :: user1_dom3-13341 is not in domainlocalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 0) :: [ FAIL ] :: user1_dom1-13341 is in globalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in globalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in globalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in universalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in universalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in universalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup2_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup3_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup2_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup2_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom1-13341 is in nesteduniversalgroup3_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in universalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in universalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in universalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup2_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup3_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup2_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup2_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom2-13341 is in nesteduniversalgroup3_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in universalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in universalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in universalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup1_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup2_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup3_dom1-13341@sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup1_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup2_dom2-13341@sssdad_tree.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup1_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup2_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ FAIL ] :: user1_dom3-13341 is in nesteduniversalgroup3_dom3-13341@child1.sssdad.com (Expected 0, got 1) :: [ LOG ] :: Duration: 6m 20s :: [ LOG ] :: Assertions: 4 good, 74 bad :: [ FAIL ] :: RESULT: ad_forest_09: bz 1072995 inconsistent results for id :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_10: bz 1028039 enumeration reads data from ldap while regular lookups connect to gc :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: checking uid for puser1_dom1-13341@sssdad.com (Assert: '1113341' should equal '1113341') :: [ PASS ] :: checking gid for puser1_dom1-13341@sssdad.com (Assert: '1113341' should equal '1113341') :: [ PASS ] :: checking homedir for puser1_dom1-13341@sssdad.com (Assert: '/home2/sssdad.com/puser1_dom1-13341' should equal '/home2/sssdad.com/puser1_dom1-13341') :: [ PASS ] :: checking shell for puser1_dom1-13341@sssdad.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ PASS ] :: checking uid for puser1_dom2-13341@sssdad_tree.com (Assert: '1213341' should equal '1213341') :: [ PASS ] :: checking gid for puser1_dom2-13341@sssdad_tree.com (Assert: '1213341' should equal '1213341') :: [ PASS ] :: checking homedir for puser1_dom2-13341@sssdad_tree.com (Assert: '/home2/sssdad_tree.com/puser1_dom2-13341' should equal '/home2/sssdad_tree.com/puser1_dom2-13341') :: [ PASS ] :: checking shell for puser1_dom2-13341@sssdad_tree.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ PASS ] :: checking uid for puser1_dom3-13341@child1.sssdad.com (Assert: '1313341' should equal '1313341') :: [ PASS ] :: checking gid for puser1_dom3@child1.sssdad.com (Assert: '1313341' should equal '1313341') :: [ PASS ] :: checking homedir for puser1_dom3-13341@child1.sssdad.com (Assert: '/home2/child1.sssdad.com/puser1_dom3-13341' should equal '/home2/child1.sssdad.com/puser1_dom3-13341') :: [ PASS ] :: checking shell for puser1_dom3-13341@child1.sssdad.com (Assert: '/bin/ksh' should equal '/bin/ksh') :: [ PASS ] :: Expected enumeration failure: (OK puser1_dom1-13341@sssdad.com) (FAIL puser1_dom2-13341@sssdad_tree.com) (FAIL puser1_dom3-13341@child1.sssdad.com) :: [ LOG ] :: Duration: 25s :: [ LOG ] :: Assertions: 13 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_10: bz 1028039 enumeration reads data from ldap while regular lookups connect to gc :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_11: bz 1200093 sssd_nss segfaults if initgroups request is by UPN and doesn't find anything :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command '/tmp/test non-existing-UPN@sssdad.com' (Expected 0, got 0) :: [ PASS ] :: File '/var/log/sssd/sssd_nss.log' should not contain 'segfault' :: [ LOG ] :: Duration: 2s :: [ LOG ] :: Assertions: 2 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_11: bz 1200093 sssd_nss segfaults if initgroups request is by UPN and doesn't find anything :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_auth_01: Auth users from all domains :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 0) :: [ PASS ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 0) :: [ PASS ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 