Tâche #33706
Scénario #33411: ScribeAD : créer un compte de service pour LSC
Tester
Start date:
01/19/2022
Due date:
% Done:
100%
Remaining (hours):
0.0
Description
Vérifier que :
- l'utilisateur est bien crééque lsc
- smbldap-tools utilise ce comte
- que la synchro des comptes/mots de passe fonctionne toujours
History
#1 Updated by Ludwig Seys about 1 year ago
- Assigned To set to Ludwig Seys
#2 Updated by Ludwig Seys about 1 year ago
- Status changed from Nouveau to En cours
#3 Updated by Ludwig Seys about 1 year ago
- Status changed from En cours to Résolu
#4 Updated by Ludwig Seys about 1 year ago
- % Done changed from 0 to 100
#5 Updated by Joël Cuissinat about 1 year ago
Test EOLE 1¶
- aca.scribe-2.8.0-instance-AvecImport
- Maj-Release
- reconfigure
- Maj-Auto -C # récupérations des modifications liées à ce scénario
- reconfigure
Pas d'erreur suspecte lors du second reconfigure, l'utilisateur est créé en preservice :
run-parts: executing /usr/share/eole/preservice/06-eolead-user-lsc reconfigure Ajout du compte 'eole-synchro'... User 'eole-synchro' created successfully Expiry for user 'eole-synchro' disabled. Added members to group Domain Admins Changed password OK
root@scribe:~# id eole-synchro uid=11219(eole-synchro) gid=10513(domain users) groupes=10513(domain users),11219(eole-synchro),10512(domain admins),10572(denied rodc password replication group),2001(BUILTIN\users),2000(BUILTIN\administrators)
#6 Updated by Joël Cuissinat about 1 year ago
root@scribe:~# cat /etc/eole/private/eole-synchro.password IMxeoGrkgDP9V66xCZS8HLkZP8ZeZ3HRutYX30pR09
root@scribe:~# grep -A1 eole-synchro /etc/lsc/lsc.xml <username>CN=eole-synchro,CN=Users,DC=domscribe,DC=ac-test,DC=fr</username> <password>IMxeoGrkgDP9V66xCZS8HLkZP8ZeZ3HRutYX30pR09</password>
root@scribe:~# grep -A1 eole-synchro /etc/smbldap-tools/smbldap_bind.conf aduser = "CN=eole-synchro,CN=Users,DC=domscribe,DC=ac-test,DC=fr"; adpassword = "IMxeoGrkgDP9V66xCZS8HLkZP8ZeZ3HRutYX30pR09";
#7 Updated by Joël Cuissinat about 1 year ago
Le compte n'est pas utilisé par "scribe-backend" pour l'instant :
root@scribe:~# grep -A2 ad_user /etc/eole/ldapconf.conf ad_user=Administrator ad_base=DC=domscribe,DC=ac-test,DC=fr ad_pwdfile=/root/.eolead
#8 Updated by Joël Cuissinat about 1 year ago
Test EOLE 2¶
- aca.scribe-2.8.1-Daily
- ./mount.eole-ci-tests
- /mnt/eole-ci-tests/scripts/configure-vm.sh -M configeol
- instance
Dans ce cas, l'utilisateur est créé en postservice :
run-parts: executing /usr/share/eole/postservice/05-eolead-join-and-sync-ldap instance Synchronizing state of nmbd.service with SysV service script with /lib/systemd/systemd-sysv-install. Executing: /lib/systemd/systemd-sysv-install disable nmbd Removed /etc/systemd/system/multi-user.target.wants/nmbd.service. Intégration au domaine Active Directory Mot de passe de l'utilisateur Administrator pour le domaine DOMSCRIBE.AC-TEST.FR : Using short domain name -- DOMSCRIBE Joined 'SCRIBE' to dns domain 'domscribe.ac-test.fr' Ajout du compte 'eole-synchro'... User 'eole-synchro' created successfully Expiry for user 'eole-synchro' disabled. Added members to group Domain Admins Changed password OK Synchronisation ldap janv. 27 14:46:26 - INFO - Logging configuration successfully loaded from /etc/lsc/logback.xml janv. 27 14:46:26 - INFO - LSC configuration successfully loaded from /etc/lsc/ janv. 27 14:46:26 - INFO - Connecting to LDAP server ldaps://addc.domscribe.ac-test.fr:636/DC=domscribe,DC=ac-test,DC=fr as CN=eole-synchro,CN=Users,DC=domscribe,DC=ac-test,DC=fr janv. 27 14:46:27 - INFO - Connecting to LDAP server ldap://localhost:389/o=gouv,c=fr as cn=admin,o=gouv,c=fr janv. 27 14:46:27 - INFO - Starting sync for t1users-create janv. 27 14:46:27 - ERROR - Empty or non existant source (no IDs found) janv. 27 14:46:27 - INFO - Starting sync for t2users-update janv. 27 14:46:27 - ERROR - Empty or non existant source (no IDs found) janv. 27 14:46:27 - INFO - Starting sync for t3-groups janv. 27 14:46:28 - INFO - # Adding new object CN=administratifs,CN=Users,DC=domscribe,DC=ac-test,DC=fr for t3-groups [ ... ]
#9 Updated by Emmanuel GARETTE about 1 year ago
- Status changed from Résolu to Nouveau
#10 Updated by Ludwig Seys about 1 year ago
- Status changed from Nouveau to En cours
#11 Updated by Ludwig Seys about 1 year ago
- Status changed from En cours to Résolu
#12 Updated by Joël Cuissinat about 1 year ago
- Status changed from Résolu to Fermé
- Remaining (hours) set to 0.0