Project

General

Profile

Tâche #33706

Scénario #33411: ScribeAD : créer un compte de service pour LSC

Tester

Added by Emmanuel GARETTE about 2 years ago. Updated about 2 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Start date:
01/19/2022
Due date:
% Done:

100%

Remaining (hours):
0.0

Description

Vérifier que :
- l'utilisateur est bien crééque lsc
- smbldap-tools utilise ce comte
- que la synchro des comptes/mots de passe fonctionne toujours

History

#1 Updated by Ludwig Seys about 2 years ago

  • Assigned To set to Ludwig Seys

#2 Updated by Ludwig Seys about 2 years ago

  • Status changed from Nouveau to En cours

#3 Updated by Ludwig Seys about 2 years ago

  • Status changed from En cours to Résolu

#4 Updated by Ludwig Seys about 2 years ago

  • % Done changed from 0 to 100

#5 Updated by Joël Cuissinat about 2 years ago

Test EOLE 1

  • aca.scribe-2.8.0-instance-AvecImport
  • Maj-Release
  • reconfigure
  • Maj-Auto -C # récupérations des modifications liées à ce scénario
  • reconfigure

Pas d'erreur suspecte lors du second reconfigure, l'utilisateur est créé en preservice :

run-parts: executing /usr/share/eole/preservice/06-eolead-user-lsc reconfigure
Ajout du compte 'eole-synchro'... 
User 'eole-synchro' created successfully
Expiry for user 'eole-synchro' disabled.
Added members to group Domain Admins
Changed password OK

root@scribe:~# id eole-synchro 
uid=11219(eole-synchro) gid=10513(domain users) groupes=10513(domain users),11219(eole-synchro),10512(domain admins),10572(denied rodc password replication group),2001(BUILTIN\users),2000(BUILTIN\administrators)

#6 Updated by Joël Cuissinat about 2 years ago

root@scribe:~# cat /etc/eole/private/eole-synchro.password 
IMxeoGrkgDP9V66xCZS8HLkZP8ZeZ3HRutYX30pR09

root@scribe:~# grep -A1 eole-synchro /etc/lsc/lsc.xml 
      <username>CN=eole-synchro,CN=Users,DC=domscribe,DC=ac-test,DC=fr</username>
<password>IMxeoGrkgDP9V66xCZS8HLkZP8ZeZ3HRutYX30pR09</password>

root@scribe:~# grep -A1 eole-synchro /etc/smbldap-tools/smbldap_bind.conf 
aduser = "CN=eole-synchro,CN=Users,DC=domscribe,DC=ac-test,DC=fr";
adpassword = "IMxeoGrkgDP9V66xCZS8HLkZP8ZeZ3HRutYX30pR09";

#7 Updated by Joël Cuissinat about 2 years ago

Le compte n'est pas utilisé par "scribe-backend" pour l'instant :

root@scribe:~# grep -A2 ad_user /etc/eole/ldapconf.conf 
ad_user=Administrator
ad_base=DC=domscribe,DC=ac-test,DC=fr
ad_pwdfile=/root/.eolead

#8 Updated by Joël Cuissinat about 2 years ago

Test EOLE 2

  • aca.scribe-2.8.1-Daily
  • ./mount.eole-ci-tests
  • /mnt/eole-ci-tests/scripts/configure-vm.sh -M configeol
  • instance

Dans ce cas, l'utilisateur est créé en postservice :

run-parts: executing /usr/share/eole/postservice/05-eolead-join-and-sync-ldap instance
Synchronizing state of nmbd.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install disable nmbd
Removed /etc/systemd/system/multi-user.target.wants/nmbd.service.

Intégration au domaine Active Directory
Mot de passe de l'utilisateur Administrator pour le domaine DOMSCRIBE.AC-TEST.FR : 
Using short domain name -- DOMSCRIBE
Joined 'SCRIBE' to dns domain 'domscribe.ac-test.fr'
Ajout du compte 'eole-synchro'... 
User 'eole-synchro' created successfully
Expiry for user 'eole-synchro' disabled.
Added members to group Domain Admins
Changed password OK

Synchronisation ldap
janv. 27 14:46:26 - INFO  - Logging configuration successfully loaded from /etc/lsc/logback.xml 
janv. 27 14:46:26 - INFO  - LSC configuration successfully loaded from /etc/lsc/
janv. 27 14:46:26 - INFO  - Connecting to LDAP server ldaps://addc.domscribe.ac-test.fr:636/DC=domscribe,DC=ac-test,DC=fr as CN=eole-synchro,CN=Users,DC=domscribe,DC=ac-test,DC=fr
janv. 27 14:46:27 - INFO  - Connecting to LDAP server ldap://localhost:389/o=gouv,c=fr as cn=admin,o=gouv,c=fr
janv. 27 14:46:27 - INFO  - Starting sync for t1users-create
janv. 27 14:46:27 - ERROR - Empty or non existant source (no IDs found)
janv. 27 14:46:27 - INFO  - Starting sync for t2users-update
janv. 27 14:46:27 - ERROR - Empty or non existant source (no IDs found)
janv. 27 14:46:27 - INFO  - Starting sync for t3-groups
janv. 27 14:46:28 - INFO  - # Adding new object CN=administratifs,CN=Users,DC=domscribe,DC=ac-test,DC=fr for t3-groups
   [ ... ]

#9 Updated by Emmanuel GARETTE about 2 years ago

  • Status changed from Résolu to Nouveau

#10 Updated by Ludwig Seys about 2 years ago

  • Status changed from Nouveau to En cours

#11 Updated by Ludwig Seys about 2 years ago

  • Status changed from En cours to Résolu

#12 Updated by Joël Cuissinat about 2 years ago

  • Status changed from Résolu to Fermé
  • Remaining (hours) set to 0.0

Also available in: Atom PDF