0) :: [ LOG ] :: Duration: 8m 46s :: [ LOG ] :: Assertions: 3 good, 0 bad :: [ PASS ] :: RESULT: ad_forest_auth_01: Auth users from all domains :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_auth_02: bz 1078840 change password for all users from all domains :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com NewPass1_123' (Expected 0, got 137) :: [ PASS ] :: File '/var/log/secure' should not contain 'system error' :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com NewPass1_123' (Expected 0, got 137) :: [ PASS ] :: File '/var/log/secure' should not contain 'system error' :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com NewPass1_123' (Expected 0, got 137) :: [ PASS ] :: File '/var/log/secure' should not contain 'system error' :: [ LOG ] :: Duration: 1h 22m 17s :: [ LOG ] :: Assertions: 3 good, 3 bad :: [ FAIL ] :: RESULT: ad_forest_auth_02: bz 1078840 change password for all users from all domains :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_auth_03: bz 924404 1079783 support of enterprise principals :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success euser_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail euser_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail euser_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 3m 22s :: [ LOG ] :: Assertions: 0 good, 4 bad :: [ FAIL ] :: RESULT: ad_forest_auth_03: bz 924404 1079783 support of enterprise principals :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_auth_04: bz 1002591 cached credentials are not working with enterprise UPN logins :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success euser_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/sssd/sssd_sssdad.com.log' should contain 'Added user \[euser_dom1-13341\] successfully to delayed online authentication' :: [ FAIL ] :: Command 'su_success euser_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/sssd/sssd_sssdad.com.log' should contain 'Added user \[euser_dom2-13341@sssdad_tree.com\] successfully to delayed online authentication' :: [ FAIL ] :: Command 'su_success euser_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/sssd/sssd_sssdad.com.log' should contain 'Added user \[euser_dom3-13341@child1.sssdad.com\] successfully to delayed online authentication' :: [ LOG ] :: Duration: 1m 1s :: [ LOG ] :: Assertions: 0 good, 9 bad :: [ FAIL ] :: RESULT: ad_forest_auth_04: bz 1002591 cached credentials are not working with enterprise UPN logins :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_auth_05: bz 966557 cannot login to the 1st domain when 2 domain is configured in sssd :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success euser_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 19s :: [ LOG ] :: Assertions: 0 good, 2 bad :: [ FAIL ] :: RESULT: ad_forest_auth_05: bz 966557 cannot login to the 1st domain when 2 domain is configured in sssd :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_auth_06: bz 1038637 subdomains list is never read if sssd starts offline :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success euser_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success euser_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/sssd/sssd_sssdad.com.log' should contain '\[ad_subdomains_get_conn_done\] (0x0080): No AD server is available, cannot get the subdomain list while offline' :: [ LOG ] :: Duration: 1m 11s :: [ LOG ] :: Assertions: 0 good, 7 bad :: [ FAIL ] :: RESULT: ad_forest_auth_06: bz 1038637 subdomains list is never read if sssd starts offline :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter: Add expired users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: Duration: 5m 26s :: [ LOG ] :: Assertions: 0 good, 0 bad :: [ PASS ] :: RESULT: ad_access_filter: Add expired users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_01: access_provider defaults to ad :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_fail user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 28s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_access_filter_01: access_provider defaults to ad :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_02: access_provider=ad without any other options denies expired users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_fail user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 30s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_access_filter_02: access_provider=ad without any other options denies expired users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_03: An expired user, even though he matches the filter, is denied access :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_fail user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 30s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_access_filter_03: An expired user, even though he matches the filter, is denied access :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_04: access_provider=ad without any other options allows non-expired users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 30s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_access_filter_04: access_provider=ad without any other options allows non-expired users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_05: ad_access_filter=memberOf=cn=admins,ou=groups,dc=example,dc=com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user2_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/secure' should contain 'Access denied for user user2_dom1-13341@sssdad.com' :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 40s :: [ LOG ] :: Assertions: 0 good, 5 bad :: [ FAIL ] :: RESULT: ad_access_filter_05: ad_access_filter=memberOf=cn=admins,ou=groups,dc=example,dc=com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_06: ad_access_filter=(cn=user) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user2_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/secure' should contain 'Access denied for user user2_dom1-13341@sssdad.com' :: [ FAIL ] :: File '/var/log/secure' should contain 'Access denied for user user1_dom2-13341@sssdad_tree.com' :: [ FAIL ] :: File '/var/log/secure' should contain 'Access denied for user user1_dom3-13341@child1.sssdad.com' :: [ LOG ] :: Duration: 40s :: [ LOG ] :: Assertions: 0 good, 7 bad :: [ FAIL ] :: RESULT: ad_access_filter_06: ad_access_filter=(cn=user) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_07: ad_access_filter=dom1:(memberOf=cn=admins,ou=groups,dc=example,dc=com) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user2_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/secure' should contain 'Access denied for user user2_dom1-13341@sssdad.com' :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 39s :: [ LOG ] :: Assertions: 0 good, 5 bad :: [ FAIL ] :: RESULT: ad_access_filter_07: ad_access_filter=dom1:(memberOf=cn=admins,ou=groups,dc=example,dc=com) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_08: ad_access_filter=DOM:dom2:(memberOf=cn=admins,ou=groups,dc=example,dc=com) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_fail user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user2_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/secure' should contain 'Access denied for user user2_dom3-13341@child1.sssdad.com' :: [ LOG ] :: Duration: 40s :: [ LOG ] :: Assertions: 0 good, 5 bad :: [ FAIL ] :: RESULT: ad_access_filter_08: ad_access_filter=DOM:dom2:(memberOf=cn=admins,ou=groups,dc=example,dc=com) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_09: bz 1032983 ad_access_filter=FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 29s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_access_filter_09: bz 1032983 ad_access_filter=FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com) :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_access_filter_10: bz 1033133 invalid ad_access_filter :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_fail user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: File '/var/log/sssd/sssd_sssdad.com.log' should contain 'Bad search filter' :: [ PASS ] :: File '/var/log/sssd/sssd_sssdad.com.log' should not contain 'System error' :: [ LOG ] :: Duration: 10s :: [ LOG ] :: Assertions: 1 good, 2 bad :: [ FAIL ] :: RESULT: ad_access_filter_10: bz 1033133 invalid ad_access_filter :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_001: simple_allow_users=user1@domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: File '/var/log/secure' should contain 'Permission denied' :: [ LOG ] :: Duration: 7s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_forest_simple_001: simple_allow_users=user1@domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_002: bz 991055 simple_allow_users=user1@domain1.com,user2@domain2.com,user3@child.domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user2_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: File '/var/log/secure' should contain 'Permission denied' :: [ LOG ] :: Duration: 8s :: [ LOG ] :: Assertions: 0 good, 5 bad :: [ FAIL ] :: RESULT: ad_forest_simple_002: bz 991055 simple_allow_users=user1@domain1.com,user2@domain2.com,user3@child.domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_003: bz 1048102 simple_allow_users=DOMAIN1\user1,DOMAIN2\user2,CHILD1.DOMAIN1\user3 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user2_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ LOG ] :: Duration: 7s :: [ LOG ] :: Assertions: 0 good, 4 bad :: [ FAIL ] :: RESULT: ad_forest_simple_003: bz 1048102 simple_allow_users=DOMAIN1\user1,DOMAIN2\user2,CHILD1.DOMAIN1\user3 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_004: simple_deny_users=user2@domain2.com,user3@child.domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 1) :: [ LOG ] :: Duration: 7s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_forest_simple_004: simple_deny_users=user2@domain2.com,user3@child.domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_005: simple_allow_groups=group1@domain1.com,group2@domain2.com,group3@child.domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user2_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ LOG ] :: Duration: 8s :: [ LOG ] :: Assertions: 0 good, 4 bad :: [ FAIL ] :: RESULT: ad_forest_simple_005: simple_allow_groups=group1@domain1.com,group2@domain2.com,group3@child.domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_006: BZ1125187 simple_allow_groups=DOMAIN\group :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user2_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ LOG ] :: Duration: 7s :: [ LOG ] :: Assertions: 0 good, 4 bad :: [ FAIL ] :: RESULT: ad_forest_simple_006: BZ1125187 simple_allow_groups=DOMAIN\group :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_007: bz 982619 simple_deny_groups=group1@domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 1) :: [ LOG ] :: Duration: 8s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_forest_simple_007: bz 982619 simple_deny_groups=group1@domain1.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_008: Permit All Users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 29s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_forest_simple_008: Permit All Users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_forest_simple_009: Deny All Users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'su_fail user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 137) :: [ FAIL ] :: Command 'su_fail user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 137) :: [ LOG ] :: Duration: 29s :: [ LOG ] :: Assertions: 0 good, 3 bad :: [ FAIL ] :: RESULT: ad_forest_simple_009: Deny All Users :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_01: bz 974150,1263735 forest DNS service records lookup child domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'getent passwd -s sss administrator@sssdad.com' (Expected 0, got 2) :: [ FAIL ] :: Command 'getent passwd -s sss administrator@child1.sssdad.com' (Expected 0, got 2) :: [ FAIL ] :: Command 'id administrator@sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@child1.sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id user1_dom1-13341@sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id user1_dom3-13341@child1.sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: File '/var/log/sssd/sssd_child1.sssdad.com.log' should contain 'Trying to resolve SRV record of '_gc._tcp.Default-First-Site-Name._sites.sssdad.com'' :: [ FAIL ] :: File '/var/log/sssd/sssd_child1.sssdad.com.log' should contain 'SRV resolution of service 'ldap'. Will use DNS discovery domain 'sssdad.com'' :: [ LOG ] :: Duration: 39s :: [ LOG ] :: Assertions: 0 good, 10 bad :: [ FAIL ] :: RESULT: ad_other_dc_01: bz 974150,1263735 forest DNS service records lookup child domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_02: bz 1077328 1090653 1097323 forest user lookup when joined to child domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'id administrator@sssdad_tree.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id user1_dom2-13341@sssdad_tree.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ PASS ] :: File '/var/log/messages' should not contain 'sssd_be\[[0-9]*\]: segfault' :: [ LOG ] :: Duration: 17s :: [ LOG ] :: Assertions: 1 good, 3 bad :: [ FAIL ] :: RESULT: ad_other_dc_02: bz 1077328 1090653 1097323 forest user lookup when joined to child domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_03: bz 974150 forest DNS service records lookup second tree domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'id administrator@sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@sssdad_tree.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id user1_dom1-13341@sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id user1_dom2-13341@sssdad_tree.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom1-13341@sssdad.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom2-13341@sssdad_tree.com Secret123' (Expected 0, got 1) :: [ FAIL ] :: File '/var/log/sssd/sssd_sssdad_tree.com.log' should contain 'Trying to resolve SRV record of '_gc._tcp.Default-First-Site-Name._sites.sssdad.com'' :: [ FAIL ] :: File '/var/log/sssd/sssd_sssdad_tree.com.log' should contain 'SRV resolution of service 'ldap'. Will use DNS discovery domain 'sssdad.com'' :: [ LOG ] :: Duration: 32s :: [ LOG ] :: Assertions: 0 good, 8 bad :: [ FAIL ] :: RESULT: ad_other_dc_03: bz 974150 forest DNS service records lookup second tree domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_04: bz 1077328 1090653 1097323 forest user lookup when joined to second tree domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'id administrator@child1.sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id user1_dom3-13341@child1.sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'su_success user1_dom3-13341@child1.sssdad.com Secret123' (Expected 0, got 1) :: [ PASS ] :: File '/var/log/messages' should not contain 'sssd_be\[[0-9]*\]: segfault' :: [ LOG ] :: Duration: 17s :: [ LOG ] :: Assertions: 1 good, 3 bad :: [ FAIL ] :: RESULT: ad_other_dc_04: bz 1077328 1090653 1097323 forest user lookup when joined to second tree domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_05: UPN root join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'kinit -k host/ibm-x3650m4-01-vm-16.sssdad.com@SSSDAD.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'klist | grep krbtgt/SSSDAD.COM@SSSDAD.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'kinit -k IBM-X3650M4-01-\$@SSSDAD.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'klist | grep krbtgt/SSSDAD.COM@SSSDAD.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'id administrator@sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Command 'id administrator@sssdad_tree.com' (Expected 0, got 0) :: [ PASS ] :: Command 'id administrator@child1.sssdad.com' (Expected 0, got 0) :: [ LOG ] :: Duration: 3m 37s :: [ LOG ] :: Assertions: 7 good, 0 bad :: [ PASS ] :: RESULT: ad_other_dc_05: UPN root join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_06: UPN second tree join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'kinit -k host/ibm-x3650m4-01-vm-16.sssdad_tree.com@SSSDAD_TREE.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'klist | grep krbtgt/SSSDAD_TREE.COM@SSSDAD_TREE.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'kinit -k IBM-X3650M4-01-\$@SSSDAD_TREE.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'klist | grep krbtgt/SSSDAD_TREE.COM@SSSDAD_TREE.COM' (Expected 0, got 0) :: [ FAIL ] :: Command 'id administrator@sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@sssdad_tree.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@child1.sssdad.com' (Expected 0, got 1) :: [ LOG ] :: Duration: 48s :: [ LOG ] :: Assertions: 4 good, 3 bad :: [ FAIL ] :: RESULT: ad_other_dc_06: UPN second tree join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_07: UPN child join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'kinit -k host/ibm-x3650m4-01-vm-16.child1.sssdad.com@CHILD1.SSSDAD.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'klist | grep krbtgt/CHILD1.SSSDAD.COM@CHILD1.SSSDAD.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'kinit -k IBM-X3650M4-01-\$@CHILD1.SSSDAD.COM' (Expected 0, got 0) :: [ PASS ] :: Command 'klist | grep krbtgt/CHILD1.SSSDAD.COM@CHILD1.SSSDAD.COM' (Expected 0, got 0) :: [ FAIL ] :: Command 'id administrator@sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@sssdad_tree.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@child1.sssdad.com' (Expected 0, got 1) :: [ LOG ] :: Duration: 49s :: [ LOG ] :: Assertions: 4 good, 3 bad :: [ FAIL ] :: RESULT: ad_other_dc_07: UPN child join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_08: different OU root join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'id administrator@sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Command 'id administrator@sssdad_tree.com' (Expected 0, got 0) :: [ PASS ] :: Command 'id administrator@child1.sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Found system at CN=IBM-X3650M4-01-,OU=linuxservers-13341,dc=sssdad,dc=com :: [ LOG ] :: Duration: 3m 16s :: [ LOG ] :: Assertions: 4 good, 0 bad :: [ PASS ] :: RESULT: ad_other_dc_08: different OU root join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_09: different OU second tree join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'id administrator@sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@sssdad_tree.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@child1.sssdad.com' (Expected 0, got 1) :: [ PASS ] :: Found system at CN=IBM-X3650M4-01-,OU=linuxservers-13341,dc=sssdad_tree,dc=com :: [ LOG ] :: Duration: 28s :: [ LOG ] :: Assertions: 1 good, 3 bad :: [ FAIL ] :: RESULT: ad_other_dc_09: different OU second tree join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_10: different OU child join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: Command 'id administrator@sssdad.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@sssdad_tree.com' (Expected 0, got 1) :: [ FAIL ] :: Command 'id administrator@child1.sssdad.com' (Expected 0, got 1) :: [ PASS ] :: Found system at CN=IBM-X3650M4-01-,OU=linuxservers-13341,dc=child1,dc=sssdad,dc=com :: [ LOG ] :: Duration: 21s :: [ LOG ] :: Assertions: 1 good, 3 bad :: [ FAIL ] :: RESULT: ad_other_dc_10: different OU child join test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: multidomain_legacy_01: bz1148573 crash when looking up the Domain Users group on second domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command 'id puser2_dom1-13341@sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Command 'id puser2_dom2-13341@sssdad_tree.com' (Expected 0, got 0) :: [ PASS ] :: File '/var/log/messages' should not contain 'sssd_be\[[0-9]*\]: segfault' :: [ LOG ] :: Duration: 2m 0s :: [ LOG ] :: Assertions: 3 good, 0 bad :: [ PASS ] :: RESULT: multidomain_legacy_01: bz1148573 crash when looking up the Domain Users group on second domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: Cleanup :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: Duration: 14s :: [ LOG ] :: Assertions: 0 good, 0 bad :: [ PASS ] :: RESULT: Cleanup :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: Phases: 15 good, 35 bad